$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: BeDXdcg0+jmYMPZAU4PvMZ8KNW29k6LLiCsgRT3RrkE= Subject key identifier: F5:BC:DF:F2:62:AC:C1:37:D9:6F:82:F6:A4:61:F1:E5:E7:41:F8:9A Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 5D03214BFE077159C5E7FB27B2C8E9B279250516 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: 011F Signing time: Sat 28 Feb 2026 04:01:48 +0000 Manifest this update: Sat 28 Feb 2026 03:56:48 +0000 Manifest next update: Tue 03 Mar 2026 15:20:48 +0000 Files and hashes: 1: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 3: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) 4: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: Oqw/3vLQxFb4qiRASUfSbptPhk7oU1nKrA9FHtG3LO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:03:21:4b:fe:07:71:59:c5:e7:fb:27:b2:c8:e9:b2:79:25:05:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Feb 28 03:56:48 2026 GMT Not After : Mar 3 15:20:48 2026 GMT Subject: CN=F5BCDFF262ACC137D96F82F6A461F1E5E741F89A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:6a:7e:e7:20:01:f8:6c:97:72:23:3f:28: 0a:8d:10:0d:8e:1d:48:85:9c:3e:22:dd:f2:3f:1c: 97:60:de:3c:cc:f6:f6:e7:ce:54:c2:4d:34:d9:6b: 00:6a:1e:16:f7:10:52:88:95:ba:14:05:43:fe:7e: e4:ba:93:94:08:8a:83:a9:13:d0:2f:ec:8e:79:e2: e3:1d:2a:f3:2c:49:75:8f:1f:84:ad:09:f4:fe:9d: 54:e5:29:c0:96:3c:54:44:61:e8:5d:21:e1:b6:97: 3a:d6:5d:62:2b:33:39:95:e5:3c:65:0b:07:d6:cd: a3:84:e7:9b:78:bc:4b:f5:3c:c1:eb:fc:74:31:5c: 87:b8:a0:6f:8d:ac:79:5d:5f:03:a1:6f:33:8e:b8: f0:fb:f1:08:1f:45:2c:d7:c7:ae:95:9c:0a:11:43: 42:4c:fd:00:cb:ed:f7:94:84:2f:a1:e0:66:3a:0b: 39:75:d5:86:f9:f5:ad:23:7a:84:17:ef:94:a0:b3: df:48:b8:7a:a8:51:45:a3:9d:c4:3d:a4:1b:60:15: 59:a9:a7:b2:b2:2d:b7:f8:76:38:1a:3a:c1:bd:19: 1e:40:22:b7:49:33:6a:4d:9b:92:0b:70:69:a7:bd: fc:51:96:9b:19:1c:8f:f9:69:e7:5c:6f:66:ef:c2: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:DF:F2:62:AC:C1:37:D9:6F:82:F6:A4:61:F1:E5:E7:41:F8:9A X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:40:d2:ee:b6:b0:88:1f:5e:2a:09:7b:3d:c4:36:d5:4e:8c: b3:d1:15:a2:6e:c9:bb:e1:ce:4a:a0:cb:b4:5e:ca:65:51:d0: 5e:70:84:52:a5:fd:9d:13:a2:57:a0:8f:97:9b:fd:28:01:7e: 85:4e:c8:84:a0:ae:2d:44:46:6c:e8:66:91:59:a5:f3:eb:ac: 1c:5f:e9:73:c9:42:19:a8:77:ec:ae:27:88:03:7a:76:b2:f1: d4:10:ca:e5:94:3f:a3:d2:88:16:6d:41:d2:4e:a0:b5:17:ea: e9:f5:43:e5:cc:40:9d:9a:74:19:53:33:06:ad:39:ed:19:34: 4f:76:2a:bf:5e:19:b2:af:6f:d6:f0:33:7b:87:1d:73:46:56: e8:b3:12:48:2b:68:70:bf:ce:2b:c1:72:c6:28:0f:3e:71:72: ef:19:a2:4d:4d:5c:3f:d3:8d:35:4b:a3:0c:7c:bd:23:21:96: 0d:30:32:19:f6:47:d1:97:68:6c:dc:e4:f5:90:34:02:77:9f: a5:08:6d:16:5e:de:44:78:08:fc:8a:29:8b:b1:c5:e3:a0:5a: 72:6f:1c:4a:93:51:cc:17:da:6c:c7:83:a8:e8:f1:3c:e8:82: 97:15:30:b7:5a:56:8a:36:7f:5f:ce:eb:c7:77:92:d1:b1:1e: 7d:b8:bd:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQMhS/4HcVnF5/snssjpsnklBRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNjAyMjgwMzU2NDhaFw0yNjAzMDMxNTIwNDhaMDMxMTAvBgNV BAMTKEY1QkNERkYyNjJBQ0MxMzdEOTZGODJGNkE0NjFGMUU1RTc0MUY4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsR2p+5yAB+GyXciM/KAqNEA2O HUiFnD4i3fI/HJdg3jzM9vbnzlTCTTTZawBqHhb3EFKIlboUBUP+fuS6k5QIioOp E9Av7I554uMdKvMsSXWPH4StCfT+nVTlKcCWPFREYehdIeG2lzrWXWIrMzmV5Txl CwfWzaOE55t4vEv1PMHr/HQxXIe4oG+NrHldXwOhbzOOuPD78QgfRSzXx66VnAoR Q0JM/QDL7feUhC+h4GY6Czl11Yb59a0jeoQX75Sgs99IuHqoUUWjncQ9pBtgFVmp p7KyLbf4djgaOsG9GR5AIrdJM2pNm5ILcGmnvfxRlpsZHI/5aedcb2bvwmrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9bzf8mKswTfZb4L2pGHx5edB+JowHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFA0u62sIgfXioJez3ENtVOjLPRFaJuybvh zkqgy7ReymVR0F5whFKl/Z0Tolegj5eb/SgBfoVOyISgri1ERmzoZpFZpfPrrBxf 6XPJQhmod+yuJ4gDenay8dQQyuWUP6PSiBZtQdJOoLUX6un1Q+XMQJ2adBlTMwat Oe0ZNE92Kr9eGbKvb9bwM3uHHXNGVuizEkgraHC/zivBcsYoDz5xcu8Zok1NXD/T jTVLowx8vSMhlg0wMhn2R9GXaGzc5PWQNAJ3n6UIbRZe3kR4CPyKKYuxxeOgWnJv HEqTUcwX2mzHg6jo8TzogpcVMLdaVoo2f1/O68d3ktGxHn24vYU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:16 2026 by rpki-client