$ rpki-client -vvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: JxWPes0EjmspD8KI+1C4/+XVA3XkJSCyotz06s2bX4k= Subject key identifier: 29:38:23:C6:AC:75:42:F5:AB:84:E9:5D:10:15:7A:1B:99:1A:8C:D7 Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 034ECB8F1AC74939EDFBEBC877F0976E1E66BE33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 03:31:05 +0000 Manifest this update: Thu 18 Jun 2026 03:26:05 +0000 Manifest next update: Fri 19 Jun 2026 07:25:05 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: hAGPjWMFnmJ3t93g7HjsEe9mdy9MYLm6fpSMgrQAlrY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 07:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4e:cb:8f:1a:c7:49:39:ed:fb:eb:c8:77:f0:97:6e:1e:66:be:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Jun 18 03:26:05 2026 GMT Not After : Jun 19 07:25:05 2026 GMT Subject: CN=293823C6AC7542F5AB84E95D10157A1B991A8CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:b2:c9:61:b9:74:f4:07:a6:ef:df:6b:45: 8d:75:22:40:9c:a6:c5:6e:3e:fc:3b:10:79:a9:0c: 89:71:e0:40:2c:ea:cb:8b:9e:6b:3c:f0:e0:cb:92: 66:09:5b:fa:74:7e:70:ec:8b:cf:55:51:2e:df:98: 82:95:d0:6c:47:06:6a:21:8d:f9:a5:dc:7d:b8:d2: 77:2f:57:20:57:08:cf:ca:2e:be:e4:17:7b:fd:b7: bf:d5:71:98:4a:ed:ce:05:35:1e:e0:6d:b5:e3:61: 54:10:62:23:81:f8:5b:af:79:4e:fb:2b:a9:a0:e5: 05:2c:71:7d:a0:4d:81:6e:5b:2d:27:5e:2c:5f:50: 37:67:2a:8d:64:51:76:99:7d:ce:94:2f:09:98:ac: d2:b2:4f:10:e6:49:89:28:c0:e9:f7:0b:63:c8:d3: db:38:9a:38:93:d9:0f:ad:05:e6:91:3b:9d:fb:b0: 4c:19:fa:3e:bb:aa:b6:18:ed:9a:c9:3b:30:22:23: 90:ab:db:56:cc:70:b2:87:bd:41:2c:c5:08:93:84: 50:a0:9c:93:f1:30:79:36:43:27:53:b1:8f:82:0a: 1c:7a:ba:b3:39:84:9f:24:06:f6:97:a3:33:0f:93: c7:50:f8:38:0a:5c:9d:72:aa:cd:f9:8f:9c:bf:b4: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:38:23:C6:AC:75:42:F5:AB:84:E9:5D:10:15:7A:1B:99:1A:8C:D7 X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:48:57:9e:ab:e2:a7:28:7e:8f:6b:15:12:69:83:83:a9:b4: f3:d9:02:cf:df:44:b0:ec:c7:60:31:84:f6:0e:58:c1:ff:2d: d0:29:4e:03:ec:dc:c9:82:e0:2c:63:96:b2:f2:16:3e:15:d6: 90:b7:a3:49:7a:81:fe:b9:b9:3a:fb:e7:cd:fb:35:27:9f:c7: 43:bd:8d:aa:c7:99:77:a9:5d:f6:d0:1d:bb:8c:7b:c8:99:4c: f3:b0:fd:22:47:1f:c2:82:9b:ed:e9:b1:e6:32:5c:31:8c:35: 0d:ce:8a:b3:9b:7e:12:16:2f:1d:37:b1:7d:b2:e0:19:3c:53: b8:f1:94:8c:bc:2a:15:1a:bb:da:48:a2:50:6b:12:e4:8c:06: 81:e0:f2:17:f6:2b:23:87:ec:83:d4:fd:53:eb:f2:44:ad:09: 2c:3e:99:3b:63:7d:5d:9f:f7:84:1e:af:e6:84:fe:50:fa:4d: ce:8e:76:2c:8d:15:4d:24:90:cf:0d:00:7e:f8:5c:40:e2:35: de:e7:ee:34:ef:d5:5c:15:b1:6d:b7:f4:80:39:27:41:84:30: cc:d0:67:f4:61:a5:7b:74:1e:92:81:61:02:50:1b:a1:d2:18: 5f:e1:31:fe:1c:f3:f2:69:05:fc:22:37:5f:52:b8:9b:7b:d4: 16:cb:9c:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA07LjxrHSTnt++vId/CXbh5mvjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA2MTgwMzI2MDVaFw0yNjA2MTkwNzI1MDVaMDMxMTAvBgNV BAMTKDI5MzgyM0M2QUM3NTQyRjVBQjg0RTk1RDEwMTU3QTFCOTkxQThDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPLLJYbl09Aem799rRY11IkCc psVuPvw7EHmpDIlx4EAs6suLnms88ODLkmYJW/p0fnDsi89VUS7fmIKV0GxHBmoh jfml3H240ncvVyBXCM/KLr7kF3v9t7/VcZhK7c4FNR7gbbXjYVQQYiOB+FuveU77 K6mg5QUscX2gTYFuWy0nXixfUDdnKo1kUXaZfc6ULwmYrNKyTxDmSYkowOn3C2PI 09s4mjiT2Q+tBeaRO537sEwZ+j67qrYY7ZrJOzAiI5Cr21bMcLKHvUEsxQiThFCg nJPxMHk2QydTsY+CChx6urM5hJ8kBvaXozMPk8dQ+DgKXJ1yqs35j5y/tC3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKTgjxqx1QvWrhOldEBV6G5kajNcwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNIV56r4qcofo9rFRJpg4OptPPZAs/fRLDs x2AxhPYOWMH/LdApTgPs3MmC4CxjlrLyFj4V1pC3o0l6gf65uTr75837NSefx0O9 jarHmXepXfbQHbuMe8iZTPOw/SJHH8KCm+3pseYyXDGMNQ3OirObfhIWLx03sX2y 4Bk8U7jxlIy8KhUau9pIolBrEuSMBoHg8hf2KyOH7IPU/VPr8kStCSw+mTtjfV2f 94Qer+aE/lD6Tc6OdiyNFU0kkM8NAH74XEDiNd7n7jTv1VwVsW239IA5J0GEMMzQ Z/RhpXt0HpKBYQJQG6HSGF/hMf4c8/JpBfwiN19SuJt71BbLnAc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:18 2026 by rpki-client