$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft File: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft (raw, json) Hash identifier: yzJcaeiMuWY+Cqz1V5suavZJNgMqYCJm+RUNf1C/olM= Subject key identifier: 95:73:45:F5:CA:E9:C5:E0:09:5A:92:74:3E:B4:8A:03:DD:54:69:09 Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Certificate serial: 3C80268E57783D373482B41A269E0D07BE46BCB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:33:12 +0000 Manifest this update: Tue 02 Jun 2026 22:28:12 +0000 Manifest next update: Wed 03 Jun 2026 23:25:12 +0000 Files and hashes: 1: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl (hash: OORswjIbYoUGlhUc62oG2sXx1A70sviPJhYPq+vwnHs=) 2: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=) 3: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=) 4: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:80:26:8e:57:78:3d:37:34:82:b4:1a:26:9e:0d:07:be:46:bc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Validity Not Before: Jun 2 22:28:12 2026 GMT Not After : Jun 3 23:25:12 2026 GMT Subject: CN=957345F5CAE9C5E0095A92743EB48A03DD546909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b0:8d:a2:ce:2b:b6:56:b8:97:c8:22:58:c9: c3:2c:02:76:22:8b:28:d5:f4:77:d6:3d:c5:5c:3e: 8c:02:cf:60:3d:8f:20:20:6a:32:d2:00:7f:9c:38: 95:e7:a3:77:0f:95:cf:89:2b:ce:14:72:08:cc:61: 34:fd:27:54:9f:12:d1:33:5e:c0:80:67:a2:a0:51: 59:da:39:20:33:be:76:a7:4c:e8:a3:22:ac:6d:12: 12:03:0e:9a:27:8f:9f:ee:19:d6:bc:fc:8b:16:e0: 7e:c4:8b:48:58:a1:4a:25:05:f7:9a:cd:90:ba:ee: a4:c0:72:c9:a7:64:c9:b8:b2:1f:bf:b4:39:a1:e1: 0d:06:1b:3d:ea:a1:5a:f1:49:9e:9c:d3:29:77:5a: c2:56:c4:38:9f:55:1b:5c:4f:27:ba:48:0a:e7:9e: 50:84:f7:74:c2:26:42:99:df:c7:86:e3:c4:68:60: 65:ae:eb:0b:ad:60:ed:95:dc:92:e0:66:b1:03:71: fb:dc:8a:a7:3b:f8:04:b3:eb:42:e5:13:ed:3a:94: 63:64:6d:9e:db:a5:9f:8b:0b:de:e7:30:57:41:5c: 67:65:5f:04:07:59:52:4b:2b:d5:2c:3f:be:6a:93: de:e0:39:2f:bc:f5:fe:ef:ee:c8:19:c3:87:4d:68: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:73:45:F5:CA:E9:C5:E0:09:5A:92:74:3E:B4:8A:03:DD:54:69:09 X509v3 Authority Key Identifier: keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:64:2d:65:46:fb:1a:28:5c:c8:1f:87:ad:a8:5b:08:32:ba: 74:a0:24:a2:7d:b4:64:04:c1:fe:54:b4:c5:34:7b:d8:74:ae: 02:e7:e3:c3:87:23:ab:17:e6:16:60:70:2c:c9:c7:5b:58:b4: 57:38:e4:64:b7:a6:20:15:b0:59:cc:46:e6:47:4b:01:2c:3b: 4a:a1:2b:38:1a:4f:b4:5d:a5:6d:ad:32:c6:87:69:d7:69:1f: 11:65:01:e8:a0:c4:81:38:b3:a1:5b:82:1e:70:2a:9d:d0:52: 17:41:99:d1:2b:2d:d8:9c:77:0c:1b:7f:84:b5:7f:c6:c7:a2: 46:3a:48:bf:59:5a:0a:ac:5d:06:83:2f:a0:cf:a4:48:29:a4: 14:85:82:e0:3e:5e:66:9a:40:d9:c7:dd:42:8f:86:2e:e9:9e: b0:97:83:29:2e:20:6d:7d:6e:a2:95:0d:63:f3:fd:56:ce:82: ef:e1:db:a9:d0:ed:eb:59:e3:9b:bf:0f:ab:8b:44:89:66:cb: ae:38:cb:0f:ca:aa:7b:56:0a:da:e0:4c:ec:3d:c4:76:da:17: 52:d9:73:36:ff:ad:ea:17:b6:a7:8f:7c:4f:81:81:d9:d8:05: 43:37:1f:37:38:88:13:ee:51:65:17:d1:7c:96:73:ab:9a:49: 74:f8:be:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIAmjld4PTc0grQaJp4NB75GvLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3 RDRENzJCQzAeFw0yNjA2MDIyMjI4MTJaFw0yNjA2MDMyMzI1MTJaMDMxMTAvBgNV BAMTKDk1NzM0NUY1Q0FFOUM1RTAwOTVBOTI3NDNFQjQ4QTAzREQ1NDY5MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNsI2iziu2VriXyCJYycMsAnYi iyjV9HfWPcVcPowCz2A9jyAgajLSAH+cOJXno3cPlc+JK84UcgjMYTT9J1SfEtEz XsCAZ6KgUVnaOSAzvnanTOijIqxtEhIDDponj5/uGda8/IsW4H7Ei0hYoUolBfea zZC67qTAcsmnZMm4sh+/tDmh4Q0GGz3qoVrxSZ6c0yl3WsJWxDifVRtcTye6SArn nlCE93TCJkKZ38eG48RoYGWu6wutYO2V3JLgZrEDcfvciqc7+ASz60LlE+06lGNk bZ7bpZ+LC97nMFdBXGdlXwQHWVJLK9UsP75qk97gOS+89f7v7sgZw4dNaMSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlXNF9crpxeAJWpJ0PrSKA91UaQkwHwYDVR0j BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3 OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3 MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVB MkI3RDRENzJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNkLWVG+xooXMgfh62oWwgyunSgJKJ9tGQE wf5UtMU0e9h0rgLn48OHI6sX5hZgcCzJx1tYtFc45GS3piAVsFnMRuZHSwEsO0qh KzgaT7RdpW2tMsaHaddpHxFlAeigxIE4s6Fbgh5wKp3QUhdBmdErLdicdwwbf4S1 f8bHokY6SL9ZWgqsXQaDL6DPpEgppBSFguA+XmaaQNnH3UKPhi7pnrCXgykuIG19 bqKVDWPz/VbOgu/h26nQ7etZ45u/D6uLRIlmy644yw/KqntWCtrgTOw9xHbaF1LZ czb/reoXtqePfE+BgdnYBUM3Hzc4iBPuUWUX0XyWc6uaSXT4vjM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:57 2026 by rpki-client