$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: TmwXkpIrA+dGhj1Jwg8GbYizrDgWu77CKfs31oOX3vs= Subject key identifier: 0F:CE:56:9E:8F:FD:79:8E:03:7B:5D:C5:DD:D7:A2:BA:C1:8D:A1:C7 Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 6C43D56663CC1FF6374183980EF04599BCB45B16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 03D1 Signing time: Sat 28 Feb 2026 08:42:36 +0000 Manifest this update: Sat 28 Feb 2026 08:37:36 +0000 Manifest next update: Tue 03 Mar 2026 10:30:36 +0000 Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: GR0AKlo4ZdU+C1Bl6ngyfQfYM5hI9mAsNVu3jRnqmlg=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:43:d5:66:63:cc:1f:f6:37:41:83:98:0e:f0:45:99:bc:b4:5b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Feb 28 08:37:36 2026 GMT Not After : Mar 3 10:30:36 2026 GMT Subject: CN=0FCE569E8FFD798E037B5DC5DDD7A2BAC18DA1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:b1:b6:df:d1:5a:3b:98:9f:da:84:19:41: 6a:14:91:af:7f:4b:0a:12:95:fc:6c:1e:3e:9c:fb: c4:0d:ab:35:d0:d3:43:ee:cd:61:60:e3:7e:1d:11: 51:b0:d8:06:2e:7d:c6:27:22:73:b5:2e:23:c4:04: 3a:98:f8:f8:db:36:23:bb:13:4a:33:c8:e5:dd:f4: 88:5e:eb:04:d2:1e:42:b0:e7:60:4b:72:fd:1a:8e: 99:a2:16:ce:7a:e7:0d:e3:db:75:c4:0d:a2:e2:4f: 5e:54:57:f2:bc:52:83:2d:5c:9c:30:bc:ae:04:12: 2e:34:36:f0:ae:3a:a6:65:ec:8a:7a:60:51:a9:de: d4:87:36:c6:01:0a:06:55:7e:ca:b8:c5:26:64:7a: ca:18:ba:38:a8:2f:b3:40:5f:db:ad:f0:da:67:4b: 7c:05:35:a6:76:b6:64:a8:b8:58:dd:df:8f:d6:66: f0:00:18:d6:1b:ec:25:f2:39:df:71:81:d6:c2:fd: 40:e7:f0:ef:f0:76:ae:75:d5:b7:75:2b:ad:0c:ae: a4:05:d4:58:d9:59:c4:e1:37:16:b1:f2:60:68:d6: 71:85:68:18:84:bf:21:61:f6:6f:bf:26:6b:ad:e8: c3:be:8e:01:88:2b:c0:a6:e3:9d:18:11:2c:4c:80: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CE:56:9E:8F:FD:79:8E:03:7B:5D:C5:DD:D7:A2:BA:C1:8D:A1:C7 X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:42:58:83:fe:fb:2b:38:15:89:26:03:e5:bd:dd:93:61:f2: 77:25:db:b8:8f:d9:88:e8:12:4e:6b:cd:40:85:eb:f1:27:76: a7:53:7d:cf:e7:27:1c:91:80:2e:7a:45:ce:18:cd:0c:ce:e1: 71:07:dd:ab:31:aa:60:66:e2:5b:47:65:44:e9:86:91:06:b8: 81:a9:7f:2d:39:76:4c:f0:ea:fd:e8:7b:44:aa:aa:6b:17:8b: e6:3e:9d:74:ad:e3:37:1d:d0:88:62:b8:a9:25:06:4b:71:69: b2:ea:15:f0:fc:65:46:4d:ad:5f:9a:e2:30:a7:dc:9d:08:07: ab:88:2b:72:c1:f2:44:bb:5e:6a:96:f8:03:b9:60:fd:89:d7: cc:27:7e:57:8d:af:80:a9:c2:9c:22:24:59:b9:09:75:cd:c6: 00:f2:5c:d7:af:90:ff:60:33:c2:27:31:6e:a5:1c:81:cd:3e: 14:60:6d:fb:5b:1e:83:6c:04:bf:52:f5:5e:b4:d8:09:e6:c4: 7c:82:e2:d5:12:9a:c1:c0:56:8c:d6:96:1b:0a:55:ab:85:b7: d5:de:18:31:87:26:fe:61:a3:72:f7:d9:48:bb:21:45:82:b0: e6:14:d2:5c:a4:f3:cb:cd:b4:ca:9b:b2:dd:79:ce:5d:03:ce: a1:cc:f5:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEPVZmPMH/Y3QYOYDvBFmby0WxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNjAyMjgwODM3MzZaFw0yNjAzMDMxMDMwMzZaMDMxMTAvBgNV BAMTKDBGQ0U1NjlFOEZGRDc5OEUwMzdCNURDNURERDdBMkJBQzE4REExQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGrG239FaO5if2oQZQWoUka9/ SwoSlfxsHj6c+8QNqzXQ00PuzWFg434dEVGw2AYufcYnInO1LiPEBDqY+PjbNiO7 E0ozyOXd9Ihe6wTSHkKw52BLcv0ajpmiFs565w3j23XEDaLiT15UV/K8UoMtXJww vK4EEi40NvCuOqZl7Ip6YFGp3tSHNsYBCgZVfsq4xSZkesoYujioL7NAX9ut8Npn S3wFNaZ2tmSouFjd34/WZvAAGNYb7CXyOd9xgdbC/UDn8O/wdq511bd1K60MrqQF 1FjZWcThNxax8mBo1nGFaBiEvyFh9m+/Jmut6MO+jgGIK8Cm450YESxMgOqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD85Wno/9eY4De13F3deiusGNoccwHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFCWIP++ys4FYkmA+W93ZNh8ncl27iP2Yjo Ek5rzUCF6/EndqdTfc/nJxyRgC56Rc4YzQzO4XEH3asxqmBm4ltHZUTphpEGuIGp fy05dkzw6v3oe0SqqmsXi+Y+nXSt4zcd0IhiuKklBktxabLqFfD8ZUZNrV+a4jCn 3J0IB6uIK3LB8kS7XmqW+AO5YP2J18wnfleNr4CpwpwiJFm5CXXNxgDyXNevkP9g M8InMW6lHIHNPhRgbftbHoNsBL9S9V602AnmxHyC4tUSmsHAVozWlhsKVauFt9Xe GDGHJv5ho3L32Ui7IUWCsOYU0lyk88vNtMqbst15zl0DzqHM9Sk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:29 2026 by rpki-client