$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft File: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft (raw, json) Hash identifier: /liITr1sABttvz0J4LAGDr1nMLJOIsuGTIurp4vUpTQ= Subject key identifier: BD:CC:35:F7:0A:11:CA:9D:66:32:B7:06:90:70:DD:A8:3A:97:40:C7 Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD Certificate issuer: /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Certificate serial: 5FCBEAFFE67A6BEB31D8A35586296CD4C7BD6E7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft Manifest number: E8 Signing time: Fri 23 Oct 2026 04:29:21 +0000 Manifest this update: Fri 23 Oct 2026 04:24:21 +0000 Manifest next update: Sat 24 Oct 2026 06:32:21 +0000 Files and hashes: 1: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: nOhj/KbLK8tB+8fzk/fF8cT34h0xCczJl9qDSLUlcwg=) 2: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: QzM90YWTXns1ydz40IJ13wxTQ2LuYS2Sj6cuHqSNNQs=) 3: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl (hash: CuTN3RPmnwb/HPd5vsMHsUYcXzzbpmA5mEi67l3+tqM=) 4: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: CVrUJTlhlyjQcXWYw9mEs6T2cItEcY6BENuMI3nROC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 06:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cb:ea:ff:e6:7a:6b:eb:31:d8:a3:55:86:29:6c:d4:c7:bd:6e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Validity Not Before: Oct 23 04:24:21 2026 GMT Not After : Oct 24 06:32:21 2026 GMT Subject: CN=BDCC35F70A11CA9D6632B7069070DDA83A9740C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:22:c6:fb:4a:96:7a:fd:07:cb:d0:e2:b1: 36:8a:32:73:b9:8e:1d:31:38:ad:8a:8a:40:9b:c7: 40:c3:4d:50:53:4e:8e:69:75:8e:68:89:91:35:71: 72:19:f6:b9:66:bb:b2:58:58:45:9d:14:1f:e0:c4: 85:3b:bf:d2:bb:7d:65:66:36:29:37:24:4c:06:b0: 63:a7:b2:f3:e9:9a:52:24:5a:0f:f4:c6:d9:7d:56: d5:e4:48:4e:97:62:c5:29:d9:94:07:85:c5:dc:56: c7:28:d1:40:0d:b6:90:04:1e:7a:57:69:02:82:88: 44:4a:58:8b:02:61:29:5a:35:f2:ab:17:4c:d1:00: 52:ee:6b:82:54:9e:df:90:f5:dd:6a:96:bc:ae:ef: f1:4d:c6:94:00:33:db:a7:89:56:88:22:db:bf:93: 50:9a:2b:92:ed:f4:39:17:59:a8:1f:3d:99:d1:dd: 54:c2:73:4d:dc:d1:e5:1f:3f:0f:f4:92:ca:a5:79: b5:26:de:4a:da:e9:23:ed:b0:cd:b1:ac:e2:9d:12: 8c:b6:ba:62:1e:c9:b4:7b:38:e7:b0:1a:a8:1e:1e: 2c:a3:d1:0d:8a:33:f3:28:2f:ca:49:dc:ba:76:08: 0b:29:18:82:16:c0:6a:b6:9b:c0:13:48:c7:4c:c2: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CC:35:F7:0A:11:CA:9D:66:32:B7:06:90:70:DD:A8:3A:97:40:C7 X509v3 Authority Key Identifier: keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:87:75:da:48:5a:0c:8f:08:d7:b3:54:f1:35:85:83:4b:4d: 77:84:b1:0a:42:4b:d2:3b:91:e9:47:77:aa:2c:d7:21:ff:94: 5d:e6:96:01:1d:de:98:92:ab:e5:e3:b2:28:1f:8c:ae:d9:88: a4:12:0d:74:3b:f0:0c:6b:90:56:80:03:8d:5f:d9:8a:d7:4f: 94:2a:02:a1:b0:dc:64:8a:5b:8e:22:c2:62:7d:92:d1:de:a6: 42:37:37:2c:a5:f5:0f:d5:18:a3:76:ab:80:04:22:35:c9:60: 1a:c0:79:cc:85:5f:5f:de:a4:43:47:af:30:7a:95:d8:81:1c: 90:81:3a:f5:d6:c8:53:84:0f:be:b3:5e:d9:f2:ba:32:9f:05: 76:c3:68:57:88:6f:d1:ca:ee:6d:e0:9a:e6:29:c0:d8:70:c7: 56:78:41:72:7d:4b:14:53:18:51:43:71:fe:9f:b0:7a:67:44: 51:55:b0:bf:b2:9f:f5:c4:9b:00:3b:db:66:b0:b4:6e:51:a2: 99:a7:c7:59:80:fc:95:95:4d:26:9e:b2:f7:7a:b4:23:f0:19: 83:99:66:3e:9e:3c:d7:c5:9e:12:66:5d:8f:96:67:54:51:3e: e7:76:73:34:38:ab:54:cc:ed:5b:e2:08:8a:d2:3a:ec:7e:7c: bb:4b:c4:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8vq/+Z6a+sx2KNVhils1Me9bnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1 N0MxQ0FCRDAeFw0yNjEwMjMwNDI0MjFaFw0yNjEwMjQwNjMyMjFaMDMxMTAvBgNV BAMTKEJEQ0MzNUY3MEExMUNBOUQ2NjMyQjcwNjkwNzBEREE4M0E5NzQwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fCLG+0qWev0Hy9DisTaKMnO5 jh0xOK2KikCbx0DDTVBTTo5pdY5oiZE1cXIZ9rlmu7JYWEWdFB/gxIU7v9K7fWVm Nik3JEwGsGOnsvPpmlIkWg/0xtl9VtXkSE6XYsUp2ZQHhcXcVsco0UANtpAEHnpX aQKCiERKWIsCYSlaNfKrF0zRAFLua4JUnt+Q9d1qlryu7/FNxpQAM9uniVaIItu/ k1CaK5Lt9DkXWagfPZnR3VTCc03c0eUfPw/0ksqlebUm3kra6SPtsM2xrOKdEoy2 umIeybR7OOewGqgeHiyj0Q2KM/MoL8pJ3Lp2CAspGIIWwGq2m8ATSMdMwrNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvcw19woRyp1mMrcGkHDdqDqXQMcwHwYDVR0j BBgwFoAUYp50pgtSrJ/C96ERpoN2u1fByr0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5N2JjZjQtZTFhYS00N2Q2LWJkZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYw QjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1N0MxQ0FCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjlFNzRBNjBCNTJBQzlGQzJGN0ExMTFBNjgzNzZCQjU3QzFD QUJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2 QkI1N0MxQ0FCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSHddpIWgyPCNezVPE1hYNLTXeEsQpCS9I7 kelHd6os1yH/lF3mlgEd3piSq+XjsigfjK7ZiKQSDXQ78AxrkFaAA41f2YrXT5Qq AqGw3GSKW44iwmJ9ktHepkI3Nyyl9Q/VGKN2q4AEIjXJYBrAecyFX1/epENHrzB6 ldiBHJCBOvXWyFOED76zXtnyujKfBXbDaFeIb9HK7m3gmuYpwNhwx1Z4QXJ9SxRT GFFDcf6fsHpnRFFVsL+yn/XEmwA722awtG5Ropmnx1mA/JWVTSaesvd6tCPwGYOZ Zj6ePNfFnhJmXY+WZ1RRPud2czQ4q1TM7VviCIrSOux+fLtLxBo= -----END CERTIFICATE-----Generated at Fri Oct 23 18:27:20 2026 by rpki-client