$ rpki-client -vvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json) Hash identifier: +vDJyf1YictQh795y/7qCZE3yTHw68UqN+FPATkvKcE= Subject key identifier: 3C:AA:AE:1F:CC:EF:92:B6:4C:E8:2A:3F:05:BC:5D:E7:4F:74:1D:F2 Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Certificate serial: 66268FDB55B84DD5D6C8468AB01C34C681E64D23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 13:47:22 +0000 Manifest this update: Wed 29 Jul 2026 13:42:22 +0000 Manifest next update: Thu 30 Jul 2026 14:36:22 +0000 Files and hashes: 1: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=) 2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=) 3: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: pBIZCwhWxLazqB4wsJWLGIqGi7Uh7ObKsTxeyUcRsnk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:26:8f:db:55:b8:4d:d5:d6:c8:46:8a:b0:1c:34:c6:81:e6:4d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Validity Not Before: Jul 29 13:42:22 2026 GMT Not After : Jul 30 14:36:22 2026 GMT Subject: CN=3CAAAE1FCCEF92B64CE82A3F05BC5DE74F741DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:45:d0:7a:c1:da:b3:34:be:d9:4c:05:d5: 1c:2c:51:c7:dc:4f:56:2c:0b:31:95:a0:9d:6d:8b: f3:3f:0f:e9:8b:a5:19:c9:4d:a5:3f:b5:f1:81:e1: 00:cb:f3:57:e6:52:ca:83:06:17:d1:20:d2:ab:b7: c9:81:c1:0b:d5:e1:7d:3b:d4:23:4f:48:0c:9f:35: 2b:b9:b1:6f:67:c3:49:fb:ca:c0:ca:f3:81:b5:71: b7:b5:a9:1e:14:29:14:8e:bc:cf:58:18:53:be:d0: a8:a0:06:a8:63:f4:61:21:14:32:cc:0b:d8:20:e6: ae:9e:79:a9:3d:06:f1:f9:79:87:5f:72:b9:30:62: 48:21:37:38:76:30:3f:30:d3:4c:76:35:ca:b0:c0: 12:90:f0:fd:bc:10:db:41:0b:4f:86:e5:13:c5:e5: 8e:ce:e6:6b:3f:21:65:37:a2:e0:b5:33:f5:33:c4: 6b:c3:88:64:43:0b:e4:c0:d5:a3:ac:f2:fc:00:e2: d8:a0:12:67:21:46:49:4e:93:07:7d:75:58:36:d5: 55:cc:a9:c4:3b:46:74:8f:09:eb:78:0c:19:07:78: fe:87:68:73:fa:18:5b:7d:38:48:11:43:11:ea:86: fe:6c:6a:d1:1e:5b:3d:92:04:9f:3e:14:47:b5:e3: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:AE:1F:CC:EF:92:B6:4C:E8:2A:3F:05:BC:5D:E7:4F:74:1D:F2 X509v3 Authority Key Identifier: keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:69:0e:98:0b:64:60:9b:90:3c:a2:50:5c:3d:ae:08:3a:6b: 7b:1e:8f:b5:94:8c:45:f8:a7:44:37:de:65:29:db:bb:cd:9a: 65:49:a7:5c:7d:78:d3:95:51:02:66:27:84:16:da:0e:bc:87: 0f:d7:54:bc:3e:dc:60:8b:e2:1b:26:54:2a:23:f2:67:c7:90: 32:36:54:4d:3b:3c:45:32:ce:f8:8d:23:17:ac:ae:f7:84:27: d8:da:09:9b:72:29:cf:c7:0b:94:1a:3c:f0:67:c2:5a:ca:6e: 33:98:e2:aa:cd:9d:82:ec:1b:ce:46:aa:57:bc:58:1f:e1:91: e1:7b:dd:06:a0:4d:42:c8:56:84:c0:34:83:4e:df:75:4e:c7: ad:1f:e1:5f:33:f6:8e:d9:1b:98:6b:e9:b6:c5:06:66:11:51: 3a:4e:02:7a:2c:3d:e2:61:6f:ec:ab:03:91:32:63:22:c6:b6: 26:53:0f:fe:7d:4d:ee:1a:04:55:bf:9e:0e:bb:a9:5d:62:72: de:91:dd:5b:d4:01:67:17:9d:4e:c5:f1:54:a5:69:52:ac:33: 11:ec:46:04:9f:54:f1:cb:c0:95:0b:d5:56:f0:eb:15:8b:48: 98:91:88:80:58:3b:0d:ea:bf:08:d4:fc:eb:4d:4a:24:86:f3: f4:c3:58:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiaP21W4TdXWyEaKsBw0xoHmTSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4ODkx QzkzQjlENDAeFw0yNjA3MjkxMzQyMjJaFw0yNjA3MzAxNDM2MjJaMDMxMTAvBgNV BAMTKDNDQUFBRTFGQ0NFRjkyQjY0Q0U4MkEzRjA1QkM1REU3NEY3NDFERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCkXQesHaszS+2UwF1RwsUcfc T1YsCzGVoJ1ti/M/D+mLpRnJTaU/tfGB4QDL81fmUsqDBhfRINKrt8mBwQvV4X07 1CNPSAyfNSu5sW9nw0n7ysDK84G1cbe1qR4UKRSOvM9YGFO+0KigBqhj9GEhFDLM C9gg5q6eeak9BvH5eYdfcrkwYkghNzh2MD8w00x2NcqwwBKQ8P28ENtBC0+G5RPF 5Y7O5ms/IWU3ouC1M/UzxGvDiGRDC+TA1aOs8vwA4tigEmchRklOkwd9dVg21VXM qcQ7RnSPCet4DBkHeP6HaHP6GFt9OEgRQxHqhv5satEeWz2SBJ8+FEe146xZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKquH8zvkrZM6Co/Bbxd5090HfIwHwYDVR0j BBgwFoAUKf8fYaxelPbmSod9ZMiYiRyTudQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI5ZTcwNjQtYjM1Mi00M2I2LTlmMDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFB QzVFOTRGNkU2NEE4NzdENjRDODk4ODkxQzkzQjlENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZGMUY2MUFDNUU5NEY2RTY0QTg3N0Q2NEM4OTg4OTFDOTNC OUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4 ODkxQzkzQjlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1pDpgLZGCbkDyiUFw9rgg6a3sej7WUjEX4 p0Q33mUp27vNmmVJp1x9eNOVUQJmJ4QW2g68hw/XVLw+3GCL4hsmVCoj8mfHkDI2 VE07PEUyzviNIxesrveEJ9jaCZtyKc/HC5QaPPBnwlrKbjOY4qrNnYLsG85Gqle8 WB/hkeF73QagTULIVoTANINO33VOx60f4V8z9o7ZG5hr6bbFBmYRUTpOAnosPeJh b+yrA5EyYyLGtiZTD/59Te4aBFW/ng67qV1ict6R3VvUAWcXnU7F8VSlaVKsMxHs RgSfVPHLwJUL1Vbw6xWLSJiRiIBYOw3qvwjU/OtNSiSG8/TDWD0= -----END CERTIFICATE-----Generated at Wed Jul 29 19:22:04 2026 by rpki-client