$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: WxOWTK+Hex9NnedjkDrmpwMr6McdGySOdDSuvr5jT/g= Subject key identifier: DC:92:C3:87:EC:25:D9:1F:DC:2F:37:F7:80:7F:C5:34:C6:FB:25:88 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 6CE95FF35486452DC4F0E4C59A7A3CF572AD7032 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 89 Signing time: Mon 02 Mar 2026 04:41:10 +0000 Manifest this update: Mon 02 Mar 2026 04:36:10 +0000 Manifest next update: Thu 05 Mar 2026 11:17:10 +0000 Files and hashes: 1: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: HudGT6G1YLlT5yS2AFYXbr6J8uSwVU4FajtqHx+LSnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e9:5f:f3:54:86:45:2d:c4:f0:e4:c5:9a:7a:3c:f5:72:ad:70:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Mar 2 04:36:10 2026 GMT Not After : Mar 5 11:17:10 2026 GMT Subject: CN=DC92C387EC25D91FDC2F37F7807FC534C6FB2588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3d:60:78:22:b8:2e:86:8e:5e:5d:6f:5b:fa: e4:16:2e:51:2f:61:08:23:f2:49:2b:08:4c:65:38: 91:e3:eb:39:c7:2a:0d:17:1e:7c:81:ff:8f:72:7e: ea:33:ef:08:06:0b:88:ba:82:9a:8b:32:bb:39:9a: 0c:50:ea:e0:fb:4a:a9:4d:ed:ed:30:d8:85:3a:38: e2:15:71:ff:3c:bb:7b:8b:26:d7:e8:d4:71:1a:d8: db:50:7b:11:ca:64:97:39:1b:39:80:b4:00:3b:00: b0:07:61:a4:a0:ac:0c:67:dd:72:b7:06:9b:a4:c2: d6:d2:7f:74:4e:5d:38:d6:27:77:bc:ec:e2:28:03: 65:30:82:79:af:fb:d6:70:00:74:3b:a5:e9:42:a3: 1d:66:33:db:4f:fc:ff:20:e1:80:d0:96:df:53:95: 8d:25:77:1d:41:f3:0d:b6:4b:fe:9b:9f:2b:4b:9f: 9f:37:4b:d1:a9:5f:89:9a:fc:fd:8d:a2:39:40:31: 9f:a6:71:7b:55:bd:19:79:ec:5c:f5:73:c9:da:21: c4:fe:13:56:83:eb:8d:f6:66:92:10:d0:81:00:88: 7a:bd:ce:b3:0a:1a:81:a9:6e:ff:b6:b2:df:f7:54: 25:dd:df:29:07:d9:7e:01:21:00:65:42:b1:d0:2c: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:92:C3:87:EC:25:D9:1F:DC:2F:37:F7:80:7F:C5:34:C6:FB:25:88 X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ce:b7:53:4a:1d:9c:38:26:30:b9:66:31:00:77:bc:cb:b6: 3a:a4:be:53:7b:6d:71:d1:73:28:23:c7:55:fd:13:9d:1b:1b: 68:b2:ad:68:5e:26:2e:d3:71:69:ac:30:59:c3:06:40:9f:dd: c5:5a:f9:f1:dc:2b:45:d2:75:1a:f4:61:d8:f1:45:b3:53:c9: ab:54:76:77:5e:2b:e9:0b:fa:2e:6f:d1:dd:ea:5b:eb:c4:9d: ce:2d:c0:94:70:af:78:25:5f:6f:96:5c:94:dc:f4:e4:51:88: 5a:35:9b:dd:ca:21:a3:c3:bd:6d:e8:05:fc:9b:46:5c:1e:e4: 9e:4a:32:5f:3f:99:b2:e8:93:1c:7c:79:13:28:24:07:74:f3: 07:4a:ec:2c:0e:96:7c:fd:7a:8b:1a:dd:f1:5c:73:58:c5:03: f0:cf:8f:ab:b2:77:4f:a4:0f:b5:fd:17:91:f5:09:8e:d7:94: f8:7c:99:cc:2c:25:f1:2f:ca:d1:78:69:40:09:54:c0:4a:a8: 15:cc:eb:01:62:f6:a6:20:ad:2b:ba:aa:a8:ba:76:9e:c4:c1: e9:75:60:73:25:af:3b:2d:a9:86:93:3e:e8:f8:70:64:ec:00: 5b:bc:ea:1a:39:35:0e:fb:a5:5e:49:e0:9d:85:5e:b4:54:34: ef:7a:99:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOlf81SGRS3E8OTFmno89XKtcDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNjAzMDIwNDM2MTBaFw0yNjAzMDUxMTE3MTBaMDMxMTAvBgNV BAMTKERDOTJDMzg3RUMyNUQ5MUZEQzJGMzdGNzgwN0ZDNTM0QzZGQjI1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiPWB4Irguho5eXW9b+uQWLlEv YQgj8kkrCExlOJHj6znHKg0XHnyB/49yfuoz7wgGC4i6gpqLMrs5mgxQ6uD7SqlN 7e0w2IU6OOIVcf88u3uLJtfo1HEa2NtQexHKZJc5GzmAtAA7ALAHYaSgrAxn3XK3 BpukwtbSf3ROXTjWJ3e87OIoA2Uwgnmv+9ZwAHQ7pelCox1mM9tP/P8g4YDQlt9T lY0ldx1B8w22S/6bnytLn583S9GpX4ma/P2NojlAMZ+mcXtVvRl57Fz1c8naIcT+ E1aD6432ZpIQ0IEAiHq9zrMKGoGpbv+2st/3VCXd3ykH2X4BIQBlQrHQLGbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3JLDh+wl2R/cLzf3gH/FNMb7JYgwHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPOt1NKHZw4JjC5ZjEAd7zLtjqkvlN7bXHR cygjx1X9E50bG2iyrWheJi7TcWmsMFnDBkCf3cVa+fHcK0XSdRr0YdjxRbNTyatU dndeK+kL+i5v0d3qW+vEnc4twJRwr3glX2+WXJTc9ORRiFo1m93KIaPDvW3oBfyb Rlwe5J5KMl8/mbLokxx8eRMoJAd08wdK7CwOlnz9eosa3fFcc1jFA/DPj6uyd0+k D7X9F5H1CY7XlPh8mcwsJfEvytF4aUAJVMBKqBXM6wFi9qYgrSu6qqi6dp7Ewel1 YHMlrzstqYaTPuj4cGTsAFu86ho5NQ77pV5J4J2FXrRUNO96meQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:01:05 2026 by rpki-client