$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.mft (raw, json) Hash identifier: /ewC/5jOQclii4SL6uobwRFa4CCAHWPioYXcazjATzA= Subject key identifier: 77:85:A3:77:BC:69:E4:87:9C:F4:02:8E:7C:52:EA:42:3E:A5:D3:C9 Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Certificate serial: 317E033CA245F6E349C902D8B5E27F4198DD8B45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:55:22 +0000 Manifest this update: Tue 02 Jun 2026 16:50:22 +0000 Manifest next update: Wed 03 Jun 2026 18:07:22 +0000 Files and hashes: 1: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo=) 2: 29FA80F6176C25C691091C10B9D90672CFD66E6D.crl (hash: LdLpWhlkadYPAuF27MWfdP1Z/E9dF1zOaDPwUgUQxG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7e:03:3c:a2:45:f6:e3:49:c9:02:d8:b5:e2:7f:41:98:dd:8b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Validity Not Before: Jun 2 16:50:22 2026 GMT Not After : Jun 3 18:07:22 2026 GMT Subject: CN=7785A377BC69E4879CF4028E7C52EA423EA5D3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:b0:14:ca:23:ea:e0:89:c4:8c:90:2f:e0: eb:8b:aa:8f:43:ea:93:da:73:56:59:95:5a:79:46: 2b:bd:d5:e7:f2:1b:09:92:9c:23:2e:69:35:e2:28: 95:cd:ef:72:bf:20:a6:84:8b:69:a2:5a:94:32:ad: e6:3e:45:68:ec:17:1d:a1:c9:89:56:5c:da:44:94: db:d4:66:f6:25:d3:9d:7c:29:62:90:08:15:b7:d9: ab:ea:15:60:15:fb:be:c8:fc:b6:02:eb:50:dc:6c: 9b:b4:30:81:7c:a2:1e:ec:68:90:21:11:db:3f:25: a0:17:50:30:2a:cb:c2:90:5e:3b:bc:f6:ee:2f:25: 06:70:c5:f6:bb:7e:82:b7:bf:ae:76:09:a8:a5:ba: 85:ab:9b:db:3c:ec:c1:92:07:e4:fd:6e:b3:a7:20: a6:1c:61:8c:60:06:01:41:0c:0d:d4:d2:f8:79:e4: 67:de:36:e2:4e:f9:ad:da:16:fb:66:f8:c0:92:03: 18:bd:1a:bc:0f:46:f9:4b:25:d6:eb:59:39:80:ce: 76:2e:2c:bb:5c:14:20:d3:16:46:0c:d1:18:d3:a3: 84:4c:35:6c:46:c9:f1:ca:48:85:3d:a7:32:8b:dc: 16:9e:a0:0f:d7:3b:38:2c:f6:8b:c7:f3:b6:1d:00: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:85:A3:77:BC:69:E4:87:9C:F4:02:8E:7C:52:EA:42:3E:A5:D3:C9 X509v3 Authority Key Identifier: keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8a:83:ad:79:92:d1:ce:8f:31:84:3d:9f:8e:eb:0c:0f:e6: c8:38:03:ce:04:a5:ca:bc:a6:77:59:8d:45:26:37:83:90:04: cf:15:5c:aa:c5:5b:57:1b:80:1f:a5:11:01:72:a6:da:5e:8f: 42:68:7a:54:e6:d9:bd:47:d9:df:66:0a:c0:a4:d4:ce:4f:a1: 6c:35:f2:94:af:90:8c:8c:75:7b:6d:31:8e:7c:1e:21:51:66: 2b:9d:dc:79:92:75:d6:e6:25:6f:a1:0b:a9:2a:e1:36:df:4c: 4d:de:ee:fe:cf:fe:06:28:3d:f2:05:82:cc:d8:3b:68:66:b3: 84:2a:66:b6:56:f0:71:4a:18:b6:6d:f8:14:96:ca:24:0e:d8: e4:f3:c1:aa:33:3a:21:46:90:dd:fa:d7:09:a0:16:4a:d5:29: bf:cd:92:3b:f5:8d:aa:e4:b9:98:22:25:cc:96:59:ab:ac:0f: 4b:88:2f:31:fb:21:6e:89:73:66:5e:9d:9d:2a:37:21:2c:9f: 0c:6b:14:18:64:df:e2:73:bf:28:90:a4:c5:f7:de:82:e3:58: 63:0b:5b:72:e1:30:c8:33:c5:8e:99:e0:db:39:20:6d:b8:63: b3:ad:88:90:9b:35:79:ee:a0:f9:13:68:e8:61:f5:44:d6:d1: d8:73:91:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMX4DPKJF9uNJyQLYteJ/QZjdi0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJD RkQ2NkU2RDAeFw0yNjA2MDIxNjUwMjJaFw0yNjA2MDMxODA3MjJaMDMxMTAvBgNV BAMTKDc3ODVBMzc3QkM2OUU0ODc5Q0Y0MDI4RTdDNTJFQTQyM0VBNUQzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7rAUyiPq4InEjJAv4OuLqo9D 6pPac1ZZlVp5Riu91efyGwmSnCMuaTXiKJXN73K/IKaEi2miWpQyreY+RWjsFx2h yYlWXNpElNvUZvYl0518KWKQCBW32avqFWAV+77I/LYC61DcbJu0MIF8oh7saJAh Eds/JaAXUDAqy8KQXju89u4vJQZwxfa7foK3v652CailuoWrm9s87MGSB+T9brOn IKYcYYxgBgFBDA3U0vh55GfeNuJO+a3aFvtm+MCSAxi9GrwPRvlLJdbrWTmAznYu LLtcFCDTFkYM0RjTo4RMNWxGyfHKSIU9pzKL3BaeoA/XOzgs9ovH87YdAFjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd4Wjd7xp5Iec9AKOfFLqQj6l08kwHwYDVR0j BBgwFoAUKfqA9hdsJcaRCRwQudkGcs/Wbm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE0OGIyMjItNmRlZC00MjhhLTg4OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYx NzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJDRkQ2NkU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZBODBGNjE3NkMyNUM2OTEwOTFDMTBCOUQ5MDY3MkNGRDY2 RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2 NzJDRkQ2NkU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGKg615ktHOjzGEPZ+O6wwP5sg4A84Epcq8 pndZjUUmN4OQBM8VXKrFW1cbgB+lEQFyptpej0JoelTm2b1H2d9mCsCk1M5PoWw1 8pSvkIyMdXttMY58HiFRZiud3HmSddbmJW+hC6kq4TbfTE3e7v7P/gYoPfIFgszY O2hms4QqZrZW8HFKGLZt+BSWyiQO2OTzwaozOiFGkN361wmgFkrVKb/Nkjv1jark uZgiJcyWWausD0uILzH7IW6Jc2ZenZ0qNyEsnwxrFBhk3+JzvyiQpMX33oLjWGML W3LhMMgzxY6Z4Ns5IG24Y7OtiJCbNXnuoPkTaOhh9UTW0dhzkcA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:40 2026 by rpki-client