$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: MBFS/F5reAVl/xCqVjAjlN+IOoi4d5l2YLHMsn9av8A= Subject key identifier: 7D:9B:14:05:8C:78:E3:09:5D:7D:90:20:0E:4D:2C:BF:49:F5:18:5C Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 6326DA0DFE112B9390E3C9BD4581B0A1DDC77237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 02A2 Signing time: Sun 26 Apr 2026 03:31:13 +0000 Manifest this update: Sun 26 Apr 2026 03:26:13 +0000 Manifest next update: Wed 29 Apr 2026 12:14:13 +0000 Files and hashes: 1: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: gJ4+RIzMU3sNK8zgeNrc/IFATPDJCmEd1aztpgZm3dA=) 2: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: hHGwHFgp4pQtg65z/EE0qW9qiJ2TOh3mmtE0oGY58nQ=) 3: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: wQ45tmfAW0vTrcP1CHqdkU4kV8VsIFLIOnBtD5fu+LU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 12:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:26:da:0d:fe:11:2b:93:90:e3:c9:bd:45:81:b0:a1:dd:c7:72:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Apr 26 03:26:13 2026 GMT Not After : Apr 29 12:14:13 2026 GMT Subject: CN=7D9B14058C78E3095D7D90200E4D2CBF49F5185C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:18:15:12:bd:b3:d6:2b:af:27:55:03:e0: fe:d3:6d:25:4e:d2:bd:4d:22:9c:24:d5:84:e0:09: f7:74:8d:6d:4e:a2:44:65:e8:50:5c:45:a8:f3:b8: 44:0a:7b:f3:ee:12:d1:eb:33:29:43:0b:7c:0d:6f: c0:c0:05:f9:30:e1:cd:7d:3e:4d:8b:cd:14:cd:21: 76:d1:ee:2b:37:6d:3c:47:57:fa:3d:64:0b:7a:04: ba:f0:47:00:1d:e6:c5:78:49:71:33:93:d8:04:1f: 8a:bf:1d:fa:3d:76:b8:66:47:5b:b6:18:fc:1b:c0: 2a:ef:33:e8:f4:a9:a1:da:ce:d9:10:a4:73:84:2f: d3:7d:f6:b2:91:c0:eb:74:63:73:9c:af:c4:e0:ad: 7c:ac:44:76:df:40:29:19:fc:77:de:ca:e1:4e:a6: 3d:af:5e:7d:20:c9:e8:b9:6c:32:ee:28:02:9e:83: 39:f7:0f:97:a5:61:af:8a:17:d7:8a:41:df:16:7b: b0:2c:e4:c6:0c:86:0d:23:ea:92:90:d5:ea:74:e1: ed:b8:30:ed:93:4d:68:e5:bc:52:ad:71:8a:81:2a: e9:b5:a5:0c:2b:98:a8:6b:8f:ba:ac:01:3c:52:e0: 0c:0f:8c:f9:02:47:45:53:56:87:e5:1e:12:35:6b: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9B:14:05:8C:78:E3:09:5D:7D:90:20:0E:4D:2C:BF:49:F5:18:5C X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c7:39:1d:02:07:9f:fb:b5:14:9a:b6:30:b1:8a:88:8d:34: 18:dd:69:8d:fc:d1:fc:d1:38:db:8b:c3:4e:3b:37:53:22:c8: 4c:43:52:66:c3:71:f9:29:0e:9d:b8:fe:cb:e8:02:a4:16:37: 0a:6d:f4:76:db:16:8a:4f:98:c9:26:53:56:b4:a7:ff:85:91: ff:6b:54:68:37:b1:f3:26:f9:52:e3:6c:c7:ed:19:61:1c:b8: 7b:d7:9c:c5:03:1a:01:6c:2d:1e:09:6a:51:89:b8:8b:80:df: 70:b8:ff:a6:fa:77:42:67:fe:c4:6c:ee:13:38:b1:c5:d9:82: 43:b2:4d:61:39:eb:cb:65:c0:2c:de:92:3e:61:cc:8d:ad:2b: 35:34:89:71:82:ad:d9:63:d4:c8:4c:4d:f2:0a:bb:c3:07:df: a8:2b:f6:86:5a:8e:60:e0:15:d7:91:db:b4:60:32:bf:eb:db: 13:5d:33:46:81:16:e3:ed:3a:1d:75:3d:f9:07:83:3e:8c:aa: 56:18:3c:9f:cd:fb:eb:89:18:10:59:3d:cb:c2:4c:e8:7c:f8: e1:56:e7:a2:7e:d5:92:a0:14:95:03:bc:0a:2a:25:c2:d6:9c: ca:2d:da:a4:87:84:fb:6f:9d:98:dc:93:61:be:73:6d:bc:1c: 36:6e:c7:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYybaDf4RK5OQ48m9RYGwod3HcjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNjA0MjYwMzI2MTNaFw0yNjA0MjkxMjE0MTNaMDMxMTAvBgNV BAMTKDdEOUIxNDA1OEM3OEUzMDk1RDdEOTAyMDBFNEQyQ0JGNDlGNTE4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tBgVEr2z1iuvJ1UD4P7TbSVO 0r1NIpwk1YTgCfd0jW1OokRl6FBcRajzuEQKe/PuEtHrMylDC3wNb8DABfkw4c19 Pk2LzRTNIXbR7is3bTxHV/o9ZAt6BLrwRwAd5sV4SXEzk9gEH4q/Hfo9drhmR1u2 GPwbwCrvM+j0qaHaztkQpHOEL9N99rKRwOt0Y3Ocr8TgrXysRHbfQCkZ/HfeyuFO pj2vXn0gyei5bDLuKAKegzn3D5elYa+KF9eKQd8We7As5MYMhg0j6pKQ1ep04e24 MO2TTWjlvFKtcYqBKum1pQwrmKhrj7qsATxS4AwPjPkCR0VTVoflHhI1a/gfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfZsUBYx44wldfZAgDk0sv0n1GFwwHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvHOR0CB5/7tRSatjCxioiNNBjdaY380fzR ONuLw047N1MiyExDUmbDcfkpDp24/svoAqQWNwpt9HbbFopPmMkmU1a0p/+Fkf9r VGg3sfMm+VLjbMftGWEcuHvXnMUDGgFsLR4JalGJuIuA33C4/6b6d0Jn/sRs7hM4 scXZgkOyTWE568tlwCzekj5hzI2tKzU0iXGCrdlj1MhMTfIKu8MH36gr9oZajmDg FdeR27RgMr/r2xNdM0aBFuPtOh11PfkHgz6MqlYYPJ/N++uJGBBZPcvCTOh8+OFW 56J+1ZKgFJUDvAoqJcLWnMot2qSHhPtvnZjck2G+c228HDZux+o= -----END CERTIFICATE-----Generated at Mon Apr 27 19:50:05 2026 by rpki-client