$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: tvHELEyrv3BWMaY7uhn/EL3sS5REzMZA299bamdYae4= Subject key identifier: 5A:78:82:C1:18:F9:8F:2B:53:35:38:BE:AD:6C:A9:8E:B7:E0:08:D8 Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 63CF165CCC1C711FC22AFD3BB08B396C3BFBD842 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: 0135 Signing time: Sun 19 Apr 2026 08:31:51 +0000 Manifest this update: Sun 19 Apr 2026 08:26:51 +0000 Manifest next update: Wed 22 Apr 2026 10:49:51 +0000 Files and hashes: 1: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: Lp4n5hU0GqHnsCDl04cpi3UeQxb1Hvr8W1wngqrT41A=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: ZHB+tTRgPo6rdTXygj1EBojkxuhIq9cR8qPI+iIa1cQ=) 3: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: ws3x4BT57qyaagGuiq3Tp6Jh2onrqo8jOq5oWQ0Iya4=) 4: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 50/h0X48yF6XiQdiL01GD/aPBUnfpp8V0OZDrNu+Wug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cf:16:5c:cc:1c:71:1f:c2:2a:fd:3b:b0:8b:39:6c:3b:fb:d8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Apr 19 08:26:51 2026 GMT Not After : Apr 22 10:49:51 2026 GMT Subject: CN=5A7882C118F98F2B533538BEAD6CA98EB7E008D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:8f:a9:84:37:1a:c2:7d:88:7b:df:60:34: 03:75:e9:08:5a:df:4a:a7:1a:b1:20:48:0b:87:d7: 55:92:f1:79:7a:ad:1b:c7:74:27:9c:30:2d:4f:de: 20:2f:7c:30:7c:70:50:7e:f2:43:11:30:5b:2b:9b: a1:38:26:e2:e7:16:cb:11:33:94:c0:a5:f1:68:30: 95:a9:95:fb:16:3d:14:82:d0:90:50:4c:34:b3:30: 03:c5:14:0c:a9:77:63:7b:52:ee:21:68:c2:58:f5: b8:cc:be:4f:70:81:8f:b3:b9:d2:2c:ba:1c:91:75: d4:ad:58:0f:ad:4e:fc:93:8c:41:8f:f7:13:9e:f0: 06:cb:de:ad:2c:4e:1d:d9:a3:90:5c:92:aa:44:95: a8:09:eb:d9:79:bf:3b:dc:aa:a2:fb:10:0e:5d:e9: 16:5b:35:f5:36:d2:4b:48:a6:31:db:e4:90:e8:ab: 55:e3:71:6c:f8:20:83:90:0d:bb:91:6a:f7:6c:a9: c3:10:9d:59:49:8f:ab:dd:d1:5a:a6:76:5c:45:8b: 18:28:80:b1:a8:62:c8:fd:2c:05:12:20:c0:32:cc: d9:0b:66:ba:cb:57:b7:a8:1f:d9:12:7c:d7:4a:c7: a8:f3:41:56:05:1f:0c:14:0b:e3:3b:3c:9b:cd:e4: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:78:82:C1:18:F9:8F:2B:53:35:38:BE:AD:6C:A9:8E:B7:E0:08:D8 X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:bc:e2:7d:72:38:7e:b4:fd:3e:97:5a:71:0d:f0:b2:7c:0d: 67:c1:73:27:21:af:ef:cb:6e:97:db:67:a4:2b:91:6b:d4:18: dc:45:0e:fd:8d:c3:c4:4e:dc:e1:31:ce:e5:78:5b:30:94:c6: 6d:03:17:9d:f8:09:ef:09:e8:16:10:7c:d4:5d:62:c8:f8:48: af:92:38:cc:8d:15:b9:33:80:cb:c8:80:5f:b5:85:06:95:90: 93:92:35:02:46:c2:eb:ec:74:c8:8d:10:51:99:cf:19:87:54: 2a:70:2d:98:41:a3:ff:43:51:30:cc:00:34:1d:b9:0a:b0:04: 84:c0:66:ce:1f:c4:3f:bc:2b:6d:93:65:a3:4e:7f:f3:6e:61: 0e:45:85:b9:a8:9b:3d:41:a8:47:9f:af:d2:e8:96:91:c7:6f: 2d:dd:56:44:cb:7a:14:90:1b:f5:8a:6f:6f:20:21:e0:cb:ce: 41:e3:e4:2d:59:4c:af:25:76:4d:17:b0:bd:d6:77:84:ec:9c: 80:38:f3:ea:d1:28:85:c7:cc:a8:2b:e0:ea:7d:0d:f7:b1:43: d8:7f:43:12:09:c9:54:2f:48:7d:17:c1:25:83:d3:87:cc:4e: 5a:e7:4c:7d:d3:8d:58:e8:4a:72:f9:8d:2e:82:2e:bb:94:0e: 3e:0e:3b:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY88WXMwccR/CKv07sIs5bDv72EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNjA0MTkwODI2NTFaFw0yNjA0MjIxMDQ5NTFaMDMxMTAvBgNV BAMTKDVBNzg4MkMxMThGOThGMkI1MzM1MzhCRUFENkNBOThFQjdFMDA4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXo+phDcawn2Ie99gNAN16Qha 30qnGrEgSAuH11WS8Xl6rRvHdCecMC1P3iAvfDB8cFB+8kMRMFsrm6E4JuLnFssR M5TApfFoMJWplfsWPRSC0JBQTDSzMAPFFAypd2N7Uu4haMJY9bjMvk9wgY+zudIs uhyRddStWA+tTvyTjEGP9xOe8AbL3q0sTh3Zo5BckqpElagJ69l5vzvcqqL7EA5d 6RZbNfU20ktIpjHb5JDoq1XjcWz4IIOQDbuRavdsqcMQnVlJj6vd0VqmdlxFixgo gLGoYsj9LAUSIMAyzNkLZrrLV7eoH9kSfNdKx6jzQVYFHwwUC+M7PJvN5A6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWniCwRj5jytTNTi+rWypjrfgCNgwHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS84n1yOH60/T6XWnEN8LJ8DWfBcychr+/L bpfbZ6QrkWvUGNxFDv2Nw8RO3OExzuV4WzCUxm0DF534Ce8J6BYQfNRdYsj4SK+S OMyNFbkzgMvIgF+1hQaVkJOSNQJGwuvsdMiNEFGZzxmHVCpwLZhBo/9DUTDMADQd uQqwBITAZs4fxD+8K22TZaNOf/NuYQ5Fhbmomz1BqEefr9LolpHHby3dVkTLehSQ G/WKb28gIeDLzkHj5C1ZTK8ldk0XsL3Wd4TsnIA48+rRKIXHzKgr4Op9DfexQ9h/ QxIJyVQvSH0XwSWD04fMTlrnTH3TjVjoSnL5jS6CLruUDj4OO9U= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:04 2026 by rpki-client