$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.mft (raw, json) Hash identifier: uJ7RY2vDjAO5FS12dnV8gKuvXFGCovYJHps0kG7nnAM= Subject key identifier: FA:B1:F1:B3:F7:72:89:2C:1B:A5:A1:3A:F6:15:C7:57:39:4C:00:F5 Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Certificate serial: 7C41FC83BAC59B810EBA1FAFDBFEE208634F9ED7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:21:34 +0000 Manifest this update: Wed 16 Sep 2026 22:16:34 +0000 Manifest next update: Fri 18 Sep 2026 02:14:34 +0000 Files and hashes: 1: 29FA80F6176C25C691091C10B9D90672CFD66E6D.crl (hash: Q9LI6GnOdv1T4B/bww7qh6aEWjfh0WLJOMGUQ9oVdzI=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:41:fc:83:ba:c5:9b:81:0e:ba:1f:af:db:fe:e2:08:63:4f:9e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Validity Not Before: Sep 16 22:16:34 2026 GMT Not After : Sep 18 02:14:34 2026 GMT Subject: CN=FAB1F1B3F772892C1BA5A13AF615C757394C00F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:af:5f:0a:98:74:43:77:86:35:a8:42:74: f2:03:69:e8:e8:0e:42:5b:23:62:5a:ea:8a:7a:9f: 29:8a:4e:0d:bb:43:50:9f:68:ed:e8:cd:fa:6d:85: df:69:fe:89:a3:ee:e6:82:c3:89:a4:80:27:d6:db: 15:96:bf:17:59:31:87:21:18:61:a3:5e:56:98:d0: d6:eb:9c:7e:0b:0c:bf:55:bb:a6:66:e8:66:1a:47: aa:3b:29:b7:d3:aa:b9:91:25:5a:6b:1d:4e:7f:80: 14:68:95:3e:41:24:23:d9:35:3b:04:9a:b0:46:82: ed:fe:94:f3:7b:35:f9:83:63:a0:ca:a3:05:2a:16: af:7d:8f:81:fd:ca:9a:7e:36:25:8f:a0:d7:b1:f7: 13:28:09:d9:9a:14:6f:0a:4a:65:75:66:41:48:66: 51:90:a8:bd:cb:f9:89:ec:3f:92:3e:29:de:f2:a9: 3a:1e:75:71:f6:f6:f9:3b:24:ff:4d:fd:cb:62:de: 1a:2b:92:55:a1:fe:23:34:2a:a1:52:3d:a5:d1:a0: 57:7b:83:3e:7f:d8:a1:06:7b:f4:d1:8d:6b:19:05: d6:eb:c6:50:aa:d9:76:83:57:f2:2e:84:be:0e:e0: 6c:1c:41:3e:79:43:cf:be:70:25:9b:9f:9c:f5:06: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:F1:B3:F7:72:89:2C:1B:A5:A1:3A:F6:15:C7:57:39:4C:00:F5 X509v3 Authority Key Identifier: keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1d:51:e2:09:d5:8f:96:82:8d:3f:07:c4:7f:34:2f:c6:7f: 19:c9:da:70:1d:84:02:46:d3:21:37:81:30:6f:56:bf:ba:39: ae:07:33:fe:f2:2b:7b:be:95:ee:45:53:c6:6a:4b:b7:b1:19: cf:63:c5:c3:1c:8b:e5:1e:c4:44:f6:44:86:35:4f:a6:f9:07: 95:c1:de:31:0c:42:00:10:bf:1b:43:d9:e4:4a:f4:a3:5d:bb: ea:d7:07:ba:38:69:97:b1:93:d5:6a:f4:45:0f:17:76:3f:67: df:f6:c7:e8:cc:ea:ec:3e:bf:d7:e6:6b:b4:cd:07:0d:cd:01: e8:65:b1:cd:a9:d7:c2:06:f1:6b:47:ba:ed:35:90:76:9f:81: ce:0f:d9:fd:8b:43:ac:6d:ad:d1:f4:1d:fa:60:3f:52:49:69: 1e:7a:c2:84:05:66:58:50:65:15:f6:d9:20:01:6d:f7:05:34: e2:49:58:a6:07:71:84:a2:a7:35:22:bc:37:07:da:f7:3c:d9: 55:8b:43:5b:cc:d5:7f:ad:a6:15:65:3c:09:3f:86:6b:3b:a0: 9c:4f:79:89:a9:1d:9a:f3:15:e8:b0:9d:02:fe:17:ec:66:81: a0:c8:de:8c:1f:f3:bd:58:e5:2e:71:06:97:fa:b8:fd:ea:0e: c7:34:c8:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEH8g7rFm4EOuh+v2/7iCGNPntcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJD RkQ2NkU2RDAeFw0yNjA5MTYyMjE2MzRaFw0yNjA5MTgwMjE0MzRaMDMxMTAvBgNV BAMTKEZBQjFGMUIzRjc3Mjg5MkMxQkE1QTEzQUY2MTVDNzU3Mzk0QzAwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+a9fCph0Q3eGNahCdPIDaejo DkJbI2Ja6op6nymKTg27Q1CfaO3ozfpthd9p/omj7uaCw4mkgCfW2xWWvxdZMYch GGGjXlaY0NbrnH4LDL9Vu6Zm6GYaR6o7KbfTqrmRJVprHU5/gBRolT5BJCPZNTsE mrBGgu3+lPN7NfmDY6DKowUqFq99j4H9ypp+NiWPoNex9xMoCdmaFG8KSmV1ZkFI ZlGQqL3L+YnsP5I+Kd7yqToedXH29vk7JP9N/cti3horklWh/iM0KqFSPaXRoFd7 gz5/2KEGe/TRjWsZBdbrxlCq2XaDV/IuhL4O4GwcQT55Q8++cCWbn5z1BomtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+rHxs/dyiSwbpaE69hXHVzlMAPUwHwYDVR0j BBgwFoAUKfqA9hdsJcaRCRwQudkGcs/Wbm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE0OGIyMjItNmRlZC00MjhhLTg4OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYx NzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJDRkQ2NkU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZBODBGNjE3NkMyNUM2OTEwOTFDMTBCOUQ5MDY3MkNGRDY2 RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2 NzJDRkQ2NkU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAdUeIJ1Y+Wgo0/B8R/NC/GfxnJ2nAdhAJG 0yE3gTBvVr+6Oa4HM/7yK3u+le5FU8ZqS7exGc9jxcMci+UexET2RIY1T6b5B5XB 3jEMQgAQvxtD2eRK9KNdu+rXB7o4aZexk9Vq9EUPF3Y/Z9/2x+jM6uw+v9fma7TN Bw3NAehlsc2p18IG8WtHuu01kHafgc4P2f2LQ6xtrdH0HfpgP1JJaR56woQFZlhQ ZRX22SABbfcFNOJJWKYHcYSipzUivDcH2vc82VWLQ1vM1X+tphVlPAk/hms7oJxP eYmpHZrzFeiwnQL+F+xmgaDI3owf871Y5S5xBpf6uP3qDsc0yJw= -----END CERTIFICATE-----Generated at Thu Sep 17 09:23:29 2026 by rpki-client