$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: bbGUROl36BuqAv8H6vl6bkAZD+LkW76lOtguKAv88us= Subject key identifier: 9C:2F:B3:C4:65:1A:9D:8F:AA:32:44:F4:77:3E:A7:90:98:16:0C:04 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 347F299F905684FD8C9296C9152821BAB6B244B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 9E Signing time: Sat 18 Apr 2026 08:11:08 +0000 Manifest this update: Sat 18 Apr 2026 08:06:08 +0000 Manifest next update: Tue 21 Apr 2026 20:02:08 +0000 Files and hashes: 1: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: sO5AU4fQ9gzgs/VNdEJkKFwdCcAfg+SwSInawEHRrKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7f:29:9f:90:56:84:fd:8c:92:96:c9:15:28:21:ba:b6:b2:44:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Apr 18 08:06:08 2026 GMT Not After : Apr 21 20:02:08 2026 GMT Subject: CN=9C2FB3C4651A9D8FAA3244F4773EA79098160C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:e3:7e:54:30:cf:02:65:dc:bb:32:43:6d: 5a:39:5c:63:0b:f1:c2:a9:7d:d9:a4:4f:34:71:00: 02:e7:80:fc:a9:60:d8:93:77:9b:f8:03:c1:37:2c: de:c9:97:06:a5:27:c3:91:7a:61:4f:8c:22:81:e2: 41:84:ef:b3:c3:be:e5:94:b3:c9:b3:73:21:8a:46: f7:9a:a3:ab:23:d2:27:32:d1:27:ea:2d:de:d8:99: 6a:c5:8c:78:26:53:6e:46:eb:fb:65:83:ae:d8:10: 36:b1:29:33:c9:c3:c0:6c:9b:9e:08:06:14:c4:92: 2c:d3:71:93:b4:85:a6:e2:3b:74:29:a2:c5:ca:a5: 8a:96:3a:e7:eb:e1:40:32:3f:3e:63:19:c2:b1:ab: 33:cb:2d:bb:89:f3:5b:e4:03:e9:bb:2f:5d:2d:ed: 6e:3d:d4:f5:63:b4:db:53:18:9f:dc:c8:ed:1e:f6: eb:b3:ae:ff:1e:d5:af:0f:61:09:6d:44:0c:14:2e: ab:d1:70:67:fc:3d:ee:aa:02:ae:ec:dd:9a:db:1e: a9:9f:04:63:60:17:3f:98:c0:2f:ef:0e:68:5c:1d: f0:00:2b:86:0b:f9:ee:eb:c9:04:1a:b9:d4:dc:3d: 10:12:c7:34:11:17:35:69:d8:0c:a9:65:c2:02:2e: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2F:B3:C4:65:1A:9D:8F:AA:32:44:F4:77:3E:A7:90:98:16:0C:04 X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a4:63:15:d5:e5:7d:6a:2c:11:ab:5a:26:67:19:c4:d5:e2: b3:25:a6:76:e7:ab:04:f3:a8:09:b8:1d:3a:7f:f9:97:b5:25: 36:15:99:95:15:92:20:07:be:94:b9:b0:26:9e:51:be:01:fd: 3d:fb:1b:78:6f:4f:c2:4f:fb:ff:f1:5e:15:dd:57:b0:24:ad: 79:4e:51:23:d2:a0:ac:31:cb:0f:b5:09:64:74:f1:63:c1:a8: 8a:15:6f:eb:00:e2:1b:a6:0c:fe:c9:ec:2f:05:27:38:06:48: e1:ae:5c:f0:d6:cd:f6:d9:7a:17:e2:8f:f5:29:78:86:8b:e2: d1:84:ad:2a:30:2b:eb:09:da:86:01:91:64:9f:d8:ed:3c:64: cf:89:71:64:41:08:01:c2:d5:cc:b1:96:77:98:cf:05:6c:88: de:19:5c:d4:05:c4:26:45:3f:1f:1d:76:d3:2c:e8:63:73:e5: 8e:ed:0f:22:3c:c0:61:b4:39:08:e8:99:c5:89:61:9e:af:dd: 36:30:c8:5e:1a:f7:69:e6:59:a0:c4:9e:33:8e:ed:ab:91:6c: bf:45:de:4c:35:25:11:31:10:8c:de:f6:6c:8d:40:04:64:22: 67:57:db:4b:ea:c0:ce:d9:cb:4e:6d:33:83:67:12:9f:43:49: bc:0f:46:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNH8pn5BWhP2MkpbJFSghurayRLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNjA0MTgwODA2MDhaFw0yNjA0MjEyMDAyMDhaMDMxMTAvBgNV BAMTKDlDMkZCM0M0NjUxQTlEOEZBQTMyNDRGNDc3M0VBNzkwOTgxNjBDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckON+VDDPAmXcuzJDbVo5XGML 8cKpfdmkTzRxAALngPypYNiTd5v4A8E3LN7JlwalJ8ORemFPjCKB4kGE77PDvuWU s8mzcyGKRveao6sj0icy0SfqLd7YmWrFjHgmU25G6/tlg67YEDaxKTPJw8Bsm54I BhTEkizTcZO0habiO3QposXKpYqWOufr4UAyPz5jGcKxqzPLLbuJ81vkA+m7L10t 7W491PVjtNtTGJ/cyO0e9uuzrv8e1a8PYQltRAwULqvRcGf8Pe6qAq7s3ZrbHqmf BGNgFz+YwC/vDmhcHfAAK4YL+e7ryQQaudTcPRASxzQRFzVp2AypZcICLhqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnC+zxGUanY+qMkT0dz6nkJgWDAQwHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACekYxXV5X1qLBGrWiZnGcTV4rMlpnbnqwTz qAm4HTp/+Ze1JTYVmZUVkiAHvpS5sCaeUb4B/T37G3hvT8JP+//xXhXdV7AkrXlO USPSoKwxyw+1CWR08WPBqIoVb+sA4humDP7J7C8FJzgGSOGuXPDWzfbZehfij/Up eIaL4tGErSowK+sJ2oYBkWSf2O08ZM+JcWRBCAHC1cyxlneYzwVsiN4ZXNQFxCZF Px8ddtMs6GNz5Y7tDyI8wGG0OQjomcWJYZ6v3TYwyF4a92nmWaDEnjOO7auRbL9F 3kw1JRExEIze9myNQARkImdX20vqwM7Zy05tM4NnEp9DSbwPRm0= -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:03 2026 by rpki-client