$ rpki-client -vvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: +w/ntDn5la6MxR3QjNDHFgcZ+a5Nt9CbigiFYR6KIYM= Subject key identifier: BE:33:AA:17:98:E4:3C:F3:A2:01:22:8D:AF:F6:B1:A4:90:65:DE:0B Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 4C28530AAFB953BFBA2A59EB8EB422427CDA0444 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 14:32:12 +0000 Manifest this update: Sat 13 Jun 2026 14:27:12 +0000 Manifest next update: Sun 14 Jun 2026 17:25:12 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: XOfbNtxPIZQtJYxLj7ri83IYUKIBkpjcT5M8H8vaSSk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:28:53:0a:af:b9:53:bf:ba:2a:59:eb:8e:b4:22:42:7c:da:04:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Jun 13 14:27:12 2026 GMT Not After : Jun 14 17:25:12 2026 GMT Subject: CN=BE33AA1798E43CF3A201228DAFF6B1A49065DE0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:87:1a:c2:b7:f4:0c:10:0a:69:b6:fa:94:8b: d0:34:32:38:3b:bf:9a:df:9b:f6:da:7c:71:ff:6e: 24:98:4e:fe:e9:ec:a4:e1:b1:23:d0:89:54:f6:4d: 57:00:87:55:54:85:e7:68:ab:84:95:a4:71:60:fb: c9:c3:c2:f4:e6:01:82:b8:ca:91:81:2b:f9:89:11: 41:24:18:85:e4:65:f4:33:d4:c3:b6:5e:2a:dd:02: 20:94:7c:c3:83:4b:93:20:d9:3b:c5:4e:54:d2:52: 32:8f:ee:53:0c:67:7d:6f:ac:27:fd:68:b5:6a:95: e4:d7:4c:9f:ae:bb:f2:42:ea:ba:ef:34:16:57:f5: 9b:2d:45:2f:42:e6:34:c2:6f:a2:1c:2c:eb:19:f3: 0d:e9:04:46:b3:67:46:13:10:00:42:42:bb:e0:99: 6c:47:f1:a9:90:fd:fa:3a:a1:c1:e6:41:e2:2b:72: 73:be:af:9a:21:27:0e:bc:e1:42:30:f7:dd:ec:aa: aa:20:36:0c:a4:22:3e:72:f5:f5:27:93:9d:dc:88: 53:7f:6f:8c:1b:26:d3:5a:01:a5:6c:71:45:41:12: a6:28:7f:ea:c3:61:3f:05:57:e9:f9:87:cb:3b:07: 4c:97:69:8d:96:30:24:21:23:5b:f5:61:55:e3:d1: 2e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:33:AA:17:98:E4:3C:F3:A2:01:22:8D:AF:F6:B1:A4:90:65:DE:0B X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8c:3d:68:4d:e2:95:7f:13:2f:51:82:54:21:c4:d5:df:97: 5c:b8:a0:01:90:24:2a:06:b5:b8:2d:00:92:e0:83:38:c6:22: 39:5e:f0:ad:bd:f9:af:60:3b:57:37:49:33:04:da:71:8d:15: 89:54:4d:43:aa:2c:27:45:a8:f5:73:69:57:b2:8d:8f:ca:25: d7:54:e3:b7:d4:7c:d5:62:98:63:2a:ef:bb:9d:29:2b:05:42: 47:60:f0:19:00:a4:b6:fc:93:92:da:6b:19:46:1f:5d:2e:96: 82:9b:f2:aa:4b:29:88:b7:a5:02:d6:cd:8e:e1:fc:81:96:be: 67:92:12:8a:60:26:22:74:b9:b1:1c:db:55:cb:ae:22:06:67: 90:ed:d5:f3:86:ab:64:57:f1:fd:ea:a5:90:e0:17:f0:c3:8d: 11:65:2f:68:5a:a6:ce:42:63:72:5f:4c:9d:72:88:7e:57:d5: 24:47:a9:ab:e2:40:7d:04:76:e5:4a:bf:3e:33:bc:b2:30:2d: 6d:a2:1e:9f:c6:85:d0:b7:02:c7:44:20:83:81:4a:f4:15:ec: 99:3e:37:65:e2:8b:2c:0d:e4:99:2b:42:e3:e3:7d:e1:9c:82: d3:54:48:0b:7f:0d:45:82:30:fb:7a:1e:26:c2:5b:90:5f:c1: a7:6d:ee:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTChTCq+5U7+6KlnrjrQiQnzaBEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA2MTMxNDI3MTJaFw0yNjA2MTQxNzI1MTJaMDMxMTAvBgNV BAMTKEJFMzNBQTE3OThFNDNDRjNBMjAxMjI4REFGRjZCMUE0OTA2NURFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhxrCt/QMEApptvqUi9A0Mjg7 v5rfm/bafHH/biSYTv7p7KThsSPQiVT2TVcAh1VUhedoq4SVpHFg+8nDwvTmAYK4 ypGBK/mJEUEkGIXkZfQz1MO2XirdAiCUfMODS5Mg2TvFTlTSUjKP7lMMZ31vrCf9 aLVqleTXTJ+uu/JC6rrvNBZX9ZstRS9C5jTCb6IcLOsZ8w3pBEazZ0YTEABCQrvg mWxH8amQ/fo6ocHmQeIrcnO+r5ohJw684UIw993sqqogNgykIj5y9fUnk53ciFN/ b4wbJtNaAaVscUVBEqYof+rDYT8FV+n5h8s7B0yXaY2WMCQhI1v1YVXj0S4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjOqF5jkPPOiASKNr/axpJBl3gswHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6MPWhN4pV/Ey9RglQhxNXfl1y4oAGQJCoG tbgtAJLggzjGIjle8K29+a9gO1c3STME2nGNFYlUTUOqLCdFqPVzaVeyjY/KJddU 47fUfNVimGMq77udKSsFQkdg8BkApLb8k5LaaxlGH10uloKb8qpLKYi3pQLWzY7h /IGWvmeSEopgJiJ0ubEc21XLriIGZ5Dt1fOGq2RX8f3qpZDgF/DDjRFlL2haps5C Y3JfTJ1yiH5X1SRHqaviQH0EduVKvz4zvLIwLW2iHp/GhdC3AsdEIIOBSvQV7Jk+ N2XiiywN5JkrQuPjfeGcgtNUSAt/DUWCMPt6HibCW5Bfwadt7lk= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:44 2026 by rpki-client