$ rpki-client -vvvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json) Hash identifier: oRpJ2j5m94DMEnwx+4scJYj8m4TKUdsOoRoWXihCjdI= Subject key identifier: 35:E7:23:67:CE:47:3C:05:F2:B1:8A:6C:14:0A:A4:33:08:70:45:33 Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Certificate serial: 2C0344D196E22A5CF1FDEC9913CF724341059796 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 04:11:14 +0000 Manifest this update: Wed 23 Sep 2026 04:06:14 +0000 Manifest next update: Thu 24 Sep 2026 07:48:14 +0000 Files and hashes: 1: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=) 2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=) 3: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: 6yP/VxrYcPk0s5lIYdY7qznmtuIhCh61zymytiUjfc8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:03:44:d1:96:e2:2a:5c:f1:fd:ec:99:13:cf:72:43:41:05:97:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Validity Not Before: Sep 23 04:06:14 2026 GMT Not After : Sep 24 07:48:14 2026 GMT Subject: CN=35E72367CE473C05F2B18A6C140AA43308704533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:6e:c4:9d:d7:01:c7:4f:0a:0a:35:de:88: 43:56:7f:d6:42:9b:9f:bc:87:d2:5f:54:02:0a:8d: 26:a6:77:71:a5:cd:4f:12:9b:be:e5:ac:2d:c3:f6: cc:4c:6d:9a:21:84:6e:9a:b8:fb:11:39:61:8b:6c: a3:a0:c2:8d:38:15:b0:ae:fd:15:b3:09:73:51:32: b5:37:02:b6:2f:2f:f1:5c:3b:95:08:ae:4c:ec:83: 31:cd:f3:1b:5f:cb:08:b5:05:b3:47:7f:dd:72:a8: aa:bf:b3:50:5c:75:93:2a:e6:ad:7e:ce:83:0f:7a: 4c:b6:35:bf:7c:c2:6a:63:c5:c8:90:e0:7c:43:29: 3d:40:be:94:67:fb:df:f3:69:73:cc:d9:8b:11:eb: 4c:a0:c6:12:91:43:33:9d:ed:09:b0:b0:42:05:aa: fe:f1:74:77:19:de:fb:c3:8c:26:07:2b:3d:fc:9d: 30:46:73:12:8e:d5:c7:de:b3:84:9b:d1:f4:7a:66: fb:e0:0f:10:b1:33:70:92:31:aa:96:a8:81:f6:2d: 04:cb:71:43:91:7f:e9:dc:c1:94:82:49:43:38:8e: 1f:48:26:f5:72:ca:38:3d:23:94:b6:6c:d3:d8:6d: 22:1d:fd:41:27:7e:8e:83:98:82:42:d7:80:38:7e: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E7:23:67:CE:47:3C:05:F2:B1:8A:6C:14:0A:A4:33:08:70:45:33 X509v3 Authority Key Identifier: keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:69:f6:99:90:dd:48:21:d0:d2:40:d3:46:4e:d4:dd:15:e6: 5a:aa:8b:0d:c7:98:1e:26:bd:9f:54:a9:df:71:e5:fd:c6:86: 5d:d5:74:40:92:e4:80:8b:d0:33:55:99:d4:5b:bb:45:36:41: 87:d8:6b:65:05:33:37:97:50:1e:9b:d4:39:d2:ee:9d:50:8b: db:68:18:a3:4c:4d:56:ec:f4:f2:be:db:6c:e7:e9:70:84:3b: a8:f7:f4:5f:bc:5c:91:0f:c1:5b:d6:8a:0b:c5:f5:03:04:ce: d6:e3:82:d8:fa:68:c0:1f:e8:4b:b0:6c:87:d9:26:c0:be:61: 68:fc:b8:65:45:dc:2e:43:68:27:0a:93:de:6f:92:80:e8:6d: d7:61:94:06:36:c4:b1:e5:dd:bc:e3:c6:09:5d:c3:38:8e:75: 16:35:71:4f:7b:7c:2a:41:9f:1d:56:64:af:59:1a:33:ff:d0: e0:e2:21:2c:86:9b:0a:ef:7e:ae:d9:78:0d:19:61:a1:4b:a0: 4d:1d:de:bf:dc:f9:72:f6:b5:ce:aa:44:19:68:f1:f5:f6:d8: 15:d8:ba:89:93:da:26:c3:91:68:c6:5f:b7:6c:21:e5:1a:de: 98:4f:7b:c7:66:1c:e1:16:a9:56:ec:45:ea:dd:1c:12:bb:bf: c4:2e:48:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULANE0ZbiKlzx/eyZE89yQ0EFl5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4ODkx QzkzQjlENDAeFw0yNjA5MjMwNDA2MTRaFw0yNjA5MjQwNzQ4MTRaMDMxMTAvBgNV BAMTKDM1RTcyMzY3Q0U0NzNDMDVGMkIxOEE2QzE0MEFBNDMzMDg3MDQ1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63W7EndcBx08KCjXeiENWf9ZC m5+8h9JfVAIKjSamd3GlzU8Sm77lrC3D9sxMbZohhG6auPsROWGLbKOgwo04FbCu /RWzCXNRMrU3ArYvL/FcO5UIrkzsgzHN8xtfywi1BbNHf91yqKq/s1BcdZMq5q1+ zoMPeky2Nb98wmpjxciQ4HxDKT1AvpRn+9/zaXPM2YsR60ygxhKRQzOd7QmwsEIF qv7xdHcZ3vvDjCYHKz38nTBGcxKO1cfes4Sb0fR6ZvvgDxCxM3CSMaqWqIH2LQTL cUORf+ncwZSCSUM4jh9IJvVyyjg9I5S2bNPYbSId/UEnfo6DmIJC14A4frcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNecjZ85HPAXysYpsFAqkMwhwRTMwHwYDVR0j BBgwFoAUKf8fYaxelPbmSod9ZMiYiRyTudQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI5ZTcwNjQtYjM1Mi00M2I2LTlmMDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFB QzVFOTRGNkU2NEE4NzdENjRDODk4ODkxQzkzQjlENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZGMUY2MUFDNUU5NEY2RTY0QTg3N0Q2NEM4OTg4OTFDOTNC OUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4 ODkxQzkzQjlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZp9pmQ3Ugh0NJA00ZO1N0V5lqqiw3HmB4m vZ9Uqd9x5f3Ghl3VdECS5ICL0DNVmdRbu0U2QYfYa2UFMzeXUB6b1DnS7p1Qi9to GKNMTVbs9PK+22zn6XCEO6j39F+8XJEPwVvWigvF9QMEztbjgtj6aMAf6EuwbIfZ JsC+YWj8uGVF3C5DaCcKk95vkoDobddhlAY2xLHl3bzjxgldwziOdRY1cU97fCpB nx1WZK9ZGjP/0ODiISyGmwrvfq7ZeA0ZYaFLoE0d3r/c+XL2tc6qRBlo8fX22BXY uomT2ibDkWjGX7dsIeUa3phPe8dmHOEWqVbsRerdHBK7v8QuSAM= -----END CERTIFICATE-----Generated at Wed Sep 23 20:31:18 2026 by rpki-client