$ rpki-client -vvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: S3M4U/8zbEoZ/dKDwihY0bdCvQzXwS8GqENmSo74UCA= Subject key identifier: F9:59:73:51:08:13:D3:1B:9C:17:B6:9D:98:C3:D1:B4:22:0C:37:56 Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 5108A04CF773DEA290181B7AE2BFA797C1877E61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: 62 Signing time: Mon 13 Jul 2026 17:52:16 +0000 Manifest this update: Mon 13 Jul 2026 17:47:16 +0000 Manifest next update: Tue 14 Jul 2026 19:53:16 +0000 Files and hashes: 1: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: vDTnj4x5QIsr+uYhSR483STWpeDvsNgt+8Fg7r96BjE=) 2: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) 3: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) 4: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 19:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:08:a0:4c:f7:73:de:a2:90:18:1b:7a:e2:bf:a7:97:c1:87:7e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Jul 13 17:47:16 2026 GMT Not After : Jul 14 19:53:16 2026 GMT Subject: CN=F95973510813D31B9C17B69D98C3D1B4220C3756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:41:f5:14:7d:40:02:74:ab:19:a3:80:0e: 51:c1:15:aa:81:52:8c:86:ec:34:7d:40:ae:75:d0: 84:20:9f:cf:84:1b:15:e4:81:a1:d0:90:6f:da:c4: 58:01:55:e4:34:97:76:b2:da:d4:0d:d4:e9:65:ae: 13:5f:2d:56:00:6f:93:53:ca:34:e2:97:33:ca:cb: 67:96:a1:16:f2:92:84:69:7c:8f:75:e0:d5:4e:7c: 67:96:85:fb:d2:45:bc:d6:16:9a:eb:c2:af:01:03: c6:f0:9a:a5:9f:bb:32:cd:d3:09:e5:be:fb:3b:03: 8e:3d:69:5e:97:01:bb:84:9e:e8:3d:f9:72:3b:f9: ec:23:09:ae:6e:40:05:df:d9:55:df:7a:65:88:fe: f0:e0:4c:8e:8b:d2:79:2d:73:dd:6c:e2:ab:3f:b5: 04:5a:99:c5:68:f3:7d:1e:1a:58:6b:06:69:de:a0: 9e:9a:93:a0:d3:2f:b6:f1:0b:bd:57:2e:fb:f4:5d: 50:41:54:ee:02:c5:02:e3:5e:95:45:a7:9e:e0:35: 6f:b6:a0:f9:40:30:50:dd:8d:41:98:98:66:3a:7b: 2b:26:58:0c:a7:94:6d:32:a9:d2:0c:7c:20:44:10: b8:74:54:c0:ee:2c:0b:37:0c:1a:6a:be:9c:38:76: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:59:73:51:08:13:D3:1B:9C:17:B6:9D:98:C3:D1:B4:22:0C:37:56 X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:09:13:e6:2a:59:4c:8c:63:84:ac:e6:18:9d:16:13:7b:b5: c3:30:60:75:e8:39:f9:3e:01:c7:a1:1c:6d:23:f5:ca:d1:20: 32:c5:7c:9c:30:ac:46:05:eb:15:5a:a3:a6:d4:53:c1:41:c9: ce:ce:26:fa:fd:f1:95:0d:2d:79:90:61:62:14:6a:9e:08:ac: fb:b6:e3:cd:ee:7b:1a:fe:86:94:d7:8d:89:a3:a4:c3:54:14: 14:5d:32:b9:b3:ea:40:84:da:f7:62:17:84:b4:a0:44:89:3c: 67:37:81:9f:0d:71:4f:cc:fb:20:1b:8b:44:59:21:38:a7:55: 39:86:89:b1:bd:f7:c7:75:0b:06:d1:39:a0:99:79:58:1b:fd: 77:a7:95:2a:e0:b8:93:e4:69:74:56:9d:b1:b2:1e:6e:88:8f: 50:b0:17:ac:a9:af:2b:23:bc:1a:b3:49:bf:7b:c9:d4:41:d0: a8:d8:20:cd:d3:b3:0c:90:39:aa:0c:ac:b7:38:77:9d:f5:5a: 98:e3:bd:02:b4:9a:fd:1e:ee:23:01:20:f1:59:3c:d7:42:ad: f2:1e:3d:66:b5:6c:04:e4:8c:40:58:bf:7a:62:c2:d4:bc:2c: ba:9a:0a:1f:bf:ff:e3:e2:f0:bc:e3:71:95:38:ff:4c:d8:a8: d0:c1:57:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUQigTPdz3qKQGBt64r+nl8GHfmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA3MTMxNzQ3MTZaFw0yNjA3MTQxOTUzMTZaMDMxMTAvBgNV BAMTKEY5NTk3MzUxMDgxM0QzMUI5QzE3QjY5RDk4QzNEMUI0MjIwQzM3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhkH1FH1AAnSrGaOADlHBFaqB UoyG7DR9QK510IQgn8+EGxXkgaHQkG/axFgBVeQ0l3ay2tQN1OllrhNfLVYAb5NT yjTilzPKy2eWoRbykoRpfI914NVOfGeWhfvSRbzWFprrwq8BA8bwmqWfuzLN0wnl vvs7A449aV6XAbuEnug9+XI7+ewjCa5uQAXf2VXfemWI/vDgTI6L0nktc91s4qs/ tQRamcVo830eGlhrBmneoJ6ak6DTL7bxC71XLvv0XVBBVO4CxQLjXpVFp57gNW+2 oPlAMFDdjUGYmGY6eysmWAynlG0yqdIMfCBEELh0VMDuLAs3DBpqvpw4duVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+VlzUQgT0xucF7admMPRtCIMN1YwHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8JE+YqWUyMY4Ss5hidFhN7tcMwYHXoOfk+ AcehHG0j9crRIDLFfJwwrEYF6xVao6bUU8FByc7OJvr98ZUNLXmQYWIUap4IrPu2 483uexr+hpTXjYmjpMNUFBRdMrmz6kCE2vdiF4S0oESJPGc3gZ8NcU/M+yAbi0RZ ITinVTmGibG998d1CwbROaCZeVgb/XenlSrguJPkaXRWnbGyHm6Ij1CwF6yprysj vBqzSb97ydRB0KjYIM3TswyQOaoMrLc4d531WpjjvQK0mv0e7iMBIPFZPNdCrfIe PWa1bATkjEBYv3piwtS8LLqaCh+//+Pi8LzjcZU4/0zYqNDBV2w= -----END CERTIFICATE-----Generated at Tue Jul 14 08:24:34 2026 by rpki-client