$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: x5+HUAry/Zr2Xopa1bs09vjXq9QoBuxzwjt+rQZ2u2k= Subject key identifier: CF:93:66:92:6F:AA:33:0A:4F:F0:08:FF:0F:9C:BA:48:8E:C6:74:BA Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 248083482CF846A3FB54912854F2CD9083EA6906 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: E5 Signing time: Sat 18 Oct 2025 16:21:38 +0000 Manifest this update: Sat 18 Oct 2025 16:16:38 +0000 Manifest next update: Wed 22 Oct 2025 03:20:38 +0000 Files and hashes: 1: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) 2: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: tUoEFwL9RmzJmW+DkMzrbgkBwg43UhHHYTfmD1b+ANE=) 3: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 4: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:80:83:48:2c:f8:46:a3:fb:54:91:28:54:f2:cd:90:83:ea:69:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Oct 18 16:16:38 2025 GMT Not After : Oct 22 03:20:38 2025 GMT Subject: CN=CF9366926FAA330A4FF008FF0F9CBA488EC674BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:51:68:c4:e1:4e:c4:0a:18:8b:cb:60:0a:2a: d9:bc:34:84:e1:a8:5c:da:45:bd:1f:9c:a9:82:5c: 53:24:ae:1f:ff:b8:1b:1b:a9:43:eb:7e:fb:79:4b: 9d:ce:45:0c:7c:4b:d3:c1:3d:c7:5a:2e:42:e6:f3: ff:e4:b2:e5:47:40:68:03:60:d4:15:b5:6a:2c:70: 20:0e:73:96:36:d0:a6:44:8e:a9:1e:a2:25:76:3b: ed:a7:41:33:04:13:f0:8b:21:6c:28:a4:24:04:00: 66:be:bc:f5:2d:22:12:b3:83:46:f7:df:61:35:38: 24:5d:ac:20:1f:f3:2c:36:0b:6a:68:76:dc:ff:de: 1f:2f:d7:69:01:fa:e5:f5:6d:2e:5c:ce:fe:16:61: ed:7d:f0:61:7a:6b:ee:ce:eb:e8:5a:8d:45:4e:af: 36:1f:7d:f8:2d:d3:ca:05:57:59:7a:59:c3:d6:b6: 0d:62:d1:65:5e:68:a6:f4:b5:d4:3c:79:f1:43:3c: 40:80:fa:ab:45:fb:73:f1:84:79:08:28:8e:26:9a: 99:88:39:5f:a3:56:9e:2e:74:b2:14:43:8b:3e:7f: fc:34:c9:d9:d3:9a:ec:b8:70:d0:47:55:9f:74:d3: 60:91:61:71:87:7b:7e:e9:1b:a8:29:72:47:c4:c1: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:93:66:92:6F:AA:33:0A:4F:F0:08:FF:0F:9C:BA:48:8E:C6:74:BA X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d4:cf:52:1f:39:6a:5f:d5:e0:39:cd:a8:dd:a0:bf:66:cf: 87:40:7f:11:c9:40:6e:a7:60:92:62:81:ad:e0:e7:ad:3e:9f: d7:27:0a:61:8e:09:1a:e7:92:19:92:4c:a7:ee:19:74:5e:83: 89:d9:6f:aa:ae:1d:13:78:85:07:18:22:a3:e3:92:f3:f5:75: 80:90:2f:db:27:13:ae:5a:2c:0e:2b:63:11:a4:40:b2:7a:1e: 1b:a4:da:44:f7:4f:1c:fe:32:32:22:3f:95:bd:09:33:a5:0c: 6b:9b:5a:f6:32:cf:1d:e7:b2:97:5c:1f:b7:aa:ef:c1:6f:32: ab:6a:f8:7d:32:0e:c4:a4:54:bf:a7:8d:cb:d3:ef:9b:8c:19: fe:b2:5b:2c:e9:e1:a3:5f:52:16:db:5f:6b:2e:ff:21:e9:d9: c6:a8:7d:1f:5f:a9:83:9e:59:6c:79:21:6a:51:9c:96:5a:5e: 08:5a:0a:fe:f2:ec:19:86:bf:03:d1:e3:ba:ce:df:35:81:24: c7:d8:7a:e3:fe:3c:53:9c:4c:8b:8e:7d:20:2e:72:1e:ca:40: a4:b3:38:61:70:ab:2d:ab:37:97:a2:19:36:70:39:69:54:ad: a4:c0:c2:0c:19:4e:ab:8f:50:d1:4b:75:86:fa:34:31:bd:cb: 66:bf:fc:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJICDSCz4RqP7VJEoVPLNkIPqaQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTEwMTgxNjE2MzhaFw0yNTEwMjIwMzIwMzhaMDMxMTAvBgNV BAMTKENGOTM2NjkyNkZBQTMzMEE0RkYwMDhGRjBGOUNCQTQ4OEVDNjc0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUWjE4U7EChiLy2AKKtm8NITh qFzaRb0fnKmCXFMkrh//uBsbqUPrfvt5S53ORQx8S9PBPcdaLkLm8//ksuVHQGgD YNQVtWoscCAOc5Y20KZEjqkeoiV2O+2nQTMEE/CLIWwopCQEAGa+vPUtIhKzg0b3 32E1OCRdrCAf8yw2C2podtz/3h8v12kB+uX1bS5czv4WYe198GF6a+7O6+hajUVO rzYfffgt08oFV1l6WcPWtg1i0WVeaKb0tdQ8efFDPECA+qtF+3PxhHkIKI4mmpmI OV+jVp4udLIUQ4s+f/w0ydnTmuy4cNBHVZ9002CRYXGHe37pG6gpckfEwRDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz5Nmkm+qMwpP8Aj/D5y6SI7GdLowHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfUz1IfOWpf1eA5zajdoL9mz4dAfxHJQG6n YJJiga3g560+n9cnCmGOCRrnkhmSTKfuGXReg4nZb6quHRN4hQcYIqPjkvP1dYCQ L9snE65aLA4rYxGkQLJ6Hhuk2kT3Txz+MjIiP5W9CTOlDGubWvYyzx3nspdcH7eq 78FvMqtq+H0yDsSkVL+njcvT75uMGf6yWyzp4aNfUhbbX2su/yHp2caofR9fqYOe WWx5IWpRnJZaXghaCv7y7BmGvwPR47rO3zWBJMfYeuP+PFOcTIuOfSAuch7KQKSz OGFwqy2rN5eiGTZwOWlUraTAwgwZTquPUNFLdYb6NDG9y2a//HM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:58 2025 by rpki-client