$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft File: 29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json) Hash identifier: 5gWLJBBWEVeWddLnbiAatYPgDiRpOE947kyN36pGOes= Subject key identifier: 4D:7A:FC:5E:C0:D2:27:AB:AF:A6:E8:4B:42:46:ED:B1:15:AB:4D:49 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 1AC63B340246BD05143162151F90C70F382563E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft Manifest number: 0228 Signing time: Tue 24 Mar 2026 22:51:02 +0000 Manifest this update: Tue 24 Mar 2026 22:46:02 +0000 Manifest next update: Fri 27 Mar 2026 23:16:02 +0000 Files and hashes: 1: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=) 2: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=) 3: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=) 4: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: xYHZ5vQvXxBJ4GyVP1FI2+avaEs826/PohnuYR3Th8c=) 5: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=) 6: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=) 7: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=) 8: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=) 9: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=) 10: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=) 11: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=) 12: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=) 13: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=) 14: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=) 15: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=) 16: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=) 17: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=) 18: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c6:3b:34:02:46:bd:05:14:31:62:15:1f:90:c7:0f:38:25:63:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Mar 24 22:46:02 2026 GMT Not After : Mar 27 23:16:02 2026 GMT Subject: CN=4D7AFC5EC0D227ABAFA6E84B4246EDB115AB4D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:1a:78:c7:84:09:04:93:4b:93:9c:35:0d: c0:05:eb:23:ef:3d:fd:0a:21:79:c7:e7:75:cb:17: 96:fd:77:fe:88:fd:cb:cd:11:7d:90:d4:31:76:8c: 20:f1:fd:d2:23:91:a1:6d:58:9d:a0:4e:3e:ab:11: 87:95:3f:ac:08:d0:97:d7:cd:29:04:38:e8:e8:26: dc:10:f5:24:cd:83:50:6b:5a:ee:d6:a8:d5:1f:a4: bd:f4:61:44:e3:11:87:77:70:e0:95:56:12:c4:2f: e9:dd:3a:4d:5d:38:e6:de:4d:eb:68:82:97:c1:ba: e6:06:40:7f:fd:33:7b:c7:97:d0:c0:77:26:91:74: 8b:0f:79:5e:7f:3a:9b:47:28:a8:73:0e:35:18:0c: 30:5b:8d:cd:03:f9:db:36:02:d1:5f:d8:c4:2f:6e: 42:d5:bd:7d:40:4a:bd:b6:5d:fa:9e:66:31:32:0e: 79:c0:e9:3b:63:c6:8d:80:3c:0e:f8:49:59:84:af: 9c:17:93:fb:10:01:e2:8a:9a:2a:d5:26:73:b5:f7: 71:f3:f7:b7:23:73:40:02:65:aa:fb:b0:6a:e7:67: 97:91:b4:dd:e1:07:2b:a1:ee:de:b9:a4:64:f6:49: cc:59:e5:ec:3a:c2:9f:ad:7d:b6:f7:a5:f8:36:21: 54:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7A:FC:5E:C0:D2:27:AB:AF:A6:E8:4B:42:46:ED:B1:15:AB:4D:49 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0a:d9:a1:97:63:ae:5e:0a:68:eb:05:2e:ac:25:05:ab:e7: b3:17:3b:db:2a:9e:3d:de:9e:e9:02:aa:12:56:35:41:14:13: 32:ee:a4:1b:3a:48:09:e3:5c:e2:f8:a6:b5:ed:ee:ee:fa:b6: bf:bc:c7:96:b1:df:4d:b8:67:71:c2:ff:43:4a:2b:ae:31:9b: 06:fc:d5:24:a9:a5:d5:26:22:76:b7:59:a3:b6:96:77:b0:bd: 00:7f:af:98:8c:eb:00:e5:23:22:0b:47:d8:66:ff:09:6d:5b: a0:6f:b0:34:21:b8:1a:dd:37:2c:77:38:a2:8f:3f:7f:64:a0: c7:e9:8f:a5:ae:d4:4d:c9:3e:8d:03:08:99:88:86:c0:c0:13: 13:53:f5:df:e7:62:76:92:0c:9d:d2:2e:07:18:4e:7f:f8:0f: b3:50:88:79:a6:42:08:31:fe:f7:0a:75:7c:52:f7:c3:9e:7c: f9:e9:ac:6f:9c:05:00:34:19:fa:49:4e:a0:50:c4:b7:8d:8d: 64:ab:3c:af:5f:0c:db:82:39:54:a0:06:ba:0c:0f:b3:6a:b3: bb:dc:ab:4f:9a:30:b2:97:d4:16:74:bb:9f:04:33:d4:ee:66: 1d:6a:e3:1c:4a:6e:71:1f:84:8c:1a:25:a7:8e:8e:ba:19:fe: c3:76:74:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsY7NAJGvQUUMWIVH5DHDzglY+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNjAzMjQyMjQ2MDJaFw0yNjAzMjcyMzE2MDJaMDMxMTAvBgNV BAMTKDREN0FGQzVFQzBEMjI3QUJBRkE2RTg0QjQyNDZFREIxMTVBQjRENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTRp4x4QJBJNLk5w1DcAF6yPv Pf0KIXnH53XLF5b9d/6I/cvNEX2Q1DF2jCDx/dIjkaFtWJ2gTj6rEYeVP6wI0JfX zSkEOOjoJtwQ9STNg1BrWu7WqNUfpL30YUTjEYd3cOCVVhLEL+ndOk1dOObeTeto gpfBuuYGQH/9M3vHl9DAdyaRdIsPeV5/OptHKKhzDjUYDDBbjc0D+ds2AtFf2MQv bkLVvX1ASr22XfqeZjEyDnnA6Ttjxo2APA74SVmEr5wXk/sQAeKKmirVJnO193Hz 97cjc0ACZar7sGrnZ5eRtN3hByuh7t65pGT2ScxZ5ew6wp+tfbb3pfg2IVSjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTXr8XsDSJ6uvpuhLQkbtsRWrTUkwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4YjI5NTktMWMyNS00NmEwLTg5 ZDEtZjc3ZDVjNDc0NjkxLzAvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3 NTY2RTYwOTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkK2aGXY65eCmjrBS6sJQWr57MXO9sqnj3e nukCqhJWNUEUEzLupBs6SAnjXOL4prXt7u76tr+8x5ax3024Z3HC/0NKK64xmwb8 1SSppdUmIna3WaO2lnewvQB/r5iM6wDlIyILR9hm/wltW6BvsDQhuBrdNyx3OKKP P39koMfpj6Wu1E3JPo0DCJmIhsDAExNT9d/nYnaSDJ3SLgcYTn/4D7NQiHmmQggx /vcKdXxS98OefPnprG+cBQA0GfpJTqBQxLeNjWSrPK9fDNuCOVSgBroMD7Nqs7vc q0+aMLKX1BZ0u58EM9TuZh1q4xxKbnEfhIwaJaeOjroZ/sN2dAg= -----END CERTIFICATE-----Generated at Thu Mar 26 20:16:36 2026 by rpki-client