$ rpki-client -vvf rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft File: 29047775725807ADDC2CF5B31E6B548D16ACA73D.mft (raw, json) Hash identifier: EJMht+w52fFE0MrzZkKB8Qd1WlyBOfFEHdKdmvvruvU= Subject key identifier: 66:3F:AD:73:E3:78:9E:A6:89:3F:DA:1A:90:03:FC:38:4B:F8:ED:82 Authority key identifier: 29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D Certificate issuer: /CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Certificate serial: 338C0E197B3C310FDE254199B827F4C2E570D9ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:31:35 +0000 Manifest this update: Mon 20 Jul 2026 20:26:35 +0000 Manifest next update: Tue 21 Jul 2026 22:22:35 +0000 Files and hashes: 1: 29047775725807ADDC2CF5B31E6B548D16ACA73D.crl (hash: VV044AZCKwvjtT7+BaeD2ew4bM+Gn20o7ztwUhZJ5KA=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: Euiddqe4QqVPakY6ZLb5tUk6+F4coEUNqu/76ax8PhM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8c:0e:19:7b:3c:31:0f:de:25:41:99:b8:27:f4:c2:e5:70:d9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Validity Not Before: Jul 20 20:26:35 2026 GMT Not After : Jul 21 22:22:35 2026 GMT Subject: CN=663FAD73E3789EA6893FDA1A9003FC384BF8ED82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1c:43:46:da:48:50:4d:66:dc:cd:17:86:32: b9:98:5c:0c:c5:80:3f:3d:60:20:a9:d9:b8:35:4a: 64:92:ba:2b:50:7b:c1:b4:41:15:25:af:cd:5d:84: bd:08:37:e6:93:97:e8:4e:81:7d:c3:1b:c9:9a:d6: 71:28:2e:0b:09:a4:44:d0:78:61:03:c9:2f:7b:b1: a9:83:b5:dd:ac:b3:79:bb:e4:88:70:de:d1:3c:79: 75:02:9c:79:81:9a:8d:25:94:e6:41:00:f0:57:ac: a5:c5:d1:0f:0f:41:6c:50:bf:4b:7d:92:5c:87:21: cd:49:28:27:a3:1d:22:24:67:14:78:4d:c5:35:4a: be:08:33:75:4f:40:00:64:93:79:1f:7e:30:f0:82: 2c:cd:ba:59:65:8a:b3:b6:aa:aa:f3:68:cf:82:eb: e5:0f:45:6f:44:35:15:07:00:a7:0c:39:88:af:47: 1b:3d:20:f5:29:05:e1:14:ca:02:85:73:27:5f:b1: 36:ef:78:38:a9:66:3e:a4:81:02:bb:93:49:3c:1c: 54:0a:96:63:69:e2:5d:4d:d9:d4:b8:8f:b1:0f:5e: 28:f1:68:2e:8f:75:77:c0:f8:a6:fe:82:59:f3:59: 3e:61:d2:03:17:6f:97:dc:d3:cc:91:8e:99:e9:05: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3F:AD:73:E3:78:9E:A6:89:3F:DA:1A:90:03:FC:38:4B:F8:ED:82 X509v3 Authority Key Identifier: keyid:29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e0:8e:0b:b6:e0:96:66:7d:a2:8a:a1:59:60:89:d7:8b:26: 3b:6b:e5:ab:f9:1f:86:79:7f:33:53:36:1d:5c:b0:65:03:02: 1e:f0:a3:a2:50:d9:85:7f:54:38:e2:64:43:c8:f2:0a:9b:04: 03:64:ff:e2:9e:b4:af:42:ab:ad:b8:70:50:43:b0:0a:eb:f9: 26:36:34:a3:f4:50:45:9a:d7:56:90:20:01:af:a5:c6:ad:5b: 89:51:ca:f0:4e:83:43:e7:75:6c:e9:3a:41:d4:3b:2e:59:1d: c7:c8:91:c4:cc:95:fd:b7:35:1c:57:00:bd:bf:03:ad:88:3d: 32:50:29:86:81:5d:f9:ce:11:53:a9:7b:85:71:7b:26:72:fd: 27:ab:44:36:b4:5a:f9:cb:a8:43:33:59:ae:86:7f:ef:1a:38: 4c:30:1e:a4:7d:6c:e5:17:18:7d:6e:07:b7:fc:3e:71:97:dd: c2:62:00:0e:3f:8b:0e:b3:a8:66:87:86:af:49:4c:e6:b1:37: 79:09:ba:80:ec:b5:ae:de:0b:b7:5c:60:00:84:13:fe:6c:ac: 78:26:6a:f8:37:f9:ff:9f:46:50:69:a9:64:67:d3:21:41:74: 3e:aa:b5:f8:b1:f7:65:ab:4d:69:d3:30:38:e3:5f:49:dc:86: 3a:00:ef:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4wOGXs8MQ/eJUGZuCf0wuVw2e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQx NkFDQTczRDAeFw0yNjA3MjAyMDI2MzVaFw0yNjA3MjEyMjIyMzVaMDMxMTAvBgNV BAMTKDY2M0ZBRDczRTM3ODlFQTY4OTNGREExQTkwMDNGQzM4NEJGOEVEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUHENG2khQTWbczReGMrmYXAzF gD89YCCp2bg1SmSSuitQe8G0QRUlr81dhL0IN+aTl+hOgX3DG8ma1nEoLgsJpETQ eGEDyS97samDtd2ss3m75Ihw3tE8eXUCnHmBmo0llOZBAPBXrKXF0Q8PQWxQv0t9 klyHIc1JKCejHSIkZxR4TcU1Sr4IM3VPQABkk3kffjDwgizNulllirO2qqrzaM+C 6+UPRW9ENRUHAKcMOYivRxs9IPUpBeEUygKFcydfsTbveDipZj6kgQK7k0k8HFQK lmNp4l1N2dS4j7EPXijxaC6PdXfA+Kb+glnzWT5h0gMXb5fc08yRjpnpBUhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZj+tc+N4nqaJP9oakAP8OEv47YIwHwYDVR0j BBgwFoAUKQR3dXJYB63cLPWzHmtUjRaspz0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc5NGRhNDAtYjM3ZS00ZmU2LThmNDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3 MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQxNkFDQTczRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTA0Nzc3NTcyNTgwN0FEREMyQ0Y1QjMxRTZCNTQ4RDE2QUNB NzNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0 OEQxNkFDQTczRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7gjgu24JZmfaKKoVlgideLJjtr5av5H4Z5 fzNTNh1csGUDAh7wo6JQ2YV/VDjiZEPI8gqbBANk/+KetK9Cq624cFBDsArr+SY2 NKP0UEWa11aQIAGvpcatW4lRyvBOg0PndWzpOkHUOy5ZHcfIkcTMlf23NRxXAL2/ A62IPTJQKYaBXfnOEVOpe4VxeyZy/SerRDa0WvnLqEMzWa6Gf+8aOEwwHqR9bOUX GH1uB7f8PnGX3cJiAA4/iw6zqGaHhq9JTOaxN3kJuoDsta7eC7dcYACEE/5srHgm avg3+f+fRlBpqWRn0yFBdD6qtfix92WrTWnTMDjjX0nchjoA7zU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:51 2026 by rpki-client