$ rpki-client -vvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: Ze5lFKiPaitmmarVTw3bBR+YdfCYIJS8aKuK4L708I4= Subject key identifier: 61:A5:08:F4:7E:CC:6B:D4:A0:D0:C4:1F:E3:C2:F6:69:3E:09:D9:EC Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 30BC7D900832E9D970F2CB93090C817948C771D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 07:36:55 +0000 Manifest this update: Sun 02 Aug 2026 07:31:55 +0000 Manifest next update: Mon 03 Aug 2026 09:35:55 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: NaL86zv7L64976dfjdh9tgvzL/bPyhcnbwKTK5c1wuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bc:7d:90:08:32:e9:d9:70:f2:cb:93:09:0c:81:79:48:c7:71:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Aug 2 07:31:55 2026 GMT Not After : Aug 3 09:35:55 2026 GMT Subject: CN=61A508F47ECC6BD4A0D0C41FE3C2F6693E09D9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:c2:51:d5:45:25:00:1e:21:a3:a8:08:2f: 89:36:6b:9a:cb:f1:2c:77:04:24:4b:5b:30:16:c8: 26:ad:e3:ca:9b:72:b8:37:7a:f4:e7:28:93:a5:26: b6:82:ca:b4:3c:37:12:9f:f7:70:90:9b:b8:93:dc: 4f:c2:79:6d:9e:e5:78:36:d3:f4:d5:11:0a:cd:22: 5b:b9:a2:9a:66:b5:02:76:d1:c8:c7:91:9c:70:e3: b9:b5:bd:32:e9:a1:8a:42:01:1b:f8:af:88:cc:b9: a5:18:3d:85:44:d0:ba:af:4b:6b:b8:8e:a7:f4:c5: 6c:ef:74:dd:f6:92:ba:80:f4:02:39:ff:b2:82:fc: fe:97:7b:60:fa:ed:ba:a0:c4:a5:44:1f:a2:29:f9: 7b:3e:d3:a0:40:b6:2a:a1:0d:4d:ac:d1:14:23:c9: e9:59:6b:4f:b9:ea:89:66:14:40:3a:49:b6:cf:5f: e6:8a:9e:65:82:35:08:81:9a:3b:9f:08:71:85:b3: 11:a0:35:5c:b4:29:5f:d6:60:84:94:8a:13:08:d4: 32:41:ca:a0:32:79:5f:2f:77:d4:76:97:5b:6c:e1: f2:b5:f0:c5:79:23:16:e7:2f:1e:96:67:cc:2a:76: 1f:68:99:c9:b1:ce:04:dc:11:d7:ca:6c:2f:f9:6e: 10:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A5:08:F4:7E:CC:6B:D4:A0:D0:C4:1F:E3:C2:F6:69:3E:09:D9:EC X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:62:7c:94:31:56:7a:7d:c2:75:dd:de:82:8e:e7:3e:2e:16: bb:ec:c3:9b:47:a0:d7:75:76:a5:1d:29:f7:cb:a0:2a:0d:85: 4c:23:94:71:f9:75:4e:71:1e:e0:5e:6e:3d:9b:74:f9:64:c9: d0:cd:1e:fd:81:57:8e:e4:1e:2b:4e:fb:aa:27:fa:f6:22:70: ac:1e:00:21:b9:d3:2b:e9:8f:4f:42:4f:82:f4:32:3a:d2:1a: 07:e3:fa:1b:81:ef:91:42:03:03:52:9b:f7:83:8e:82:bb:37: 12:37:27:a4:f2:2e:76:12:e1:6d:97:be:49:e2:72:05:0c:1a: f3:1a:c9:1c:dc:6d:a5:5f:16:aa:23:d0:dc:d4:5b:00:25:ed: 65:cd:19:05:28:a5:ab:bb:ae:56:ff:08:6f:15:7a:7d:95:4e: e4:1c:12:85:c3:8e:b3:9b:fc:d8:26:d3:b9:9b:39:ed:8b:ef: d4:e2:6b:ec:9e:c6:01:2b:46:5d:59:b6:17:0e:2e:84:21:df: d1:40:64:18:77:17:0c:0c:66:a7:50:8f:9d:0c:a2:46:b9:15: fc:24:5e:2b:16:d9:2a:9f:36:44:15:b7:b0:c3:8b:1d:8d:aa: f6:29:52:a5:8f:f4:83:43:0c:34:f3:ec:c4:da:d6:eb:9c:ee: 24:86:91:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLx9kAgy6dlw8suTCQyBeUjHcdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA4MDIwNzMxNTVaFw0yNjA4MDMwOTM1NTVaMDMxMTAvBgNV BAMTKDYxQTUwOEY0N0VDQzZCRDRBMEQwQzQxRkUzQzJGNjY5M0UwOUQ5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+C8JR1UUlAB4ho6gIL4k2a5rL 8Sx3BCRLWzAWyCat48qbcrg3evTnKJOlJraCyrQ8NxKf93CQm7iT3E/CeW2e5Xg2 0/TVEQrNIlu5oppmtQJ20cjHkZxw47m1vTLpoYpCARv4r4jMuaUYPYVE0LqvS2u4 jqf0xWzvdN32krqA9AI5/7KC/P6Xe2D67bqgxKVEH6Ip+Xs+06BAtiqhDU2s0RQj yelZa0+56olmFEA6SbbPX+aKnmWCNQiBmjufCHGFsxGgNVy0KV/WYISUihMI1DJB yqAyeV8vd9R2l1ts4fK18MV5IxbnLx6WZ8wqdh9omcmxzgTcEdfKbC/5bhA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYaUI9H7Ma9Sg0MQf48L2aT4J2ewwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZifJQxVnp9wnXd3oKO5z4uFrvsw5tHoNd1 dqUdKffLoCoNhUwjlHH5dU5xHuBebj2bdPlkydDNHv2BV47kHitO+6on+vYicKwe ACG50yvpj09CT4L0MjrSGgfj+huB75FCAwNSm/eDjoK7NxI3J6TyLnYS4W2Xvkni cgUMGvMayRzcbaVfFqoj0NzUWwAl7WXNGQUopau7rlb/CG8Ven2VTuQcEoXDjrOb /Ngm07mbOe2L79Tia+yexgErRl1ZthcOLoQh39FAZBh3FwwMZqdQj50Moka5Ffwk XisW2SqfNkQVt7DDix2NqvYpUqWP9INDDDTz7MTa1uuc7iSGkQQ= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:35 2026 by rpki-client