$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: nSJgFIRtTmMRryuXsAOUlghoYnX0hudyUoMfDvOrK2Y= Subject key identifier: AE:EE:7F:96:1D:13:CC:C2:88:A1:DE:1B:54:79:9D:E8:D5:44:DB:FD Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 7F9462B572C5BFF4559F2004FA425651622B0081 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 23:58:00 +0000 Manifest this update: Wed 02 Sep 2026 23:53:00 +0000 Manifest next update: Fri 04 Sep 2026 03:35:00 +0000 Files and hashes: 1: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 2: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: tay7+/pPcGpAS3u5feTDeMwvJgUiweZV/MZR+fOOKGM=) 3: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) 4: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:94:62:b5:72:c5:bf:f4:55:9f:20:04:fa:42:56:51:62:2b:00:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Sep 2 23:53:00 2026 GMT Not After : Sep 4 03:35:00 2026 GMT Subject: CN=AEEE7F961D13CCC288A1DE1B54799DE8D544DBFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:3e:bb:5c:33:a4:28:fd:e9:18:e4:af:58: b8:f4:6e:3e:1b:44:1f:94:9c:bb:7f:48:3a:82:90: e5:a4:c1:61:87:e9:db:37:f7:86:c4:96:62:6c:d3: 7c:5b:fc:ce:eb:99:ca:76:4e:e5:47:ac:b4:1b:26: 07:ab:fd:5e:5f:e4:9a:29:2e:73:b1:e2:09:87:7f: 91:10:6f:a0:84:33:e1:ce:a1:9f:4b:ff:46:66:84: 62:3a:eb:80:8c:47:22:7c:7e:a9:52:a9:d7:a9:08: 55:fe:20:f7:b4:7a:e6:59:a5:eb:20:e3:8e:7d:05: d8:bc:20:63:59:11:3f:c9:01:e5:44:93:3a:d4:a9: b7:1b:b6:78:c1:c4:48:56:28:39:69:64:0e:91:d4: a4:07:66:6c:21:bf:f0:77:5a:16:25:d2:33:1b:9c: 53:1a:8e:0a:dd:55:87:cf:54:dd:8a:45:13:06:d6: fe:68:f0:9e:1c:b8:55:99:f7:80:25:0f:83:02:67: f1:b5:26:df:5c:bc:3b:e1:d4:9d:52:63:d1:2d:8e: 96:99:a9:f7:52:33:9e:1d:34:23:c5:bd:dd:f5:e3: c9:fa:2b:fe:9e:89:e8:1f:3b:de:ef:15:4b:8a:94: f5:ea:16:f9:3d:b9:37:f0:bd:f2:86:e8:13:a1:17: c6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EE:7F:96:1D:13:CC:C2:88:A1:DE:1B:54:79:9D:E8:D5:44:DB:FD X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:01:c7:6f:86:9c:47:1c:8c:0b:24:61:69:61:b9:28:c3:76: b1:28:f4:85:c5:59:3b:bf:e2:bb:ad:03:fe:c5:30:53:bc:04: 25:ba:e8:91:35:7a:0c:38:4f:d9:d9:53:00:2c:49:31:3c:9b: 0f:70:fe:0f:14:3e:8a:c0:93:eb:33:87:5b:69:14:a3:66:a4: a6:42:2f:62:7c:38:cb:26:5b:0c:7f:9f:bf:77:30:8f:ef:9a: c6:7f:a0:4f:15:49:2b:5f:35:98:04:9b:3b:6f:bf:f2:45:3c: d0:7c:b1:23:50:45:0c:06:26:16:ce:4b:a9:2a:cf:50:ff:67: cc:47:12:7b:2c:7c:32:29:30:f0:9f:92:2b:58:35:1f:bb:00: 1c:4d:dc:88:3b:4b:6e:f6:a3:65:bc:5b:ef:7f:6f:75:a2:b7: 05:4d:55:f0:ce:36:55:e5:85:12:81:f2:33:ec:fa:0d:3c:1f: 9d:8a:aa:c7:a2:d9:a8:04:3f:7b:0d:ae:42:0f:ad:24:90:58: 2c:11:3e:b4:3e:36:72:4a:81:90:31:5e:bc:12:3f:68:d5:dc: a2:7d:92:5f:dd:10:79:1c:29:0a:e2:04:d8:ae:3b:a0:39:c0: 84:a7:87:ad:14:5f:c6:01:97:3e:cb:dd:30:36:47:6e:17:69: ec:79:5e:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5RitXLFv/RVnyAE+kJWUWIrAIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA5MDIyMzUzMDBaFw0yNjA5MDQwMzM1MDBaMDMxMTAvBgNV BAMTKEFFRUU3Rjk2MUQxM0NDQzI4OEExREUxQjU0Nzk5REU4RDU0NERCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTT67XDOkKP3pGOSvWLj0bj4b RB+UnLt/SDqCkOWkwWGH6ds394bElmJs03xb/M7rmcp2TuVHrLQbJger/V5f5Jop LnOx4gmHf5EQb6CEM+HOoZ9L/0ZmhGI664CMRyJ8fqlSqdepCFX+IPe0euZZpesg 4459Bdi8IGNZET/JAeVEkzrUqbcbtnjBxEhWKDlpZA6R1KQHZmwhv/B3WhYl0jMb nFMajgrdVYfPVN2KRRMG1v5o8J4cuFWZ94AlD4MCZ/G1Jt9cvDvh1J1SY9EtjpaZ qfdSM54dNCPFvd3148n6K/6eiegfO97vFUuKlPXqFvk9uTfwvfKG6BOhF8YfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUru5/lh0TzMKIod4bVHmd6NVE2/0wHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgBx2+GnEccjAskYWlhuSjDdrEo9IXFWTu/ 4rutA/7FMFO8BCW66JE1egw4T9nZUwAsSTE8mw9w/g8UPorAk+szh1tpFKNmpKZC L2J8OMsmWwx/n793MI/vmsZ/oE8VSStfNZgEmztvv/JFPNB8sSNQRQwGJhbOS6kq z1D/Z8xHEnssfDIpMPCfkitYNR+7ABxN3Ig7S272o2W8W+9/b3WitwVNVfDONlXl hRKB8jPs+g08H52Kqsei2agEP3sNrkIPrSSQWCwRPrQ+NnJKgZAxXrwSP2jV3KJ9 kl/dEHkcKQriBNiuO6A5wISnh60UX8YBlz7L3TA2R24Xaex5Xuw= -----END CERTIFICATE-----Generated at Thu Sep 3 09:26:37 2026 by rpki-client