$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: VqCV6g5IA316oTLKSj2jlXtFC0WOqLJE/GSQqxNO+ec= Subject key identifier: 0B:4D:43:0B:09:65:D9:F3:3E:D7:03:CB:AE:E6:13:9A:F8:0A:99:2F Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 7390E0CE7C093C88570826E6694F83B0080E1518 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 028E Signing time: Wed 15 Apr 2026 11:32:40 +0000 Manifest this update: Wed 15 Apr 2026 11:27:40 +0000 Manifest next update: Sat 18 Apr 2026 16:38:40 +0000 Files and hashes: 1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: vQrWy1CZc1GHJJKqF3NFZaH5HqAsSRYbAKlZ3Sty0Dc=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: NML/79jB4zZF/SxB4ZqIyV4CbjHtpeNZ0f57zrhrbmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:90:e0:ce:7c:09:3c:88:57:08:26:e6:69:4f:83:b0:08:0e:15:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Apr 15 11:27:40 2026 GMT Not After : Apr 18 16:38:40 2026 GMT Subject: CN=0B4D430B0965D9F33ED703CBAEE6139AF80A992F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:54:3e:a4:e6:b8:00:ad:97:77:5d:c5:94: 89:2a:93:f3:70:fa:e7:c3:7c:e2:09:41:e6:55:c5: b6:cd:9e:3f:2a:30:33:57:bf:f1:04:36:24:23:7c: c6:d5:42:e7:08:fc:c0:d6:63:cc:f8:e1:3f:73:40: 7a:29:69:53:cb:a1:41:03:f3:9e:f7:02:00:42:c2: 90:98:69:f5:cb:2a:b8:40:2f:ba:45:3c:db:6f:2d: 25:fc:bc:93:cd:63:d5:bf:04:e1:43:c7:8e:b7:b8: ee:77:e7:2d:bb:df:ec:b9:b0:26:67:e2:4c:24:28: c0:b8:a6:05:2b:0e:61:16:c6:ff:37:fc:6e:94:b4: 4d:36:11:92:f9:6d:37:69:77:c6:7f:03:3c:ba:7f: ac:04:2a:b8:5a:e7:d0:49:b7:26:e4:f4:a2:9a:08: 87:91:98:f5:08:76:59:41:ab:1d:f8:aa:3f:3c:ff: af:50:60:3d:a8:01:53:55:9c:47:d3:01:94:1a:ca: dc:5a:8d:52:66:5c:f5:34:dc:1d:45:d6:c7:8f:a6: 80:23:cd:d1:e4:83:58:72:99:6c:49:af:25:c5:54: d1:f8:d8:52:2e:aa:20:44:74:d5:20:7d:ab:10:f1: 34:ae:01:fd:87:74:05:02:df:03:85:6e:6f:cf:fe: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4D:43:0B:09:65:D9:F3:3E:D7:03:CB:AE:E6:13:9A:F8:0A:99:2F X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b8:ce:5d:5a:2d:19:c1:38:ae:21:a9:8a:30:78:56:ed:1a: 52:36:1e:90:3c:fb:05:64:38:ef:1e:cc:6e:a8:e1:91:ff:09: af:13:a5:87:55:8c:fc:8e:17:00:e9:45:b7:3e:a9:3e:e4:54: de:83:8d:aa:78:c7:91:f3:4b:0b:2e:41:18:06:d1:12:b9:33: a8:0f:ef:24:6c:50:ef:b6:b8:72:24:37:db:3e:9b:4c:aa:10: 0f:17:78:a7:39:24:7f:b1:97:2d:9a:15:16:89:14:f5:44:c6: a1:4c:11:20:f2:96:a4:72:7c:fe:4b:fc:04:3f:61:ff:e8:19: b6:8a:6d:6b:8e:38:41:14:cc:d9:c9:c4:e0:e9:d4:b6:c8:90: 33:4d:f3:55:09:6a:2e:2b:f7:0e:af:86:22:63:9a:a1:ac:18: 5c:b0:20:fe:0c:60:b9:f2:10:3f:bb:98:4c:b3:09:64:6e:93: c7:60:31:7d:77:c3:e0:6d:ba:22:8f:e9:c4:8d:58:49:85:9e: 57:1a:09:13:5b:e7:15:34:ad:aa:b1:4c:4d:5e:cb:b4:ba:54: a6:eb:bd:40:b6:e3:55:8d:39:be:b8:01:a6:96:e3:47:01:4d: d9:9a:5d:6f:7a:d9:68:a3:00:ef:48:37:aa:7c:9b:58:1c:a8: 6a:9c:95:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5DgznwJPIhXCCbmaU+DsAgOFRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNjA0MTUxMTI3NDBaFw0yNjA0MTgxNjM4NDBaMDMxMTAvBgNV BAMTKDBCNEQ0MzBCMDk2NUQ5RjMzRUQ3MDNDQkFFRTYxMzlBRjgwQTk5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7VQ+pOa4AK2Xd13FlIkqk/Nw +ufDfOIJQeZVxbbNnj8qMDNXv/EENiQjfMbVQucI/MDWY8z44T9zQHopaVPLoUED 8573AgBCwpCYafXLKrhAL7pFPNtvLSX8vJPNY9W/BOFDx463uO535y273+y5sCZn 4kwkKMC4pgUrDmEWxv83/G6UtE02EZL5bTdpd8Z/Azy6f6wEKrha59BJtybk9KKa CIeRmPUIdllBqx34qj88/69QYD2oAVNVnEfTAZQaytxajVJmXPU03B1F1sePpoAj zdHkg1hymWxJryXFVNH42FIuqiBEdNUgfasQ8TSuAf2HdAUC3wOFbm/P/tBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC01DCwll2fM+1wPLruYTmvgKmS8wHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy4zl1aLRnBOK4hqYoweFbtGlI2HpA8+wVk OO8ezG6o4ZH/Ca8TpYdVjPyOFwDpRbc+qT7kVN6Djap4x5HzSwsuQRgG0RK5M6gP 7yRsUO+2uHIkN9s+m0yqEA8XeKc5JH+xly2aFRaJFPVExqFMESDylqRyfP5L/AQ/ Yf/oGbaKbWuOOEEUzNnJxODp1LbIkDNN81UJai4r9w6vhiJjmqGsGFywIP4MYLny ED+7mEyzCWRuk8dgMX13w+BtuiKP6cSNWEmFnlcaCRNb5xU0raqxTE1ey7S6VKbr vUC241WNOb64AaaW40cBTdmaXW962WijAO9IN6p8m1gcqGqclU4= -----END CERTIFICATE-----Generated at Fri Apr 17 17:45:42 2026 by rpki-client