$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: fu8sg2SMHd7bVtxy6k1SK1WscF6Z6GD2N51yjufT3Yw= Subject key identifier: FF:7E:5D:9D:8D:B5:E4:94:01:39:E5:BB:D0:FA:12:C7:B3:9C:82:3F Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 09DF1C8DBD32D9ACB1572AD7EE85D4E1B41DACE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: FE Signing time: Tue 10 Nov 2026 02:23:39 +0000 Manifest this update: Tue 10 Nov 2026 02:18:39 +0000 Manifest next update: Wed 11 Nov 2026 03:12:39 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: ov4ICoOxs25AWbc7U1xWn9oJf+zmBOrrInn6lZc5MWk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 03:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:df:1c:8d:bd:32:d9:ac:b1:57:2a:d7:ee:85:d4:e1:b4:1d:ac:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Nov 10 02:18:39 2026 GMT Not After : Nov 11 03:12:39 2026 GMT Subject: CN=FF7E5D9D8DB5E4940139E5BBD0FA12C7B39C823F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:c5:b7:c7:fd:26:5f:2a:9b:69:37:ff:b2: 94:f8:31:10:8d:4f:86:2d:18:21:47:bd:27:5a:d0: f7:0d:cb:cf:e7:0b:04:fa:56:05:87:ff:60:08:b0: 98:b5:0a:14:ca:12:14:3b:cf:8b:40:6f:5d:98:cb: 61:26:28:65:c5:33:f9:28:92:e2:8e:88:15:1a:9a: fd:5b:25:81:70:26:1a:9a:be:6f:19:37:c4:86:86: 73:41:75:39:6c:25:16:2d:08:30:bb:75:24:47:b0: 63:7a:d8:68:2e:54:0a:ce:f0:93:9d:b4:94:59:1f: 7e:75:26:bf:41:f1:54:11:56:72:6b:a6:08:fe:b9: 8a:2e:9c:62:a0:6e:6f:0a:a7:0a:7f:4e:cf:d1:63: 8f:c2:f9:a9:82:74:af:89:65:e8:5f:eb:0a:53:db: 0b:07:c9:3e:99:ac:aa:bb:4a:9e:e2:d2:d1:ea:90: 8b:96:97:9f:da:0f:5d:c7:d4:52:29:78:f7:06:32: a5:6f:38:98:be:66:c0:97:86:c9:f2:93:9a:be:49: e0:f0:46:74:d2:6e:5c:af:8d:2b:15:93:a3:cc:19: 81:16:96:95:bf:34:18:9b:57:a7:af:a4:14:03:65: a1:d5:20:08:1e:42:b9:65:c4:ad:e6:03:96:83:87: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7E:5D:9D:8D:B5:E4:94:01:39:E5:BB:D0:FA:12:C7:B3:9C:82:3F X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:12:3d:da:6e:6b:9b:00:61:14:7c:0f:4f:90:69:85:eb:d3: 93:79:86:fc:3f:ef:36:1d:69:85:5d:32:9a:3e:c2:8d:72:7d: 9e:bd:72:75:62:cc:35:1a:41:53:31:ee:2a:8e:54:2f:e5:bd: 47:16:b9:d3:2b:0a:e1:ce:b5:1b:10:ee:b8:a1:32:4c:d2:e8: 66:9b:66:6c:65:16:7b:bf:b4:aa:38:86:8a:f2:90:c1:e7:17: 43:2d:35:c0:95:3b:a8:22:03:a4:f7:cc:89:81:53:2f:41:e3: 35:5b:5b:10:cc:68:0d:a8:b1:bc:aa:86:f6:a0:09:65:77:55: 05:f4:6b:ce:61:af:22:1e:64:d2:5f:5f:ea:2b:af:ef:69:fa: c0:8c:0b:c6:c5:ce:51:02:b8:f6:ec:c5:e1:91:bd:bf:56:e9: e3:59:d2:98:d0:4b:11:d8:e8:b1:cb:73:8d:44:fc:7e:b8:f9: 91:b3:ca:4d:c4:13:d2:08:ff:6b:66:a3:8d:53:56:d8:54:84: cb:b9:9a:75:13:bd:85:5c:88:da:85:8a:1b:e5:fe:84:1d:7d: 6c:b3:b2:c1:92:a5:00:b6:77:84:2c:23:49:90:e8:bf:65:69: ce:e2:51:76:a8:aa:a9:6c:d6:ec:cb:1e:20:b9:2f:15:86:18: a9:2e:cd:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCd8cjb0y2ayxVyrX7oXU4bQdrOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjExMTAwMjE4MzlaFw0yNjExMTEwMzEyMzlaMDMxMTAvBgNV BAMTKEZGN0U1RDlEOERCNUU0OTQwMTM5RTVCQkQwRkExMkM3QjM5QzgyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrV8W3x/0mXyqbaTf/spT4MRCN T4YtGCFHvSda0PcNy8/nCwT6VgWH/2AIsJi1ChTKEhQ7z4tAb12Yy2EmKGXFM/ko kuKOiBUamv1bJYFwJhqavm8ZN8SGhnNBdTlsJRYtCDC7dSRHsGN62GguVArO8JOd tJRZH351Jr9B8VQRVnJrpgj+uYounGKgbm8Kpwp/Ts/RY4/C+amCdK+JZehf6wpT 2wsHyT6ZrKq7Sp7i0tHqkIuWl5/aD13H1FIpePcGMqVvOJi+ZsCXhsnyk5q+SeDw RnTSblyvjSsVk6PMGYEWlpW/NBibV6evpBQDZaHVIAgeQrllxK3mA5aDh8/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/35dnY215JQBOeW70PoSx7Ocgj8wHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8SPdpua5sAYRR8D0+QaYXr05N5hvw/7zYd aYVdMpo+wo1yfZ69cnVizDUaQVMx7iqOVC/lvUcWudMrCuHOtRsQ7rihMkzS6Gab ZmxlFnu/tKo4horykMHnF0MtNcCVO6giA6T3zImBUy9B4zVbWxDMaA2osbyqhvag CWV3VQX0a85hryIeZNJfX+orr+9p+sCMC8bFzlECuPbsxeGRvb9W6eNZ0pjQSxHY 6LHLc41E/H64+ZGzyk3EE9II/2tmo41TVthUhMu5mnUTvYVciNqFihvl/oQdfWyz ssGSpQC2d4QsI0mQ6L9lac7iUXaoqqls1uzLHiC5LxWGGKkuzWk= -----END CERTIFICATE-----Generated at Tue Nov 10 16:20:35 2026 by rpki-client