$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: +Z1Et+x2wEvLiVo735tiCY4HbwUwa6Zy/c6VoryFHY8= Subject key identifier: 00:1D:96:AD:FD:5E:76:2B:66:B8:85:67:1D:D8:86:72:69:D4:59:FF Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 6C54F0EAC18A9B05BE6ADC9D57A4A8272FFC9F1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: EB Signing time: Sun 25 Oct 2026 15:00:23 +0000 Manifest this update: Sun 25 Oct 2026 14:55:23 +0000 Manifest next update: Mon 26 Oct 2026 16:14:23 +0000 Files and hashes: 1: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) 2: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) 3: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 4: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: sG/yRG94t9rxrO450Rm277bYoKE31qcvmj2p248IJ0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:54:f0:ea:c1:8a:9b:05:be:6a:dc:9d:57:a4:a8:27:2f:fc:9f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Oct 25 14:55:23 2026 GMT Not After : Oct 26 16:14:23 2026 GMT Subject: CN=001D96ADFD5E762B66B885671DD8867269D459FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:85:86:35:be:28:b9:9e:a5:d1:28:b9:1c: 06:ca:58:3a:9e:46:6f:5e:bd:42:9b:aa:71:9d:18: 25:ba:39:ee:1a:c6:be:68:31:94:9e:c8:97:51:18: 45:68:0a:1c:29:72:fe:2b:5b:d4:b8:ee:67:18:e4: 9d:85:df:f9:e3:2e:b4:82:76:5e:7e:d3:ba:64:56: c8:32:5c:3d:7c:21:c7:22:8f:74:42:57:e9:48:93: bc:3b:f9:05:fe:24:1d:62:b1:9f:73:58:93:c9:69: 7d:b7:55:e8:14:70:d1:bf:33:92:2a:4b:0a:8d:8b: 0a:18:aa:ea:e1:9d:b1:a8:17:31:92:19:ae:62:d3: 7c:34:b5:b5:bc:b9:d6:9c:30:3d:9c:dd:92:ff:51: 4e:c1:4c:07:fa:96:48:f6:5b:bf:87:ba:85:35:c9: b2:a1:b4:da:53:e5:73:1a:3d:a0:33:96:fc:3c:48: 10:9c:a6:1f:5d:8a:3d:a0:0d:f8:56:b2:f7:a8:34: eb:ae:47:d2:c9:21:8c:8a:3e:ec:92:c2:35:91:e5: 5e:10:d4:92:85:60:37:91:c8:55:19:50:0f:6d:3f: ff:fb:2b:31:48:78:46:e8:29:1b:38:93:8b:ef:34: f6:03:a0:6e:2c:80:3c:f9:02:1b:1f:84:e6:e6:e6: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1D:96:AD:FD:5E:76:2B:66:B8:85:67:1D:D8:86:72:69:D4:59:FF X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f9:d9:0d:4d:8f:56:4b:18:25:b1:2f:2e:15:11:dd:09:5a: 10:e9:e7:70:05:42:a8:25:d2:ef:45:d0:b0:fe:3e:d9:c5:82: 6c:0a:21:2a:f6:e8:56:30:2b:2c:00:b7:3d:a4:9c:e4:fa:fb: 3b:7b:ae:47:16:2e:d1:34:2f:d2:c4:a5:23:d9:0d:cd:54:36: ba:c7:44:ba:de:40:db:60:2c:89:5f:6e:a9:29:ab:51:26:22: e1:dc:cf:89:f3:ef:eb:e3:e5:f6:87:34:83:7b:0b:ea:98:42: 95:54:95:fc:6e:3b:e1:94:3c:8d:08:80:02:64:17:54:b7:41: 16:ae:ae:cd:2f:9a:50:c6:ba:d9:90:a7:20:5e:ca:52:f3:58: 75:97:98:57:3f:81:eb:21:e6:7d:94:f1:3b:14:e5:bd:a2:57: 5b:e2:bf:45:44:80:14:d3:a2:54:5e:86:b8:f9:59:4d:dd:b3: 05:61:c3:ff:c9:1e:fb:ca:f7:98:e6:ee:ea:80:db:00:f1:80: d5:d0:b6:6b:5b:0f:3b:81:60:28:34:88:5a:b5:16:72:bd:72: 50:d7:72:7e:a1:79:bd:2d:c2:90:f1:ff:8e:76:db:3b:e9:5b: 46:cc:cc:8f:51:4b:74:33:39:26:2c:25:f8:c0:4f:95:02:51: de:6c:28:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFTw6sGKmwW+atydV6SoJy/8nx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjEwMjUxNDU1MjNaFw0yNjEwMjYxNjE0MjNaMDMxMTAvBgNV BAMTKDAwMUQ5NkFERkQ1RTc2MkI2NkI4ODU2NzFERDg4NjcyNjlENDU5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTU4WGNb4ouZ6l0Si5HAbKWDqe Rm9evUKbqnGdGCW6Oe4axr5oMZSeyJdRGEVoChwpcv4rW9S47mcY5J2F3/njLrSC dl5+07pkVsgyXD18Iccij3RCV+lIk7w7+QX+JB1isZ9zWJPJaX23VegUcNG/M5Iq SwqNiwoYqurhnbGoFzGSGa5i03w0tbW8udacMD2c3ZL/UU7BTAf6lkj2W7+HuoU1 ybKhtNpT5XMaPaAzlvw8SBCcph9dij2gDfhWsveoNOuuR9LJIYyKPuySwjWR5V4Q 1JKFYDeRyFUZUA9tP//7KzFIeEboKRs4k4vvNPYDoG4sgDz5AhsfhObm5jeTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAB2Wrf1editmuIVnHdiGcmnUWf8wHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD752Q1Nj1ZLGCWxLy4VEd0JWhDp53AFQqgl 0u9F0LD+PtnFgmwKISr26FYwKywAtz2knOT6+zt7rkcWLtE0L9LEpSPZDc1UNrrH RLreQNtgLIlfbqkpq1EmIuHcz4nz7+vj5faHNIN7C+qYQpVUlfxuO+GUPI0IgAJk F1S3QRaurs0vmlDGutmQpyBeylLzWHWXmFc/gesh5n2U8TsU5b2iV1viv0VEgBTT olRehrj5WU3dswVhw//JHvvK95jm7uqA2wDxgNXQtmtbDzuBYCg0iFq1FnK9clDX cn6heb0twpDx/4522zvpW0bMzI9RS3QzOSYsJfjAT5UCUd5sKG8= -----END CERTIFICATE-----Generated at Mon Oct 26 00:38:49 2026 by rpki-client