$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: DGUr/K4bMYC9uX7uE6wkjGl+F3CfrhmIyiWnBQbUKJc= Subject key identifier: 16:B1:D3:39:8D:DF:C5:03:33:D8:8E:6B:36:9C:80:36:10:9D:74:EF Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 473F4440ACFF8CCD52E0E5263878DE457F75EF58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 02EB Signing time: Wed 25 Mar 2026 07:20:55 +0000 Manifest this update: Wed 25 Mar 2026 07:15:55 +0000 Manifest next update: Sat 28 Mar 2026 14:31:55 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: Nip3BPXs2T0fim7aR7S7PR+/yqiOmyKG8V7diaNLz+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3f:44:40:ac:ff:8c:cd:52:e0:e5:26:38:78:de:45:7f:75:ef:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: Mar 25 07:15:55 2026 GMT Not After : Mar 28 14:31:55 2026 GMT Subject: CN=16B1D3398DDFC50333D88E6B369C8036109D74EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:76:a5:c8:4b:16:c5:6e:12:7a:e7:26:5a: f5:ee:ba:72:2a:72:1f:45:9e:61:32:d8:19:8a:19: 03:4e:cf:4a:13:a9:69:ff:26:3b:23:17:08:fc:0a: 9e:f4:ec:d4:f0:2a:a7:2f:18:53:23:0e:4f:c1:e3: 1f:1c:68:8c:2a:6f:d1:e1:af:be:9f:7d:4c:24:cc: 50:c6:af:98:d9:ba:2a:62:ae:22:29:31:e7:70:6e: 7f:49:d4:0d:fc:58:86:cb:aa:d3:5c:9e:9f:04:7f: ce:ca:f2:75:c4:29:17:f3:0f:8a:ad:eb:05:8e:c1: a6:4c:16:dd:9e:c9:06:d4:9b:dd:87:73:14:5d:be: 8e:50:5c:8f:22:d9:ae:e3:26:ca:19:a2:12:fe:b9: 8f:db:ff:17:03:10:45:11:fb:c4:06:c2:c0:ed:79: ce:9f:b8:57:61:07:55:24:12:fd:d9:f2:6a:41:21: 69:5b:c6:ba:c9:a0:1a:8e:c8:31:be:69:f5:16:d4: d6:8d:48:f0:6d:7b:a4:78:bb:cd:d9:6e:0e:9d:68: d1:ac:06:99:c8:8b:a1:c8:a7:2b:58:fd:bf:d3:ae: 61:71:fd:6c:d0:7d:12:72:b7:b5:79:1a:a9:2a:34: 5e:b3:60:ff:77:33:8f:be:6b:29:ec:7c:5a:1b:23: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B1:D3:39:8D:DF:C5:03:33:D8:8E:6B:36:9C:80:36:10:9D:74:EF X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b4:30:4e:4d:67:b6:e5:96:ff:25:8b:e9:c4:54:cf:b6:1b: fe:27:7f:18:d3:ff:16:ae:70:8c:0b:75:94:62:77:31:54:8b: 3a:39:10:48:d5:a1:ae:68:e0:5a:df:e2:57:24:91:dd:7d:48: c6:2b:8d:20:80:ad:30:df:b2:fc:41:5e:9d:b0:71:61:78:4a: 07:62:84:3d:3c:35:a1:c1:2f:94:c8:7c:51:f0:4e:8a:0f:f4: 09:df:22:97:ac:a9:3a:7d:50:21:c6:45:e6:85:a5:33:91:ee: 4a:08:1a:16:41:b5:5c:b8:29:b6:9f:02:9c:aa:8a:ee:af:f8: 1f:fa:58:1c:e0:86:a0:04:d2:2b:33:1d:23:c7:b0:3b:39:2d: 62:87:a2:50:79:e2:b3:4f:bb:cc:56:f8:a4:eb:d3:9f:a5:82: 1a:b4:47:83:99:9a:b8:89:76:57:bf:72:61:5b:0d:fc:9d:5e: e7:40:ce:aa:f7:c4:71:27:05:a5:d9:82:4e:f6:07:11:b7:b6: a4:50:be:f9:cb:89:49:59:2d:a3:aa:f4:e2:62:ba:1b:32:9c: 41:80:c1:ef:cf:d3:27:4f:2a:27:8c:33:f2:38:fe:9f:65:97: f1:33:27:34:56:b4:d1:42:42:f1:27:17:a5:ea:ff:b7:d7:1a: 55:7c:af:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURz9EQKz/jM1S4OUmOHjeRX9171gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNjAzMjUwNzE1NTVaFw0yNjAzMjgxNDMxNTVaMDMxMTAvBgNV BAMTKDE2QjFEMzM5OERERkM1MDMzM0Q4OEU2QjM2OUM4MDM2MTA5RDc0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABXalyEsWxW4SeucmWvXuunIq ch9FnmEy2BmKGQNOz0oTqWn/JjsjFwj8Cp707NTwKqcvGFMjDk/B4x8caIwqb9Hh r76ffUwkzFDGr5jZuipiriIpMedwbn9J1A38WIbLqtNcnp8Ef87K8nXEKRfzD4qt 6wWOwaZMFt2eyQbUm92HcxRdvo5QXI8i2a7jJsoZohL+uY/b/xcDEEUR+8QGwsDt ec6fuFdhB1UkEv3Z8mpBIWlbxrrJoBqOyDG+afUW1NaNSPBte6R4u83Zbg6daNGs BpnIi6HIpytY/b/TrmFx/WzQfRJyt7V5GqkqNF6zYP93M4++aynsfFobI6lnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFrHTOY3fxQMz2I5rNpyANhCddO8wHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu0ME5NZ7bllv8li+nEVM+2G/4nfxjT/xau cIwLdZRidzFUizo5EEjVoa5o4Frf4lckkd19SMYrjSCArTDfsvxBXp2wcWF4Sgdi hD08NaHBL5TIfFHwTooP9AnfIpesqTp9UCHGReaFpTOR7koIGhZBtVy4KbafApyq iu6v+B/6WBzghqAE0iszHSPHsDs5LWKHolB54rNPu8xW+KTr05+lghq0R4OZmriJ dle/cmFbDfydXudAzqr3xHEnBaXZgk72BxG3tqRQvvnLiUlZLaOq9OJiuhsynEGA we/P0ydPKieMM/I4/p9ll/EzJzRWtNFCQvEnF6Xq/7fXGlV8rwk= -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:47 2026 by rpki-client