$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft File: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft (raw, json) Hash identifier: D2AjfKyx/eY9p+ruMxzQOYC9sLsBFrK4A6k0AJaa+Vg= Subject key identifier: 4E:C4:50:9C:E4:EF:44:33:61:94:54:59:2F:F3:08:0D:E2:E8:E5:BF Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Certificate serial: 59217D55B7DFCDB3F41AC41C7BC3F3C18D393A3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:39:50 +0000 Manifest this update: Mon 21 Sep 2026 06:34:50 +0000 Manifest next update: Tue 22 Sep 2026 06:49:50 +0000 Files and hashes: 1: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl (hash: HDdwOi0pUpXq6ZeQwujTusBPH57NoDx0c3yfo4tX2qg=) 2: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=) 3: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=) 4: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 06:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:21:7d:55:b7:df:cd:b3:f4:1a:c4:1c:7b:c3:f3:c1:8d:39:3a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Validity Not Before: Sep 21 06:34:50 2026 GMT Not After : Sep 22 06:49:50 2026 GMT Subject: CN=4EC4509CE4EF4433619454592FF3080DE2E8E5BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:2a:7b:4f:1c:b2:90:cf:c7:97:db:40:ac: 81:77:51:be:04:e0:3d:9a:b0:b8:c0:20:20:97:1c: 42:3c:06:29:be:a1:28:ce:fb:a9:7a:1d:2e:55:94: 23:0a:69:8e:d6:16:46:44:16:d5:94:69:2a:ca:dc: bb:1e:cf:13:b6:dd:82:e5:5d:dd:06:fc:12:de:79: b2:96:19:99:dd:9e:f2:44:d5:90:db:65:05:e2:af: b2:5b:5f:3d:ed:62:a2:43:d5:04:ef:28:5f:6f:e0: 68:98:07:4b:03:9a:10:b4:8e:10:92:57:49:da:9b: ea:24:89:52:af:cd:25:7a:1d:5f:62:9b:50:87:77: 24:f8:36:6c:10:9a:f5:82:52:e4:b9:7a:38:a5:bf: 45:ca:fb:44:b4:bb:d0:4d:d6:a1:53:41:13:e1:25: 0a:60:b6:cc:8b:08:99:db:a7:6e:4b:43:ec:9a:6a: 74:aa:d9:2d:aa:ec:4b:9c:75:70:57:41:58:11:63: 09:2f:e0:4c:a9:9d:ae:2b:87:d3:ed:ba:d9:81:c1: 85:ed:2c:b4:a0:f1:25:8e:f9:ac:59:9c:01:81:29: 4f:c3:75:bb:94:84:97:17:ac:5f:0f:75:6b:a0:10: de:c9:f3:4a:0e:a2:dd:c1:a4:35:74:76:fc:4b:9a: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C4:50:9C:E4:EF:44:33:61:94:54:59:2F:F3:08:0D:E2:E8:E5:BF X509v3 Authority Key Identifier: keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9c:95:ad:e2:d9:b4:b5:d9:44:c9:7c:fe:fb:c2:fa:a0:0e: 80:71:fc:e5:e1:bf:04:20:30:76:54:4b:72:bc:b9:e6:d5:ff: e4:22:45:5f:41:a7:0c:55:6a:15:0b:7c:0e:0e:ba:14:87:98: 8a:4e:75:82:f4:ca:43:fd:04:78:e9:9d:15:e6:99:48:68:11: 24:f1:51:0b:b9:0f:2c:dd:2f:d1:f3:44:3a:49:10:f3:de:83: 41:ef:5a:4c:7f:94:d9:07:e6:3f:d0:a4:95:2d:aa:08:86:4d: 7c:c9:03:46:fa:39:9a:4d:55:46:04:b4:f1:8a:7e:64:7e:2a: 4e:68:e8:8d:6e:cd:81:98:14:d7:50:46:77:22:d8:3d:b7:1f: 4a:d6:28:e4:86:38:2f:f3:dc:e6:5d:71:03:e5:5f:24:81:3e: 33:1e:a5:a2:c3:40:4d:6b:c9:c1:ce:51:88:2d:8d:32:df:a2: df:89:b1:e4:22:4e:d1:59:4e:29:c0:6b:7d:6c:9f:dd:2b:2c: db:25:6f:c8:b6:98:d5:2d:1e:fa:d3:0e:44:e3:26:b4:36:0e: 5e:6b:89:7a:cd:61:50:bf:38:de:bb:77:62:e1:25:5e:5f:e4: f8:ca:54:ed:7f:f0:f2:5d:83:84:6e:ab:ad:27:21:7a:03:75: d7:cd:aa:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSF9VbffzbP0GsQce8PzwY05OjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3 RDRENzJCQzAeFw0yNjA5MjEwNjM0NTBaFw0yNjA5MjIwNjQ5NTBaMDMxMTAvBgNV BAMTKDRFQzQ1MDlDRTRFRjQ0MzM2MTk0NTQ1OTJGRjMwODBERTJFOEU1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlAip7TxyykM/Hl9tArIF3Ub4E 4D2asLjAICCXHEI8Bim+oSjO+6l6HS5VlCMKaY7WFkZEFtWUaSrK3LsezxO23YLl Xd0G/BLeebKWGZndnvJE1ZDbZQXir7JbXz3tYqJD1QTvKF9v4GiYB0sDmhC0jhCS V0nam+okiVKvzSV6HV9im1CHdyT4NmwQmvWCUuS5ejilv0XK+0S0u9BN1qFTQRPh JQpgtsyLCJnbp25LQ+yaanSq2S2q7EucdXBXQVgRYwkv4Eypna4rh9PtutmBwYXt LLSg8SWO+axZnAGBKU/DdbuUhJcXrF8PdWugEN7J80oOot3BpDV0dvxLmmBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTsRQnOTvRDNhlFRZL/MIDeLo5b8wHwYDVR0j BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3 OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3 MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVB MkI3RDRENzJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCcla3i2bS12UTJfP77wvqgDoBx/OXhvwQg MHZUS3K8uebV/+QiRV9BpwxVahULfA4OuhSHmIpOdYL0ykP9BHjpnRXmmUhoESTx UQu5DyzdL9HzRDpJEPPeg0HvWkx/lNkH5j/QpJUtqgiGTXzJA0b6OZpNVUYEtPGK fmR+Kk5o6I1uzYGYFNdQRnci2D23H0rWKOSGOC/z3OZdcQPlXySBPjMepaLDQE1r ycHOUYgtjTLfot+JseQiTtFZTinAa31sn90rLNslb8i2mNUtHvrTDkTjJrQ2Dl5r iXrNYVC/ON67d2LhJV5f5PjKVO1/8PJdg4Ruq60nIXoDddfNqg4= -----END CERTIFICATE-----Generated at Tue Sep 22 00:52:18 2026 by rpki-client