$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: EeyBwaawat1uL/OfWIaTksHmDMHB+XZfddC8s+ttxQI= Subject key identifier: F5:34:C8:7A:1F:31:9A:D4:0C:6B:0C:DB:FB:62:BB:42:96:E6:0D:BE Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 59145C8E4D2ABCF6F26BE1392CDFE4294F1B07E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01C9 Signing time: Thu 08 May 2025 02:20:51 +0000 Manifest this update: Thu 08 May 2025 02:15:51 +0000 Manifest next update: Sun 11 May 2025 04:12:51 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: B6Fu10v29xexPJR97rXHy7paHFBPhwsCQWeeDmHHNUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 04:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:14:5c:8e:4d:2a:bc:f6:f2:6b:e1:39:2c:df:e4:29:4f:1b:07:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: May 8 02:15:51 2025 GMT Not After : May 11 04:12:51 2025 GMT Subject: CN=F534C87A1F319AD40C6B0CDBFB62BB4296E60DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:53:fb:be:39:3b:6f:0b:a1:e2:42:f8:38: 6d:4c:cb:0e:c8:46:3c:f5:41:f9:46:eb:ad:d0:e4: c0:17:52:cb:97:03:89:b9:20:21:c9:74:3a:af:29: 2a:98:9e:21:2c:51:07:b9:96:8d:4a:d9:ec:c5:4c: 85:c6:a8:df:a4:b3:60:e5:31:27:22:9d:93:2d:fc: 2d:59:1b:24:cb:25:8b:d1:00:dd:39:cf:01:7f:4a: 44:2b:d0:45:0a:b0:1f:1c:11:e5:08:95:ba:0c:5c: 24:c1:05:8a:13:b9:43:7f:f0:61:20:dc:b5:63:c9: 9f:e6:04:18:ff:0e:bb:df:74:ed:70:19:26:c9:86: 5f:50:a9:fe:ca:1b:dd:6d:48:bc:5c:68:9b:66:3b: 29:59:a8:84:15:1c:07:d8:e2:c2:d8:21:58:3e:b8: 55:2c:84:38:65:14:ee:0f:d6:8d:51:47:4d:6f:ec: 8a:2d:4a:11:19:c3:f0:7c:20:8b:67:b9:53:ed:91: b0:e7:85:b8:0f:9e:cb:42:ce:08:04:de:b1:7a:04: 58:5b:c2:3c:b2:26:b7:63:8d:fa:6c:f6:15:84:2b: c7:f2:75:ed:66:e5:74:5d:e2:8c:ce:15:fb:de:46: 2b:49:fb:4c:22:75:99:07:57:e5:57:61:b9:67:ca: f3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:34:C8:7A:1F:31:9A:D4:0C:6B:0C:DB:FB:62:BB:42:96:E6:0D:BE X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5c:81:1b:be:2b:d9:4b:15:60:c3:73:18:94:46:b3:ad:74: df:e4:70:39:d8:54:0c:a1:13:65:44:cc:1a:67:9e:f7:96:bb: de:b1:f1:c9:da:c5:90:d1:b5:b5:c3:84:8e:1d:ae:0d:2f:0b: fa:83:e7:41:cd:aa:26:61:ca:9b:f9:a8:a8:fe:0b:a4:26:e7: c4:de:af:2d:33:38:39:bd:da:08:da:43:69:ef:c6:b1:f5:19: b1:6a:85:f0:d3:99:45:59:6b:91:95:c1:77:c3:df:25:11:8e: f8:ce:fc:08:0d:2e:58:16:aa:8a:97:5c:51:3c:a3:f5:53:73: 44:32:0f:5d:82:c2:b2:92:9c:a5:a4:a5:62:82:8d:f4:47:b4: a9:f8:4a:8b:9d:ab:83:e4:f1:0f:85:d4:08:e7:19:b1:1e:ae: d5:a2:42:be:1f:16:b7:e5:4d:a2:cd:63:4e:a6:ef:e9:da:ed: 08:48:cd:f4:22:5e:db:20:c4:43:8c:34:c2:8f:fc:6a:23:6a: 9b:70:b0:13:d7:3f:8b:31:7b:05:d8:65:d0:66:57:42:b5:a0: b8:ec:7e:0f:80:17:d7:a8:84:50:4e:e0:08:ee:10:a1:1b:c4: ad:c7:0b:15:d1:60:ac:29:9a:20:ab:7b:1a:36:89:35:b4:fe: fb:2e:8b:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRRcjk0qvPbya+E5LN/kKU8bB+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA1MDgwMjE1NTFaFw0yNTA1MTEwNDEyNTFaMDMxMTAvBgNV BAMTKEY1MzRDODdBMUYzMTlBRDQwQzZCMENEQkZCNjJCQjQyOTZFNjBEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FlP7vjk7bwuh4kL4OG1Myw7I Rjz1QflG663Q5MAXUsuXA4m5ICHJdDqvKSqYniEsUQe5lo1K2ezFTIXGqN+ks2Dl MScinZMt/C1ZGyTLJYvRAN05zwF/SkQr0EUKsB8cEeUIlboMXCTBBYoTuUN/8GEg 3LVjyZ/mBBj/DrvfdO1wGSbJhl9Qqf7KG91tSLxcaJtmOylZqIQVHAfY4sLYIVg+ uFUshDhlFO4P1o1RR01v7IotShEZw/B8IItnuVPtkbDnhbgPnstCzggE3rF6BFhb wjyyJrdjjfps9hWEK8fyde1m5XRd4ozOFfveRitJ+0widZkHV+VXYblnyvNLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9TTIeh8xmtQMawzb+2K7QpbmDb4wHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxcgRu+K9lLFWDDcxiURrOtdN/kcDnYVAyh E2VEzBpnnveWu96x8cnaxZDRtbXDhI4drg0vC/qD50HNqiZhypv5qKj+C6Qm58Te ry0zODm92gjaQ2nvxrH1GbFqhfDTmUVZa5GVwXfD3yURjvjO/AgNLlgWqoqXXFE8 o/VTc0QyD12CwrKSnKWkpWKCjfRHtKn4Soudq4Pk8Q+F1AjnGbEertWiQr4fFrfl TaLNY06m7+na7QhIzfQiXtsgxEOMNMKP/GojaptwsBPXP4sxewXYZdBmV0K1oLjs fg+AF9eohFBO4AjuEKEbxK3HCxXRYKwpmiCrexo2iTW0/vsui18= -----END CERTIFICATE-----Generated at Fri May 9 07:50:37 2025 by rpki-client