$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: HnRHNC1S7i6Ljw3SUmnCSRC0LnPD721To60FhLAJP1c= Subject key identifier: 89:DE:F5:C2:D5:05:7D:FD:21:1F:FB:48:99:29:51:86:3C:01:4D:5E Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 013030C8C29AF5E62C3791C58C201A5B853BCE50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 0263 Signing time: Tue 21 Apr 2026 02:41:01 +0000 Manifest this update: Tue 21 Apr 2026 02:36:01 +0000 Manifest next update: Fri 24 Apr 2026 12:56:01 +0000 Files and hashes: 1: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: OF/j+qxHi+F1nyuLDxpayXgCMfkcoZZXXwu3NF+8IdA=) 2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: TLNtaAgAbC3C6y0F7/m5UW2AOQ5UMY/y6MgD2RO+FQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 12:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:30:30:c8:c2:9a:f5:e6:2c:37:91:c5:8c:20:1a:5b:85:3b:ce:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Apr 21 02:36:01 2026 GMT Not After : Apr 24 12:56:01 2026 GMT Subject: CN=89DEF5C2D5057DFD211FFB48992951863C014D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:f0:e4:7c:9a:23:0e:13:4e:8d:2c:68:20: f6:5b:a9:2d:78:01:0a:46:a9:11:65:ff:49:f2:fd: d6:9f:10:7e:26:c6:dd:02:3c:7a:bf:db:03:24:44: 48:d6:c6:fe:69:08:35:23:40:bc:82:57:f2:53:b3: 53:19:51:48:15:09:3b:ed:1d:0b:6b:5e:3c:22:0b: e9:a0:30:a5:b0:6f:99:d2:93:1a:f0:7f:79:7e:b6: 9e:af:55:c9:a5:b6:3a:09:c9:37:16:f3:cd:65:d3: d8:de:09:f2:4b:e5:d8:ed:2a:45:90:04:7f:ef:87: 3a:32:c9:df:bd:17:8d:c5:4b:a1:5b:83:3c:41:20: a0:0b:27:f5:1d:b7:88:56:b3:c4:c8:3c:be:2a:d0: 0d:2b:ee:01:2c:22:0b:5c:69:06:63:de:93:c1:45: 1c:0b:e6:d5:14:1a:1a:1f:a3:12:92:0c:40:09:d6: d7:e5:f5:29:80:1d:90:ca:03:5f:4d:12:cd:dd:9e: c8:cf:09:4c:6c:cc:70:7a:b6:dc:20:07:0a:99:f4: 4e:ec:51:29:b5:dc:47:b7:43:e6:01:c9:4d:8e:aa: 18:d4:91:95:e1:ca:da:39:e8:9d:bf:81:3b:fc:df: 70:af:03:fe:36:86:c6:d1:63:98:57:7a:01:f9:d5: 41:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DE:F5:C2:D5:05:7D:FD:21:1F:FB:48:99:29:51:86:3C:01:4D:5E X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:78:db:54:cc:52:73:b8:b3:db:79:84:2a:88:d6:89:fe:19: 92:fc:fe:89:75:4e:8a:bd:9f:96:34:4e:2f:6e:15:5c:31:61: c1:dc:0a:8b:a3:3c:79:1f:34:cb:0c:fb:34:1d:04:50:e9:06: 1a:77:ce:ca:ec:4b:f3:68:3e:d1:f9:47:43:8d:63:1a:e8:cf: 8d:1f:8b:89:81:dd:82:ee:bc:20:10:80:8a:47:e9:28:2f:d2: 69:e4:cb:87:bf:f7:0f:fb:94:af:5d:bb:46:29:d9:dd:ea:1b: f9:4b:25:d4:63:57:19:fb:ca:b5:1d:58:bd:db:3c:46:75:5d: b8:01:cc:f6:13:2b:28:0e:40:58:15:25:a4:8c:f3:b0:37:ad: 50:5b:8f:71:bf:0e:e9:de:bc:93:04:cf:12:00:5a:b0:51:1b: 05:6d:58:5c:20:47:f0:f3:14:47:06:3b:57:90:ef:a1:f8:4c: b7:dc:19:dc:f8:3f:3d:35:d4:48:dc:2b:eb:9e:be:67:a9:cf: 6a:fb:a0:12:8d:3b:9a:a8:d1:3e:72:20:b6:d6:6c:c3:84:f9: 8a:07:08:f4:d1:cc:f7:44:52:7c:b3:d9:2e:58:56:44:01:22: 2f:ad:b4:c6:be:ce:32:9c:97:f7:9f:4f:96:5d:f1:02:93:7d: 1b:ae:87:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATAwyMKa9eYsN5HFjCAaW4U7zlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNjA0MjEwMjM2MDFaFw0yNjA0MjQxMjU2MDFaMDMxMTAvBgNV BAMTKDg5REVGNUMyRDUwNTdERkQyMTFGRkI0ODk5Mjk1MTg2M0MwMTRENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFPDkfJojDhNOjSxoIPZbqS14 AQpGqRFl/0ny/dafEH4mxt0CPHq/2wMkREjWxv5pCDUjQLyCV/JTs1MZUUgVCTvt HQtrXjwiC+mgMKWwb5nSkxrwf3l+tp6vVcmltjoJyTcW881l09jeCfJL5djtKkWQ BH/vhzoyyd+9F43FS6FbgzxBIKALJ/Udt4hWs8TIPL4q0A0r7gEsIgtcaQZj3pPB RRwL5tUUGhofoxKSDEAJ1tfl9SmAHZDKA19NEs3dnsjPCUxszHB6ttwgBwqZ9E7s USm13Ee3Q+YByU2OqhjUkZXhyto56J2/gTv833CvA/42hsbRY5hXegH51UGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUid71wtUFff0hH/tImSlRhjwBTV4wHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACV421TMUnO4s9t5hCqI1on+GZL8/ol1Toq9 n5Y0Ti9uFVwxYcHcCoujPHkfNMsM+zQdBFDpBhp3zsrsS/NoPtH5R0ONYxroz40f i4mB3YLuvCAQgIpH6Sgv0mnky4e/9w/7lK9du0Yp2d3qG/lLJdRjVxn7yrUdWL3b PEZ1XbgBzPYTKygOQFgVJaSM87A3rVBbj3G/DunevJMEzxIAWrBRGwVtWFwgR/Dz FEcGO1eQ76H4TLfcGdz4Pz011EjcK+uevmepz2r7oBKNO5qo0T5yILbWbMOE+YoH CPTRzPdEUnyz2S5YVkQBIi+ttMa+zjKcl/efT5Zd8QKTfRuuh3g= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:33 2026 by rpki-client