$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: KypY10I9kRfFlyfWzKgwZcXHQSJq4nNQLf8mzwqEGug= Subject key identifier: 25:86:24:76:A0:9A:C9:69:6A:56:9E:41:5D:7E:BB:24:E6:00:B6:BB Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 025DF81631ABAE8CF24F31B79E5BDA9063F00900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: CB Signing time: Thu 21 Aug 2025 14:21:38 +0000 Manifest this update: Thu 21 Aug 2025 14:16:38 +0000 Manifest next update: Sun 24 Aug 2025 14:53:38 +0000 Files and hashes: 1: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 3: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 4: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: hT05IwWCKxMwf/AKwjQTJlJZYAem+Ri5PSwL3f9qC8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5d:f8:16:31:ab:ae:8c:f2:4f:31:b7:9e:5b:da:90:63:f0:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Aug 21 14:16:38 2025 GMT Not After : Aug 24 14:53:38 2025 GMT Subject: CN=25862476A09AC9696A569E415D7EBB24E600B6BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:67:e3:35:2e:78:c7:5e:9c:09:a8:a0:55: 54:84:b3:e8:e2:64:a4:9e:50:41:41:19:4a:be:8a: 9e:4d:a6:a0:d8:2d:6a:35:83:18:c9:a9:2c:13:c6: 00:a9:12:cc:51:c9:2f:88:a4:a9:5b:da:05:63:ac: e4:f0:34:96:2b:2e:cc:0c:15:b6:13:5e:e5:51:00: ef:e8:33:34:2e:87:b8:cc:34:7c:32:d1:e9:8f:33: 63:49:00:16:8b:74:49:f9:82:5a:76:81:dd:47:f6: db:88:99:72:2c:fa:90:13:01:be:06:b6:72:ae:c9: 9b:8a:6b:ee:d4:af:5c:50:74:fa:53:d4:5b:62:09: fd:28:78:a7:98:cb:b2:5b:ae:2f:27:98:f7:ad:d8: 95:4c:44:de:19:86:7a:f1:d8:47:ae:b7:70:03:73: 2d:f1:0e:38:2a:e7:c7:66:0b:75:88:5f:f1:90:42: 42:24:1e:8d:b4:78:d4:33:84:a4:37:ed:7d:66:33: e2:9f:6b:9c:2b:7b:cd:9f:03:ab:77:cf:73:6c:c0: 56:01:13:c2:4c:51:2b:f0:57:f7:90:d6:e8:ff:cf: 9c:03:4c:2f:dc:a7:fe:e6:f2:18:a8:6c:1f:4a:8c: d9:dd:01:61:1b:48:73:6a:a5:5e:bf:a5:09:79:63: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:86:24:76:A0:9A:C9:69:6A:56:9E:41:5D:7E:BB:24:E6:00:B6:BB X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:94:06:6e:c5:d1:30:45:d0:29:d0:92:e4:6f:92:f9:20:28: cd:28:c7:a8:ed:74:94:82:38:a2:a7:82:3e:48:4b:46:59:d0: d1:7e:c4:4e:b4:3b:23:b6:a7:fa:2c:2b:66:9d:9f:c3:02:5e: e5:c9:8f:63:77:c6:cb:b7:3b:ae:09:ea:c2:b2:99:2f:95:78: 3e:ee:ee:66:0f:62:7b:af:f3:e3:d0:27:3e:9e:5b:1c:ef:72: 67:3a:92:07:a4:d5:f7:96:8c:db:cd:0b:91:06:1a:25:ff:c5: 6e:6d:95:89:1d:74:39:64:29:85:d0:db:9e:3d:b0:e5:0b:9d: 8e:32:40:66:e7:77:ec:39:4d:ee:6c:bd:0e:67:cf:b9:44:57: 8c:87:77:5b:1a:64:c0:cd:c9:5f:e3:53:ca:51:da:ee:90:17: 95:de:3a:0f:4d:80:a8:48:50:17:da:49:11:1d:f5:18:bf:ec: 38:88:85:a5:8d:ae:cc:19:7e:b2:b1:10:25:e9:81:ba:98:e7: 68:0f:3a:1a:d6:55:90:30:20:70:2c:7b:3e:54:31:58:f8:4f: 20:2a:bf:88:6c:ee:a9:15:1a:8b:47:1e:87:2a:b7:c9:f2:ce: 58:2c:7d:2d:65:99:5f:c4:6b:ef:b7:00:4e:56:96:96:26:aa: bc:7a:74:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAl34FjGrrozyTzG3nlvakGPwCQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTA4MjExNDE2MzhaFw0yNTA4MjQxNDUzMzhaMDMxMTAvBgNV BAMTKDI1ODYyNDc2QTA5QUM5Njk2QTU2OUU0MTVEN0VCQjI0RTYwMEI2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUGfjNS54x16cCaigVVSEs+ji ZKSeUEFBGUq+ip5NpqDYLWo1gxjJqSwTxgCpEsxRyS+IpKlb2gVjrOTwNJYrLswM FbYTXuVRAO/oMzQuh7jMNHwy0emPM2NJABaLdEn5glp2gd1H9tuImXIs+pATAb4G tnKuyZuKa+7Ur1xQdPpT1FtiCf0oeKeYy7Jbri8nmPet2JVMRN4Zhnrx2Eeut3AD cy3xDjgq58dmC3WIX/GQQkIkHo20eNQzhKQ37X1mM+Kfa5wre82fA6t3z3NswFYB E8JMUSvwV/eQ1uj/z5wDTC/cp/7m8hiobB9KjNndAWEbSHNqpV6/pQl5Y1lRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYYkdqCayWlqVp5BXX67JOYAtrswHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2UBm7F0TBF0CnQkuRvkvkgKM0ox6jtdJSC OKKngj5IS0ZZ0NF+xE60OyO2p/osK2adn8MCXuXJj2N3xsu3O64J6sKymS+VeD7u 7mYPYnuv8+PQJz6eWxzvcmc6kgek1feWjNvNC5EGGiX/xW5tlYkddDlkKYXQ2549 sOULnY4yQGbnd+w5Te5svQ5nz7lEV4yHd1saZMDNyV/jU8pR2u6QF5XeOg9NgKhI UBfaSREd9Ri/7DiIhaWNrswZfrKxECXpgbqY52gPOhrWVZAwIHAsez5UMVj4TyAq v4hs7qkVGotHHocqt8nyzlgsfS1lmV/Ea++3AE5WlpYmqrx6dF8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:05 2025 by rpki-client