$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: r4eenJ1AGipgIJqV5vfJy/g3PEQLg8cymSO2GeLyNXE= Subject key identifier: 3C:56:64:FA:0E:43:62:75:63:DF:4C:39:73:F5:A7:26:72:BD:7B:BF Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 5F078F3BD7E07F3071836E9CC38F9C4A4188F09F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01F8 Signing time: Fri 22 Aug 2025 11:10:53 +0000 Manifest this update: Fri 22 Aug 2025 11:05:53 +0000 Manifest next update: Mon 25 Aug 2025 11:41:53 +0000 Files and hashes: 1: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: +gIII7pmEw7JgR07mdqHEFcl1CYJDnyNcjN7IbzEFcM=) 2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:07:8f:3b:d7:e0:7f:30:71:83:6e:9c:c3:8f:9c:4a:41:88:f0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Aug 22 11:05:53 2025 GMT Not After : Aug 25 11:41:53 2025 GMT Subject: CN=3C5664FA0E43627563DF4C3973F5A72672BD7BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:f3:f7:61:af:7a:53:e7:d0:74:99:8e:72: f9:54:2a:87:ef:65:6b:9c:6b:74:a9:ad:ce:bc:7e: c3:40:29:e2:0b:c5:9d:6c:28:aa:42:5a:68:7a:2d: eb:9c:df:7c:35:49:c0:50:12:75:f8:4e:46:a6:fe: 1c:21:28:8d:0e:5f:3c:0f:45:0c:7a:ea:8b:92:42: 38:03:4f:c7:a0:90:de:d9:7c:d7:c2:a8:83:3a:66: b1:88:9c:3b:ca:f4:d8:22:58:77:2c:b0:1b:54:0e: ff:96:57:bd:ae:72:93:40:3b:24:19:4c:3d:ae:a3: d4:93:98:8b:31:d6:74:00:d7:d4:be:a1:e7:7a:63: 81:97:d2:0b:c0:7b:84:ac:2f:50:b9:c0:2f:54:a4: 5d:7c:e0:e7:3c:1b:82:02:56:0c:d5:b3:d5:3c:5d: 43:f9:6f:51:4d:57:a5:24:a5:78:73:7a:9c:49:85: d0:76:cf:33:6a:4c:0a:a3:f7:e9:11:7d:ca:6b:a5: e2:96:56:b9:c4:02:9a:31:2b:53:75:1e:d3:ef:1c: f2:67:c7:f3:e9:0a:eb:d6:e7:d1:ee:51:99:01:ca: 19:c1:2c:8b:37:20:95:78:e0:3f:ca:d3:46:24:2c: 97:c3:1f:81:d7:69:70:c2:21:d8:61:0f:a6:45:01: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:64:FA:0E:43:62:75:63:DF:4C:39:73:F5:A7:26:72:BD:7B:BF X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b8:6b:d5:c9:45:ca:fd:9d:0d:d5:d5:08:82:b3:88:c2:24: 40:cf:0a:97:91:80:19:5c:fd:45:8e:ad:48:f8:52:df:4e:43: 57:2b:fb:28:39:b0:de:32:a6:90:6c:ae:7a:d4:6a:4e:69:da: 71:e9:05:74:e5:93:e0:04:4b:09:69:ea:7b:59:9a:b3:22:f6: 0b:c9:1b:bb:c0:ee:b5:2d:58:5b:fc:26:47:77:8f:9d:b1:97: 16:9c:64:99:95:59:45:6b:d0:ae:a4:79:90:91:43:78:0c:fa: 13:cc:fd:80:c3:fe:fd:3c:5f:27:84:4a:b9:29:82:7e:db:57: 0b:65:f6:c4:c0:02:7e:ef:fb:48:b0:43:b7:7e:e4:e5:9d:b0: 21:8a:04:69:15:0e:8a:71:b7:aa:c3:73:d2:be:c2:b7:d2:95: db:60:e9:e3:8c:db:03:3c:ec:d9:99:ed:aa:33:22:f0:d6:3c: f3:0d:9d:5b:0d:0e:f6:84:9e:0e:51:b8:d5:a3:10:2a:7d:60: 42:b2:21:2e:64:91:45:61:f3:bc:51:d1:05:2d:88:06:66:96: 6c:74:09:6f:83:b2:7b:37:0f:a0:ce:13:1a:01:3a:b7:45:f2: 68:87:14:fd:85:a1:23:49:67:32:d1:2f:04:be:39:20:97:33: 8e:91:0e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwePO9fgfzBxg26cw4+cSkGI8J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA4MjIxMTA1NTNaFw0yNTA4MjUxMTQxNTNaMDMxMTAvBgNV BAMTKDNDNTY2NEZBMEU0MzYyNzU2M0RGNEMzOTczRjVBNzI2NzJCRDdCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QvP3Ya96U+fQdJmOcvlUKofv ZWuca3Sprc68fsNAKeILxZ1sKKpCWmh6Leuc33w1ScBQEnX4Tkam/hwhKI0OXzwP RQx66ouSQjgDT8egkN7ZfNfCqIM6ZrGInDvK9NgiWHcssBtUDv+WV72ucpNAOyQZ TD2uo9STmIsx1nQA19S+oed6Y4GX0gvAe4SsL1C5wC9UpF184Oc8G4ICVgzVs9U8 XUP5b1FNV6UkpXhzepxJhdB2zzNqTAqj9+kRfcprpeKWVrnEApoxK1N1HtPvHPJn x/PpCuvW59HuUZkByhnBLIs3IJV44D/K00YkLJfDH4HXaXDCIdhhD6ZFARznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFZk+g5DYnVj30w5c/WnJnK9e78wHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJe4a9XJRcr9nQ3V1QiCs4jCJEDPCpeRgBlc /UWOrUj4Ut9OQ1cr+yg5sN4yppBsrnrUak5p2nHpBXTlk+AESwlp6ntZmrMi9gvJ G7vA7rUtWFv8Jkd3j52xlxacZJmVWUVr0K6keZCRQ3gM+hPM/YDD/v08XyeESrkp gn7bVwtl9sTAAn7v+0iwQ7d+5OWdsCGKBGkVDopxt6rDc9K+wrfSldtg6eOM2wM8 7NmZ7aozIvDWPPMNnVsNDvaEng5RuNWjECp9YEKyIS5kkUVh87xR0QUtiAZmlmx0 CW+Dsns3D6DOExoBOrdF8miHFP2FoSNJZzLRLwS+OSCXM46RDvA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:02 2025 by rpki-client