$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft File: 29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json) Hash identifier: 7fNYTMCW485PzAvMwDRqaKuHe9KoUN3kte+sH5IwY14= Subject key identifier: EA:EB:A4:AC:BD:DC:9C:11:25:A5:78:49:6C:30:75:42:30:AE:B1:66 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 021B044BF36A9FBF740B78AFA301EE2A94033524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft Manifest number: 01E2 Signing time: Sat 18 Oct 2025 19:20:58 +0000 Manifest this update: Sat 18 Oct 2025 19:15:58 +0000 Manifest next update: Tue 21 Oct 2025 20:37:58 +0000 Files and hashes: 1: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=) 2: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=) 3: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=) 4: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=) 5: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=) 6: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=) 7: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=) 8: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=) 9: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=) 10: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: rZtM/lVRlaIqRbDLdJYtozENyoNWAVMPh7fkun3bFk0=) 11: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=) 12: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=) 13: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=) 14: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=) 15: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=) 16: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=) 17: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=) 18: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1b:04:4b:f3:6a:9f:bf:74:0b:78:af:a3:01:ee:2a:94:03:35:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Oct 18 19:15:58 2025 GMT Not After : Oct 21 20:37:58 2025 GMT Subject: CN=EAEBA4ACBDDC9C1125A578496C30754230AEB166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:f3:44:b9:98:82:46:2a:4a:b3:41:c9:59: 35:b6:60:44:56:21:bb:ea:eb:66:c8:c0:ec:56:2b: c6:03:d8:02:22:d3:75:b5:3e:80:9a:65:a2:e6:58: f7:7e:7d:70:06:52:bf:08:06:26:2a:ca:65:6b:d4: 77:ec:dd:4f:28:d1:aa:9b:bc:1a:6e:fc:6c:f6:3e: 38:83:26:28:38:e8:f1:f6:b3:cf:d2:05:e6:22:62: 93:63:62:5f:97:43:53:bc:c0:e7:48:c1:23:3c:ca: 48:af:e0:01:c4:d6:49:11:f2:f5:7c:2f:41:bc:83: ab:8f:46:af:ba:a5:c0:aa:70:ae:71:00:28:a2:b4: 51:33:d9:4a:f7:b1:a1:94:1d:e6:a1:8b:de:ec:91: 11:49:40:57:d3:53:a8:3e:45:6b:00:00:03:26:4b: 5e:a7:a0:72:a7:6d:d8:34:66:cb:73:f3:27:b4:11: 1a:7b:f0:4a:df:a1:44:8a:79:f5:34:79:be:f2:99: de:9e:88:70:30:71:47:62:ab:64:d5:71:97:8f:78: e8:06:9c:30:6a:bf:56:6d:73:88:82:23:07:a7:dc: 91:9e:04:0a:ca:71:f0:83:3b:ad:0d:05:15:4e:1c: 9c:2d:02:c7:ea:bf:1f:2a:f1:4c:fe:97:82:0a:cc: b9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EB:A4:AC:BD:DC:9C:11:25:A5:78:49:6C:30:75:42:30:AE:B1:66 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1f:02:b1:81:54:12:68:c2:ce:4c:61:7b:88:73:36:52:2a: 81:9a:01:c7:0b:a9:01:35:41:07:a6:33:db:a8:90:d0:17:c3: 84:3a:99:f5:60:8e:96:06:2f:a1:29:01:45:e3:0a:28:5b:33: 1f:41:38:77:58:59:09:6f:b2:98:a4:4f:fa:03:37:33:fa:f5: 4a:94:6e:07:87:96:20:1c:e4:b6:f1:1a:ba:ca:28:6f:5f:b8: 78:85:02:8d:bf:44:5c:9a:92:43:7b:9d:7c:be:28:46:d1:3b: 16:41:1e:72:8d:97:0c:42:f9:16:e2:f7:52:97:98:bc:1e:47: 8e:0c:61:d2:b5:9a:5e:39:9c:77:bd:41:13:6f:45:c8:46:a0: dd:01:01:28:82:4c:4f:6d:96:8a:ec:a4:aa:50:fe:84:92:16: 8d:e0:74:0f:79:a0:1d:d2:9f:69:5c:00:98:33:fd:8c:d4:77: 3c:5a:8f:b6:e2:2c:dc:08:a5:1f:37:bc:e5:d1:94:a5:aa:b5: f4:c5:bb:a3:5d:c4:d3:b5:33:7f:34:32:61:fd:7b:8a:4d:c9: 98:ce:1d:29:96:93:e7:59:88:85:cb:0f:47:00:6b:04:ce:0d: b1:81:aa:e8:02:77:8c:17:07:76:52:59:f4:65:82:8e:23:0d: f4:68:f8:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhsES/Nqn790C3ivowHuKpQDNSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTEwMTgxOTE1NThaFw0yNTEwMjEyMDM3NThaMDMxMTAvBgNV BAMTKEVBRUJBNEFDQkREQzlDMTEyNUE1Nzg0OTZDMzA3NTQyMzBBRUIxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RPNEuZiCRipKs0HJWTW2YERW Ibvq62bIwOxWK8YD2AIi03W1PoCaZaLmWPd+fXAGUr8IBiYqymVr1Hfs3U8o0aqb vBpu/Gz2PjiDJig46PH2s8/SBeYiYpNjYl+XQ1O8wOdIwSM8ykiv4AHE1kkR8vV8 L0G8g6uPRq+6pcCqcK5xACiitFEz2Ur3saGUHeahi97skRFJQFfTU6g+RWsAAAMm S16noHKnbdg0Zstz8ye0ERp78ErfoUSKefU0eb7ymd6eiHAwcUdiq2TVcZePeOgG nDBqv1Ztc4iCIwen3JGeBArKcfCDO60NBRVOHJwtAsfqvx8q8Uz+l4IKzLm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6uukrL3cnBElpXhJbDB1QjCusWYwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4YjI5NTktMWMyNS00NmEwLTg5 ZDEtZjc3ZDVjNDc0NjkxLzAvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3 NTY2RTYwOTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMfArGBVBJows5MYXuIczZSKoGaAccLqQE1 QQemM9uokNAXw4Q6mfVgjpYGL6EpAUXjCihbMx9BOHdYWQlvspikT/oDNzP69UqU bgeHliAc5LbxGrrKKG9fuHiFAo2/RFyakkN7nXy+KEbROxZBHnKNlwxC+Rbi91KX mLweR44MYdK1ml45nHe9QRNvRchGoN0BASiCTE9tlorspKpQ/oSSFo3gdA95oB3S n2lcAJgz/YzUdzxaj7biLNwIpR83vOXRlKWqtfTFu6NdxNO1M380MmH9e4pNyZjO HSmWk+dZiIXLD0cAawTODbGBqugCd4wXB3ZSWfRlgo4jDfRo+PY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:45 2025 by rpki-client