$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft File: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft (raw, json) Hash identifier: WpetOLCql+1/7EKj/rBvTZX0HYPJi1z1KD/k2IScPuA= Subject key identifier: 3E:6B:5E:BE:45:85:22:D5:0B:6F:9A:65:3D:43:D7:3A:DE:94:C0:F7 Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Certificate serial: 19A4BE018A30468603EE4D7D6510638860D85C4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:54:05 +0000 Manifest this update: Wed 17 Jun 2026 00:49:05 +0000 Manifest next update: Thu 18 Jun 2026 04:12:05 +0000 Files and hashes: 1: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl (hash: qSQaLzeABxqnVBf8Q9LemURMGjSLBO+KqfNgpbM6gHQ=) 2: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=) 3: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=) 4: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a4:be:01:8a:30:46:86:03:ee:4d:7d:65:10:63:88:60:d8:5c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Validity Not Before: Jun 17 00:49:05 2026 GMT Not After : Jun 18 04:12:05 2026 GMT Subject: CN=3E6B5EBE458522D50B6F9A653D43D73ADE94C0F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:f8:25:f3:2a:b1:81:4c:c9:0b:d4:22:c3: 8e:28:62:7a:8a:ab:57:52:fb:61:85:37:56:77:29: 16:b0:39:d1:0d:e6:21:0d:5e:5a:01:ec:4a:1d:08: bc:2a:eb:cd:0f:06:b3:88:6f:19:97:7c:25:c6:fb: 38:80:0a:41:cd:b0:d6:c1:67:74:aa:b6:e6:5b:8b: ec:d1:1a:ea:56:39:b9:8d:3b:4b:af:80:12:23:c8: a9:41:83:fc:54:a6:02:d2:8d:24:fa:51:e8:78:e1: 20:dc:e7:b2:6e:d1:3a:5e:d7:3d:bc:bb:92:b7:80: d8:d5:8f:b0:f9:0e:ec:65:2d:3c:87:6d:6e:61:76: ef:e4:47:13:de:24:ba:4b:2f:61:63:48:f0:7f:93: 1c:27:09:54:cc:51:35:84:b4:6a:bf:04:a2:1f:8a: 5d:fa:56:53:8b:88:06:50:a9:a7:f1:f0:aa:b2:ba: b8:01:e4:39:6a:8e:e9:b2:29:f6:b1:7c:3b:47:96: da:1d:ef:86:d4:41:67:9c:ab:d7:bd:71:5c:c1:86: 8b:00:81:48:d5:9f:62:e5:38:82:e0:35:0c:d5:d7: 36:da:c0:5d:14:5c:49:be:8f:b9:99:f7:d7:49:92: 75:99:a8:91:f2:bf:02:66:69:93:37:e8:95:bd:01: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:5E:BE:45:85:22:D5:0B:6F:9A:65:3D:43:D7:3A:DE:94:C0:F7 X509v3 Authority Key Identifier: keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:77:71:ba:f2:ea:d9:35:d9:8c:13:2c:9d:46:71:1e:33:96: 4d:e1:6b:7e:12:43:5a:23:e4:38:5d:25:c7:10:93:72:d2:3f: 57:44:ce:7b:44:0e:91:30:8d:44:0c:dd:51:f1:6d:18:c6:38: 72:15:0a:fb:b4:77:8c:86:86:d8:22:99:02:74:98:76:58:8e: e1:63:f2:bd:14:94:5f:bb:9c:c6:05:eb:0d:79:7c:e8:e2:34: ea:e9:80:cf:ed:24:30:bf:8d:e3:87:dd:cd:8a:1d:7a:da:51: d0:f1:89:7b:a8:b5:2f:52:ce:11:dc:fe:11:08:27:ec:e0:1b: de:54:90:5c:2e:75:d4:e8:46:51:4d:2d:df:46:8a:9e:18:50: 38:e9:3f:81:1e:f5:86:db:3e:e1:83:a3:70:2d:7b:95:90:91: 42:75:86:1d:56:51:45:3b:81:46:10:68:10:17:b4:f4:c7:1f: 4f:89:70:07:63:86:1e:26:dc:5a:6a:17:ed:5b:ea:64:ee:de: 18:77:0d:05:32:d1:e0:e8:13:26:5b:c9:6c:1a:4f:74:e7:3a: 3c:6f:87:cb:d5:f2:9c:1a:43:c0:b2:3d:ae:6f:5e:f6:ac:18: 40:fb:b1:f8:ce:77:33:2b:70:aa:af:aa:40:04:fc:bc:84:e9: 24:f1:cf:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaS+AYowRoYD7k19ZRBjiGDYXEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3 RDRENzJCQzAeFw0yNjA2MTcwMDQ5MDVaFw0yNjA2MTgwNDEyMDVaMDMxMTAvBgNV BAMTKDNFNkI1RUJFNDU4NTIyRDUwQjZGOUE2NTNENDNENzNBREU5NEMwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj3Pgl8yqxgUzJC9Qiw44oYnqK q1dS+2GFN1Z3KRawOdEN5iENXloB7EodCLwq680PBrOIbxmXfCXG+ziACkHNsNbB Z3SqtuZbi+zRGupWObmNO0uvgBIjyKlBg/xUpgLSjST6Ueh44SDc57Ju0Tpe1z28 u5K3gNjVj7D5DuxlLTyHbW5hdu/kRxPeJLpLL2FjSPB/kxwnCVTMUTWEtGq/BKIf il36VlOLiAZQqafx8KqyurgB5DlqjumyKfaxfDtHltod74bUQWecq9e9cVzBhosA gUjVn2LlOILgNQzV1zbawF0UXEm+j7mZ99dJknWZqJHyvwJmaZM36JW9AZpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmtevkWFItULb5plPUPXOt6UwPcwHwYDVR0j BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3 OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3 MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVB MkI3RDRENzJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM53cbry6tk12YwTLJ1GcR4zlk3ha34SQ1oj 5DhdJccQk3LSP1dEzntEDpEwjUQM3VHxbRjGOHIVCvu0d4yGhtgimQJ0mHZYjuFj 8r0UlF+7nMYF6w15fOjiNOrpgM/tJDC/jeOH3c2KHXraUdDxiXuotS9SzhHc/hEI J+zgG95UkFwuddToRlFNLd9Gip4YUDjpP4Ee9YbbPuGDo3Ate5WQkUJ1hh1WUUU7 gUYQaBAXtPTHH0+JcAdjhh4m3FpqF+1b6mTu3hh3DQUy0eDoEyZbyWwaT3TnOjxv h8vV8pwaQ8CyPa5vXvasGED7sfjOdzMrcKqvqkAE/LyE6STxz/0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:45 2026 by rpki-client