$ rpki-client -vvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json) Hash identifier: ZY9Te7TIPm5NiTMqudQWbuBdyoJ6OB01OTCzl9YQNVo= Subject key identifier: F8:14:48:97:6F:4B:A9:2A:90:3E:95:18:C8:30:70:B5:BC:D6:29:F3 Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Certificate serial: 581991A37AA5D5F4B5B962957C3621AEADD110E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 00:03:06 +0000 Manifest this update: Sat 13 Jun 2026 23:58:06 +0000 Manifest next update: Mon 15 Jun 2026 03:53:06 +0000 Files and hashes: 1: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=) 2: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: Shl/GIbu6XV0NTa3r0VJkfnGDosjeA3ESwF1tdxkMkI=) 3: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:19:91:a3:7a:a5:d5:f4:b5:b9:62:95:7c:36:21:ae:ad:d1:10:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Validity Not Before: Jun 13 23:58:06 2026 GMT Not After : Jun 15 03:53:06 2026 GMT Subject: CN=F81448976F4BA92A903E9518C83070B5BCD629F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:24:60:2d:00:6e:91:a2:e9:8b:b7:a5:ed:a7: 95:7c:d3:71:55:15:9e:fc:28:a5:a8:64:0c:00:ef: 2d:74:b9:ba:c1:21:ea:87:3b:3e:1f:4f:3b:0e:c0: af:1c:8d:10:3b:c2:ea:f2:64:e8:e5:6c:d3:ce:3a: bd:db:dc:eb:12:8e:de:28:28:c6:c1:bf:ac:d9:ee: 3f:4f:a3:01:92:19:80:d4:39:08:a1:c8:28:c8:82: b7:da:a3:d0:ae:a2:c8:b8:87:ca:ae:e3:b5:b6:79: 2e:e5:1b:d9:b6:06:e6:cd:0d:ce:1e:6a:98:c1:64: 6a:65:5d:e6:4e:18:82:47:4b:f8:08:72:9f:26:01: a0:f1:23:b5:7e:79:33:d0:e0:0c:7b:4a:af:3d:03: 58:66:53:f2:9c:f0:f2:e8:ac:36:c2:31:06:d1:bb: e3:28:ef:a9:2c:b7:e4:86:2e:68:47:25:d7:5b:3c: 77:a4:64:cc:3a:f3:61:b3:fc:5e:0c:8a:86:b6:8a: c4:35:5d:07:e2:75:ea:26:3a:e7:71:95:fd:22:0a: 98:a5:c8:7a:66:b1:c1:95:8a:74:8d:c6:89:c3:81: 71:22:78:39:e7:eb:f1:f4:f8:49:c6:7e:64:e2:52: 60:35:89:b7:b3:34:01:f1:48:75:a6:bc:61:fc:f4: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:14:48:97:6F:4B:A9:2A:90:3E:95:18:C8:30:70:B5:BC:D6:29:F3 X509v3 Authority Key Identifier: keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6a:bf:fa:5b:03:ca:2a:50:24:14:fe:f9:f3:dd:1e:62:ad: 8b:9e:d3:50:23:1f:11:59:49:b9:a4:eb:fc:13:52:84:65:23: 51:cf:bf:c9:26:8a:6c:68:38:85:a2:5e:cb:be:fd:a7:3d:b7: e5:0f:da:27:b9:4e:08:8b:f4:5c:3f:ed:8d:71:18:c1:5d:4c: 9a:81:fe:79:56:e0:bc:5b:d5:90:40:5e:8c:59:ae:4c:6a:11: 3f:90:89:99:be:2e:d3:d3:ef:34:26:8b:73:b3:e4:54:c1:05: dd:55:f9:0a:ae:a1:89:2a:5c:94:30:51:db:8e:21:a7:45:99: 5a:06:10:2c:82:34:df:56:2e:12:dd:b0:03:7c:ce:9a:a4:83: 82:b1:5b:ba:50:28:26:63:1e:7c:08:75:6b:5b:29:bc:41:79: 48:8e:b0:3b:bb:3f:05:65:72:6b:25:26:dc:c1:5e:7a:53:09: c5:05:a3:e0:f0:be:55:a8:6e:3d:cd:1f:0b:a2:11:c0:f4:c1: be:81:79:51:d9:6c:a0:5e:7b:54:b3:4c:00:2b:10:4d:b4:17: 4e:46:59:3a:dc:6f:ee:3a:27:b5:b7:1a:d3:ba:0c:0d:a5:5e: 50:4e:3a:92:fa:2a:f5:b9:87:71:24:6a:84:93:86:f4:e5:35: 57:8b:ac:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBmRo3ql1fS1uWKVfDYhrq3REOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4ODkx QzkzQjlENDAeFw0yNjA2MTMyMzU4MDZaFw0yNjA2MTUwMzUzMDZaMDMxMTAvBgNV BAMTKEY4MTQ0ODk3NkY0QkE5MkE5MDNFOTUxOEM4MzA3MEI1QkNENjI5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJGAtAG6RoumLt6Xtp5V803FV FZ78KKWoZAwA7y10ubrBIeqHOz4fTzsOwK8cjRA7wuryZOjlbNPOOr3b3OsSjt4o KMbBv6zZ7j9PowGSGYDUOQihyCjIgrfao9Cuosi4h8qu47W2eS7lG9m2BubNDc4e apjBZGplXeZOGIJHS/gIcp8mAaDxI7V+eTPQ4Ax7Sq89A1hmU/Kc8PLorDbCMQbR u+Mo76kst+SGLmhHJddbPHekZMw682Gz/F4Mioa2isQ1XQfideomOudxlf0iCpil yHpmscGVinSNxonDgXEieDnn6/H0+EnGfmTiUmA1ibezNAHxSHWmvGH89MovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+BRIl29LqSqQPpUYyDBwtbzWKfMwHwYDVR0j BBgwFoAUKf8fYaxelPbmSod9ZMiYiRyTudQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI5ZTcwNjQtYjM1Mi00M2I2LTlmMDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFB QzVFOTRGNkU2NEE4NzdENjRDODk4ODkxQzkzQjlENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZGMUY2MUFDNUU5NEY2RTY0QTg3N0Q2NEM4OTg4OTFDOTNC OUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4 ODkxQzkzQjlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1qv/pbA8oqUCQU/vnz3R5irYue01AjHxFZ Sbmk6/wTUoRlI1HPv8kmimxoOIWiXsu+/ac9t+UP2ie5TgiL9Fw/7Y1xGMFdTJqB /nlW4Lxb1ZBAXoxZrkxqET+QiZm+LtPT7zQmi3Oz5FTBBd1V+QquoYkqXJQwUduO IadFmVoGECyCNN9WLhLdsAN8zpqkg4KxW7pQKCZjHnwIdWtbKbxBeUiOsDu7PwVl cmslJtzBXnpTCcUFo+DwvlWobj3NHwuiEcD0wb6BeVHZbKBee1SzTAArEE20F05G WTrcb+46J7W3GtO6DA2lXlBOOpL6KvW5h3EkaoSThvTlNVeLrMQ= -----END CERTIFICATE-----Generated at Sun Jun 14 05:31:06 2026 by rpki-client