$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft File: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft (raw, json) Hash identifier: gNI5c2k9gSUvObZMcvRnBJ8xRJcev3AD+t1ZtZBUscc= Subject key identifier: 09:69:57:DB:78:C7:7E:BF:98:9E:9B:65:A6:D2:B5:C4:A5:49:18:15 Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD Certificate issuer: /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Certificate serial: 522330E1EC21D014F880EF7B17DCF41093706553 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 21:44:38 +0000 Manifest this update: Wed 02 Sep 2026 21:39:38 +0000 Manifest next update: Thu 03 Sep 2026 23:24:38 +0000 Files and hashes: 1: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl (hash: DyjJ3i7nwHro2K02UhgIvSfEgrWrBwLr/i9OjYa5AE8=) 2: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: nOhj/KbLK8tB+8fzk/fF8cT34h0xCczJl9qDSLUlcwg=) 3: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: CVrUJTlhlyjQcXWYw9mEs6T2cItEcY6BENuMI3nROC0=) 4: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: QzM90YWTXns1ydz40IJ13wxTQ2LuYS2Sj6cuHqSNNQs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:23:30:e1:ec:21:d0:14:f8:80:ef:7b:17:dc:f4:10:93:70:65:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Validity Not Before: Sep 2 21:39:38 2026 GMT Not After : Sep 3 23:24:38 2026 GMT Subject: CN=096957DB78C77EBF989E9B65A6D2B5C4A5491815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:01:62:e8:8d:f4:d1:fa:d4:c1:23:75:00: 1f:0f:d0:ed:bf:90:72:0d:ca:33:4a:e5:83:67:83: 8d:cf:9b:83:bb:01:b7:9c:8c:f1:85:c6:93:19:04: dc:a7:49:8f:f2:24:6f:8f:75:7e:be:88:9d:45:de: 05:f0:fd:cd:d5:b2:6d:eb:9f:70:b4:37:31:23:53: a6:c3:d7:a9:ed:e8:4a:02:21:44:dd:88:41:b8:fc: 1e:b7:ac:c6:38:c2:90:b2:e0:ef:92:38:cc:fd:9c: 8d:3d:8e:7e:cf:96:29:2e:40:fa:19:5e:07:90:34: c2:92:86:40:2c:5c:18:70:8d:e2:37:97:0f:c8:83: 19:77:bb:69:80:23:54:97:5b:67:7c:d3:f9:05:ef: be:63:f4:26:93:80:17:20:e3:6b:fb:f2:f3:2f:51: c6:24:87:18:b2:54:41:66:19:46:87:14:7f:0a:b8: e1:ce:5f:6a:09:96:09:0e:a7:3b:05:d4:7c:53:25: ac:92:eb:4b:7e:a7:4c:c3:19:63:50:fe:4a:78:96: 9a:c5:af:38:0c:c2:7c:83:0c:dc:fe:b9:bd:22:3c: 56:78:f9:de:3b:17:a6:88:42:e7:ee:94:3a:ad:35: b9:b5:f3:96:52:8f:2f:6d:3e:72:f4:a7:65:8a:87: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:69:57:DB:78:C7:7E:BF:98:9E:9B:65:A6:D2:B5:C4:A5:49:18:15 X509v3 Authority Key Identifier: keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:38:1f:d3:c5:17:d2:4c:21:04:e9:4e:34:e9:c9:48:f5:6e: 2e:0e:9f:b4:6b:f1:e7:39:b6:cc:b9:ab:fe:03:f6:48:17:05: b2:ac:c2:bf:d5:35:22:1e:a6:33:9d:17:00:d2:fa:d0:0d:16: 0d:85:3d:2f:33:27:d5:19:79:34:47:1a:02:bc:27:ee:76:a9: f9:d3:c4:1a:13:22:59:56:1c:59:6e:84:98:06:0b:f1:97:a2: 20:c7:24:ba:b1:64:20:83:21:37:ac:83:7d:1e:2c:d6:43:68: 85:33:92:bb:83:4f:17:da:2b:ed:bb:f2:24:c7:8b:06:12:1f: fb:0d:c2:b2:2f:51:70:a5:50:2e:d7:fd:c0:89:de:e1:41:12: 75:6e:83:3c:d3:77:a1:ee:28:fd:60:67:5a:6b:5b:24:f9:48: 9b:72:ea:97:70:e7:ff:b7:2f:7e:57:00:27:02:cd:8f:9d:a3: f1:3f:34:33:5e:7c:f2:6b:83:6c:79:6d:2e:2f:37:a6:b2:1b: 65:7c:e1:be:16:0a:1e:b8:bc:69:db:31:fb:26:0b:5b:aa:70: f0:2b:04:dd:9d:db:4b:6c:e8:dc:0f:5b:7e:48:c2:a7:28:bb: ef:0e:22:c9:95:90:d2:65:ef:78:a4:e5:78:6b:70:0e:3e:41: 48:42:57:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUiMw4ewh0BT4gO97F9z0EJNwZVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1 N0MxQ0FCRDAeFw0yNjA5MDIyMTM5MzhaFw0yNjA5MDMyMzI0MzhaMDMxMTAvBgNV BAMTKDA5Njk1N0RCNzhDNzdFQkY5ODlFOUI2NUE2RDJCNUM0QTU0OTE4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HgFi6I300frUwSN1AB8P0O2/ kHINyjNK5YNng43Pm4O7AbecjPGFxpMZBNynSY/yJG+PdX6+iJ1F3gXw/c3Vsm3r n3C0NzEjU6bD16nt6EoCIUTdiEG4/B63rMY4wpCy4O+SOMz9nI09jn7PlikuQPoZ XgeQNMKShkAsXBhwjeI3lw/Igxl3u2mAI1SXW2d80/kF775j9CaTgBcg42v78vMv UcYkhxiyVEFmGUaHFH8KuOHOX2oJlgkOpzsF1HxTJayS60t+p0zDGWNQ/kp4lprF rzgMwnyDDNz+ub0iPFZ4+d47F6aIQufulDqtNbm185ZSjy9tPnL0p2WKh9VVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWlX23jHfr+YnptlptK1xKVJGBUwHwYDVR0j BBgwFoAUYp50pgtSrJ/C96ERpoN2u1fByr0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5N2JjZjQtZTFhYS00N2Q2LWJkZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYw QjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1N0MxQ0FCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjlFNzRBNjBCNTJBQzlGQzJGN0ExMTFBNjgzNzZCQjU3QzFD QUJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2 QkI1N0MxQ0FCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM4H9PFF9JMIQTpTjTpyUj1bi4On7Rr8ec5 tsy5q/4D9kgXBbKswr/VNSIepjOdFwDS+tANFg2FPS8zJ9UZeTRHGgK8J+52qfnT xBoTIllWHFluhJgGC/GXoiDHJLqxZCCDITesg30eLNZDaIUzkruDTxfaK+278iTH iwYSH/sNwrIvUXClUC7X/cCJ3uFBEnVugzzTd6HuKP1gZ1prWyT5SJty6pdw5/+3 L35XACcCzY+do/E/NDNefPJrg2x5bS4vN6ayG2V84b4WCh64vGnbMfsmC1uqcPAr BN2d20ts6NwPW35Iwqcou+8OIsmVkNJl73ik5XhrcA4+QUhCV3k= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:17 2026 by rpki-client