$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: 0NJYokN1WSfnG7CKbhLzlWNw+4rrz67sSVPkz0ZI58E= Subject key identifier: A6:26:DA:7D:C4:B2:96:D7:22:F8:DB:2A:42:E8:12:25:B0:0A:A9:86 Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 5DBBAACE081CADD7B86F50D1C1D901D4A7F8E37E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 028E Signing time: Thu 12 Mar 2026 11:01:11 +0000 Manifest this update: Thu 12 Mar 2026 10:56:11 +0000 Manifest next update: Sun 15 Mar 2026 22:49:11 +0000 Files and hashes: 1: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: LPZNtCAb1egsQiz9jUzclPp+tYS5LLq7gA7eaYtPlIU=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: wQ45tmfAW0vTrcP1CHqdkU4kV8VsIFLIOnBtD5fu+LU=) 3: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: gJ4+RIzMU3sNK8zgeNrc/IFATPDJCmEd1aztpgZm3dA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 22:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bb:aa:ce:08:1c:ad:d7:b8:6f:50:d1:c1:d9:01:d4:a7:f8:e3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Mar 12 10:56:11 2026 GMT Not After : Mar 15 22:49:11 2026 GMT Subject: CN=A626DA7DC4B296D722F8DB2A42E81225B00AA986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6c:97:ac:ac:26:6e:d5:ea:39:b4:db:23:c9: 23:4d:42:7a:72:8c:cd:4a:56:f8:5a:87:f3:e2:06: c2:19:43:d5:71:77:21:12:0e:f4:fa:70:5b:6a:a2: fe:b1:e1:34:bb:97:03:3f:4e:22:a0:b2:87:58:f8: 42:ce:29:09:13:16:28:94:c5:4a:ec:01:7c:5a:61: 9f:ae:c9:40:66:6f:f5:68:df:4f:aa:68:94:4b:4a: 7b:9f:43:63:60:b9:33:3e:fb:34:07:da:d7:69:6d: 63:b0:1d:57:ee:ef:27:e0:26:28:a7:da:57:b5:e6: a8:eb:8a:8d:77:b6:7d:1c:e9:42:54:7e:3d:4e:73: c4:3b:8b:45:28:52:1e:e3:32:e6:52:fe:94:d8:19: db:4c:c3:4d:77:96:fe:b4:76:17:3c:e3:f0:e2:09: 97:0d:72:cd:93:46:e9:f9:a4:62:fe:d0:44:a0:4e: 95:9e:f6:56:2b:dd:38:36:d8:f7:5b:73:a4:3d:a3: b0:5b:15:37:9e:b1:b3:61:b9:cf:ba:82:47:f4:ff: 95:16:bf:c9:9d:28:ca:4b:dd:6f:7d:03:7e:bd:70: c6:34:d9:f2:c2:85:d4:e4:a8:d4:98:37:2c:41:db: 91:85:e3:94:a6:a8:9c:70:b5:36:44:2f:d9:af:54: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:26:DA:7D:C4:B2:96:D7:22:F8:DB:2A:42:E8:12:25:B0:0A:A9:86 X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6e:9a:48:dc:a0:15:c0:a7:8c:54:81:20:10:40:28:9f:47: 4c:a9:0e:a0:9c:65:3e:a0:45:8f:80:ac:ab:74:d0:25:83:13: 76:d6:d4:af:8b:ca:b8:20:a6:d9:2e:9f:38:c6:59:9a:2c:52: 17:a3:c3:6e:f6:49:92:d0:9f:60:5c:d5:b4:ce:aa:09:5e:b8: 29:7c:87:6a:4a:f5:01:0f:82:54:c3:21:d1:bb:70:9e:45:d2: 86:8d:0e:ae:e9:93:07:01:2f:f4:1a:9f:74:7a:06:df:ed:5b: 9d:2b:f1:6b:0d:5f:1b:5a:42:71:25:19:28:3a:f9:89:0c:bd: c8:bf:0f:9a:5c:e5:e6:e8:0e:54:d8:19:fd:b2:6c:4d:38:dc: 68:9f:cd:f3:08:a8:c6:f5:32:08:24:22:5a:ff:db:1b:6c:9f: b5:d4:a5:69:be:4f:d1:91:38:fe:a1:c8:fd:95:6f:f9:1a:4d: 5b:6c:27:31:2f:ff:f5:0c:c3:47:11:80:d5:fa:b9:eb:5d:7e: de:56:63:13:06:1e:0b:bb:0e:22:df:10:5c:45:54:2f:e6:dd: 50:b2:ea:f4:27:b9:24:c9:ca:a6:29:b4:f6:aa:31:b4:80:ba: e7:7b:46:83:bb:4d:7d:7f:ca:76:41:e4:b6:0a:41:cc:16:c1: 70:bc:39:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbuqzggcrde4b1DRwdkB1Kf4434wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNjAzMTIxMDU2MTFaFw0yNjAzMTUyMjQ5MTFaMDMxMTAvBgNV BAMTKEE2MjZEQTdEQzRCMjk2RDcyMkY4REIyQTQyRTgxMjI1QjAwQUE5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkbJesrCZu1eo5tNsjySNNQnpy jM1KVvhah/PiBsIZQ9VxdyESDvT6cFtqov6x4TS7lwM/TiKgsodY+ELOKQkTFiiU xUrsAXxaYZ+uyUBmb/Vo30+qaJRLSnufQ2NguTM++zQH2tdpbWOwHVfu7yfgJiin 2le15qjrio13tn0c6UJUfj1Oc8Q7i0UoUh7jMuZS/pTYGdtMw013lv60dhc84/Di CZcNcs2TRun5pGL+0ESgTpWe9lYr3Tg22Pdbc6Q9o7BbFTeesbNhuc+6gkf0/5UW v8mdKMpL3W99A369cMY02fLChdTkqNSYNyxB25GF45SmqJxwtTZEL9mvVPzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpibafcSyltci+NsqQugSJbAKqYYwHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9umkjcoBXAp4xUgSAQQCifR0ypDqCcZT6g RY+ArKt00CWDE3bW1K+LyrggptkunzjGWZosUhejw272SZLQn2Bc1bTOqgleuCl8 h2pK9QEPglTDIdG7cJ5F0oaNDq7pkwcBL/Qan3R6Bt/tW50r8WsNXxtaQnElGSg6 +YkMvci/D5pc5eboDlTYGf2ybE043GifzfMIqMb1MggkIlr/2xtsn7XUpWm+T9GR OP6hyP2Vb/kaTVtsJzEv//UMw0cRgNX6uetdft5WYxMGHgu7DiLfEFxFVC/m3VCy 6vQnuSTJyqYptPaqMbSAuud7RoO7TX1/ynZB5LYKQcwWwXC8ObQ= -----END CERTIFICATE-----Generated at Fri Mar 13 10:40:10 2026 by rpki-client