$ rpki-client -vvf rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft File: 1029DD535EA34FFB57B387F3086D6C55F6685227.mft (raw, json) Hash identifier: gfkMOKuvupr2BE8LiH5M+/3pb/8JFM7ZH19/CT2fw7k= Subject key identifier: 3A:DB:5E:95:89:AC:93:30:36:64:CC:C4:E4:6A:1B:A3:CB:0E:42:BB Authority key identifier: 10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27 Certificate issuer: /CN=1029DD535EA34FFB57B387F3086D6C55F6685227 Certificate serial: 333D642D91F4A1ED7349359D73EED75A11F43F50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 17:55:46 +0000 Manifest this update: Tue 16 Jun 2026 17:50:46 +0000 Manifest next update: Wed 17 Jun 2026 19:39:46 +0000 Files and hashes: 1: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: QFaIaeqQHBfggokFY9Zd55eDaonsJzUZS5+52YBP+KY=) 2: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: jjOCUf6cliEtxrLXbZn2dk07IB2wq2ND31yEFCqIvbc=) 3: 1029DD535EA34FFB57B387F3086D6C55F6685227.crl (hash: e7oisNVxGaDDYsVWcg7RXqB7Ei98nF0zqi2O72F14Is=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3d:64:2d:91:f4:a1:ed:73:49:35:9d:73:ee:d7:5a:11:f4:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1029DD535EA34FFB57B387F3086D6C55F6685227 Validity Not Before: Jun 16 17:50:46 2026 GMT Not After : Jun 17 19:39:46 2026 GMT Subject: CN=3ADB5E9589AC93303664CCC4E46A1BA3CB0E42BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:d6:84:d1:c1:00:dd:bb:8a:81:2d:d6:58: 98:00:b4:4d:d0:de:3e:e7:71:da:0b:78:92:50:f6: 27:41:91:ce:84:85:18:77:d2:e2:ad:b5:0f:ac:0f: 8b:7b:d3:47:5a:fa:a2:5b:4b:d0:82:b6:94:40:cb: f0:eb:a0:60:e9:e1:c5:72:d7:5b:62:b6:1e:de:46: 4d:54:12:af:fe:92:9b:80:9c:66:c7:cb:a0:c2:7c: 12:74:c2:40:42:ba:2f:69:1d:d3:38:6b:2a:63:31: 3a:8c:c3:5d:8d:1e:56:09:9b:2e:88:cd:0d:82:45: a0:33:87:47:c5:0d:a8:93:f9:9b:1c:9c:6a:b9:88: b0:8f:35:9d:7c:8c:21:3b:ed:cc:c6:7f:b5:47:71: 7a:ac:cb:a6:7d:ac:78:b4:94:cf:74:58:ef:8b:78: bf:b0:78:db:ac:9f:ad:91:51:5d:d0:a8:03:98:2c: 82:ea:59:76:de:d4:5a:5b:8e:c8:88:0d:d1:3b:8b: b9:90:6d:08:00:a5:f8:8a:d2:0c:fa:a7:26:ca:a5: 76:c3:14:a3:ec:5e:5a:60:6c:46:89:00:48:c0:72: 17:55:99:c5:8a:da:f0:fd:56:c4:db:dd:2c:d7:de: 8f:68:cd:4e:7c:19:01:a8:69:e3:bf:df:a8:70:6f: 7c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DB:5E:95:89:AC:93:30:36:64:CC:C4:E4:6A:1B:A3:CB:0E:42:BB X509v3 Authority Key Identifier: keyid:10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:55:b6:60:fc:f9:5c:c4:9d:69:aa:92:20:a1:80:16:2c:e8: 