$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: sb77nEdUO+uq24nxn+x2gk1O7kyRmgC+ZofZoY5PuI0= Subject key identifier: 8E:0C:2A:DF:74:26:0A:63:59:5E:6A:B7:60:8B:82:5B:67:9B:6C:92 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 3D2167B584574AB8556F9D83834AE38C88CA8B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0294 Signing time: Fri 27 Feb 2026 23:12:19 +0000 Manifest this update: Fri 27 Feb 2026 23:07:19 +0000 Manifest next update: Tue 03 Mar 2026 06:37:19 +0000 Files and hashes: 1: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: kRKJMsnamC6fd6FcQ7gFM3XT5Fm6gZdw4F9jNxG/Shc=) 2: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: i+MoEz8eS3RKxf5DE+oBdBXLAZikYN1wJCHUVs+azh0=) 3: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: +6hr9I24K4H44FcYhHYBXgx5KKaUgX1+M7GrBEyUPNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:21:67:b5:84:57:4a:b8:55:6f:9d:83:83:4a:e3:8c:88:ca:8b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Feb 27 23:07:19 2026 GMT Not After : Mar 3 06:37:19 2026 GMT Subject: CN=8E0C2ADF74260A63595E6AB7608B825B679B6C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1b:b1:22:71:7f:24:18:4a:6a:33:67:9f:6e: 5c:38:e3:38:cb:a9:1e:27:aa:a5:02:4f:f2:d4:77: 5d:a6:4e:22:2e:ab:da:9d:05:67:e7:c7:0b:fb:18: 8b:ae:7d:b1:58:6e:e4:da:46:22:73:94:76:86:42: 7c:7f:21:fc:2c:7b:b5:b0:69:db:3e:dc:52:25:04: e9:58:d7:d0:3d:bc:17:2b:3c:4e:3e:f9:ae:ac:db: 9b:75:be:3b:83:21:f1:53:a6:4c:ba:3c:ef:7a:46: a2:f3:71:60:4d:be:05:43:55:3d:05:02:32:73:27: 64:13:8f:ab:1b:57:20:66:77:f0:7d:96:ff:59:ab: b8:dc:14:11:4c:78:42:6b:ef:37:29:48:bc:91:5f: 90:bd:bc:2f:de:84:7c:7c:ff:69:7e:8d:ff:3a:ac: fc:8f:1e:96:e8:cf:6c:af:46:22:68:49:e3:74:99: 34:46:f1:de:76:ee:59:25:00:f4:86:30:b6:b9:dd: 32:07:1b:0a:f8:ed:d8:42:de:e4:59:5e:5d:b1:c6: c1:93:ce:c4:61:fb:ff:31:9f:7f:73:31:91:8f:cc: 41:65:68:9b:f3:66:45:23:bc:22:ad:a4:52:0c:ed: a1:7f:15:aa:d1:85:78:ac:68:96:7e:c0:74:7a:ca: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0C:2A:DF:74:26:0A:63:59:5E:6A:B7:60:8B:82:5B:67:9B:6C:92 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:05:48:45:05:8a:44:c4:3d:65:bb:50:df:5c:a0:2b:9e:ea: a1:64:42:59:23:e5:00:6c:ea:d7:fd:23:e8:60:36:0b:87:e2: ed:ad:42:93:07:ae:7a:10:bc:c0:c2:1f:ca:48:ff:7f:93:82: 21:c6:55:f4:02:de:ea:3a:c1:bd:13:95:f6:7b:f4:a3:35:ae: 8b:0a:6d:6b:fc:c3:88:66:4a:d2:12:f1:c4:18:9b:49:e4:a8: 6b:ff:77:46:a3:24:04:c8:1a:b9:3c:9f:cd:92:e2:29:27:bb: 59:20:77:9e:a8:80:c6:15:39:f4:3e:ae:ac:e7:d7:81:df:ff: f1:6d:dd:58:58:ac:d5:65:60:d4:65:e2:56:ae:cd:85:94:10: 72:ed:a0:51:2f:09:bc:36:4a:15:fa:16:fe:d8:e0:b8:c6:c0: 2b:c7:fb:d2:b1:cc:fb:7d:88:3e:47:65:d1:f1:e9:05:57:c5: 07:c1:00:bb:ba:d5:d3:7b:1e:06:fc:4b:66:a4:26:41:10:08: 4d:d6:2f:c4:95:99:4f:71:28:91:ac:92:e5:0a:c5:5e:01:0c: d0:52:23:d5:ba:dc:40:c7:95:75:95:b5:2a:66:8a:a6:02:b2: 1b:33:f6:bf:9d:9d:71:ac:14:b9:27:9f:db:ac:e0:ad:1c:d6: 06:ad:d4:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSFntYRXSrhVb52Dg0rjjIjKizkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNjAyMjcyMzA3MTlaFw0yNjAzMDMwNjM3MTlaMDMxMTAvBgNV BAMTKDhFMEMyQURGNzQyNjBBNjM1OTVFNkFCNzYwOEI4MjVCNjc5QjZDOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhG7EicX8kGEpqM2efblw44zjL qR4nqqUCT/LUd12mTiIuq9qdBWfnxwv7GIuufbFYbuTaRiJzlHaGQnx/Ifwse7Ww ads+3FIlBOlY19A9vBcrPE4++a6s25t1vjuDIfFTpky6PO96RqLzcWBNvgVDVT0F AjJzJ2QTj6sbVyBmd/B9lv9Zq7jcFBFMeEJr7zcpSLyRX5C9vC/ehHx8/2l+jf86 rPyPHpboz2yvRiJoSeN0mTRG8d527lklAPSGMLa53TIHGwr47dhC3uRZXl2xxsGT zsRh+/8xn39zMZGPzEFlaJvzZkUjvCKtpFIM7aF/FarRhXisaJZ+wHR6ymz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjgwq33QmCmNZXmq3YIuCW2ebbJIwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYFSEUFikTEPWW7UN9coCue6qFkQlkj5QBs 6tf9I+hgNguH4u2tQpMHrnoQvMDCH8pI/3+TgiHGVfQC3uo6wb0TlfZ79KM1rosK bWv8w4hmStIS8cQYm0nkqGv/d0ajJATIGrk8n82S4iknu1kgd56ogMYVOfQ+rqzn 14Hf//Ft3VhYrNVlYNRl4lauzYWUEHLtoFEvCbw2ShX6Fv7Y4LjGwCvH+9KxzPt9 iD5HZdHx6QVXxQfBALu61dN7Hgb8S2akJkEQCE3WL8SVmU9xKJGskuUKxV4BDNBS I9W63EDHlXWVtSpmiqYCshsz9r+dnXGsFLknn9us4K0c1gat1IA= -----END CERTIFICATE-----Generated at Mon Mar 2 07:28:34 2026 by rpki-client