$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: l6hYn1+r2hH5Zvaq3YSYc4uRQwcvwtaYaSLl4rmy8N0= Subject key identifier: 29:3B:FC:8B:C0:4E:01:B2:EA:AC:C8:18:84:DF:64:24:07:E1:EA:BE Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 799D99DFFDDEDEF9EDFF8C6A1E8DF9B23B095F4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 01F3 Signing time: Wed 25 Mar 2026 11:42:29 +0000 Manifest this update: Wed 25 Mar 2026 11:37:29 +0000 Manifest next update: Sat 28 Mar 2026 18:05:29 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: zydaV7vXOljio1PbDe3DJntWYJjt5+nwPN1xl5NBaKY=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: 0b2yVEGnHniYJ+n/pFKGIjfsaBALMLsvlL2eDZXd1Vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9d:99:df:fd:de:de:f9:ed:ff:8c:6a:1e:8d:f9:b2:3b:09:5f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Mar 25 11:37:29 2026 GMT Not After : Mar 28 18:05:29 2026 GMT Subject: CN=293BFC8BC04E01B2EAACC81884DF642407E1EABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:ee:11:26:b7:75:fe:ca:8e:4d:1c:94:bc: a5:97:56:76:b6:1e:0f:75:b3:0a:29:55:f5:29:72: c8:e7:fa:ad:46:b9:5d:cd:4e:d2:c4:ac:72:bf:e6: 4b:c4:03:da:ed:68:11:0b:30:24:cf:9f:f6:d5:36: 36:3b:2b:55:40:84:31:a9:9c:e3:7b:1e:4b:8f:39: fd:3d:fe:3b:54:a3:01:a9:f5:76:c0:1e:8e:11:66: d4:75:de:d5:db:71:33:34:cd:38:07:d9:72:a9:6d: a0:8e:8d:5d:a3:13:15:e8:34:b8:82:9f:6e:fc:be: b4:27:c0:1a:fd:2e:02:46:92:71:0a:a6:ca:91:46: 74:79:2a:90:dd:05:df:23:7e:73:5f:ec:20:d9:3f: a9:7b:44:96:74:29:6e:fb:32:e2:a9:7b:14:b6:56: 9e:b0:b3:a4:d7:a8:2e:75:cf:bf:96:f0:7d:b1:64: 1a:d8:a4:59:46:bd:4f:a5:98:b5:df:53:2a:25:79: b6:2a:40:c2:60:6e:c6:62:dc:7a:d9:b9:72:5f:d7: cc:ee:e7:86:36:90:a0:60:18:4a:1f:1c:ab:6e:5d: b3:2f:a3:1a:ed:96:bb:5a:cc:51:0b:77:68:d8:f5: 8e:ae:c0:6e:4c:09:b0:ba:37:c6:db:6a:12:ad:20: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3B:FC:8B:C0:4E:01:B2:EA:AC:C8:18:84:DF:64:24:07:E1:EA:BE X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:92:d9:e9:e9:c0:54:1e:f6:b6:09:c1:4c:4c:81:aa:96:fa: 4b:3e:cb:ff:ed:68:12:5e:88:81:c7:7b:0c:02:33:e8:24:0c: ef:68:bd:1e:d5:a9:b1:f1:36:c1:a7:00:8a:e8:a4:1a:e4:f4: f0:99:90:73:4b:7f:15:aa:e0:5f:20:4e:4e:8b:ee:e4:8b:cc: f0:99:75:b0:fa:9e:e5:b5:af:84:25:60:80:c0:8b:3d:49:2e: ef:e5:97:1a:e3:eb:44:7b:33:84:25:c5:1a:18:58:e4:78:d3: 29:ab:d9:51:25:2d:c8:95:d3:48:3e:99:9e:95:fe:74:a0:c5: 66:8e:c3:ea:f7:52:b2:27:07:f4:43:06:1b:1e:fd:e1:fa:57: 60:b3:8d:b2:d4:08:93:58:45:4a:fa:69:d3:ca:2f:93:8e:20: 41:fe:72:ec:57:e1:16:00:a9:b5:fe:79:5f:3c:dd:e6:a0:14: da:f9:54:39:cd:26:ba:a9:bb:31:8d:1d:55:c3:02:85:3a:84: fd:66:b3:5d:4f:cf:22:9e:2d:70:39:d0:3d:f3:00:50:fe:09: 2c:ca:32:b6:30:97:64:a7:cf:f5:c6:69:30:c1:c8:ad:05:2b: c5:b2:34:23:90:e7:33:55:98:5d:e4:01:98:40:a3:2d:29:de: 00:ad:61:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZ2Z3/3e3vnt/4xqHo35sjsJX0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNjAzMjUxMTM3MjlaFw0yNjAzMjgxODA1MjlaMDMxMTAvBgNV BAMTKDI5M0JGQzhCQzA0RTAxQjJFQUFDQzgxODg0REY2NDI0MDdFMUVBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxA+4RJrd1/sqOTRyUvKWXVna2 Hg91swopVfUpcsjn+q1GuV3NTtLErHK/5kvEA9rtaBELMCTPn/bVNjY7K1VAhDGp nON7HkuPOf09/jtUowGp9XbAHo4RZtR13tXbcTM0zTgH2XKpbaCOjV2jExXoNLiC n278vrQnwBr9LgJGknEKpsqRRnR5KpDdBd8jfnNf7CDZP6l7RJZ0KW77MuKpexS2 Vp6ws6TXqC51z7+W8H2xZBrYpFlGvU+lmLXfUyolebYqQMJgbsZi3HrZuXJf18zu 54Y2kKBgGEofHKtuXbMvoxrtlrtazFELd2jY9Y6uwG5MCbC6N8bbahKtIMwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKTv8i8BOAbLqrMgYhN9kJAfh6r4wHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqS2enpwFQe9rYJwUxMgaqW+ks+y//taBJe iIHHewwCM+gkDO9ovR7VqbHxNsGnAIropBrk9PCZkHNLfxWq4F8gTk6L7uSLzPCZ dbD6nuW1r4QlYIDAiz1JLu/llxrj60R7M4QlxRoYWOR40ymr2VElLciV00g+mZ6V /nSgxWaOw+r3UrInB/RDBhse/eH6V2CzjbLUCJNYRUr6adPKL5OOIEH+cuxX4RYA qbX+eV883eagFNr5VDnNJrqpuzGNHVXDAoU6hP1ms11PzyKeLXA50D3zAFD+CSzK MrYwl2Snz/XGaTDByK0FK8WyNCOQ5zNVmF3kAZhAoy0p3gCtYWk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:02 2026 by rpki-client