$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft File: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft (raw, json) Hash identifier: 7zamA8Ng5Ne3yOViFPOLk3QrihZrrzEvgLoEZJBIchY= Subject key identifier: 9A:C4:83:9C:73:8E:23:EE:B8:F1:83:A9:A1:29:28:8E:74:6F:89:80 Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Certificate serial: 77F7E3E3FF9F20EF85868260BE1C7955110AD02E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:02:36 +0000 Manifest this update: Mon 20 Jul 2026 16:57:36 +0000 Manifest next update: Tue 21 Jul 2026 20:05:36 +0000 Files and hashes: 1: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=) 2: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl (hash: cRuzxH2+vwW9xVp6N+QC+ZvvpcoMBsIrnioF6IyCFQ0=) 3: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=) 4: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f7:e3:e3:ff:9f:20:ef:85:86:82:60:be:1c:79:55:11:0a:d0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Validity Not Before: Jul 20 16:57:36 2026 GMT Not After : Jul 21 20:05:36 2026 GMT Subject: CN=9AC4839C738E23EEB8F183A9A129288E746F8980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:33:43:4b:0e:90:1e:27:1a:06:56:d3:45: 36:aa:60:e5:e3:f5:4e:cd:35:11:dd:3c:95:ee:a6: 63:34:d3:36:7a:b4:95:21:65:2b:6d:56:20:7c:e0: 45:3b:16:d5:99:7a:95:52:c5:33:17:42:fe:75:6c: 35:12:5f:73:42:8c:70:c5:ab:c5:70:72:94:51:56: 0c:bf:5c:07:87:a4:aa:7f:c5:f8:6f:02:3b:51:02: a5:cb:c1:43:db:ec:31:f3:45:61:ff:4e:c4:b5:2a: 9d:24:97:ba:72:f8:78:32:23:03:79:f2:d3:f5:99: 8f:0a:d3:f6:39:29:59:b9:14:84:b1:d2:dc:85:51: 6c:63:a7:56:59:d1:b2:30:ab:a6:a3:47:64:20:90: 78:48:18:bf:72:f7:26:ca:23:e5:2f:9f:38:e1:da: 01:2c:99:1d:1a:7a:f5:ec:ff:f4:95:75:21:35:24: b3:16:7f:45:f9:5f:0b:95:fd:83:8a:a3:d7:7c:86: 20:e3:27:fd:10:58:87:f9:a5:c2:c3:41:3f:60:03: 93:77:7f:75:25:d1:4e:0d:48:f4:be:d4:eb:b7:36: bf:a4:8d:aa:79:ce:db:85:3f:74:0e:2c:90:c6:15: b8:a1:bf:89:53:cd:49:87:9a:9f:fa:81:04:51:48: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C4:83:9C:73:8E:23:EE:B8:F1:83:A9:A1:29:28:8E:74:6F:89:80 X509v3 Authority Key Identifier: keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:3f:f6:9f:c5:ae:4c:e9:09:f6:22:f9:11:16:b1:32:25:2c: d5:60:d8:bc:8d:a1:6b:61:3f:f5:8f:57:6d:b5:31:a8:c5:76: a9:31:21:b6:c2:b4:02:93:2f:c1:8f:95:c8:fd:50:17:a0:62: 15:f2:0e:dc:cc:f0:6f:85:d1:ed:ea:fd:25:e4:3c:13:40:92: c9:35:f5:2a:a6:75:85:49:09:2b:38:32:8f:fe:f9:88:5c:82: 4d:37:ca:a9:81:a8:37:a6:fe:06:ed:f0:4a:ee:95:4e:89:3a: e4:19:7d:75:f4:fc:d3:6d:26:13:c0:c4:25:17:e1:3e:24:e6: b4:0a:86:99:d4:05:a2:0c:bd:04:bd:ff:50:4e:3b:25:bc:40: 87:f6:91:9a:52:5c:2c:8d:87:24:3c:8a:41:98:68:3d:f5:ec: 9c:22:82:6d:26:33:f1:40:3d:ff:47:86:2b:97:e2:1f:86:81: d0:c7:c7:f2:41:23:b1:10:c5:5f:20:17:ea:ae:6d:4d:3e:38: b5:32:6b:a8:e8:16:27:1e:da:6a:e8:18:59:5d:7c:61:79:11: 75:1c:3d:73:ac:86:c7:a5:41:7f:47:fa:1d:de:08:52:25:27: 12:9c:a7:03:ee:e1:0b:0b:9a:04:40:ad:dc:84:8b:ce:5a:5a: 24:b4:26:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/fj4/+fIO+FhoJgvhx5VREK0C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3 RDRENzJCQzAeFw0yNjA3MjAxNjU3MzZaFw0yNjA3MjEyMDA1MzZaMDMxMTAvBgNV BAMTKDlBQzQ4MzlDNzM4RTIzRUVCOEYxODNBOUExMjkyODhFNzQ2Rjg5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHzNDSw6QHicaBlbTRTaqYOXj 9U7NNRHdPJXupmM00zZ6tJUhZSttViB84EU7FtWZepVSxTMXQv51bDUSX3NCjHDF q8VwcpRRVgy/XAeHpKp/xfhvAjtRAqXLwUPb7DHzRWH/TsS1Kp0kl7py+HgyIwN5 8tP1mY8K0/Y5KVm5FISx0tyFUWxjp1ZZ0bIwq6ajR2QgkHhIGL9y9ybKI+Uvnzjh 2gEsmR0aevXs//SVdSE1JLMWf0X5XwuV/YOKo9d8hiDjJ/0QWIf5pcLDQT9gA5N3 f3Ul0U4NSPS+1Ou3Nr+kjap5ztuFP3QOLJDGFbihv4lTzUmHmp/6gQRRSAKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmsSDnHOOI+648YOpoSkojnRviYAwHwYDVR0j BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3 OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3 MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVB MkI3RDRENzJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANM/9p/FrkzpCfYi+REWsTIlLNVg2LyNoWth P/WPV221MajFdqkxIbbCtAKTL8GPlcj9UBegYhXyDtzM8G+F0e3q/SXkPBNAksk1 9SqmdYVJCSs4Mo/++Yhcgk03yqmBqDem/gbt8ErulU6JOuQZfXX0/NNtJhPAxCUX 4T4k5rQKhpnUBaIMvQS9/1BOOyW8QIf2kZpSXCyNhyQ8ikGYaD317Jwigm0mM/FA Pf9HhiuX4h+GgdDHx/JBI7EQxV8gF+qubU0+OLUya6joFice2mroGFldfGF5EXUc PXOshselQX9H+h3eCFIlJxKcpwPu4QsLmgRArdyEi85aWiS0Jug= -----END CERTIFICATE-----Generated at Tue Jul 21 09:31:31 2026 by rpki-client