$ rpki-client -vvf rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft File: 29047775725807ADDC2CF5B31E6B548D16ACA73D.mft (raw, json) Hash identifier: RJ1SN1vUk2vMgZVZvSw1ctyFKBUor6bi6hMivmI9HRE= Subject key identifier: BE:0E:0E:15:66:1B:94:96:A5:CD:03:45:3A:AB:93:80:1B:BC:C5:A0 Authority key identifier: 29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D Certificate issuer: /CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Certificate serial: 5AB9D00440D1AC7293730C2CFA481E0BB799A626 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 14:52:08 +0000 Manifest this update: Tue 16 Jun 2026 14:47:08 +0000 Manifest next update: Wed 17 Jun 2026 17:52:08 +0000 Files and hashes: 1: 29047775725807ADDC2CF5B31E6B548D16ACA73D.crl (hash: tOqbhtoGpzQZNyqnGrRaQ88M7LH3uFDwV5tXNt1ELxc=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: Euiddqe4QqVPakY6ZLb5tUk6+F4coEUNqu/76ax8PhM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b9:d0:04:40:d1:ac:72:93:73:0c:2c:fa:48:1e:0b:b7:99:a6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Validity Not Before: Jun 16 14:47:08 2026 GMT Not After : Jun 17 17:52:08 2026 GMT Subject: CN=BE0E0E15661B9496A5CD03453AAB93801BBCC5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:52:44:a9:71:3c:dc:b8:92:d7:9d:1e:01: 19:6f:8e:b1:1c:bc:35:72:53:a0:f4:dc:ef:87:9b: a7:8b:9e:e1:b4:b5:5b:e9:eb:99:b4:0a:cb:38:ad: cf:c2:8a:39:be:62:ad:71:13:03:b2:71:a7:d7:21: 5d:17:51:4f:56:b6:df:22:e9:db:ca:de:a4:14:d0: 11:44:54:a0:57:4f:0a:40:e0:f0:d8:d1:3e:d1:4b: e4:a3:78:2e:db:80:10:b3:6a:0e:e7:d9:4a:a9:4e: 67:d8:2a:27:4b:40:b1:e6:a5:ad:15:ae:7e:0c:de: e6:22:6e:23:52:17:84:5d:8b:bc:80:ca:72:2a:f2: 2c:da:15:84:f4:fe:ad:6f:0e:88:91:15:67:14:f4: a1:85:a5:4f:5b:d1:7f:75:6a:fa:b6:66:b5:0f:9e: 7d:d6:a8:81:89:fa:00:9f:ed:94:7b:4e:26:a3:66: eb:01:7a:09:c9:8b:31:e8:c0:40:22:a0:1d:a9:f2: c5:02:bb:cb:ec:12:a9:2b:b2:3c:6d:40:20:8e:a3: c8:29:b6:4c:2d:05:f3:1b:18:c4:39:9f:f2:8c:41: 94:3a:2e:3f:47:31:82:22:d0:64:c0:2f:89:13:79: 0a:5b:7c:42:ce:0e:57:22:7d:c6:9b:ee:63:24:0e: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0E:0E:15:66:1B:94:96:A5:CD:03:45:3A:AB:93:80:1B:BC:C5:A0 X509v3 Authority Key Identifier: keyid:29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:88:5f:a0:b4:28:95:ec:fc:33:2f:19:71:0f:93:30:d9:65: b6:ef:3d:ca:14:ae:07:10:cd:db:93:99:8b:61:5b:0a:49:4f: ba:91:21:52:6f:f9:98:65:c0:75:f4:4e:35:dc:90:a4:49:1b: a3:c5:2c:2b:0c:dd:bc:46:fa:7e:4f:30:07:5f:9b:96:b9:58: 49:b7:79:2a:c5:60:e6:d4:05:fd:f9:b9:ba:75:c7:cc:1d:c3: 28:c0:97:3e:4a:b7:2a:3b:76:54:4a:08:33:fc:14:20:5d:94: 51:0d:bb:f9:b8:14:6e:7f:22:d7:1c:36:42:e6:46:4e:ad:c6: 96:6e:6f:36:1b:7a:98:95:d1:da:e1:6a:5e:47:25:33:81:be: 5d:13:26:61:11:54:b1:e5:0b:49:56:79:ea:09:63:0e:20:1c: 11:0c:2a:c5:5c:59:cc:bc:a4:b0:9b:43:de:3a:c3:c5:f2:50: 5b:cc:55:55:73:9e:c3:c5:0d:83:3e:00:b7:48:2f:d0:2a:3a: 5f:4b:ec:28:26:e3:56:34:aa:36:b7:bf:72:50:34:09:a2:87: dc:c0:f4:59:b2:37:dd:9a:0d:69:b0:55:a0:78:49:66:df:75: 1c:cf:07:46:1d:61:69:b0:96:00:a5:a8:e3:34:8b:05:b0:01: 88:0e:b2:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrnQBEDRrHKTcwws+kgeC7eZpiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQx NkFDQTczRDAeFw0yNjA2MTYxNDQ3MDhaFw0yNjA2MTcxNzUyMDhaMDMxMTAvBgNV BAMTKEJFMEUwRTE1NjYxQjk0OTZBNUNEMDM0NTNBQUI5MzgwMUJCQ0M1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsylJEqXE83LiS150eARlvjrEc vDVyU6D03O+Hm6eLnuG0tVvp65m0Css4rc/Cijm+Yq1xEwOycafXIV0XUU9Wtt8i 6dvK3qQU0BFEVKBXTwpA4PDY0T7RS+SjeC7bgBCzag7n2UqpTmfYKidLQLHmpa0V rn4M3uYibiNSF4Rdi7yAynIq8izaFYT0/q1vDoiRFWcU9KGFpU9b0X91avq2ZrUP nn3WqIGJ+gCf7ZR7TiajZusBegnJizHowEAioB2p8sUCu8vsEqkrsjxtQCCOo8gp tkwtBfMbGMQ5n/KMQZQ6Lj9HMYIi0GTAL4kTeQpbfELODlcifcab7mMkDh5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvg4OFWYblJalzQNFOquTgBu8xaAwHwYDVR0j BBgwFoAUKQR3dXJYB63cLPWzHmtUjRaspz0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc5NGRhNDAtYjM3ZS00ZmU2LThmNDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3 MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQxNkFDQTczRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTA0Nzc3NTcyNTgwN0FEREMyQ0Y1QjMxRTZCNTQ4RDE2QUNB NzNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0 OEQxNkFDQTczRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWIX6C0KJXs/DMvGXEPkzDZZbbvPcoUrgcQ zduTmYthWwpJT7qRIVJv+ZhlwHX0TjXckKRJG6PFLCsM3bxG+n5PMAdfm5a5WEm3 eSrFYObUBf35ubp1x8wdwyjAlz5Ktyo7dlRKCDP8FCBdlFENu/m4FG5/ItccNkLm Rk6txpZubzYbepiV0drhal5HJTOBvl0TJmERVLHlC0lWeeoJYw4gHBEMKsVcWcy8 pLCbQ946w8XyUFvMVVVznsPFDYM+ALdIL9AqOl9L7Cgm41Y0qja3v3JQNAmih9zA 9FmyN92aDWmwVaB4SWbfdRzPB0YdYWmwlgClqOM0iwWwAYgOsro= -----END CERTIFICATE-----Generated at Wed Jun 17 11:06:08 2026 by rpki-client