$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: qsD738IFCblFZqRTW5YOxvj9DKLDJELKqXwI3e8D0hQ= Subject key identifier: FA:B0:F5:2E:7E:93:0E:61:CA:FB:56:1F:B3:84:42:5B:E9:C7:95:53 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 6D29F8F43AE17E94FC02BF6C2B9FE75D6B0AE4C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 027A Signing time: Sun 01 Mar 2026 03:32:37 +0000 Manifest this update: Sun 01 Mar 2026 03:27:37 +0000 Manifest next update: Wed 04 Mar 2026 09:17:37 +0000 Files and hashes: 1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: CL9PbUObCEebkO6oiNlMqLwhIpXN1r1TSilOUOoOUvg=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: NML/79jB4zZF/SxB4ZqIyV4CbjHtpeNZ0f57zrhrbmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:29:f8:f4:3a:e1:7e:94:fc:02:bf:6c:2b:9f:e7:5d:6b:0a:e4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Mar 1 03:27:37 2026 GMT Not After : Mar 4 09:17:37 2026 GMT Subject: CN=FAB0F52E7E930E61CAFB561FB384425BE9C79553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:2b:0d:e4:43:dc:e5:6a:04:d7:cf:14:01: 8f:d6:58:1f:c9:2d:36:e9:3f:4c:7b:08:1d:c1:a1: b2:29:57:1c:5d:67:7b:c5:32:f4:45:40:66:5d:e6: 62:c2:f8:eb:17:0a:09:89:cf:ef:1e:a8:9f:ef:dd: d9:7c:30:7f:ac:23:ea:f8:f0:22:ee:16:e6:5f:dd: d5:a4:e3:6c:ad:e8:ed:e7:2b:69:b1:aa:7e:08:9b: af:d2:55:96:68:68:18:16:15:9b:ec:68:3a:f7:37: fc:67:51:e3:49:4b:d6:ea:54:d1:82:9e:f0:30:02: 14:74:cd:3d:14:13:35:9c:5f:c5:0a:92:55:b4:04: 0a:f7:20:53:20:20:7a:f7:fc:18:a9:3c:02:b1:94: 40:42:b1:7e:1f:2a:84:42:4f:45:a8:4e:2a:52:db: 94:9f:9c:78:31:0c:9a:af:3a:7e:87:f4:a2:64:99: ba:cc:e2:e0:93:a4:0a:32:4f:66:6c:c6:e3:37:f0: 84:25:c6:64:d9:aa:95:81:a5:58:d5:1f:48:8a:f8: 5d:82:9c:93:70:15:80:e0:f7:a0:28:8f:49:b7:af: 09:49:f2:e6:08:2b:13:5d:0b:ff:59:33:6b:01:93: 7d:f3:4f:63:e5:37:f5:f4:f1:9e:53:46:2f:3b:72: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B0:F5:2E:7E:93:0E:61:CA:FB:56:1F:B3:84:42:5B:E9:C7:95:53 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:41:de:99:24:45:60:01:2a:1c:4d:44:f7:0c:c6:89:e3:ce: 3c:ea:6a:b6:2a:de:57:c0:1c:15:1b:ee:8f:22:e8:99:27:62: 33:9b:e2:2e:0c:96:68:2e:41:f3:c2:1a:4f:e0:b0:fb:05:a9: 75:b8:32:02:76:a4:1c:4f:a0:95:48:ce:07:14:69:42:4d:d6: 0e:d9:67:f2:99:88:65:36:29:79:a9:4c:92:dc:65:0f:91:b4: 36:5c:63:de:8e:02:08:47:46:a4:d8:a6:ae:65:17:d8:4e:fa: a0:53:69:23:d1:bc:c3:2d:5a:b2:61:48:4f:79:a2:db:12:a5: 0e:bb:fc:4e:50:bc:4a:8a:28:2a:02:f6:61:a8:5a:fa:7e:bc: d9:b5:3d:c0:20:0c:cb:a2:f4:3c:6c:5a:d8:a8:cf:5f:86:a0: 93:d3:7d:d9:0f:1f:7a:5c:82:4f:23:4c:a1:07:0e:38:21:d9: e3:81:c9:7f:fe:23:b7:62:35:0e:6c:73:a0:7a:ee:d4:d8:85: 65:60:51:37:c8:f0:aa:37:fd:20:b3:5f:dd:16:d2:b8:06:4c: 58:f4:e1:67:df:31:1f:52:56:0c:d1:05:29:58:98:fc:f3:ae: f1:00:dc:90:ac:18:ac:3a:14:ac:af:b3:60:bf:c3:1c:d6:77: 10:f6:26:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSn49DrhfpT8Ar9sK5/nXWsK5MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNjAzMDEwMzI3MzdaFw0yNjAzMDQwOTE3MzdaMDMxMTAvBgNV BAMTKEZBQjBGNTJFN0U5MzBFNjFDQUZCNTYxRkIzODQ0MjVCRTlDNzk1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41ysN5EPc5WoE188UAY/WWB/J LTbpP0x7CB3BobIpVxxdZ3vFMvRFQGZd5mLC+OsXCgmJz+8eqJ/v3dl8MH+sI+r4 8CLuFuZf3dWk42yt6O3nK2mxqn4Im6/SVZZoaBgWFZvsaDr3N/xnUeNJS9bqVNGC nvAwAhR0zT0UEzWcX8UKklW0BAr3IFMgIHr3/BipPAKxlEBCsX4fKoRCT0WoTipS 25SfnHgxDJqvOn6H9KJkmbrM4uCTpAoyT2ZsxuM38IQlxmTZqpWBpVjVH0iK+F2C nJNwFYDg96Aoj0m3rwlJ8uYIKxNdC/9ZM2sBk33zT2PlN/X08Z5TRi87ciiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+rD1Ln6TDmHK+1Yfs4RCW+nHlVMwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERB3pkkRWABKhxNRPcMxonjzjzqarYq3lfA HBUb7o8i6JknYjOb4i4MlmguQfPCGk/gsPsFqXW4MgJ2pBxPoJVIzgcUaUJN1g7Z Z/KZiGU2KXmpTJLcZQ+RtDZcY96OAghHRqTYpq5lF9hO+qBTaSPRvMMtWrJhSE95 otsSpQ67/E5QvEqKKCoC9mGoWvp+vNm1PcAgDMui9DxsWtioz1+GoJPTfdkPH3pc gk8jTKEHDjgh2eOByX/+I7diNQ5sc6B67tTYhWVgUTfI8Ko3/SCzX90W0rgGTFj0 4WffMR9SVgzRBSlYmPzzrvEA3JCsGKw6FKyvs2C/wxzWdxD2JoY= -----END CERTIFICATE-----Generated at Mon Mar 2 01:58:11 2026 by rpki-client