$ rpki-client -vvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: dkp5urj8+/gHZ1/xljlco/lUuu72NIcW7qjGMwFIc4Y= Subject key identifier: 06:DC:D7:10:4A:AE:EF:34:89:84:14:B7:1F:92:F4:43:2B:4B:EB:B7 Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 4AF9EA566F5EAF4D7D42E210C20F04F0B7B5405A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 18:24:30 +0000 Manifest this update: Tue 28 Jul 2026 18:19:30 +0000 Manifest next update: Wed 29 Jul 2026 19:17:30 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: 4vodONQqPlA5ETQzcoam0ieT2vHP6Rv0A69i3xQZq98=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f9:ea:56:6f:5e:af:4d:7d:42:e2:10:c2:0f:04:f0:b7:b5:40:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Jul 28 18:19:30 2026 GMT Not After : Jul 29 19:17:30 2026 GMT Subject: CN=06DCD7104AAEEF34898414B71F92F4432B4BEBB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:72:d8:6e:54:29:e9:92:61:73:84:7f:7d: e2:fd:7c:6c:8e:2a:c6:81:5e:85:20:c7:db:c6:5f: 32:05:8b:18:2b:b2:81:f5:d2:8f:ab:6c:46:1a:f2: d7:4f:59:7c:15:a1:90:e9:5a:39:7a:02:9c:21:c6: fd:fe:21:71:2a:e7:6a:51:19:81:c9:6e:9f:87:b4: 7d:e9:d3:f9:bc:90:58:36:cd:07:5f:f6:d2:28:04: 93:f5:d3:18:5f:18:58:82:f2:65:b6:1f:27:4b:f6: 47:39:17:ef:24:5f:a0:fc:24:4d:9c:47:e6:a5:12: 6c:f8:30:69:04:23:a7:22:d2:14:52:80:c2:ff:df: a1:eb:f6:55:af:34:f0:9b:34:b7:63:84:b1:74:65: 1e:90:df:4d:1d:5b:b3:d0:3e:11:72:c7:3d:1a:3b: d9:91:a8:b9:4a:28:6c:97:f6:2e:df:c6:54:f0:f4: f7:ca:3f:58:bf:c5:c7:26:bb:0c:d6:82:63:be:38: 2f:a8:d1:35:7a:1c:7a:43:91:0e:3e:a5:58:50:b3: 45:ea:f3:9f:fe:46:d8:91:9c:74:8b:6d:51:48:a1: cf:5f:29:10:3e:5c:57:12:81:aa:ab:cc:46:ba:37: 99:e4:e7:2d:4b:ac:d9:dc:5f:ac:08:a2:82:ed:17: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DC:D7:10:4A:AE:EF:34:89:84:14:B7:1F:92:F4:43:2B:4B:EB:B7 X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ca:c6:10:17:2d:0e:ad:4f:0e:86:80:81:4e:f6:40:b6:f7: cb:75:da:e5:f4:68:91:26:21:f3:b8:68:a3:21:55:2d:23:95: 60:3f:fa:cc:90:dd:3a:39:72:fc:d6:c2:f7:50:84:8a:b9:09: 06:2c:aa:ff:c5:0c:9c:6b:6d:b6:3e:1a:ee:cf:3d:f1:59:b4: ad:31:e9:21:ec:b4:4b:c1:64:9f:1b:27:56:72:dd:c7:e1:84: 82:16:cd:26:c3:e5:57:89:c4:e0:ba:5d:a5:57:8a:41:b3:e7: c1:82:51:c0:ef:b7:46:33:36:92:e5:a6:fd:62:f9:25:19:12: 5f:d2:f0:36:67:28:79:87:26:9c:ab:94:e3:85:fa:e3:64:86: f4:ee:64:8b:5f:60:ea:82:6e:f0:a2:88:f9:42:a2:c5:a3:24: d3:2c:cf:bc:2f:62:27:aa:62:52:8a:f8:0e:78:64:15:fa:17: 58:93:c9:70:76:51:fd:89:e5:8a:60:eb:80:88:e0:d2:9f:54: 40:27:04:6b:f3:31:33:52:9c:96:ec:ef:ef:da:72:48:28:66: 12:92:b6:76:95:42:d6:eb:b2:b7:6e:01:3a:db:69:46:b7:f7: a1:4a:2e:8f:ce:60:d5:10:0d:2a:4b:51:ea:73:5a:8b:6a:60: e8:e6:a1:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvnqVm9er019QuIQwg8E8Le1QFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA3MjgxODE5MzBaFw0yNjA3MjkxOTE3MzBaMDMxMTAvBgNV BAMTKDA2RENENzEwNEFBRUVGMzQ4OTg0MTRCNzFGOTJGNDQzMkI0QkVCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrXLYblQp6ZJhc4R/feL9fGyO KsaBXoUgx9vGXzIFixgrsoH10o+rbEYa8tdPWXwVoZDpWjl6Apwhxv3+IXEq52pR GYHJbp+HtH3p0/m8kFg2zQdf9tIoBJP10xhfGFiC8mW2HydL9kc5F+8kX6D8JE2c R+alEmz4MGkEI6ci0hRSgML/36Hr9lWvNPCbNLdjhLF0ZR6Q300dW7PQPhFyxz0a O9mRqLlKKGyX9i7fxlTw9PfKP1i/xccmuwzWgmO+OC+o0TV6HHpDkQ4+pVhQs0Xq 85/+RtiRnHSLbVFIoc9fKRA+XFcSgaqrzEa6N5nk5y1LrNncX6wIooLtF5C9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBtzXEEqu7zSJhBS3H5L0QytL67cwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDKxhAXLQ6tTw6GgIFO9kC298t12uX0aJEm IfO4aKMhVS0jlWA/+syQ3To5cvzWwvdQhIq5CQYsqv/FDJxrbbY+Gu7PPfFZtK0x 6SHstEvBZJ8bJ1Zy3cfhhIIWzSbD5VeJxOC6XaVXikGz58GCUcDvt0YzNpLlpv1i +SUZEl/S8DZnKHmHJpyrlOOF+uNkhvTuZItfYOqCbvCiiPlCosWjJNMsz7wvYieq YlKK+A54ZBX6F1iTyXB2Uf2J5Ypg64CI4NKfVEAnBGvzMTNSnJbs7+/ackgoZhKS tnaVQtbrsrduATrbaUa396FKLo/OYNUQDSpLUepzWotqYOjmock= -----END CERTIFICATE-----Generated at Wed Jul 29 03:48:20 2026 by rpki-client