$ rpki-client -vvvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json) Hash identifier: BY0VbhNTHSg1Uvw1sX4JmYQYpzZ+70x9Va6tjQ2f9og= Subject key identifier: 03:14:FA:C7:39:65:1E:99:29:79:0C:39:63:9A:94:4F:EB:D1:D1:BB Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Certificate serial: 6D1337DBF0AC9DBC2C717E453559736A67D4BEED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 05:39:48 +0000 Manifest this update: Thu 03 Sep 2026 05:34:48 +0000 Manifest next update: Fri 04 Sep 2026 06:15:48 +0000 Files and hashes: 1: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: AvZTRk+GenlJ9GkDQ6VREpuLNeDKPEgTGIORcjub3q4=) 2: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=) 3: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:13:37:db:f0:ac:9d:bc:2c:71:7e:45:35:59:73:6a:67:d4:be:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Validity Not Before: Sep 3 05:34:48 2026 GMT Not After : Sep 4 06:15:48 2026 GMT Subject: CN=0314FAC739651E9929790C39639A944FEBD1D1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:2b:50:bc:56:20:ca:cd:f3:83:61:87:21: aa:f3:bb:aa:48:a4:78:90:44:57:79:34:8b:d2:c3: bc:a9:48:16:14:03:5e:36:8f:62:15:d1:32:c3:50: 34:a5:f4:ac:fc:49:00:46:82:c5:76:6e:9d:3d:e3: 2b:1a:81:0f:93:ea:59:c7:d5:fb:71:02:71:ec:60: f6:71:8e:44:8f:8e:bb:46:b6:90:a4:7d:d4:d2:f4: 8b:0c:05:32:b6:c5:e6:dc:52:12:e5:65:fb:5e:da: 98:50:30:bc:80:27:3a:4e:3a:02:e6:51:e1:ba:90: 48:be:3d:09:35:3a:2d:af:a0:6e:e1:01:66:78:74: 9a:6c:eb:e3:af:9a:3c:0e:32:0a:3a:e8:c8:b1:ab: 75:7f:b7:16:ae:4d:ff:57:4f:cd:f9:6b:3d:7c:72: 87:d0:2b:ca:50:86:d9:0d:50:37:05:69:0a:be:fa: ae:91:ca:d4:f3:f1:06:4f:d3:70:c7:e5:7b:b7:6b: 19:4b:6d:59:54:de:f4:76:36:03:bc:c1:69:98:0d: f9:c3:cb:af:60:e0:57:65:a8:3b:69:2c:45:4b:4d: c4:a1:6f:18:dc:89:0a:20:a8:77:a6:be:bc:a4:6f: 34:ff:9b:a5:0d:e0:29:f1:a9:8d:14:39:68:66:71: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:14:FA:C7:39:65:1E:99:29:79:0C:39:63:9A:94:4F:EB:D1:D1:BB X509v3 Authority Key Identifier: keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2f:03:72:1f:99:4e:3a:b0:8c:e5:5a:71:bc:2e:fb:dd:87: 6c:a0:68:44:d6:02:9f:47:65:4a:eb:38:8f:9b:78:f0:bf:9b: 0f:85:1b:48:06:26:ee:d5:09:b9:4e:cd:bc:2f:0a:cc:90:78: fc:23:56:88:fc:0f:56:a3:a6:48:9b:8d:22:a7:85:98:ad:2b: c3:99:2c:43:50:e0:f0:6e:6b:79:c5:b5:ac:68:ec:b3:88:cb: e5:94:54:66:01:00:01:a7:70:d0:1d:c8:1a:ce:5c:eb:e5:b3: 59:a5:8b:43:21:01:6e:82:8a:ff:f6:ba:53:73:86:5e:e3:67: 6d:d2:50:ae:a1:a6:ce:26:e7:b8:f0:8c:ca:ed:d3:94:34:9c: 6a:47:b1:64:c7:0c:30:71:73:61:1a:e8:c5:15:88:c4:7f:68: 53:89:a6:76:1a:29:a2:ba:c1:85:f7:a9:89:c3:92:fc:81:a8: e1:46:2a:e8:4f:7b:8c:49:a7:71:06:59:47:c1:31:7e:56:2c: 7b:4e:27:d5:19:8b:43:02:15:3f:01:09:cf:79:10:42:31:63: 14:8e:74:83:59:21:e4:e9:1e:65:7b:2b:48:96:e0:15:1f:81: f5:9e:64:4b:54:d2:e2:1e:6f:5e:f8:c3:cd:9c:18:29:f9:07: 36:ad:73:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRM32/CsnbwscX5FNVlzamfUvu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4ODkx QzkzQjlENDAeFw0yNjA5MDMwNTM0NDhaFw0yNjA5MDQwNjE1NDhaMDMxMTAvBgNV BAMTKDAzMTRGQUM3Mzk2NTFFOTkyOTc5MEMzOTYzOUE5NDRGRUJEMUQxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHytQvFYgys3zg2GHIarzu6pI pHiQRFd5NIvSw7ypSBYUA142j2IV0TLDUDSl9Kz8SQBGgsV2bp094ysagQ+T6lnH 1ftxAnHsYPZxjkSPjrtGtpCkfdTS9IsMBTK2xebcUhLlZfte2phQMLyAJzpOOgLm UeG6kEi+PQk1Oi2voG7hAWZ4dJps6+OvmjwOMgo66Mixq3V/txauTf9XT835az18 cofQK8pQhtkNUDcFaQq++q6RytTz8QZP03DH5Xu3axlLbVlU3vR2NgO8wWmYDfnD y69g4FdlqDtpLEVLTcShbxjciQogqHemvrykbzT/m6UN4CnxqY0UOWhmcfzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAxT6xzllHpkpeQw5Y5qUT+vR0bswHwYDVR0j BBgwFoAUKf8fYaxelPbmSod9ZMiYiRyTudQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI5ZTcwNjQtYjM1Mi00M2I2LTlmMDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFB QzVFOTRGNkU2NEE4NzdENjRDODk4ODkxQzkzQjlENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZGMUY2MUFDNUU5NEY2RTY0QTg3N0Q2NEM4OTg4OTFDOTNC OUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4 ODkxQzkzQjlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0vA3IfmU46sIzlWnG8Lvvdh2ygaETWAp9H ZUrrOI+bePC/mw+FG0gGJu7VCblOzbwvCsyQePwjVoj8D1ajpkibjSKnhZitK8OZ LENQ4PBua3nFtaxo7LOIy+WUVGYBAAGncNAdyBrOXOvls1mli0MhAW6Civ/2ulNz hl7jZ23SUK6hps4m57jwjMrt05Q0nGpHsWTHDDBxc2Ea6MUViMR/aFOJpnYaKaK6 wYX3qYnDkvyBqOFGKuhPe4xJp3EGWUfBMX5WLHtOJ9UZi0MCFT8BCc95EEIxYxSO dINZIeTpHmV7K0iW4BUfgfWeZEtU0uIeb174w82cGCn5Bzatc8M= -----END CERTIFICATE-----Generated at Thu Sep 3 20:08:29 2026 by rpki-client