$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: YcigSWALTodMvImtyLAWm3zNEHZDbOodhLTifqHk69k= Subject key identifier: 5C:13:02:2A:87:9B:1A:4F:0E:78:E8:97:E2:52:AC:56:32:C2:F6:D1 Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 3D288F1BDC6E5C473AACC3AB8D1D8637ECF6CA0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 02F6 Signing time: Sun 19 Apr 2026 04:00:56 +0000 Manifest this update: Sun 19 Apr 2026 03:55:56 +0000 Manifest next update: Wed 22 Apr 2026 11:32:56 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: LzXSUZLbtfOk3VbxLyZy14Cje/qNE39EcudiivOl514=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:28:8f:1b:dc:6e:5c:47:3a:ac:c3:ab:8d:1d:86:37:ec:f6:ca:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: Apr 19 03:55:56 2026 GMT Not After : Apr 22 11:32:56 2026 GMT Subject: CN=5C13022A879B1A4F0E78E897E252AC5632C2F6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:4e:0d:90:47:2a:31:bf:9b:c0:64:74:2c: 29:6e:2c:e4:82:83:ee:66:a4:95:45:f1:0d:86:f3: 46:fe:4c:c4:8f:b1:f8:ab:70:be:1e:7b:e9:9e:fd: b9:94:cf:6c:16:db:f5:9a:98:9e:ad:b8:03:f2:d3: e1:28:ad:9a:ea:de:83:6b:03:a9:2f:2c:f1:9d:86: 48:a2:02:d8:74:b1:1e:65:d8:26:21:db:ee:8c:11: f5:16:51:b9:04:eb:11:bc:f4:ee:46:5d:84:86:3c: d4:0d:5a:89:c7:6e:d7:24:a5:b2:b9:b5:7f:44:bf: 9e:55:01:bc:5b:af:5b:a5:9d:41:3c:8e:6c:13:f4: ab:ff:f8:06:a3:4e:ee:0c:d9:c7:2f:8e:3f:51:aa: 27:06:6e:a0:ec:47:db:6c:93:e9:ed:6d:b6:34:30: a2:99:b1:03:86:2d:27:11:dc:f4:58:71:f3:8d:18: 28:64:b2:9c:01:68:8b:c1:d1:86:f6:f0:17:8a:88: f9:90:09:11:91:d9:2a:cb:3e:83:9c:33:07:63:11: f9:9c:ee:ed:f2:39:64:67:27:97:f8:a1:1c:9e:0e: cb:9e:3f:c3:23:37:15:07:4a:5c:e1:ff:bd:8a:0a: 67:4a:8e:4c:f7:5c:30:d3:95:63:ba:0c:3f:a0:15: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:13:02:2A:87:9B:1A:4F:0E:78:E8:97:E2:52:AC:56:32:C2:F6:D1 X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:dd:f3:aa:28:02:4e:b7:56:e3:4f:7b:d0:2f:13:34:51:bb: cf:c1:09:3e:6a:ff:26:79:b5:81:65:80:09:5e:e6:cc:97:e0: d7:74:7b:f1:98:a8:43:12:87:c4:e3:4d:a5:25:37:8b:c7:44: 4e:6c:69:48:c3:be:25:e0:86:72:b3:49:aa:82:f3:8c:f7:28: 1d:a4:b9:37:5a:9e:f0:e5:05:5c:dc:d1:4a:64:15:99:a8:f2: 64:c1:6d:3d:47:10:e5:90:40:6f:c5:bd:ad:c1:64:e3:ff:b7: 7f:77:e3:e4:a7:59:6c:e5:a1:53:b5:c9:77:c3:6a:65:18:a7: 2b:f3:b0:cc:0f:10:a1:83:b0:ce:a8:4f:61:2e:4e:f9:14:8e: dc:ff:0c:13:e3:4f:2a:46:60:19:f8:04:57:3f:70:6d:b3:33: 68:c9:d4:f4:55:b7:0a:02:13:8b:9b:b6:9f:00:d2:93:93:f0: d3:6a:73:e6:ba:74:6e:fe:c6:62:8c:89:bc:db:6e:a0:9d:c0: f7:3f:fa:44:7b:b1:ff:74:46:81:f4:e8:db:07:53:75:20:21: 48:f5:b7:27:50:70:8f:ff:e5:7f:55:c3:96:92:06:3e:3d:b0: cc:dd:38:91:b9:a3:c6:bd:2b:41:c9:f3:3a:ed:9d:32:d4:d3: b6:29:16:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSiPG9xuXEc6rMOrjR2GN+z2yg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNjA0MTkwMzU1NTZaFw0yNjA0MjIxMTMyNTZaMDMxMTAvBgNV BAMTKDVDMTMwMjJBODc5QjFBNEYwRTc4RTg5N0UyNTJBQzU2MzJDMkY2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmk4NkEcqMb+bwGR0LCluLOSC g+5mpJVF8Q2G80b+TMSPsfircL4ee+me/bmUz2wW2/WamJ6tuAPy0+EorZrq3oNr A6kvLPGdhkiiAth0sR5l2CYh2+6MEfUWUbkE6xG89O5GXYSGPNQNWonHbtckpbK5 tX9Ev55VAbxbr1ulnUE8jmwT9Kv/+AajTu4M2ccvjj9RqicGbqDsR9tsk+ntbbY0 MKKZsQOGLScR3PRYcfONGChkspwBaIvB0Yb28BeKiPmQCRGR2SrLPoOcMwdjEfmc 7u3yOWRnJ5f4oRyeDsueP8MjNxUHSlzh/72KCmdKjkz3XDDTlWO6DD+gFUnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXBMCKoebGk8OeOiX4lKsVjLC9tEwHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDd86ooAk63VuNPe9AvEzRRu8/BCT5q/yZ5 tYFlgAle5syX4Nd0e/GYqEMSh8TjTaUlN4vHRE5saUjDviXghnKzSaqC84z3KB2k uTdanvDlBVzc0UpkFZmo8mTBbT1HEOWQQG/Fva3BZOP/t3934+SnWWzloVO1yXfD amUYpyvzsMwPEKGDsM6oT2EuTvkUjtz/DBPjTypGYBn4BFc/cG2zM2jJ1PRVtwoC E4ubtp8A0pOT8NNqc+a6dG7+xmKMibzbbqCdwPc/+kR7sf90RoH06NsHU3UgIUj1 tydQcI//5X9Vw5aSBj49sMzdOJG5o8a9K0HJ8zrtnTLU07YpFsA= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:21 2026 by rpki-client