$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: 6BzOqDi0zcXcGYLp1B8yTPSzc3w7Ul+lKVR+YoT0nbg= Subject key identifier: F4:F8:B1:2B:37:3D:81:57:27:D9:4D:4F:1D:40:07:7A:98:D4:83:03 Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 1A39D4016B0C91E99C0EBCF3908C20C49382CB87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: 012A Signing time: Wed 25 Mar 2026 22:11:54 +0000 Manifest this update: Wed 25 Mar 2026 22:06:54 +0000 Manifest next update: Sun 29 Mar 2026 09:10:54 +0000 Files and hashes: 1: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 2: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) 3: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 4: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: PpuzN0y8dFgkjKxNO4nmM+6uaPce5CYm+lE3QHqK2ys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:39:d4:01:6b:0c:91:e9:9c:0e:bc:f3:90:8c:20:c4:93:82:cb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Mar 25 22:06:54 2026 GMT Not After : Mar 29 09:10:54 2026 GMT Subject: CN=F4F8B12B373D815727D94D4F1D40077A98D48303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:b4:e6:f4:43:93:39:a9:1b:56:47:9c:da: 80:b3:5b:78:df:98:a6:10:92:7b:09:c5:4f:d4:e2: ce:8d:f1:3f:df:8a:c7:ad:d5:16:20:c6:19:07:8a: a9:92:b9:ec:24:5e:d3:28:3b:b7:3c:80:83:86:06: 6d:d5:37:07:39:60:3e:fd:17:fc:1d:59:42:68:d2: 38:2e:b0:10:f4:a4:1a:5a:2e:e9:e7:d9:14:17:f8: c0:aa:87:f5:fb:7f:ad:81:58:f9:f8:a4:41:f3:44: 64:3d:20:ef:b4:23:e1:65:f9:33:11:b1:92:3e:ab: d6:ed:72:3a:28:a6:f9:5d:8d:41:01:3c:57:39:11: 15:b6:c8:e1:5b:74:51:a4:2e:48:43:29:03:af:69: 3d:cc:13:d5:f4:28:87:5a:a2:5b:59:c7:73:85:c8: f7:01:71:83:4c:36:8b:f2:30:f6:be:6b:2d:49:f7: b3:0d:60:55:76:f0:fc:21:ad:42:4b:7b:af:85:aa: c0:3c:dd:61:ea:5d:5f:76:43:ec:c8:90:1d:11:84: 17:88:14:7c:4b:9e:f1:57:0d:bc:b1:08:57:89:8f: dd:d8:9b:89:8b:31:84:dc:ed:ca:9c:c3:d8:35:88: 37:b9:5d:35:de:ae:91:3f:2a:fa:37:72:5e:f0:36: fc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F8:B1:2B:37:3D:81:57:27:D9:4D:4F:1D:40:07:7A:98:D4:83:03 X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:27:80:08:df:1c:59:9e:ab:ab:f2:e6:a7:c9:93:a6:c6:e4: 3f:fe:fe:13:4b:11:fc:c8:96:4e:ac:4b:eb:2d:82:2f:96:4c: 32:53:f2:d0:1e:bf:28:42:c0:87:90:af:2b:6a:00:6c:d0:5e: 92:89:63:6d:a8:dc:18:ec:cc:b5:e2:fa:5b:20:6e:30:26:68: c7:bd:ba:2d:78:5e:7c:ba:a3:6c:14:70:15:d3:26:07:bb:83: 22:10:fe:33:2e:9d:c0:d1:61:52:d2:c6:e1:bf:1e:15:58:a5: 5f:86:09:bc:fe:52:e7:44:e5:9b:2a:96:fa:f7:92:ac:19:16: b3:81:0f:ef:89:69:5e:99:10:bb:5b:72:01:86:96:fe:56:39: eb:d2:d3:4a:94:bd:9a:b7:f3:d1:23:51:a1:ba:33:27:6d:5d: a3:57:af:f0:bd:52:41:fe:e3:78:51:4b:86:4f:5a:30:10:47: 57:b2:c5:54:d9:de:5f:21:4d:9c:00:93:b8:cf:d3:d7:7a:c3: e8:35:ab:b7:92:73:17:d0:6b:d1:1b:e7:78:08:91:19:f3:be: 73:24:9e:e1:8e:42:63:bb:e8:15:5e:7c:63:f8:dd:7c:75:8b: f7:57:e5:df:d8:2b:f5:5d:90:ae:7d:23:3e:63:be:e6:70:77: 73:15:ed:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjnUAWsMkemcDrzzkIwgxJOCy4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNjAzMjUyMjA2NTRaFw0yNjAzMjkwOTEwNTRaMDMxMTAvBgNV BAMTKEY0RjhCMTJCMzczRDgxNTcyN0Q5NEQ0RjFENDAwNzdBOThENDgzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6L7Tm9EOTOakbVkec2oCzW3jf mKYQknsJxU/U4s6N8T/fiset1RYgxhkHiqmSuewkXtMoO7c8gIOGBm3VNwc5YD79 F/wdWUJo0jgusBD0pBpaLunn2RQX+MCqh/X7f62BWPn4pEHzRGQ9IO+0I+Fl+TMR sZI+q9btcjoopvldjUEBPFc5ERW2yOFbdFGkLkhDKQOvaT3ME9X0KIdaoltZx3OF yPcBcYNMNovyMPa+ay1J97MNYFV28PwhrUJLe6+FqsA83WHqXV92Q+zIkB0RhBeI FHxLnvFXDbyxCFeJj93Ym4mLMYTc7cqcw9g1iDe5XTXerpE/Kvo3cl7wNvzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9PixKzc9gVcn2U1PHUAHepjUgwMwHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADongAjfHFmeq6vy5qfJk6bG5D/+/hNLEfzI lk6sS+stgi+WTDJT8tAevyhCwIeQrytqAGzQXpKJY22o3BjszLXi+lsgbjAmaMe9 ui14Xny6o2wUcBXTJge7gyIQ/jMuncDRYVLSxuG/HhVYpV+GCbz+UudE5Zsqlvr3 kqwZFrOBD++JaV6ZELtbcgGGlv5WOevS00qUvZq389EjUaG6MydtXaNXr/C9UkH+ 43hRS4ZPWjAQR1eyxVTZ3l8hTZwAk7jP09d6w+g1q7eScxfQa9Eb53gIkRnzvnMk nuGOQmO76BVefGP43Xx1i/dX5d/YK/VdkK59Iz5jvuZwd3MV7f8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:26 2026 by rpki-client