$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: nSGeMnXOXruCcv7uzk7xH5FeSXBNHfgghsUpqZM8kbI= Subject key identifier: 22:35:D5:C4:DE:7E:99:BA:87:24:71:5B:7F:74:31:A4:CE:14:F5:54 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 3771E02E44D5DF2FAA54B4B224569B6433EE9E82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 02A9 Signing time: Thu 16 Apr 2026 13:32:27 +0000 Manifest this update: Thu 16 Apr 2026 13:27:27 +0000 Manifest next update: Sun 19 Apr 2026 20:00:27 +0000 Files and hashes: 1: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: N1a02xzqoDSkOoQk88Z6OF5DlRsc4GGmxPIktdxSCY4=) 2: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: i+MoEz8eS3RKxf5DE+oBdBXLAZikYN1wJCHUVs+azh0=) 3: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: +6hr9I24K4H44FcYhHYBXgx5KKaUgX1+M7GrBEyUPNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:71:e0:2e:44:d5:df:2f:aa:54:b4:b2:24:56:9b:64:33:ee:9e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Apr 16 13:27:27 2026 GMT Not After : Apr 19 20:00:27 2026 GMT Subject: CN=2235D5C4DE7E99BA8724715B7F7431A4CE14F554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:c1:6d:2e:68:30:5f:61:9c:54:5f:35:9a: 72:79:60:2a:e5:17:6c:d0:00:59:81:6d:eb:fc:c2: d0:ce:c4:87:76:5e:34:28:68:56:a4:6e:cc:d5:b2: 30:a1:9c:83:62:1e:f7:93:e5:24:25:85:d9:cd:04: 46:1f:56:29:28:7a:c3:07:b4:74:7c:1c:dd:a7:67: 82:c6:9f:bd:17:62:e2:11:49:e4:bd:e8:bf:34:93: 5d:7d:b4:6b:1a:3b:a8:d9:ba:2a:41:eb:b7:b9:cb: ec:b6:30:61:5e:6e:ee:5a:20:6f:4c:27:99:43:6b: f7:85:84:ea:af:40:2e:0a:25:b3:3a:bd:b1:c7:7c: 3d:48:5a:a5:86:cb:5f:21:9a:fb:39:b7:29:13:e6: 0a:54:b3:d8:62:79:88:b1:d0:ec:c8:75:00:09:ca: 4d:22:c9:60:0b:35:c9:58:a4:03:14:60:7e:cf:95: 92:b4:f2:9c:fe:13:fe:9f:eb:43:d1:32:14:99:44: 99:1b:6b:f3:23:ad:ce:b3:ba:d8:06:41:f8:52:53: 43:1c:4d:c4:f1:ba:84:75:3a:0c:3e:8f:8d:b9:10: c3:d8:36:6b:cd:45:e0:d2:29:65:3d:5a:5a:34:58: fc:84:2b:f9:da:8d:54:83:b0:99:08:b3:0a:cc:80: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:D5:C4:DE:7E:99:BA:87:24:71:5B:7F:74:31:A4:CE:14:F5:54 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:03:a7:73:a1:c4:18:b9:a5:23:08:5d:f2:8c:93:ac:88:6f: 82:b5:7f:2c:89:1c:7f:f9:1a:46:cd:d8:a7:4e:bf:65:d7:a2: 50:f5:82:8e:f3:07:25:af:69:79:2a:5b:37:f1:52:c4:fa:ef: 41:5f:39:3b:aa:6f:43:45:86:73:a2:ff:46:6e:1d:c8:b6:ce: 57:db:6b:7d:00:4f:1b:a2:0e:b1:d2:50:39:a8:97:d1:7f:0d: e7:8e:b2:2a:f5:df:40:e2:1a:ff:ca:df:48:9f:09:0e:4b:39: 8c:73:b9:21:dd:da:a2:42:b1:cd:60:36:21:b4:9e:10:bc:b2: a4:ab:be:41:dc:44:81:2f:9d:35:c8:69:97:dd:4f:53:f2:27: bf:a3:e9:f7:96:6a:87:f1:5b:58:61:4c:d5:39:76:40:68:53: c1:bd:3a:23:00:e4:6e:2c:2f:e2:c3:b0:6b:cd:68:f1:53:86: da:b1:80:ed:49:ea:58:32:58:ea:55:96:ca:97:22:a0:47:2c: 25:d1:a1:de:ff:94:a9:07:88:fc:0d:d7:ed:f9:6f:0e:5e:6c: 0b:a9:bd:f9:5b:ac:75:8f:e6:ce:51:6d:f9:25:6c:00:38:c2: 4f:f1:45:79:d0:f0:14:d9:1c:c5:47:6d:b6:d8:86:e2:5f:d1: 98:10:26:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3HgLkTV3y+qVLSyJFabZDPunoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNjA0MTYxMzI3MjdaFw0yNjA0MTkyMDAwMjdaMDMxMTAvBgNV BAMTKDIyMzVENUM0REU3RTk5QkE4NzI0NzE1QjdGNzQzMUE0Q0UxNEY1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWjsFtLmgwX2GcVF81mnJ5YCrl F2zQAFmBbev8wtDOxId2XjQoaFakbszVsjChnINiHveT5SQlhdnNBEYfVikoesMH tHR8HN2nZ4LGn70XYuIRSeS96L80k119tGsaO6jZuipB67e5y+y2MGFebu5aIG9M J5lDa/eFhOqvQC4KJbM6vbHHfD1IWqWGy18hmvs5tykT5gpUs9hieYix0OzIdQAJ yk0iyWALNclYpAMUYH7PlZK08pz+E/6f60PRMhSZRJkba/Mjrc6zutgGQfhSU0Mc TcTxuoR1Ogw+j425EMPYNmvNReDSKWU9Wlo0WPyEK/najVSDsJkIswrMgNFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIjXVxN5+mbqHJHFbf3QxpM4U9VQwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0Dp3OhxBi5pSMIXfKMk6yIb4K1fyyJHH/5 GkbN2KdOv2XXolD1go7zByWvaXkqWzfxUsT670FfOTuqb0NFhnOi/0ZuHci2zlfb a30ATxuiDrHSUDmol9F/DeeOsir130DiGv/K30ifCQ5LOYxzuSHd2qJCsc1gNiG0 nhC8sqSrvkHcRIEvnTXIaZfdT1PyJ7+j6feWaofxW1hhTNU5dkBoU8G9OiMA5G4s L+LDsGvNaPFThtqxgO1J6lgyWOpVlsqXIqBHLCXRod7/lKkHiPwN1+35bw5ebAup vflbrHWP5s5RbfklbAA4wk/xRXnQ8BTZHMVHbbbYhuJf0ZgQJqA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:16:34 2026 by rpki-client