$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: +NsnxZnNW8c1Oofcp8+jRPmCamsicFUgK5fRwWLKocc= Subject key identifier: EA:FC:30:73:0E:80:BB:8E:06:FE:4A:25:95:BE:FF:D2:2D:C1:5F:43 Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 7C760332FD64F70E2E8C6286A94DC92C12F33AD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 12:13:13 +0000 Manifest this update: Mon 02 Nov 2026 12:08:13 +0000 Manifest next update: Tue 03 Nov 2026 14:37:13 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: 27azO6ghgIqcYelRG4jjNY3z6Viv93wHBJ50pcFDTB4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:76:03:32:fd:64:f7:0e:2e:8c:62:86:a9:4d:c9:2c:12:f3:3a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Nov 2 12:08:13 2026 GMT Not After : Nov 3 14:37:13 2026 GMT Subject: CN=EAFC30730E80BB8E06FE4A2595BEFFD22DC15F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:32:f7:da:25:af:8f:6d:f9:cd:0b:61:0d: 02:54:b8:22:25:5d:15:ef:35:d2:95:89:88:a6:fe: 12:10:3d:f0:49:f6:6a:d6:c6:b7:c6:d8:84:8d:90: 37:0d:a9:4f:1a:c6:39:81:64:35:aa:8a:c1:57:bf: f1:2f:4a:09:87:c7:76:68:2b:89:77:60:9a:fb:fb: a2:d2:a2:59:c4:80:5d:66:59:3d:be:08:87:f9:62: ba:6e:80:ca:ff:9c:63:55:13:bf:4e:cb:b1:84:00: 68:a9:e3:45:e1:09:3a:5c:cd:75:ab:19:0e:88:c7: 7d:58:38:ed:3c:0c:c5:22:c3:c4:ed:d6:a3:de:91: 6e:1a:6e:58:d7:19:ef:d7:ca:6f:47:fd:69:41:85: 2e:9b:29:4f:9d:26:13:c2:1d:db:4f:4d:b2:ea:5c: b8:a4:cc:2e:b1:0f:44:7f:4c:05:9c:88:51:7c:67: a9:b5:05:21:93:0d:ab:ff:ef:c7:8d:d5:fd:61:d0: 75:13:3a:7e:c8:c3:6a:f5:85:ab:c8:9a:a9:c3:b2: 9a:46:c5:97:5e:21:93:7e:ed:0f:d2:45:54:35:57: 8f:9a:07:68:7a:35:c2:8c:77:ba:e5:5b:18:26:1b: ac:21:24:f9:9c:8a:7f:c0:07:0a:bf:6c:03:8b:e2: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:30:73:0E:80:BB:8E:06:FE:4A:25:95:BE:FF:D2:2D:C1:5F:43 X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fc:6f:52:c9:85:a7:2b:5a:5f:20:a2:99:8e:20:ab:4c:d7: d4:da:7f:52:94:08:1d:cf:38:d0:06:7b:d6:65:7b:0f:d5:db: c8:df:57:e0:4d:75:c9:18:ae:aa:34:2f:6b:94:a1:5c:d1:68: 9c:ce:10:af:f5:44:d8:ab:fa:bd:e0:6d:98:d7:50:19:03:57: df:2f:06:3a:d6:12:4c:4e:96:c3:a6:f5:d3:cf:ac:2d:0f:bf: 18:6b:3f:fd:5a:9b:ce:36:8a:f6:b3:a5:59:e2:cc:1a:d7:5b: 9b:3f:5c:32:e0:af:e6:0a:85:02:5f:c5:00:8d:d7:6c:a0:59: 41:68:d3:2d:6a:1b:c7:e5:bb:59:44:8f:98:72:9b:4c:31:58: 6b:03:77:f4:11:1f:ce:5b:32:cf:f2:ed:57:36:95:a3:1f:c9: 4c:9c:cf:2c:e7:39:7c:65:89:66:91:38:9c:0d:99:46:18:49: d7:22:17:86:8b:c1:77:2d:35:b1:d8:c9:04:24:a8:68:9d:72: 1d:3e:5e:31:60:2d:0c:92:2d:35:26:b2:b5:2f:e8:8f:ec:92: 46:eb:ee:78:cf:33:01:78:aa:6c:ca:70:f0:ef:b2:fd:c0:29: 11:cb:c3:1a:e6:8c:53:99:0e:e4:4a:36:df:c6:d2:cc:be:53: c3:56:bb:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHYDMv1k9w4ujGKGqU3JLBLzOtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjExMDIxMjA4MTNaFw0yNjExMDMxNDM3MTNaMDMxMTAvBgNV BAMTKEVBRkMzMDczMEU4MEJCOEUwNkZFNEEyNTk1QkVGRkQyMkRDMTVGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6JTL32iWvj235zQthDQJUuCIl XRXvNdKViYim/hIQPfBJ9mrWxrfG2ISNkDcNqU8axjmBZDWqisFXv/EvSgmHx3Zo K4l3YJr7+6LSolnEgF1mWT2+CIf5YrpugMr/nGNVE79Oy7GEAGip40XhCTpczXWr GQ6Ix31YOO08DMUiw8Tt1qPekW4abljXGe/Xym9H/WlBhS6bKU+dJhPCHdtPTbLq XLikzC6xD0R/TAWciFF8Z6m1BSGTDav/78eN1f1h0HUTOn7Iw2r1havImqnDsppG xZdeIZN+7Q/SRVQ1V4+aB2h6NcKMd7rlWxgmG6whJPmcin/ABwq/bAOL4ln3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6vwwcw6Au44G/kollb7/0i3BX0MwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB38b1LJhacrWl8gopmOIKtM19Taf1KUCB3P ONAGe9Zlew/V28jfV+BNdckYrqo0L2uUoVzRaJzOEK/1RNir+r3gbZjXUBkDV98v BjrWEkxOlsOm9dPPrC0PvxhrP/1am842ivazpVnizBrXW5s/XDLgr+YKhQJfxQCN 12ygWUFo0y1qG8flu1lEj5hym0wxWGsDd/QRH85bMs/y7Vc2laMfyUyczyznOXxl iWaROJwNmUYYSdciF4aLwXctNbHYyQQkqGidch0+XjFgLQySLTUmsrUv6I/skkbr 7njPMwF4qmzKcPDvsv3AKRHLwxrmjFOZDuRKNt/G0sy+U8NWu4I= -----END CERTIFICATE-----Generated at Mon Nov 2 21:13:25 2026 by rpki-client