43:cc:d2:38:da:92:69:f1:0c:f7:8e:09:fb:3e:00:dc:44:e3: 98:18:52:5f:b8:e8:03:73:7c:7a:a1:40:72:15:3e:28:80:fb: 8c:97:d9:d8:21:09:d2:40:95:04:66:1d:08:17:29:7f:6c:45: 69:e1:fb:e9:16:1a:da:21:d8:d1:09:73:c6:bb:f6:57:66:0f: c8:a5:b8:a1:77:90:39:f0:52:5c:68:3f:bf:36:07:9a:6d:1c: 85:bd:ef:db:33:25:44:a1:ba:ae:8c:78:1a:a9:71:73:67:9b: 17:20:3c:d1:ba:ba:3f:98:04:50:22:18:81:fa:30:d4:a3:e3: 7c:2c:14:f8:fa:4a:81:b6:21:5f:ff:3f:b9:de:6a:e1:93:c7: f5:a3:42:3e:80:93:6b:60:aa:9a:e7:cd:33:fb:8f:d2:9f:1a: d0:99:1a:09:d0:5f:64:01:cc:2b:99:69:89:ca:0b:e0:10:7d: be:c6:f3:17:7c:09:16:0f:29:eb:05:6e:e8:5c:f4:7b:a7:3c: 94:1a:4f:fa:16:5d:97:9f:76:27:85:75:f6:ce:32:e4:37:6f: b6:07:18:00:d3:fd:12:fb:d7:62:20:fb:63:4e:e4:f1:9e:fa: ee:51:38:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMz1kLZH0oe1zSTWdc+7XWhH0P1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAyOURENTM1RUEzNEZGQjU3QjM4N0YzMDg2RDZDNTVG NjY4NTIyNzAeFw0yNjA2MTYxNzUwNDZaFw0yNjA2MTcxOTM5NDZaMDMxMTAvBgNV BAMTKDNBREI1RTk1ODlBQzkzMzAzNjY0Q0NDNEU0NkExQkEzQ0IwRTQyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinNaE0cEA3buKgS3WWJgAtE3Q 3j7ncdoLeJJQ9idBkc6EhRh30uKttQ+sD4t700da+qJbS9CCtpRAy/DroGDp4cVy 11tith7eRk1UEq/+kpuAnGbHy6DCfBJ0wkBCui9pHdM4aypjMTqMw12NHlYJmy6I zQ2CRaAzh0fFDaiT+ZscnGq5iLCPNZ18jCE77czGf7VHcXqsy6Z9rHi0lM90WO+L eL+weNusn62RUV3QqAOYLILqWXbe1FpbjsiIDdE7i7mQbQgApfiK0gz6pybKpXbD FKPsXlpgbEaJAEjAchdVmcWK2vD9VsTb3SzX3o9ozU58GQGoaeO/36hwb3yTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOttelYmskzA2ZMzE5Gobo8sOQrswHwYDVR0j BBgwFoAUECndU16jT/tXs4fzCG1sVfZoUicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI0ZGExNTItMDAyNC00MzZkLTk5MGQtMzIzODA2ZTAxNjk5LzAvMTAyOURENTM1 RUEzNEZGQjU3QjM4N0YzMDg2RDZDNTVGNjY4NTIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDI5REQ1MzVFQTM0RkZCNTdCMzg3RjMwODZENkM1NUY2Njg1 MjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvMTAyOURENTM1RUEzNEZGQjU3QjM4N0YzMDg2RDZD NTVGNjY4NTIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5VtmD8+VzEnWmqkiChgBYs6EPM0jjakmnx DPeOCfs+ANxE45gYUl+46ANzfHqhQHIVPiiA+4yX2dghCdJAlQRmHQgXKX9sRWnh ++kWGtoh2NEJc8a79ldmD8iluKF3kDnwUlxoP782B5ptHIW979szJUShuq6MeBqp cXNnmxcgPNG6uj+YBFAiGIH6MNSj43wsFPj6SoG2IV//P7neauGTx/WjQj6Ak2tg qprnzTP7j9KfGtCZGgnQX2QBzCuZaYnKC+AQfb7G8xd8CRYPKesFbuhc9HunPJQa T/oWXZefdieFdfbOMuQ3b7YHGADT/RL712Ig+2NO5PGe+u5RODM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:27 2026 by rpki-client