$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft File: 029298EDFAB613103A6838C4E6588574BAE7834B.mft (raw, json) Hash identifier: lbRqv2ydLp4+d0QSFs9xg5uYOIJHze3JPDvOJT1mO7A= Subject key identifier: 6D:86:5D:1C:51:53:F6:C8:18:DC:CB:FA:B0:E5:F2:B3:04:31:42:1F Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 157D649F4AD21F34F9498F67CC08B2E5C42D1EB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 19:30:30 +0000 Manifest this update: Mon 20 Jul 2026 19:25:30 +0000 Manifest next update: Tue 21 Jul 2026 22:50:30 +0000 Files and hashes: 1: 029298EDFAB613103A6838C4E6588574BAE7834B.crl (hash: yjWy3suwqVVCH5wv4Oq8qer05e8xHrZUjwZ4e6ufM9s=) 2: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 5Ux9FZjiRKbHvcLMHj57vi8xCjfaDnZG5BpZ2qxgkCs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7d:64:9f:4a:d2:1f:34:f9:49:8f:67:cc:08:b2:e5:c4:2d:1e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: Jul 20 19:25:30 2026 GMT Not After : Jul 21 22:50:30 2026 GMT Subject: CN=6D865D1C5153F6C818DCCBFAB0E5F2B30431421F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:21:f5:50:47:58:ca:9c:8f:df:85:4f:d5: ea:18:c6:30:0d:20:69:9c:b5:28:00:77:e3:a6:ae: 97:1a:80:48:27:9c:77:71:68:44:d9:6f:ef:b2:5e: a6:8d:5b:ee:e1:56:f5:90:2d:87:dc:4a:29:8e:63: bf:bb:ef:cc:8e:3c:9b:f7:fa:61:40:a1:ea:b6:1a: 34:7b:10:7f:ba:5f:03:3b:74:37:fb:cc:3d:6a:69: 80:4a:99:e8:65:a5:21:c1:cf:81:16:06:a1:a6:6f: 93:62:57:84:61:97:5d:26:35:22:12:3e:e3:38:31: 34:7a:c4:78:ed:0c:ec:22:90:d0:d6:0d:9c:e4:b2: 1e:63:31:a4:ca:75:46:df:9b:3f:ee:9f:d2:2d:1d: a1:81:06:6c:b5:fa:e0:7f:80:12:fe:e3:65:44:25: b8:9c:be:13:bd:48:5e:0c:49:53:06:6f:50:dd:cc: 01:1e:2c:12:ff:b8:a5:42:c4:9c:aa:5f:d9:b6:8f: c4:1f:3b:46:d3:f0:be:4c:d6:84:ea:a7:60:a7:54: 8e:19:be:83:1b:f8:d8:43:cf:ce:f7:d2:2b:2a:1c: 59:11:d6:3b:3f:d6:15:82:23:f2:28:fb:4f:f0:14: cb:ba:a5:45:2a:4f:12:b2:2c:6c:4d:54:4e:83:c9: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:86:5D:1C:51:53:F6:C8:18:DC:CB:FA:B0:E5:F2:B3:04:31:42:1F X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:78:4f:55:38:8f:ad:a7:96:03:e0:9d:3d:6b:aa:eb:4e:69: ad:23:db:b9:1c:2f:8e:d0:6e:16:8f:ac:87:82:41:b4:ff:60: 4d:bc:f4:f5:cb:85:61:29:e6:dd:aa:cb:3a:10:d1:ee:60:fa: 59:39:85:d0:ee:cc:aa:53:96:c9:33:a5:ee:db:c5:da:80:16: 56:ee:41:a2:8b:d7:4b:8f:80:2d:d3:d6:40:03:b0:2f:e0:18: 0d:d8:73:65:d4:3c:8f:e2:65:db:5a:ea:33:49:08:16:28:09: 14:61:fb:43:75:c6:ae:3f:78:26:88:fc:d7:37:dd:ac:47:9c: 0d:03:5f:d7:6f:27:a3:3c:39:b8:52:33:74:cb:ef:e3:97:80: 17:8b:c6:74:66:43:84:f4:f3:17:0e:7a:7e:4b:67:cb:82:02: 8d:cd:76:e4:f5:1a:ec:f8:18:ed:69:8b:a2:bb:e7:2f:2a:52: f8:d7:9a:b4:65:88:a1:8f:50:f6:c9:85:06:76:52:5c:f2:cb: 05:9f:90:5e:e3:39:94:89:3f:54:70:b8:91:77:82:23:8a:27: 7b:96:db:af:e9:b7:6b:e5:33:dd:9b:02:de:98:b5:f7:ae:07: e9:e3:3c:b8:1c:a5:ea:f3:3e:01:19:96:cb:4c:13:e5:83:6d: 8e:37:d4:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFX1kn0rSHzT5SY9nzAiy5cQtHrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA3MjAxOTI1MzBaFw0yNjA3MjEyMjUwMzBaMDMxMTAvBgNV BAMTKDZEODY1RDFDNTE1M0Y2QzgxOERDQ0JGQUIwRTVGMkIzMDQzMTQyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRyH1UEdYypyP34VP1eoYxjAN IGmctSgAd+OmrpcagEgnnHdxaETZb++yXqaNW+7hVvWQLYfcSimOY7+778yOPJv3 +mFAoeq2GjR7EH+6XwM7dDf7zD1qaYBKmehlpSHBz4EWBqGmb5NiV4Rhl10mNSIS PuM4MTR6xHjtDOwikNDWDZzksh5jMaTKdUbfmz/un9ItHaGBBmy1+uB/gBL+42VE JbicvhO9SF4MSVMGb1DdzAEeLBL/uKVCxJyqX9m2j8QfO0bT8L5M1oTqp2CnVI4Z voMb+NhDz8730isqHFkR1js/1hWCI/Io+0/wFMu6pUUqTxKyLGxNVE6DyfGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbYZdHFFT9sgY3Mv6sOXyswQxQh8wHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1 NzRCQUU3ODM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAl4T1U4j62nlgPgnT1rqutOaa0j27kcL47Q bhaPrIeCQbT/YE289PXLhWEp5t2qyzoQ0e5g+lk5hdDuzKpTlskzpe7bxdqAFlbu QaKL10uPgC3T1kADsC/gGA3Yc2XUPI/iZdta6jNJCBYoCRRh+0N1xq4/eCaI/Nc3 3axHnA0DX9dvJ6M8ObhSM3TL7+OXgBeLxnRmQ4T08xcOen5LZ8uCAo3NduT1Guz4 GO1pi6K75y8qUvjXmrRliKGPUPbJhQZ2UlzyywWfkF7jOZSJP1RwuJF3giOKJ3uW 26/pt2vlM92bAt6YtfeuB+njPLgcperzPgEZlstME+WDbY431JU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:37 2026 by rpki-client