$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft File: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft (raw, json) Hash identifier: LaX3/tqQ/LIJsEJOe09C4Z0Gn0/Co1rM/3HdmgooE7g= Subject key identifier: 41:32:88:7B:02:D8:97:1B:AB:CC:D4:6F:F5:88:BC:9E:46:E3:D8:6F Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Certificate serial: 78BB7AD65425FA56FA35DAAA623F87B16F290373 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 11:48:19 +0000 Manifest this update: Thu 17 Sep 2026 11:43:19 +0000 Manifest next update: Fri 18 Sep 2026 15:26:19 +0000 Files and hashes: 1: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl (hash: /loK+Mwp07d4C7obGuWmY7yaNE4p/TGU092ZANRTMkw=) 2: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=) 3: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=) 4: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bb:7a:d6:54:25:fa:56:fa:35:da:aa:62:3f:87:b1:6f:29:03:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Validity Not Before: Sep 17 11:43:19 2026 GMT Not After : Sep 18 15:26:19 2026 GMT Subject: CN=4132887B02D8971BABCCD46FF588BC9E46E3D86F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:2a:ef:08:4d:70:eb:7c:39:0e:65:b1:66: da:d0:92:4f:4a:f4:65:b6:da:dd:86:69:3d:89:04: 8d:f0:34:23:66:bf:5c:68:2b:db:4d:73:b3:d8:5a: c2:47:dd:81:24:c3:ec:10:4f:bd:52:49:fa:07:3c: 1b:6d:a3:cc:74:ef:02:cd:c8:9f:96:eb:91:0c:52: ea:14:2b:31:09:4b:be:c1:06:09:65:fe:6b:e3:e8: 72:88:b6:f3:f0:98:69:86:f5:ec:d1:7c:c4:40:fa: 84:34:09:61:3a:25:01:fb:71:60:11:2b:74:a3:4d: b3:ec:5b:c7:25:8b:63:2d:2e:9d:a3:db:7e:9e:45: e7:48:3b:11:30:c0:ae:a2:5e:39:0b:85:a8:2c:1d: d6:62:09:ed:07:54:1e:0e:ab:b6:0b:78:83:f6:bf: eb:03:0e:82:36:d9:ef:c5:e5:fe:42:45:f5:df:61: f4:d3:51:50:09:10:54:8f:c3:b0:7d:bd:d9:5b:64: cb:50:13:d1:ae:bf:80:bb:ee:9c:e3:d9:e0:42:54: d6:2c:9d:31:0b:05:9a:43:02:29:14:23:ce:66:be: 05:b1:7e:8c:2d:a8:3e:6b:04:44:e7:9c:23:b2:60: be:15:b7:5b:98:18:aa:3f:dd:2e:5b:8f:80:df:63: 57:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:32:88:7B:02:D8:97:1B:AB:CC:D4:6F:F5:88:BC:9E:46:E3:D8:6F X509v3 Authority Key Identifier: keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:29:3a:a6:60:1b:2b:26:8d:1d:94:a9:d6:95:4b:38:b9:cd: 74:57:4f:10:bd:b8:13:36:ad:64:72:8d:7e:f4:ac:df:88:f3: 6c:72:c6:86:94:ce:5a:3f:01:9c:26:ce:fa:16:21:ce:6c:56: ca:e6:3f:aa:30:04:6a:68:68:82:1f:24:39:e6:e9:a1:f8:b3: 15:33:3c:8e:de:4e:82:64:ab:c7:e0:b3:2b:f5:a9:d6:37:39: ad:59:22:6b:9a:16:c8:34:d9:3e:db:0f:23:7e:b3:a8:f4:20: b0:cf:c6:dc:0f:c1:54:32:ff:0f:8d:fc:29:5f:cc:7b:76:71: b5:78:da:1b:e2:5d:49:71:9c:7c:aa:42:28:78:89:57:8f:93: cf:6e:65:b1:b3:02:92:57:a9:79:2c:6f:75:1f:c7:76:05:c6: 90:21:c0:4f:55:71:9b:b1:3b:db:43:22:df:01:f7:b5:8d:69: 44:10:f5:94:be:2b:0f:be:68:bc:73:8b:3a:98:1c:64:8e:bd: 4b:2f:20:57:1e:8b:bc:b5:38:a1:ce:9c:43:a9:f1:eb:77:c2: 62:86:79:30:a0:7e:af:e2:13:fb:39:5d:81:1a:c0:31:da:f7: 7d:53:51:09:eb:be:30:26:49:c4:70:f7:e3:ea:4a:c3:36:af: f3:79:c3:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLt61lQl+lb6NdqqYj+HsW8pA3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3 RDRENzJCQzAeFw0yNjA5MTcxMTQzMTlaFw0yNjA5MTgxNTI2MTlaMDMxMTAvBgNV BAMTKDQxMzI4ODdCMDJEODk3MUJBQkNDRDQ2RkY1ODhCQzlFNDZFM0Q4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMSrvCE1w63w5DmWxZtrQkk9K 9GW22t2GaT2JBI3wNCNmv1xoK9tNc7PYWsJH3YEkw+wQT71SSfoHPBtto8x07wLN yJ+W65EMUuoUKzEJS77BBgll/mvj6HKItvPwmGmG9ezRfMRA+oQ0CWE6JQH7cWAR K3SjTbPsW8cli2MtLp2j236eRedIOxEwwK6iXjkLhagsHdZiCe0HVB4Oq7YLeIP2 v+sDDoI22e/F5f5CRfXfYfTTUVAJEFSPw7B9vdlbZMtQE9Guv4C77pzj2eBCVNYs nTELBZpDAikUI85mvgWxfowtqD5rBETnnCOyYL4Vt1uYGKo/3S5bj4DfY1c1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQTKIewLYlxurzNRv9Yi8nkbj2G8wHwYDVR0j BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3 OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3 MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVB MkI3RDRENzJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANApOqZgGysmjR2UqdaVSzi5zXRXTxC9uBM2 rWRyjX70rN+I82xyxoaUzlo/AZwmzvoWIc5sVsrmP6owBGpoaIIfJDnm6aH4sxUz PI7eToJkq8fgsyv1qdY3Oa1ZImuaFsg02T7bDyN+s6j0ILDPxtwPwVQy/w+N/Clf zHt2cbV42hviXUlxnHyqQih4iVePk89uZbGzApJXqXksb3Ufx3YFxpAhwE9VcZux O9tDIt8B97WNaUQQ9ZS+Kw++aLxzizqYHGSOvUsvIFcei7y1OKHOnEOp8et3wmKG eTCgfq/iE/s5XYEawDHa931TUQnrvjAmScRw9+PqSsM2r/N5w6o= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:27 2026 by rpki-client