$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: HFP/BG6SubLqfh2mM7MGUZwEAkC7HPDGwuQHEjjUvvM= Subject key identifier: B8:3F:CC:4C:D7:CB:C0:BB:9F:6E:39:5E:AE:DE:BF:DB:53:73:08:0E Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 4A9961B0CCC042FC1D2CE2AE567EA03CF07866A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 024F Signing time: Sat 07 Mar 2026 19:21:01 +0000 Manifest this update: Sat 07 Mar 2026 19:16:01 +0000 Manifest next update: Wed 11 Mar 2026 00:06:01 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: 19hffU2qUytc7RSOT4XVnT6JzaqiVWm0F1wqG1uECdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:99:61:b0:cc:c0:42:fc:1d:2c:e2:ae:56:7e:a0:3c:f0:78:66:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Mar 7 19:16:01 2026 GMT Not After : Mar 11 00:06:01 2026 GMT Subject: CN=B83FCC4CD7CBC0BB9F6E395EAEDEBFDB5373080E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4d:62:6e:eb:84:f2:43:6b:bc:a7:87:51:c2: e9:ab:5a:89:26:06:5f:fa:e5:71:02:36:98:49:d9: 64:3f:95:07:65:6b:85:5c:6c:95:61:b8:4b:b2:99: ac:fc:16:c7:3f:84:0b:77:6a:2d:cc:10:4a:5e:10: cf:b8:50:53:a8:76:b8:8b:e4:60:d1:5f:86:0a:e0: 22:b5:4b:71:34:64:4e:b5:83:d9:c1:b6:93:6c:40: 1e:52:cc:2b:d2:39:e6:e3:4e:82:fd:76:ff:3a:1b: cb:7f:c9:90:78:30:57:46:19:40:1c:d5:5b:f1:0c: d8:f8:fe:68:d3:f2:27:77:02:b3:ee:11:76:50:f6: 61:ce:5c:d2:57:9d:54:31:1e:ef:2e:1c:15:09:c1: 0b:31:da:fd:9f:3c:c6:e4:db:61:6f:37:8e:6b:d3: 2e:e6:ac:9d:a4:fd:b1:94:36:26:4c:82:08:04:25: 70:1a:4a:31:4d:5f:b2:de:ff:21:b4:dc:89:49:34: 72:b2:70:02:31:8b:29:c5:dd:b8:b2:a2:05:d2:8a: 95:b5:3b:b9:40:c8:36:91:f7:10:a0:cf:64:af:9e: 9e:f9:e0:73:55:d7:c4:d2:05:4f:e6:3b:7e:69:c5: 03:6e:db:ac:a4:1e:31:e3:68:2d:5f:0d:58:b5:9f: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3F:CC:4C:D7:CB:C0:BB:9F:6E:39:5E:AE:DE:BF:DB:53:73:08:0E X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:21:15:2b:f3:68:c1:9d:a5:ac:55:26:e5:6e:d8:2c:5b:90: 4e:7b:67:94:da:02:d6:e1:3a:6f:36:c0:a7:bd:f0:13:75:23: f3:cb:1c:5b:05:9c:2a:5d:12:a5:35:f8:a6:b9:89:7b:61:f3: 72:5e:9e:d2:47:5b:88:1b:88:a3:6b:58:d9:4d:32:f8:6e:c5: 73:44:e5:aa:d5:25:44:92:54:97:38:bb:cc:50:09:c1:56:99: d2:66:0e:ed:92:fe:2f:d2:08:dc:be:27:ca:1e:ec:6c:ba:ad: 33:22:6e:80:8a:c6:8f:bd:6c:45:2c:29:80:e6:88:01:10:92: 87:e5:e8:53:d3:de:66:78:24:84:ed:49:1b:0e:22:e1:d9:66: 95:a6:2c:9a:7c:f9:29:6a:f0:26:1c:83:a8:cd:33:01:0e:73: 25:d9:5d:72:7d:d1:e9:de:06:d9:c5:5b:d2:f9:24:f3:eb:ed: 72:6e:4c:63:58:98:c0:61:58:aa:c0:1d:da:4e:bc:74:0d:c4: 19:f5:de:09:93:ad:80:de:b1:5b:49:1e:f5:53:3f:6b:ae:03: fc:2e:88:cf:51:5e:a1:c5:00:25:3a:62:26:9b:08:b5:94:7e: 64:c4:18:5a:b6:de:38:81:1a:f2:24:4f:0d:47:6c:b2:06:3b: 2b:d8:38:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSplhsMzAQvwdLOKuVn6gPPB4ZqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNjAzMDcxOTE2MDFaFw0yNjAzMTEwMDA2MDFaMDMxMTAvBgNV BAMTKEI4M0ZDQzRDRDdDQkMwQkI5RjZFMzk1RUFFREVCRkRCNTM3MzA4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTWJu64TyQ2u8p4dRwumrWokm Bl/65XECNphJ2WQ/lQdla4VcbJVhuEuymaz8Fsc/hAt3ai3MEEpeEM+4UFOodriL 5GDRX4YK4CK1S3E0ZE61g9nBtpNsQB5SzCvSOebjToL9dv86G8t/yZB4MFdGGUAc 1VvxDNj4/mjT8id3ArPuEXZQ9mHOXNJXnVQxHu8uHBUJwQsx2v2fPMbk22FvN45r 0y7mrJ2k/bGUNiZMgggEJXAaSjFNX7Le/yG03IlJNHKycAIxiynF3biyogXSipW1 O7lAyDaR9xCgz2Svnp754HNV18TSBU/mO35pxQNu26ykHjHjaC1fDVi1n2ktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuD/MTNfLwLufbjlert6/21NzCA4wHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMhFSvzaMGdpaxVJuVu2CxbkE57Z5TaAtbh Om82wKe98BN1I/PLHFsFnCpdEqU1+Ka5iXth83JentJHW4gbiKNrWNlNMvhuxXNE 5arVJUSSVJc4u8xQCcFWmdJmDu2S/i/SCNy+J8oe7Gy6rTMiboCKxo+9bEUsKYDm iAEQkofl6FPT3mZ4JITtSRsOIuHZZpWmLJp8+Slq8CYcg6jNMwEOcyXZXXJ90ene BtnFW9L5JPPr7XJuTGNYmMBhWKrAHdpOvHQNxBn13gmTrYDesVtJHvVTP2uuA/wu iM9RXqHFACU6YiabCLWUfmTEGFq23jiBGvIkTw1HbLIGOyvYOF8= -----END CERTIFICATE-----Generated at Sat Mar 7 21:18:13 2026 by rpki-client