$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft File: 029298EDFAB613103A6838C4E6588574BAE7834B.mft (raw, json) Hash identifier: l0FBatlrSiqMfBhCBL3hrhY3HQ4pL1w4mS4IH709y7k= Subject key identifier: 8C:DE:87:70:E3:AB:42:BA:2F:E3:B7:42:1B:09:BF:D1:39:A9:30:AC Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 43392B67119D33E937C19C83FFBD65CCF3C9A1D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 13:11:52 +0000 Manifest this update: Fri 25 Sep 2026 13:06:52 +0000 Manifest next update: Sat 26 Sep 2026 13:33:52 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8=) 2: 029298EDFAB613103A6838C4E6588574BAE7834B.crl (hash: 7A6Nmg12oMlrxnpZawkNxifF293Q+SBJw3DhealWg5E=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 5Ux9FZjiRKbHvcLMHj57vi8xCjfaDnZG5BpZ2qxgkCs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:39:2b:67:11:9d:33:e9:37:c1:9c:83:ff:bd:65:cc:f3:c9:a1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: Sep 25 13:06:52 2026 GMT Not After : Sep 26 13:33:52 2026 GMT Subject: CN=8CDE8770E3AB42BA2FE3B7421B09BFD139A930AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:e0:92:f3:ca:04:a6:89:fe:ee:3c:26:94: 67:66:b5:be:31:47:79:76:4d:82:22:a5:8e:b2:da: a7:c8:d3:3b:6f:1a:83:54:64:4b:7e:cc:f8:5e:87: 69:26:ec:7a:3f:e4:2a:fc:5e:6e:99:61:e9:91:55: f8:1c:ba:53:94:fb:53:5d:10:9b:b4:a1:a9:73:51: a4:d1:44:6e:ef:73:5a:ff:cd:99:a2:23:35:1d:f8: 9b:a2:4b:fb:75:f3:17:08:f4:9b:1f:5d:ea:d3:c2: 55:57:3d:aa:59:37:3b:2d:c7:7f:2c:a3:88:ca:52: 92:cc:fe:aa:68:ba:a3:1d:dd:5f:59:da:d7:4e:73: 68:22:8b:44:28:7e:cb:03:56:fd:de:b3:ef:f3:3e: 7d:2b:f3:25:6a:ec:0f:d7:a6:b3:e1:08:43:b1:1b: 19:12:c9:62:34:5f:46:91:5b:5e:f4:9b:70:2a:6c: 7a:3a:a5:d1:66:66:5f:b3:bf:35:8b:5a:c9:20:50: 7d:f2:d4:2f:17:57:e6:c2:43:ef:c3:96:8a:4e:83: 68:9d:f7:a1:7f:44:c7:9b:1f:45:4f:12:f2:87:4b: c3:93:44:63:ce:bc:7d:5c:bd:cb:a9:af:86:8b:b6: 0c:80:8f:64:ee:46:72:df:78:9b:68:90:b5:11:8a: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DE:87:70:E3:AB:42:BA:2F:E3:B7:42:1B:09:BF:D1:39:A9:30:AC X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0f:e1:61:c9:a3:e1:4a:30:8a:37:b6:78:e5:65:de:a9:71: 9f:46:fc:e2:b3:31:a1:52:ef:be:7e:fe:b9:36:94:8c:88:d3: a0:09:25:ad:00:b9:c0:26:05:f1:f4:b6:32:c4:23:60:6c:2e: 89:59:cc:7a:1b:e2:de:68:48:97:b9:68:00:ef:0c:c6:85:9a: c7:26:3e:e7:ff:5e:06:9e:58:d8:25:cb:a3:fc:7d:58:44:60: 43:5f:26:0d:5a:03:34:8b:00:f1:81:e8:c9:83:03:34:b4:04: 7d:0f:ba:17:fb:fa:34:d9:81:a5:93:d7:4c:3c:26:9c:70:12: 62:0b:58:a3:a7:7d:9f:fe:0a:8d:73:94:a9:6c:e4:70:8a:e7: ad:d3:d8:3c:b0:91:56:61:8c:73:fa:30:c5:7c:e9:d0:a2:43: 87:2b:8d:55:f1:f2:23:b4:15:34:6b:62:c1:a3:36:b4:b3:77: 71:e5:fe:9f:ae:46:86:f4:0a:a8:88:94:9d:da:23:22:11:52: 23:4a:b9:b9:90:e0:89:85:8d:5e:ab:d3:6c:f0:85:ec:f5:26: 8e:a7:56:30:29:0a:c8:a9:ec:4a:ab:a1:e7:9d:06:60:66:df: 8c:1a:14:af:46:f4:9a:8e:0b:94:f0:9f:60:fe:2c:41:2b:6d: ba:bf:02:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzkrZxGdM+k3wZyD/71lzPPJodkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA5MjUxMzA2NTJaFw0yNjA5MjYxMzMzNTJaMDMxMTAvBgNV BAMTKDhDREU4NzcwRTNBQjQyQkEyRkUzQjc0MjFCMDlCRkQxMzlBOTMwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCuCS88oEpon+7jwmlGdmtb4x R3l2TYIipY6y2qfI0ztvGoNUZEt+zPheh2km7Ho/5Cr8Xm6ZYemRVfgculOU+1Nd EJu0oalzUaTRRG7vc1r/zZmiIzUd+JuiS/t18xcI9JsfXerTwlVXPapZNzstx38s o4jKUpLM/qpouqMd3V9Z2tdOc2gii0QofssDVv3es+/zPn0r8yVq7A/XprPhCEOx GxkSyWI0X0aRW170m3AqbHo6pdFmZl+zvzWLWskgUH3y1C8XV+bCQ+/DlopOg2id 96F/RMebH0VPEvKHS8OTRGPOvH1cvcupr4aLtgyAj2TuRnLfeJtokLURigQBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjN6HcOOrQrov47dCGwm/0TmpMKwwHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1 NzRCQUU3ODM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoP4WHJo+FKMIo3tnjlZd6pcZ9G/OKzMaFS 775+/rk2lIyI06AJJa0AucAmBfH0tjLEI2BsLolZzHob4t5oSJe5aADvDMaFmscm Puf/XgaeWNgly6P8fVhEYENfJg1aAzSLAPGB6MmDAzS0BH0Puhf7+jTZgaWT10w8 JpxwEmILWKOnfZ/+Co1zlKls5HCK563T2DywkVZhjHP6MMV86dCiQ4crjVXx8iO0 FTRrYsGjNrSzd3Hl/p+uRob0CqiIlJ3aIyIRUiNKubmQ4ImFjV6r02zwhez1Jo6n VjApCsip7EqroeedBmBm34waFK9G9JqOC5Twn2D+LEErbbq/Avo= -----END CERTIFICATE-----Generated at Fri Sep 25 19:51:16 2026 by rpki-client