$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: r1kwyMMfOfNU+I8aBQu29NaSGAI9hOV7s4F4aW9ZWVo= Subject key identifier: 9F:54:C5:FE:A3:50:FC:E4:C3:CF:55:F4:1D:8B:DF:95:8E:5E:7D:90 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 494CCF395049DB9A8570A8553B3CBB40E0CF7AA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 024C Signing time: Sun 01 Mar 2026 07:50:59 +0000 Manifest this update: Sun 01 Mar 2026 07:45:59 +0000 Manifest next update: Wed 04 Mar 2026 12:04:59 +0000 Files and hashes: 1: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: Otqbv3Lmm+lOp2bPtDsgDebX6W6tYzRPBpiAltfICvw=) 2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4c:cf:39:50:49:db:9a:85:70:a8:55:3b:3c:bb:40:e0:cf:7a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Mar 1 07:45:59 2026 GMT Not After : Mar 4 12:04:59 2026 GMT Subject: CN=9F54C5FEA350FCE4C3CF55F41D8BDF958E5E7D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:b6:9b:10:c2:45:e5:d8:df:90:67:fb:92: 5d:88:25:68:59:76:ad:49:50:3c:e5:19:fa:39:bf: eb:1a:95:fc:0d:49:e9:70:ac:ef:30:de:80:94:09: 0f:07:1f:df:91:b7:26:83:a2:47:d1:54:bc:ea:ce: 56:de:ae:ec:1c:92:34:9d:b1:8d:d4:8d:98:91:38: f6:e2:19:dd:a1:74:12:b8:09:4b:98:06:7d:40:ad: 8a:0b:fd:53:44:82:6d:60:f1:57:34:65:a8:25:b3: 2a:77:70:0a:56:c0:57:f5:2d:cd:14:a7:01:f4:43: e3:98:57:b0:18:27:d8:f3:fd:c9:5a:17:64:75:b8: 7a:12:5c:54:32:48:a1:ae:76:bd:cb:19:d8:2c:51: d9:c4:8c:64:d9:47:c2:5f:2e:80:0b:cb:69:58:39: e0:ac:02:96:ac:fb:5a:27:82:47:b1:36:5d:39:b4: 0c:b5:6c:be:31:c0:43:99:c8:45:cb:4f:64:b3:5e: e2:ba:21:54:46:4c:1b:df:b2:70:ea:b4:93:f9:63: 04:ca:8f:91:59:8f:33:0e:e8:01:ff:d9:98:87:0b: d5:f3:c1:3d:77:0b:6d:70:e5:d4:8d:23:9f:db:9f: 70:fa:1e:de:b2:ea:16:26:54:3c:35:12:ce:54:9f: bb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:C5:FE:A3:50:FC:E4:C3:CF:55:F4:1D:8B:DF:95:8E:5E:7D:90 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4f:2b:2c:3c:e5:49:0f:cc:94:a0:4d:11:e7:b1:ee:21:69: 32:b5:70:71:14:74:0a:0f:5b:87:04:8c:a1:a3:00:68:3e:bd: b8:28:b0:ac:c2:84:b8:2a:1f:9a:cf:6f:24:cc:aa:f6:73:cf: 7a:62:af:ca:28:98:4a:4d:bd:51:dc:f8:7b:c3:7d:3a:5e:d4: 60:ef:06:bc:9b:a3:96:04:a8:e1:38:39:0b:78:de:3d:bd:a1: 3b:d4:96:a9:8f:ac:ba:57:81:40:23:77:31:f5:e8:3f:f2:c1: fa:b5:79:ae:82:ec:a9:52:45:0d:0e:be:ad:77:ca:d2:b9:70: 00:1c:cc:b4:8d:3b:27:99:88:1f:df:82:3e:ea:74:ae:dd:4b: d9:0d:fa:c8:30:1c:6e:d4:98:52:87:c5:d2:0d:5b:ff:d2:12: 0e:ea:6f:b5:56:1a:36:82:33:80:c4:c6:d3:62:7d:b1:17:e4: 72:d9:b6:41:b6:e5:66:18:5e:27:3c:5c:88:c2:c0:72:cd:89: 67:55:00:23:dd:bd:ad:29:77:bb:b6:8c:f9:af:a3:1d:5c:d1: f7:4c:76:4b:45:0d:c1:f6:46:c2:50:8e:2d:55:b4:29:3a:ad: 74:d6:11:ba:aa:f6:55:a7:91:89:4a:98:70:67:35:32:a1:82: 5d:56:8e:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUzPOVBJ25qFcKhVOzy7QODPeqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNjAzMDEwNzQ1NTlaFw0yNjAzMDQxMjA0NTlaMDMxMTAvBgNV BAMTKDlGNTRDNUZFQTM1MEZDRTRDM0NGNTVGNDFEOEJERjk1OEU1RTdEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80babEMJF5djfkGf7kl2IJWhZ dq1JUDzlGfo5v+salfwNSelwrO8w3oCUCQ8HH9+RtyaDokfRVLzqzlberuwckjSd sY3UjZiROPbiGd2hdBK4CUuYBn1ArYoL/VNEgm1g8Vc0Zaglsyp3cApWwFf1Lc0U pwH0Q+OYV7AYJ9jz/claF2R1uHoSXFQySKGudr3LGdgsUdnEjGTZR8JfLoALy2lY OeCsApas+1ongkexNl05tAy1bL4xwEOZyEXLT2SzXuK6IVRGTBvfsnDqtJP5YwTK j5FZjzMO6AH/2ZiHC9XzwT13C21w5dSNI5/bn3D6Ht6y6hYmVDw1Es5Un7t3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn1TF/qNQ/OTDz1X0HYvflY5efZAwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpPKyw85UkPzJSgTRHnse4haTK1cHEUdAoP W4cEjKGjAGg+vbgosKzChLgqH5rPbyTMqvZzz3pir8oomEpNvVHc+HvDfTpe1GDv Brybo5YEqOE4OQt43j29oTvUlqmPrLpXgUAjdzH16D/ywfq1ea6C7KlSRQ0Ovq13 ytK5cAAczLSNOyeZiB/fgj7qdK7dS9kN+sgwHG7UmFKHxdINW//SEg7qb7VWGjaC M4DExtNifbEX5HLZtkG25WYYXic8XIjCwHLNiWdVACPdva0pd7u2jPmvox1c0fdM dktFDcH2RsJQji1VtCk6rXTWEbqq9lWnkYlKmHBnNTKhgl1WjpM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:16 2026 by rpki-client