$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: kflm2CsD+xYuHI5hx2BUhEX9yFQsqjyhXH9r6/lDcbg= Subject key identifier: CA:FB:2F:D3:F4:23:4D:37:83:98:04:3E:FF:17:19:D2:9E:C3:6E:3B Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 67D524DED2E845CAC2AC084571DF471DA78B1EBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 94 Signing time: Thu 26 Mar 2026 10:11:09 +0000 Manifest this update: Thu 26 Mar 2026 10:06:09 +0000 Manifest next update: Sun 29 Mar 2026 13:52:09 +0000 Files and hashes: 1: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: Y2PtC4d+SGZg8Y/CLZCdg74m6nTMYJrP271cdRHIWT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d5:24:de:d2:e8:45:ca:c2:ac:08:45:71:df:47:1d:a7:8b:1e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Mar 26 10:06:09 2026 GMT Not After : Mar 29 13:52:09 2026 GMT Subject: CN=CAFB2FD3F4234D378398043EFF1719D29EC36E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:dc:59:95:62:5c:b5:4a:a2:7b:b1:6f:fd: e5:a0:c4:11:92:5c:7e:61:59:e8:34:8c:aa:4d:7d: ec:ba:cf:55:51:bc:43:fa:71:1e:e2:77:ff:2e:04: b0:e6:e5:91:7c:1c:61:ed:89:4d:fb:f2:8f:f8:10: 1b:d9:15:41:c0:a1:45:f3:cb:26:5c:4f:18:8b:ae: 95:fa:58:4a:ee:6d:74:15:88:19:2b:8b:0f:1f:1f: 1c:dd:2f:d1:21:5e:33:4e:f1:39:a1:58:c3:49:b9: 82:8d:93:fb:73:d3:9f:eb:9e:5b:c9:d0:0e:9f:0b: 5e:b7:7d:43:6d:98:e4:c6:0d:da:a1:f4:10:99:d2: 77:15:95:04:c7:7b:43:85:23:54:4f:b3:6e:18:11: 2a:f7:12:86:9f:80:5e:ba:bc:70:d4:ac:29:5f:97: 05:4b:d8:6e:15:63:a2:66:dc:be:f7:10:b6:27:c4: f0:b0:27:fa:cf:b0:1a:7f:b2:dd:16:2a:76:e8:11: 25:36:96:15:05:f5:a7:d8:09:06:0f:a6:06:5b:91: 71:71:41:a2:09:70:a9:d5:91:40:47:c6:57:8e:8e: 0a:cf:86:0a:0a:8c:34:49:2f:d5:dd:9d:c5:12:39: 37:df:b6:40:25:84:3d:81:5a:81:54:19:a1:e9:b7: 14:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FB:2F:D3:F4:23:4D:37:83:98:04:3E:FF:17:19:D2:9E:C3:6E:3B X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:16:f8:31:1e:1a:d6:e9:51:65:9c:7c:3f:ed:69:c2:04:8e: 85:92:4e:27:37:21:5a:12:38:bb:d1:eb:7d:5b:87:5b:32:05: 96:30:88:ad:db:a8:b2:6f:c8:17:ec:a2:5f:d4:7f:7f:c0:18: e9:95:ac:72:66:1e:00:d4:86:65:c1:ab:5a:9f:27:ce:86:14: 88:dc:2e:01:cc:af:20:96:a6:52:37:4a:3d:16:a7:05:32:37: 2a:52:be:af:e5:e0:38:0b:30:f7:c8:16:97:ef:cc:f2:2a:9f: 98:62:09:a5:af:17:d3:dd:84:cc:9e:82:14:9e:35:e4:14:11: f2:91:42:2e:06:6f:af:22:6c:39:69:55:64:25:f2:94:6b:2d: 90:ed:1c:52:99:ff:c3:46:9c:76:26:99:10:3e:f4:9c:df:25: 57:4e:32:94:da:ea:8e:4d:83:02:f7:69:0d:f8:88:10:f1:66: c7:2a:9a:ce:23:d4:da:93:66:aa:c8:6c:49:a8:7f:89:83:9f: 57:c4:82:9d:25:2b:63:9d:48:28:82:85:4c:6c:00:eb:4c:24: a4:08:73:67:11:10:91:67:d9:21:61:51:a5:12:39:63:cd:18: 00:50:f0:44:0f:e0:4e:2d:d5:9d:14:54:e0:0f:1b:de:2f:fc: db:bb:79:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9Uk3tLoRcrCrAhFcd9HHaeLHrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNjAzMjYxMDA2MDlaFw0yNjAzMjkxMzUyMDlaMDMxMTAvBgNV BAMTKENBRkIyRkQzRjQyMzREMzc4Mzk4MDQzRUZGMTcxOUQyOUVDMzZFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDE9xZlWJctUqie7Fv/eWgxBGS XH5hWeg0jKpNfey6z1VRvEP6cR7id/8uBLDm5ZF8HGHtiU378o/4EBvZFUHAoUXz yyZcTxiLrpX6WErubXQViBkriw8fHxzdL9EhXjNO8TmhWMNJuYKNk/tz05/rnlvJ 0A6fC163fUNtmOTGDdqh9BCZ0ncVlQTHe0OFI1RPs24YESr3EoafgF66vHDUrClf lwVL2G4VY6Jm3L73ELYnxPCwJ/rPsBp/st0WKnboESU2lhUF9afYCQYPpgZbkXFx QaIJcKnVkUBHxleOjgrPhgoKjDRJL9XdncUSOTfftkAlhD2BWoFUGaHptxRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyvsv0/QjTTeDmAQ+/xcZ0p7DbjswHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8W+DEeGtbpUWWcfD/tacIEjoWSTic3IVoS OLvR631bh1syBZYwiK3bqLJvyBfsol/Uf3/AGOmVrHJmHgDUhmXBq1qfJ86GFIjc LgHMryCWplI3Sj0WpwUyNypSvq/l4DgLMPfIFpfvzPIqn5hiCaWvF9PdhMyeghSe NeQUEfKRQi4Gb68ibDlpVWQl8pRrLZDtHFKZ/8NGnHYmmRA+9JzfJVdOMpTa6o5N gwL3aQ34iBDxZscqms4j1NqTZqrIbEmof4mDn1fEgp0lK2OdSCiChUxsAOtMJKQI c2cREJFn2SFhUaUSOWPNGABQ8EQP4E4t1Z0UVOAPG94v/Nu7eUw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:39 2026 by rpki-client