$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: v9K+Umi4Nz8yHaBw1bDXhofzT8Woyap1A1qz2+kiJvU= Subject key identifier: 51:2F:CB:90:4C:CA:21:00:E8:A1:D5:74:D5:D0:81:B6:91:35:D8:BC Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 0480193CFEEC76EC73B698A8AA4CEE76CDD12DFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 03:02:13 +0000 Manifest this update: Thu 17 Sep 2026 02:57:13 +0000 Manifest next update: Fri 18 Sep 2026 06:06:13 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: teLHZn7gZVC1TPxJHxkTMj+Si6QybJmvXg4AVh3zO5o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:80:19:3c:fe:ec:76:ec:73:b6:98:a8:aa:4c:ee:76:cd:d1:2d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Sep 17 02:57:13 2026 GMT Not After : Sep 18 06:06:13 2026 GMT Subject: CN=512FCB904CCA2100E8A1D574D5D081B69135D8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:17:cd:94:ad:ef:58:f6:d7:e9:eb:06:7d:42: 88:83:88:bf:12:0c:04:3d:d4:08:94:4e:64:6a:bc: a0:ce:8b:79:25:87:56:55:23:6c:91:3b:5f:77:10: 9a:4f:aa:75:b2:f0:34:e3:19:ef:9a:8b:83:14:f9: cf:8d:91:b2:ec:ce:6e:bc:42:55:30:80:24:38:6a: 07:65:d0:1d:ca:1b:c1:2c:bf:ad:57:fe:60:7b:eb: 56:3f:d9:85:35:35:fc:10:2a:23:ab:f7:de:9b:91: 0e:3f:ef:80:99:99:96:aa:da:1e:c3:39:ea:8d:11: 14:67:2c:e6:70:17:49:d9:e8:d5:ae:3b:aa:82:f9: b5:27:4c:3a:5f:a3:87:f7:10:e5:f5:66:25:62:90: d0:fb:33:70:13:e4:90:5d:33:02:eb:42:06:a5:e8: b1:92:64:0c:15:d5:ee:36:27:a4:a1:2a:88:19:25: f5:fa:24:b3:3c:65:ea:2c:d2:6f:32:61:e5:ca:2c: 37:4e:89:bc:f8:29:23:7d:89:02:be:53:96:b3:9d: 7b:78:26:ab:80:fc:87:05:28:5c:53:af:22:c5:4d: 22:28:1e:be:80:cd:a4:3c:84:f1:39:ff:ab:79:bb: 4a:a1:bd:f4:c8:45:a1:62:6b:ed:b5:74:9d:1a:c9: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2F:CB:90:4C:CA:21:00:E8:A1:D5:74:D5:D0:81:B6:91:35:D8:BC X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a6:00:f2:8c:01:27:44:eb:38:8c:c9:e8:55:f9:42:f6:4b: 43:a1:12:a3:ae:6b:01:07:5a:68:62:51:2f:8d:8b:8e:0c:51: cb:29:dd:9e:a2:f4:28:e8:96:b1:0c:f7:df:4d:7d:9d:ca:4c: e9:79:08:52:3d:89:49:09:dd:a8:3b:66:30:86:fc:cc:f8:52: 26:28:70:9f:76:18:ac:e7:31:d0:c2:7b:36:f7:98:6b:15:ff: f4:a3:04:ef:2b:f9:25:51:7b:80:06:37:f9:d7:14:54:fc:bc: a6:a7:8b:96:7d:31:20:d7:8c:00:d4:ab:53:37:1f:6a:1b:66: 46:af:3f:7e:28:0e:2d:7f:fd:43:9a:f9:1e:bc:b9:9d:49:3a: 4f:94:ea:c6:9e:79:2d:ca:27:13:6c:5c:09:5f:bf:7e:85:be: af:b1:ea:9a:46:fb:bb:98:5a:0d:02:a2:52:4d:47:8e:49:01: 19:78:4b:f0:05:92:d0:e4:6e:1f:10:59:c7:71:51:8d:fc:4b: 86:4d:c3:a1:93:04:d1:1e:d8:ce:7a:97:4c:36:76:10:a0:ee: b5:11:3e:75:b4:d2:51:4f:f6:7d:69:09:e5:c1:a4:19:7c:77: 95:34:b1:5a:3e:ac:8a:e6:8c:62:2a:69:c1:c2:a0:2a:40:94: c5:bb:48:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBIAZPP7sduxztpioqkzuds3RLfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA5MTcwMjU3MTNaFw0yNjA5MTgwNjA2MTNaMDMxMTAvBgNV BAMTKDUxMkZDQjkwNENDQTIxMDBFOEExRDU3NEQ1RDA4MUI2OTEzNUQ4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmF82Ure9Y9tfp6wZ9QoiDiL8S DAQ91AiUTmRqvKDOi3klh1ZVI2yRO193EJpPqnWy8DTjGe+ai4MU+c+NkbLszm68 QlUwgCQ4agdl0B3KG8Esv61X/mB761Y/2YU1NfwQKiOr996bkQ4/74CZmZaq2h7D OeqNERRnLOZwF0nZ6NWuO6qC+bUnTDpfo4f3EOX1ZiVikND7M3AT5JBdMwLrQgal 6LGSZAwV1e42J6ShKogZJfX6JLM8Zeos0m8yYeXKLDdOibz4KSN9iQK+U5aznXt4 JquA/IcFKFxTryLFTSIoHr6AzaQ8hPE5/6t5u0qhvfTIRaFia+21dJ0ayaxxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUS/LkEzKIQDoodV01dCBtpE12LwwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6mAPKMASdE6ziMyehV+UL2S0OhEqOuawEH WmhiUS+Ni44MUcsp3Z6i9CjolrEM999NfZ3KTOl5CFI9iUkJ3ag7ZjCG/Mz4UiYo cJ92GKznMdDCezb3mGsV//SjBO8r+SVRe4AGN/nXFFT8vKani5Z9MSDXjADUq1M3 H2obZkavP34oDi1//UOa+R68uZ1JOk+U6saeeS3KJxNsXAlfv36Fvq+x6ppG+7uY Wg0ColJNR45JARl4S/AFktDkbh8QWcdxUY38S4ZNw6GTBNEe2M56l0w2dhCg7rUR PnW00lFP9n1pCeXBpBl8d5U0sVo+rIrmjGIqacHCoCpAlMW7SHs= -----END CERTIFICATE-----Generated at Thu Sep 17 13:04:14 2026 by rpki-client