$ rpki-client -vvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: /PadOxCeS/bpFkU6nqf8xcfqyR3nDmY9rjJmlL9nZ3A= Subject key identifier: CD:49:B4:D9:89:52:0D:B0:75:C3:71:6A:11:EB:69:66:C3:D4:67:34 Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 07536A5641B4B19C54D6BBF51D89D47BC3810C63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: 14 Signing time: Sat 16 May 2026 10:36:46 +0000 Manifest this update: Sat 16 May 2026 10:31:46 +0000 Manifest next update: Sun 17 May 2026 11:32:46 +0000 Files and hashes: 1: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: //2O7vER/wzx6P0t/HQxGJk4Fg0CsVHICPlHeKn5Mho=) 2: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) 3: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 4: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:53:6a:56:41:b4:b1:9c:54:d6:bb:f5:1d:89:d4:7b:c3:81:0c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: May 16 10:31:46 2026 GMT Not After : May 17 11:32:46 2026 GMT Subject: CN=CD49B4D989520DB075C3716A11EB6966C3D46734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:27:2e:db:dd:ab:4a:0d:8d:ae:e9:17:4a: ea:61:51:b3:a5:6f:e6:44:a4:34:74:cf:84:a0:45: 28:6c:17:39:33:f4:ef:b1:30:c1:93:84:a3:a3:c6: 3a:93:a3:d1:8d:7e:40:e2:53:c3:0c:f1:03:26:12: ef:00:e1:67:0f:7e:38:2d:81:04:35:f6:a8:6d:b0: 92:d0:58:85:b6:43:e8:5b:14:51:83:ac:2e:2a:d5: da:c6:a4:a8:ba:d8:53:23:eb:d8:ab:04:19:6b:df: 36:93:92:c1:44:10:57:cc:ea:f4:00:2d:10:b6:0f: 4d:3e:51:c4:e5:e1:37:71:68:88:b8:c3:7c:1f:ae: 1c:7d:d9:e9:26:ac:10:41:7d:27:aa:93:9e:63:50: a2:82:99:9d:0b:65:ca:0b:7c:b5:20:df:05:7a:23: 05:7e:ea:54:ba:a1:64:a6:0d:05:91:23:3e:91:c8: 06:f7:8f:30:28:c6:2d:61:18:87:78:24:91:21:73: 21:fd:f7:d1:71:06:2e:7c:2c:ee:4f:90:81:cd:60: b6:e5:c5:38:27:f8:a9:fe:5d:bc:75:1f:44:0f:a7: 04:33:75:31:6f:5b:cf:60:95:41:fb:7c:c8:4b:8a: d6:5a:ca:2f:73:74:9e:85:0f:3d:6d:fd:f1:52:a8: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:49:B4:D9:89:52:0D:B0:75:C3:71:6A:11:EB:69:66:C3:D4:67:34 X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4e:34:b2:d6:2f:be:8e:92:63:21:94:45:16:45:22:40:84: 74:4e:bb:e7:80:e0:9d:3f:76:3c:a1:12:ff:d6:59:bd:08:94: 55:6d:19:83:01:46:4d:5c:86:22:6f:ab:d9:f9:c1:58:15:0c: 37:24:c2:b0:8c:de:d0:76:8d:72:79:ef:27:39:27:5c:76:36: 2b:fc:a1:3e:f8:24:51:74:ae:1b:b1:4b:1c:2d:f4:4e:d0:c5: 5b:a6:80:7d:45:16:19:61:58:24:56:d1:ad:e5:29:44:20:c3: 53:25:6d:18:7a:b4:4a:e1:ff:51:35:ba:d4:c2:4e:0b:03:a4: ea:4e:a1:f4:a5:0c:f9:14:95:5d:63:76:e6:17:e3:c0:3b:ac: de:59:d1:ac:d2:a0:bb:15:34:f8:ef:f9:be:18:f8:04:01:15: eb:30:3f:07:05:b8:24:d7:c5:e7:70:86:55:21:ac:0d:76:90: ec:8e:e7:28:20:4a:80:35:9f:3a:7c:0e:48:6e:dd:8c:bc:01: 53:f4:8b:9b:4d:59:90:cb:99:74:a6:e3:6b:ba:aa:1b:d7:39: 55:7b:86:ce:32:70:96:18:02:76:8e:07:b5:6a:ba:63:1c:70: 0f:57:0f:8d:50:30:d4:c4:79:22:0d:bc:f2:6d:ce:86:e8:d1: f4:66:bf:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB1NqVkG0sZxU1rv1HYnUe8OBDGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA1MTYxMDMxNDZaFw0yNjA1MTcxMTMyNDZaMDMxMTAvBgNV BAMTKENENDlCNEQ5ODk1MjBEQjA3NUMzNzE2QTExRUI2OTY2QzNENDY3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycycu292rSg2NrukXSuphUbOl b+ZEpDR0z4SgRShsFzkz9O+xMMGThKOjxjqTo9GNfkDiU8MM8QMmEu8A4WcPfjgt gQQ19qhtsJLQWIW2Q+hbFFGDrC4q1drGpKi62FMj69irBBlr3zaTksFEEFfM6vQA LRC2D00+UcTl4TdxaIi4w3wfrhx92ekmrBBBfSeqk55jUKKCmZ0LZcoLfLUg3wV6 IwV+6lS6oWSmDQWRIz6RyAb3jzAoxi1hGId4JJEhcyH999FxBi58LO5PkIHNYLbl xTgn+Kn+Xbx1H0QPpwQzdTFvW89glUH7fMhLitZayi9zdJ6FDz1t/fFSqL3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzUm02YlSDbB1w3FqEetpZsPUZzQwHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNONLLWL76OkmMhlEUWRSJAhHROu+eA4J0/ djyhEv/WWb0IlFVtGYMBRk1chiJvq9n5wVgVDDckwrCM3tB2jXJ57yc5J1x2Niv8 oT74JFF0rhuxSxwt9E7QxVumgH1FFhlhWCRW0a3lKUQgw1MlbRh6tErh/1E1utTC TgsDpOpOofSlDPkUlV1jduYX48A7rN5Z0azSoLsVNPjv+b4Y+AQBFeswPwcFuCTX xedwhlUhrA12kOyO5yggSoA1nzp8Dkhu3Yy8AVP0i5tNWZDLmXSm42u6qhvXOVV7 hs4ycJYYAnaOB7VqumMccA9XD41QMNTEeSINvPJtzobo0fRmvwk= -----END CERTIFICATE-----Generated at Sat May 16 14:26:45 2026 by rpki-client