$ rpki-client -vvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json) Hash identifier: INR3WGhqvgSJ8xu1DlFSbsBWnLLKqLSiCyueoggAE8U= Subject key identifier: 7B:9E:45:1C:E3:07:CF:DC:65:6C:F9:F2:9A:57:39:4C:DB:59:84:F1 Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Certificate serial: 0D73A2419F2D50956AD8BF0724C0147EA8FDD1CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft Manifest number: 50 Signing time: Tue 30 Jun 2026 14:07:30 +0000 Manifest this update: Tue 30 Jun 2026 14:02:30 +0000 Manifest next update: Wed 01 Jul 2026 15:46:30 +0000 Files and hashes: 1: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=) 2: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=) 3: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: Ab2avvEQbGcSpWhBRWvRVKNu1c3ZNa9CGD/02DPJc2Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 09:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:73:a2:41:9f:2d:50:95:6a:d8:bf:07:24:c0:14:7e:a8:fd:d1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Validity Not Before: Jun 30 14:02:30 2026 GMT Not After : Jul 1 15:46:30 2026 GMT Subject: CN=7B9E451CE307CFDC656CF9F29A57394CDB5984F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:54:4b:7e:ef:ef:61:3f:49:ab:49:3c:45: 6a:47:8b:4c:f1:e9:28:73:e3:3d:42:3e:09:6f:56: 5b:7c:44:2d:7c:67:2f:e8:ee:58:b1:a0:6e:9c:49: 2d:f9:e7:a7:f3:10:31:2c:44:bb:74:d8:57:b1:01: 6b:96:2f:15:a2:46:19:47:7a:80:69:d4:e2:53:f4: aa:d2:53:29:da:09:3d:33:2a:2e:8f:c2:11:f2:40: c5:47:63:24:79:c5:f9:c4:96:fa:0b:0e:70:a5:8d: 55:37:8e:80:ff:9a:9c:82:33:50:e7:db:d0:82:d4: 6f:e1:51:1c:b5:8f:85:ca:aa:b6:3c:ae:b2:69:60: 03:88:1d:8a:38:0f:21:1d:08:7e:d4:39:05:10:f0: 8b:6a:b4:aa:92:2d:16:9e:8d:77:b5:84:2e:ba:c4: 66:09:0e:1e:5b:03:18:50:c6:7b:18:45:ae:2c:20: ac:34:08:6f:8d:36:ce:70:f0:8b:c8:b0:82:6f:ec: 2f:82:96:da:09:ec:30:b4:d5:81:e9:8b:f1:08:fe: b6:25:44:7d:64:56:8f:c2:c5:46:8d:ff:31:cb:42: b9:a7:ae:2a:53:3b:9c:a2:ae:40:5f:e1:83:da:40: 07:48:b0:6c:a5:e2:1c:96:23:b7:ff:80:fe:d0:17: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9E:45:1C:E3:07:CF:DC:65:6C:F9:F2:9A:57:39:4C:DB:59:84:F1 X509v3 Authority Key Identifier: keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:26:3a:52:06:c9:c4:2f:72:a9:b0:c1:96:0f:ce:83:f4:6a: 42:15:22:81:e5:8c:cc:fc:ba:36:9d:8b:b6:25:2b:85:3d:da: 99:06:fc:ea:33:60:10:53:68:ac:1c:51:ca:c5:0d:3f:9a:93: ef:e7:86:e0:c2:cf:c1:ac:3c:87:bd:22:c1:a8:24:1e:51:d3: 12:ca:ba:e5:0e:f5:17:b6:0e:99:b7:a2:1f:2f:21:c0:e2:fa: 7e:78:f7:78:65:3c:92:7f:35:d3:9d:86:86:2a:66:a8:b7:64: 88:52:27:ce:cc:f2:0c:bb:6c:ed:8f:0b:8a:2a:33:91:62:5b: 81:4a:68:21:77:d7:ec:f9:79:03:df:e4:77:0f:55:bd:1a:a9: d8:53:dc:13:d4:f2:6c:9a:60:65:f9:f8:bc:3e:4f:f7:84:08: bc:97:7e:9f:85:64:2e:f6:a5:3a:3d:5b:f2:35:29:b3:b1:cf: 70:8d:c1:d3:35:cd:3b:7f:0e:c2:ae:7c:39:70:69:20:e4:ad: 46:77:a0:29:f6:18:62:19:b1:1a:a1:2f:e2:03:93:09:57:77: 29:98:fb:8d:73:24:a1:8e:88:f8:62:d3:d0:8d:53:4f:d5:60: 15:42:0a:7d:b4:1d:ae:57:fe:b2:4f:9f:a0:b1:59:74:5a:db: 28:83:f3:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXOiQZ8tUJVq2L8HJMAUfqj90c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4ODkx QzkzQjlENDAeFw0yNjA2MzAxNDAyMzBaFw0yNjA3MDExNTQ2MzBaMDMxMTAvBgNV BAMTKDdCOUU0NTFDRTMwN0NGREM2NTZDRjlGMjlBNTczOTRDREI1OTg0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiiVRLfu/vYT9Jq0k8RWpHi0zx 6Shz4z1CPglvVlt8RC18Zy/o7lixoG6cSS3556fzEDEsRLt02FexAWuWLxWiRhlH eoBp1OJT9KrSUynaCT0zKi6PwhHyQMVHYyR5xfnElvoLDnCljVU3joD/mpyCM1Dn 29CC1G/hURy1j4XKqrY8rrJpYAOIHYo4DyEdCH7UOQUQ8ItqtKqSLRaejXe1hC66 xGYJDh5bAxhQxnsYRa4sIKw0CG+NNs5w8IvIsIJv7C+CltoJ7DC01YHpi/EI/rYl RH1kVo/CxUaN/zHLQrmnripTO5yirkBf4YPaQAdIsGyl4hyWI7f/gP7QF7ypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe55FHOMHz9xlbPnymlc5TNtZhPEwHwYDVR0j BBgwFoAUKf8fYaxelPbmSod9ZMiYiRyTudQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI5ZTcwNjQtYjM1Mi00M2I2LTlmMDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFB QzVFOTRGNkU2NEE4NzdENjRDODk4ODkxQzkzQjlENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZGMUY2MUFDNUU5NEY2RTY0QTg3N0Q2NEM4OTg4OTFDOTNC OUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4 ODkxQzkzQjlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEmOlIGycQvcqmwwZYPzoP0akIVIoHljMz8 ujadi7YlK4U92pkG/OozYBBTaKwcUcrFDT+ak+/nhuDCz8GsPIe9IsGoJB5R0xLK uuUO9Re2Dpm3oh8vIcDi+n5493hlPJJ/NdOdhoYqZqi3ZIhSJ87M8gy7bO2PC4oq M5FiW4FKaCF31+z5eQPf5HcPVb0aqdhT3BPU8myaYGX5+Lw+T/eECLyXfp+FZC72 pTo9W/I1KbOxz3CNwdM1zTt/DsKufDlwaSDkrUZ3oCn2GGIZsRqhL+IDkwlXdymY +41zJKGOiPhi09CNU0/VYBVCCn20Ha5X/rJPn6CxWXRa2yiD8wI= -----END CERTIFICATE-----Generated at Tue Jun 30 20:20:33 2026 by rpki-client