$ rpki-client -vvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json) Hash identifier: W5iC5DxSDiVNk5LrSYrfllcc/gfzNNUq+oeuSPqKDvQ= Subject key identifier: 5D:A4:94:B3:F8:51:D5:80:0A:79:05:63:4D:D2:1D:EA:AB:08:7E:BE Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Certificate serial: 1A37768B4DCD1518B7CB314579C2DBAD758327FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft Manifest number: 11 Signing time: Thu 14 May 2026 12:18:17 +0000 Manifest this update: Thu 14 May 2026 12:13:17 +0000 Manifest next update: Fri 15 May 2026 15:04:17 +0000 Files and hashes: 1: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: iWcNVBwcYs/RBB420S2BIU/qF7UD0GqsLH+ighzGPT8=) 2: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=) 3: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 15:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:37:76:8b:4d:cd:15:18:b7:cb:31:45:79:c2:db:ad:75:83:27:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Validity Not Before: May 14 12:13:17 2026 GMT Not After : May 15 15:04:17 2026 GMT Subject: CN=5DA494B3F851D5800A7905634DD21DEAAB087EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:32:84:28:0d:34:a5:15:62:a6:95:3c:3d: e5:3f:f0:fa:77:3f:95:d1:87:0e:cf:34:7b:b6:f6: a3:64:fe:e8:0f:6d:5a:d0:2b:82:1e:40:7a:b3:ab: bc:a5:b6:c9:6e:d2:26:ba:d4:f8:20:2c:06:ca:57: 29:71:4d:df:49:04:f6:04:e8:a3:9d:1b:d8:5a:8c: ce:d3:2b:a4:bf:90:94:45:89:42:de:72:f3:b6:8b: da:64:c6:67:4c:29:1b:b9:2f:1b:f5:a7:ad:01:c8: e3:3d:d8:87:4b:e2:7f:0a:9a:f2:83:7b:da:9b:1a: d6:a1:e1:9b:20:8e:ca:f6:6f:48:d9:7e:47:90:28: de:7d:49:33:8c:37:d8:45:30:24:54:d9:04:3c:60: 00:43:03:5a:f1:12:fa:6e:11:be:4d:c1:b3:33:9f: 08:56:1d:39:09:58:91:67:c3:dc:19:cb:83:9e:a2: d7:b0:a2:24:40:d3:9b:f6:98:e6:91:2b:a2:57:3d: c2:7a:99:6e:e8:0e:98:89:53:57:9e:4b:82:d0:ab: 0d:fd:52:a6:2f:c6:88:50:c6:dd:83:78:d3:b1:da: 77:f5:39:a0:31:d3:cc:20:e3:7f:c0:07:83:fb:6f: e4:26:65:03:90:e5:9d:13:65:cf:80:37:9a:96:2c: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A4:94:B3:F8:51:D5:80:0A:79:05:63:4D:D2:1D:EA:AB:08:7E:BE X509v3 Authority Key Identifier: keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:74:79:e3:6f:e2:c6:63:f6:c1:81:ae:f5:b9:6f:ef:0e:0a: c2:a4:f0:9b:a3:fa:69:66:f4:b7:79:1b:76:25:1d:f4:ed:91: c2:94:13:f9:db:2a:c5:5f:05:54:f1:55:d9:8f:69:99:18:22: a6:25:2e:18:36:4b:72:01:d1:ce:35:65:10:90:ce:b8:04:0e: dc:e7:1c:cb:3d:23:3d:76:5a:ee:ee:c7:8e:36:bf:8e:cb:5f: 12:76:bd:78:b3:c7:b0:93:df:bc:2f:fb:29:ac:6d:46:c2:1f: 09:c0:63:9b:15:03:1b:06:c9:aa:79:8c:cf:de:ad:e6:14:09: ba:aa:52:22:2e:5e:eb:e7:c9:21:5f:5e:b8:6b:2e:77:bf:df: 49:01:7f:99:dd:98:75:e9:77:11:b7:1d:63:46:09:92:d6:8f: ef:53:a9:b2:98:9d:9f:68:6a:c0:41:c7:da:af:b9:65:21:82: e8:cf:bf:4d:1f:6b:ac:de:4b:cc:c2:b4:85:8c:e5:de:16:86: ff:ad:44:df:8f:6c:55:98:c1:2b:55:c5:23:5c:33:c4:b7:48: 59:6d:a5:36:30:f0:d3:8a:e4:42:6f:d7:24:34:59:4a:b1:98: ed:2a:00:6d:0b:d0:91:2b:fc:3a:ab:2b:9e:1c:38:7c:b7:3a: 13:fd:4e:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjd2i03NFRi3yzFFecLbrXWDJ/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4ODkx QzkzQjlENDAeFw0yNjA1MTQxMjEzMTdaFw0yNjA1MTUxNTA0MTdaMDMxMTAvBgNV BAMTKDVEQTQ5NEIzRjg1MUQ1ODAwQTc5MDU2MzRERDIxREVBQUIwODdFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjejKEKA00pRVippU8PeU/8Pp3 P5XRhw7PNHu29qNk/ugPbVrQK4IeQHqzq7yltslu0ia61PggLAbKVylxTd9JBPYE 6KOdG9hajM7TK6S/kJRFiULecvO2i9pkxmdMKRu5Lxv1p60ByOM92IdL4n8KmvKD e9qbGtah4Zsgjsr2b0jZfkeQKN59STOMN9hFMCRU2QQ8YABDA1rxEvpuEb5NwbMz nwhWHTkJWJFnw9wZy4OeotewoiRA05v2mOaRK6JXPcJ6mW7oDpiJU1eeS4LQqw39 UqYvxohQxt2DeNOx2nf1OaAx08wg43/AB4P7b+QmZQOQ5Z0TZc+AN5qWLOl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXaSUs/hR1YAKeQVjTdId6qsIfr4wHwYDVR0j BBgwFoAUKf8fYaxelPbmSod9ZMiYiRyTudQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI5ZTcwNjQtYjM1Mi00M2I2LTlmMDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFB QzVFOTRGNkU2NEE4NzdENjRDODk4ODkxQzkzQjlENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZGMUY2MUFDNUU5NEY2RTY0QTg3N0Q2NEM4OTg4OTFDOTNC OUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4 ODkxQzkzQjlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGp0eeNv4sZj9sGBrvW5b+8OCsKk8Juj+mlm 9Ld5G3YlHfTtkcKUE/nbKsVfBVTxVdmPaZkYIqYlLhg2S3IB0c41ZRCQzrgEDtzn HMs9Iz12Wu7ux442v47LXxJ2vXizx7CT37wv+ymsbUbCHwnAY5sVAxsGyap5jM/e reYUCbqqUiIuXuvnySFfXrhrLne/30kBf5ndmHXpdxG3HWNGCZLWj+9TqbKYnZ9o asBBx9qvuWUhgujPv00fa6zeS8zCtIWM5d4Whv+tRN+PbFWYwStVxSNcM8S3SFlt pTYw8NOK5EJv1yQ0WUqxmO0qAG0L0JEr/DqrK54cOHy3OhP9Tpw= -----END CERTIFICATE-----Generated at Fri May 15 05:39:23 2026 by rpki-client