$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft File: 29047775725807ADDC2CF5B31E6B548D16ACA73D.mft (raw, json) Hash identifier: F7Qdiks8BjYhQjEyvbDwVLJarCFnPd5hc8mlp/jVEhk= Subject key identifier: 83:12:AC:5B:F6:42:32:2C:CE:DC:14:03:AD:92:54:56:76:8C:DA:D9 Authority key identifier: 29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D Certificate issuer: /CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Certificate serial: 2DA3B409156CAB778907333A9B10855024A8986C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 04:33:43 +0000 Manifest this update: Wed 04 Nov 2026 04:28:43 +0000 Manifest next update: Thu 05 Nov 2026 08:19:43 +0000 Files and hashes: 1: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: Euiddqe4QqVPakY6ZLb5tUk6+F4coEUNqu/76ax8PhM=) 2: 29047775725807ADDC2CF5B31E6B548D16ACA73D.crl (hash: posJCck+bICynDaUxrfzwedXPks4b6u4B8aM0RiDmLo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a3:b4:09:15:6c:ab:77:89:07:33:3a:9b:10:85:50:24:a8:98:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Validity Not Before: Nov 4 04:28:43 2026 GMT Not After : Nov 5 08:19:43 2026 GMT Subject: CN=8312AC5BF642322CCEDC1403AD925456768CDAD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ad:d2:0b:d2:76:3c:cf:73:43:a4:5a:f8:81: 5a:83:7b:8f:21:aa:65:98:bb:30:2b:f7:e1:d8:d7: 4f:87:f6:ca:fe:73:5d:aa:c1:7e:7e:34:20:31:15: 27:20:24:c3:c5:2e:4b:53:d3:44:7d:8b:0c:6e:37: ff:e2:98:00:75:2f:6b:71:c8:45:ba:84:17:80:f5: 92:0b:19:82:ce:32:a6:c3:e1:e0:80:3c:6d:9f:9d: c1:b4:85:33:33:75:7b:9b:1c:bf:d5:37:fb:6a:89: bd:47:b5:7b:61:01:98:bb:22:94:b8:29:ad:ed:3f: b7:4b:02:63:c3:8c:cf:c9:ea:c9:44:63:74:d4:8d: 74:f9:1b:70:cb:2d:ab:33:ed:7e:fc:c6:e2:44:e2: 15:8e:e1:d7:bd:78:9f:1f:a9:43:06:ac:69:43:bf: 25:f4:b5:6f:ac:62:f0:01:c7:1a:cc:cd:dd:34:60: a4:10:3a:71:0a:44:a9:c7:57:04:58:7b:02:1d:c0: 72:3a:7a:68:a8:83:e1:75:77:a8:f9:cd:1e:cb:2b: 89:7d:4f:51:e5:cb:ab:ec:ba:30:11:a5:83:1b:46: c7:ae:d0:ff:ef:17:8c:30:7d:0e:90:9a:92:82:76: b9:7d:8b:c0:bc:1d:2d:49:4a:7f:8c:84:21:ea:a9: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:12:AC:5B:F6:42:32:2C:CE:DC:14:03:AD:92:54:56:76:8C:DA:D9 X509v3 Authority Key Identifier: keyid:29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5e:c8:14:42:e8:55:eb:ae:07:0a:29:be:c2:99:3d:56:57: d6:07:8a:dd:79:78:71:42:9b:18:15:89:92:cf:a9:4a:dc:88: 46:e1:4b:7c:ff:6b:c9:91:9a:7a:11:e3:1c:7c:88:5a:26:fe: 5b:52:a6:55:d4:60:ae:4b:3e:07:f9:1e:ed:69:e6:9e:49:21: e6:33:09:8c:59:4a:57:cd:04:49:25:32:7b:51:12:bb:2f:88: 6e:b9:f4:d5:a1:7b:64:8c:fa:a6:d2:62:d5:d7:1a:80:af:4a: d7:63:2e:8c:64:07:77:1b:03:00:c7:d0:05:ad:0e:d5:55:d7: e0:86:72:cd:3c:44:7f:17:dc:57:a2:2c:1e:4b:d2:6f:78:72: 69:0f:f9:22:39:e0:b9:e7:0f:cd:5d:38:1a:c1:64:56:f1:be: a2:e3:14:1b:c0:a7:e0:89:49:be:a8:0e:43:90:c5:8b:af:6a: 81:de:e2:74:6c:66:11:13:ac:95:2d:f3:e2:9f:d9:ae:e8:1e: 00:85:0e:45:89:1d:27:7a:7d:18:03:62:79:67:b6:66:3d:a8: 19:d0:8f:0b:90:05:e6:a0:5b:45:ac:10:e4:a0:9f:d9:36:30: 47:c8:d8:bd:63:5f:2a:8d:ae:ca:1c:f2:59:12:27:c6:8f:2f: 12:c4:61:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaO0CRVsq3eJBzM6mxCFUCSomGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQx NkFDQTczRDAeFw0yNjExMDQwNDI4NDNaFw0yNjExMDUwODE5NDNaMDMxMTAvBgNV BAMTKDgzMTJBQzVCRjY0MjMyMkNDRURDMTQwM0FEOTI1NDU2NzY4Q0RBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrrdIL0nY8z3NDpFr4gVqDe48h qmWYuzAr9+HY10+H9sr+c12qwX5+NCAxFScgJMPFLktT00R9iwxuN//imAB1L2tx yEW6hBeA9ZILGYLOMqbD4eCAPG2fncG0hTMzdXubHL/VN/tqib1HtXthAZi7IpS4 Ka3tP7dLAmPDjM/J6slEY3TUjXT5G3DLLasz7X78xuJE4hWO4de9eJ8fqUMGrGlD vyX0tW+sYvABxxrMzd00YKQQOnEKRKnHVwRYewIdwHI6emiog+F1d6j5zR7LK4l9 T1Hly6vsujARpYMbRseu0P/vF4wwfQ6QmpKCdrl9i8C8HS1JSn+MhCHqqSTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgxKsW/ZCMizO3BQDrZJUVnaM2tkwHwYDVR0j BBgwFoAUKQR3dXJYB63cLPWzHmtUjRaspz0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc5NGRhNDAtYjM3ZS00ZmU2LThmNDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3 MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQxNkFDQTczRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTA0Nzc3NTcyNTgwN0FEREMyQ0Y1QjMxRTZCNTQ4RDE2QUNB NzNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0 OEQxNkFDQTczRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNeyBRC6FXrrgcKKb7CmT1WV9YHit15eHFC mxgViZLPqUrciEbhS3z/a8mRmnoR4xx8iFom/ltSplXUYK5LPgf5Hu1p5p5JIeYz CYxZSlfNBEklMntRErsviG659NWhe2SM+qbSYtXXGoCvStdjLoxkB3cbAwDH0AWt DtVV1+CGcs08RH8X3FeiLB5L0m94cmkP+SI54LnnD81dOBrBZFbxvqLjFBvAp+CJ Sb6oDkOQxYuvaoHe4nRsZhETrJUt8+Kf2a7oHgCFDkWJHSd6fRgDYnlntmY9qBnQ jwuQBeagW0WsEOSgn9k2MEfI2L1jXyqNrsoc8lkSJ8aPLxLEYeg= -----END CERTIFICATE-----Generated at Wed Nov 4 09:01:38 2026 by rpki-client