$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: KVyx8URtwYb1c1I5K1SBsk98wR6/A67jjoqYaw5/70c= Subject key identifier: 8E:8E:8E:64:7D:5A:3C:54:B6:F3:E3:36:2B:1D:38:B7:F6:51:56:D7 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 33569B61D33C3A4FAB5264687A793965E63E0856 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 0285 Signing time: Wed 25 Mar 2026 23:42:39 +0000 Manifest this update: Wed 25 Mar 2026 23:37:39 +0000 Manifest next update: Sun 29 Mar 2026 04:33:39 +0000 Files and hashes: 1: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: NML/79jB4zZF/SxB4ZqIyV4CbjHtpeNZ0f57zrhrbmM=) 2: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: EGwoFkwuru20xg/MTUv2m4fEkOiYOtxX969jSydsVkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:56:9b:61:d3:3c:3a:4f:ab:52:64:68:7a:79:39:65:e6:3e:08:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Mar 25 23:37:39 2026 GMT Not After : Mar 29 04:33:39 2026 GMT Subject: CN=8E8E8E647D5A3C54B6F3E3362B1D38B7F65156D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:83:51:17:df:39:e2:5c:1f:c3:62:56:af: 95:b5:e9:82:2e:ac:c1:e6:a5:74:0b:13:fa:49:cc: b7:03:5c:32:d0:c0:15:22:01:af:9a:d2:b4:39:fe: ba:4b:10:b6:8f:c0:6c:89:b2:28:ef:79:63:71:f1: c1:0d:4d:fe:74:c7:81:03:2e:8d:62:92:df:1d:60: b0:d2:62:12:73:e0:81:56:8d:9e:7f:37:49:2b:35: 8f:53:78:c4:f4:a7:14:be:2e:9a:35:c6:5e:a5:c1: 28:7c:ba:a7:0b:ba:b7:ac:8a:db:c9:da:03:ab:c5: 7c:3d:7e:fa:8a:0b:36:30:74:80:8a:24:9a:e9:15: 3a:d6:78:14:27:b5:d4:f6:24:bd:8f:e3:02:61:84: b2:d7:b6:b9:53:c3:b5:61:f5:6e:bf:da:ef:47:f9: 33:77:8d:5e:6d:54:e2:6b:07:6f:b3:b7:71:71:29: 09:c8:e1:4d:32:43:f0:cf:c1:a6:b2:19:2a:89:58: 7b:7d:9a:e6:f2:64:07:fd:7e:f1:32:30:80:c8:41: d0:5a:88:88:b3:64:00:68:bf:7d:92:3e:6c:55:67: 0e:0c:97:48:cb:eb:f7:40:20:7f:bc:d7:f1:9c:ed: c2:08:8b:4e:97:63:ac:25:99:89:52:e0:79:b3:8d: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8E:8E:64:7D:5A:3C:54:B6:F3:E3:36:2B:1D:38:B7:F6:51:56:D7 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bb:43:f8:7c:43:47:b5:81:b4:1e:1c:9d:2b:3d:60:5f:2c: 94:d9:3a:80:b2:a3:13:d2:0c:f2:b5:b4:c2:2b:b8:29:fb:d9: 02:d8:50:e0:33:67:e6:ab:3a:f8:b4:f1:07:05:c7:77:80:3f: cd:79:3c:db:31:77:57:ae:5b:c2:03:e4:1f:c5:2e:30:75:b3: e9:fa:10:4f:3e:d0:9f:12:b7:b6:f0:51:25:ed:48:ff:0b:0b: c9:b5:00:b0:17:c3:81:b2:07:8c:33:05:65:19:2f:2d:90:8d: 30:73:c1:6b:c3:52:a4:7b:49:5e:18:0c:71:7f:31:3e:35:f5: 7a:33:2c:a7:d5:28:40:ef:74:53:c9:5e:60:42:f0:c1:4d:f3: 4b:dc:42:42:9b:e4:69:60:f5:bd:b6:f8:a0:81:21:58:34:57: 70:73:15:2d:9b:76:fd:fb:7d:ec:13:34:9a:03:7e:fc:23:2e: a3:d9:e5:47:7e:20:f2:49:4d:c5:4a:95:63:f7:20:a8:48:af: 9a:cf:e8:c8:4d:3a:11:7d:e2:47:d1:77:72:c5:cf:01:42:b4: f2:43:2e:17:b1:98:ad:cd:7e:5b:90:0c:b5:97:38:23:ec:79: dc:35:89:a0:ab:90:02:f5:9c:cb:13:22:72:5d:90:55:b0:c3: 78:ed:82:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1abYdM8Ok+rUmRoenk5ZeY+CFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNjAzMjUyMzM3MzlaFw0yNjAzMjkwNDMzMzlaMDMxMTAvBgNV BAMTKDhFOEU4RTY0N0Q1QTNDNTRCNkYzRTMzNjJCMUQzOEI3RjY1MTU2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3W4NRF9854lwfw2JWr5W16YIu rMHmpXQLE/pJzLcDXDLQwBUiAa+a0rQ5/rpLELaPwGyJsijveWNx8cENTf50x4ED Lo1ikt8dYLDSYhJz4IFWjZ5/N0krNY9TeMT0pxS+Lpo1xl6lwSh8uqcLuresitvJ 2gOrxXw9fvqKCzYwdICKJJrpFTrWeBQntdT2JL2P4wJhhLLXtrlTw7Vh9W6/2u9H +TN3jV5tVOJrB2+zt3FxKQnI4U0yQ/DPwaayGSqJWHt9mubyZAf9fvEyMIDIQdBa iIizZABov32SPmxVZw4Ml0jL6/dAIH+81/Gc7cIIi06XY6wlmYlS4HmzjexjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjo6OZH1aPFS28+M2Kx04t/ZRVtcwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK7Q/h8Q0e1gbQeHJ0rPWBfLJTZOoCyoxPS DPK1tMIruCn72QLYUOAzZ+arOvi08QcFx3eAP815PNsxd1euW8ID5B/FLjB1s+n6 EE8+0J8St7bwUSXtSP8LC8m1ALAXw4GyB4wzBWUZLy2QjTBzwWvDUqR7SV4YDHF/ MT419XozLKfVKEDvdFPJXmBC8MFN80vcQkKb5Glg9b22+KCBIVg0V3BzFS2bdv37 fewTNJoDfvwjLqPZ5Ud+IPJJTcVKlWP3IKhIr5rP6MhNOhF94kfRd3LFzwFCtPJD LhexmK3NfluQDLWXOCPsedw1iaCrkAL1nMsTInJdkFWww3jtgl0= -----END CERTIFICATE-----Generated at Thu Mar 26 08:50:00 2026 by rpki-client