$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: cp9NVlmGmLtUZhJpJqTYlkfeK2z+XvZSJIZC+/sf+Hc= Subject key identifier: 3C:FC:20:57:BB:B3:BE:F3:7E:FC:D4:1A:19:B5:0F:DD:BB:40:15:D9 Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 55F8B65648A0432C93A78B3004CE76DDC79D0FAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: BB Signing time: Mon 21 Sep 2026 03:35:58 +0000 Manifest this update: Mon 21 Sep 2026 03:30:58 +0000 Manifest next update: Tue 22 Sep 2026 05:38:58 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: 2NJAoIaJ3qRQqJcCzED9vZl8X8KaMtu1Ks8W1YYNDxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f8:b6:56:48:a0:43:2c:93:a7:8b:30:04:ce:76:dd:c7:9d:0f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Sep 21 03:30:58 2026 GMT Not After : Sep 22 05:38:58 2026 GMT Subject: CN=3CFC2057BBB3BEF37EFCD41A19B50FDDBB4015D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:10:a8:eb:0d:fb:40:1b:4f:77:84:9b:43: 23:61:e3:60:fd:99:25:6b:21:75:c7:be:2b:f5:3b: 0e:c0:38:ab:d5:0e:aa:98:97:1f:50:dc:4c:e0:5d: f4:fd:fa:55:ef:d3:df:82:42:db:0e:4b:95:15:f3: 70:6f:67:b0:bb:9b:d9:0a:af:7f:55:b3:08:10:0d: ac:eb:fc:d8:8f:af:1c:17:37:77:d9:30:93:5b:0a: 96:dc:97:52:7c:93:26:6f:f1:45:ca:15:77:bc:d3: c8:7c:01:4d:90:91:6b:22:b1:b8:7b:ba:76:c4:f6: 95:57:a8:0a:ba:e9:a1:cf:3a:82:e6:25:af:97:50: 48:d6:30:ad:bf:f7:8f:d7:f7:44:a2:55:7f:2b:bc: 7d:65:aa:01:b1:e4:85:95:3d:eb:58:8a:72:4e:a1: 81:82:c6:70:c8:84:94:b1:3a:b6:97:7a:d3:be:64: e4:3e:6d:b9:a6:2d:64:7b:12:1e:6e:b2:b6:33:63: e6:a0:20:fa:e1:aa:bd:44:53:51:bb:a1:bc:f5:e3: 71:f6:09:b5:dc:d7:a4:d9:9b:f9:55:0f:d2:5e:db: 8d:81:5e:22:0e:3d:47:8f:13:e9:61:5f:0d:f1:7b: 38:6f:34:79:a1:71:b4:91:ca:e8:b7:e7:ca:80:33: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FC:20:57:BB:B3:BE:F3:7E:FC:D4:1A:19:B5:0F:DD:BB:40:15:D9 X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:82:63:f8:7e:29:a7:d1:4b:88:97:20:48:5e:f7:e6:91:5a: fe:fb:ce:6a:8e:e2:e2:6b:7d:23:18:74:a4:b0:55:50:60:5b: d6:3a:ac:e0:78:16:c7:e7:58:40:10:15:80:f9:2c:01:c8:24: 9d:f0:0b:43:4b:ae:dc:bc:9d:a2:a6:9a:cf:85:21:1f:f9:80: b9:d9:36:41:77:b3:4f:11:e8:c4:5c:e8:28:03:09:ad:2b:fc: 6d:b5:b4:e3:5c:84:29:b5:c1:44:5d:4f:6d:9f:4b:4a:69:33: 37:ab:f6:72:78:4b:57:e3:21:f2:b3:3f:c9:14:e3:15:d1:31: d4:ee:ae:c4:4b:d8:42:e3:b3:cb:10:ca:e8:44:0e:cf:37:5f: 50:dd:e4:75:9c:a4:0b:9f:fc:5a:9d:26:78:80:74:17:5e:34: 72:83:73:44:61:0b:47:aa:00:fd:92:90:57:a6:e6:c9:2d:2d: da:fd:e1:ee:7b:59:1a:9b:ab:3b:32:61:85:5a:19:37:c0:a2: 4e:9d:c6:5e:8f:1b:43:27:ea:84:51:9b:31:78:7d:13:01:ba: 24:d0:d2:bf:2e:ef:3a:2f:3e:09:a8:25:6d:6c:7d:f1:e6:54: 35:08:4d:2a:c8:4d:e2:30:e5:f8:a7:e8:4a:3c:1a:ba:16:4a: 21:41:66:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfi2VkigQyyTp4swBM523cedD64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA5MjEwMzMwNThaFw0yNjA5MjIwNTM4NThaMDMxMTAvBgNV BAMTKDNDRkMyMDU3QkJCM0JFRjM3RUZDRDQxQTE5QjUwRkREQkI0MDE1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bxCo6w37QBtPd4SbQyNh42D9 mSVrIXXHviv1Ow7AOKvVDqqYlx9Q3EzgXfT9+lXv09+CQtsOS5UV83BvZ7C7m9kK r39VswgQDazr/NiPrxwXN3fZMJNbCpbcl1J8kyZv8UXKFXe808h8AU2QkWsisbh7 unbE9pVXqAq66aHPOoLmJa+XUEjWMK2/94/X90SiVX8rvH1lqgGx5IWVPetYinJO oYGCxnDIhJSxOraXetO+ZOQ+bbmmLWR7Eh5usrYzY+agIPrhqr1EU1G7obz143H2 CbXc16TZm/lVD9Je242BXiIOPUePE+lhXw3xezhvNHmhcbSRyui358qAM7iJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPPwgV7uzvvN+/NQaGbUP3btAFdkwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGCY/h+KafRS4iXIEhe9+aRWv77zmqO4uJr fSMYdKSwVVBgW9Y6rOB4FsfnWEAQFYD5LAHIJJ3wC0NLrty8naKmms+FIR/5gLnZ NkF3s08R6MRc6CgDCa0r/G21tONchCm1wURdT22fS0ppMzer9nJ4S1fjIfKzP8kU 4xXRMdTursRL2ELjs8sQyuhEDs83X1Dd5HWcpAuf/FqdJniAdBdeNHKDc0RhC0eq AP2SkFem5sktLdr94e57WRqbqzsyYYVaGTfAok6dxl6PG0Mn6oRRmzF4fRMBuiTQ 0r8u7zovPgmoJW1sffHmVDUITSrITeIw5fin6Eo8GroWSiFBZqY= -----END CERTIFICATE-----Generated at Mon Sep 21 06:29:23 2026 by rpki-client