$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft File: 029298EDFAB613103A6838C4E6588574BAE7834B.mft (raw, json) Hash identifier: 0kYLKWE922eEL3soxoDmKUCXs8C43a4lQ2YL3TnTSiE= Subject key identifier: 52:E3:AB:62:EF:E2:56:31:31:6C:B5:F8:C8:78:06:08:A6:90:54:2F Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 1C4CC712EE480A7F64E37E5E57C375C71FD436F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:49:36 +0000 Manifest this update: Thu 17 Sep 2026 00:44:36 +0000 Manifest next update: Fri 18 Sep 2026 00:50:36 +0000 Files and hashes: 1: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 5Ux9FZjiRKbHvcLMHj57vi8xCjfaDnZG5BpZ2qxgkCs=) 2: 029298EDFAB613103A6838C4E6588574BAE7834B.crl (hash: AGuRr5RROdUI6rPOymEURKoWAtfBDbw6/JaGLbH8big=) 3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4c:c7:12:ee:48:0a:7f:64:e3:7e:5e:57:c3:75:c7:1f:d4:36:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: Sep 17 00:44:36 2026 GMT Not After : Sep 18 00:50:36 2026 GMT Subject: CN=52E3AB62EFE25631316CB5F8C8780608A690542F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:88:f0:3d:52:dd:7d:0c:e0:a5:c5:4e:56:94: e3:eb:0b:84:d2:c5:c1:97:82:c0:11:fb:ff:24:a3: 1c:3e:78:4e:c9:34:c3:42:d2:67:4c:11:72:6f:e4: e5:8f:55:d4:74:6a:74:00:6a:df:b6:09:95:fc:cd: 29:55:ba:eb:fb:15:66:eb:a9:1a:2e:3e:65:df:e1: 16:95:95:9e:54:1d:46:e3:af:f0:83:b8:52:ef:46: 5b:c8:5c:e2:91:60:af:ce:cb:7b:59:73:03:5a:d8: 3d:e2:3d:d6:6c:ec:c1:83:86:85:e1:fc:64:41:b0: 7b:07:64:36:33:c6:a5:cd:79:ab:35:05:b9:54:43: 04:3c:b8:a6:73:62:4c:4c:1e:cd:32:5e:86:e1:da: 0e:0b:83:2d:f2:25:bb:1c:a1:29:da:a1:7b:fd:7b: 52:d1:45:75:1b:ad:21:8c:d4:79:1b:a4:61:bb:c1: e9:02:ea:4b:7c:d2:89:7a:fd:3f:d2:74:2c:f2:9f: 38:9f:8f:e2:6c:91:7d:26:67:bd:e2:ef:5f:b6:af: 35:24:c6:a2:5e:0b:89:eb:8f:8f:4e:39:61:1c:67: 81:30:85:3d:1c:9f:36:33:7a:38:8f:cf:c8:d5:34: 6e:4d:ea:ae:cd:1f:c3:f4:43:17:e4:30:33:e8:31: 75:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:AB:62:EF:E2:56:31:31:6C:B5:F8:C8:78:06:08:A6:90:54:2F X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b6:65:80:bf:00:49:09:86:c1:63:4f:27:59:ba:e4:09:bb: 2b:6f:0a:20:fb:0e:4f:d8:38:6e:48:17:c0:f7:57:e7:ac:64: b5:49:ea:26:74:23:18:a9:05:b6:17:34:fe:88:e5:2d:37:29: 86:8a:dd:e1:0d:14:7b:7a:8d:26:ad:fd:e0:b4:fa:d4:27:3f: 5e:29:90:91:9f:55:59:0c:5f:be:c9:a8:2e:8d:9b:22:b7:07: d9:63:21:cc:4a:78:3d:f7:20:66:00:25:18:f7:ac:2b:20:ec: 0c:40:12:da:a9:e1:5e:37:bc:34:f7:4a:da:6c:74:eb:41:64: 8e:f1:a7:87:9c:3f:51:6a:c5:25:b1:54:e2:20:d2:01:88:9a: cf:f2:65:75:f4:f6:25:91:14:88:34:f4:9a:ed:97:57:f2:2c: 33:22:83:2b:72:51:3f:45:71:93:0d:38:50:2a:74:2c:fc:c3: a3:3f:52:9f:f1:0e:e6:a8:e2:8b:6e:74:3b:87:14:d8:07:39: 8b:38:3f:e1:cf:ce:d2:75:d0:f3:7e:b3:4d:ba:f1:8e:9c:2d: 22:79:44:37:bb:ce:63:ff:4a:57:03:97:95:83:a2:cf:a4:4d: 72:53:43:f8:7b:82:57:05:4e:3b:51:ca:a2:88:d1:f5:4a:b8: 44:2f:52:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEzHEu5ICn9k435eV8N1xx/UNvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA5MTcwMDQ0MzZaFw0yNjA5MTgwMDUwMzZaMDMxMTAvBgNV BAMTKDUyRTNBQjYyRUZFMjU2MzEzMTZDQjVGOEM4NzgwNjA4QTY5MDU0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuiPA9Ut19DOClxU5WlOPrC4TS xcGXgsAR+/8koxw+eE7JNMNC0mdMEXJv5OWPVdR0anQAat+2CZX8zSlVuuv7FWbr qRouPmXf4RaVlZ5UHUbjr/CDuFLvRlvIXOKRYK/Oy3tZcwNa2D3iPdZs7MGDhoXh /GRBsHsHZDYzxqXNeas1BblUQwQ8uKZzYkxMHs0yXobh2g4Lgy3yJbscoSnaoXv9 e1LRRXUbrSGM1HkbpGG7wekC6kt80ol6/T/SdCzynzifj+JskX0mZ73i71+2rzUk xqJeC4nrj49OOWEcZ4EwhT0cnzYzejiPz8jVNG5N6q7NH8P0QxfkMDPoMXU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuOrYu/iVjExbLX4yHgGCKaQVC8wHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1 NzRCQUU3ODM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa2ZYC/AEkJhsFjTydZuuQJuytvCiD7Dk/Y OG5IF8D3V+esZLVJ6iZ0IxipBbYXNP6I5S03KYaK3eENFHt6jSat/eC0+tQnP14p kJGfVVkMX77JqC6NmyK3B9ljIcxKeD33IGYAJRj3rCsg7AxAEtqp4V43vDT3Stps dOtBZI7xp4ecP1FqxSWxVOIg0gGIms/yZXX09iWRFIg09Jrtl1fyLDMigytyUT9F cZMNOFAqdCz8w6M/Up/xDuao4otudDuHFNgHOYs4P+HPztJ10PN+s0268Y6cLSJ5 RDe7zmP/SlcDl5WDos+kTXJTQ/h7glcFTjtRyqKI0fVKuEQvUls= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:17 2026 by rpki-client