$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: SEZpiNB8mNvRQiBPMCY07lgnChwYrKOHH8tSZm38YC0= Subject key identifier: 4E:25:EF:CC:B4:E3:22:37:7C:98:8B:07:51:F8:94:DA:BB:FE:48:A3 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 7C5C71C1F439360EDF0D5C1B64EEE5077B1E5143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 0212 Signing time: Mon 20 Oct 2025 03:30:52 +0000 Manifest this update: Mon 20 Oct 2025 03:25:52 +0000 Manifest next update: Thu 23 Oct 2025 11:51:52 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: mgNUq5zx8oUXY4PsZllwFLrGGaDqlX0dwLgdWBsHRnA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5c:71:c1:f4:39:36:0e:df:0d:5c:1b:64:ee:e5:07:7b:1e:51:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Oct 20 03:25:52 2025 GMT Not After : Oct 23 11:51:52 2025 GMT Subject: CN=4E25EFCCB4E322377C988B0751F894DABBFE48A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:9f:25:eb:c2:44:8f:2d:94:55:e6:d8:37: 27:64:02:43:c2:34:e2:c0:02:0e:0a:43:78:11:21: bd:14:a7:b7:e8:28:64:79:3d:2e:dd:be:20:ca:ad: 82:81:2f:69:00:80:c9:b3:28:c6:8c:8e:79:cd:9e: bf:6c:58:75:a5:4a:c2:27:b1:f2:d3:dd:54:93:a3: 07:6c:66:20:59:1d:2c:66:2b:b4:bd:22:df:17:01: 95:e1:af:b1:7e:4a:a6:23:e0:ea:d6:bf:69:50:49: 97:dc:97:1e:de:c7:45:3a:03:95:04:4d:e2:34:45: a8:e7:54:2b:9e:de:aa:39:40:53:3d:1c:68:11:d5: 1f:64:6e:6b:e5:cc:04:89:72:89:69:6c:f0:0d:b5: 57:68:f2:c9:6b:23:bc:78:fb:16:27:f0:13:84:8e: 59:8c:fe:ec:9a:8c:f3:c9:6e:14:62:d4:0d:eb:1c: 30:57:6d:ca:b2:aa:e3:e9:47:1b:1b:2e:15:06:ba: af:65:88:78:50:0d:eb:0e:bb:ca:33:20:a0:a4:5c: 7b:a5:86:c2:8b:36:70:a9:43:03:37:5d:ce:dc:14: c5:df:da:83:c0:ab:cd:7f:56:06:06:b6:4f:89:18: d7:0f:ae:63:48:91:83:0b:59:82:cc:18:87:b6:73: 5c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:25:EF:CC:B4:E3:22:37:7C:98:8B:07:51:F8:94:DA:BB:FE:48:A3 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:57:63:93:85:ee:cf:99:eb:1b:d3:0f:d7:01:06:30:81:ad: 5e:13:d7:7d:5b:88:f8:84:9b:20:cc:8c:e6:d5:2f:6d:8b:98: b3:b1:1e:5e:2a:dc:ec:b4:55:f6:36:75:59:4b:b2:fa:2c:10: 2e:04:c4:0d:3b:00:78:cb:46:e8:d7:b6:7d:fb:c9:77:b0:ef: 09:44:d5:60:06:61:f5:50:6c:3f:be:8c:e6:38:9d:23:26:1d: 87:44:b5:d9:6e:62:6a:5f:88:ee:a8:20:da:9e:2a:6a:72:cb: 59:18:ef:d8:4f:23:ca:46:17:e1:7c:65:96:52:98:6c:61:59: 14:b3:c7:de:89:7c:df:71:0c:9a:cf:f9:ae:31:ab:c4:8c:27: e7:d6:8e:dc:ca:93:67:cc:ca:79:6d:2a:0c:b9:17:3c:19:58: 01:30:41:d0:24:d5:a7:31:be:91:b2:5f:3c:1e:c0:4a:62:42: af:db:80:27:86:de:e0:db:6b:2d:f8:b8:6a:db:b2:e7:fa:96: 85:bd:65:65:94:e3:c2:fe:91:91:ed:0b:d5:9c:d7:a7:2d:66: c0:30:6d:ee:6f:72:7a:20:91:02:03:ba:7f:12:50:e4:4b:33: ee:a9:e7:de:55:ee:21:c3:87:5c:56:da:ab:7c:59:eb:95:44: ad:f1:87:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFxxwfQ5Ng7fDVwbZO7lB3seUUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTEwMjAwMzI1NTJaFw0yNTEwMjMxMTUxNTJaMDMxMTAvBgNV BAMTKDRFMjVFRkNDQjRFMzIyMzc3Qzk4OEIwNzUxRjg5NERBQkJGRTQ4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNp8l68JEjy2UVebYNydkAkPC NOLAAg4KQ3gRIb0Up7foKGR5PS7dviDKrYKBL2kAgMmzKMaMjnnNnr9sWHWlSsIn sfLT3VSTowdsZiBZHSxmK7S9It8XAZXhr7F+SqYj4OrWv2lQSZfclx7ex0U6A5UE TeI0RajnVCue3qo5QFM9HGgR1R9kbmvlzASJcolpbPANtVdo8slrI7x4+xYn8BOE jlmM/uyajPPJbhRi1A3rHDBXbcqyquPpRxsbLhUGuq9liHhQDesOu8ozIKCkXHul hsKLNnCpQwM3Xc7cFMXf2oPAq81/VgYGtk+JGNcPrmNIkYMLWYLMGIe2c1xhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTiXvzLTjIjd8mIsHUfiU2rv+SKMwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9XY5OF7s+Z6xvTD9cBBjCBrV4T131biPiE myDMjObVL22LmLOxHl4q3Oy0VfY2dVlLsvosEC4ExA07AHjLRujXtn37yXew7wlE 1WAGYfVQbD++jOY4nSMmHYdEtdluYmpfiO6oINqeKmpyy1kY79hPI8pGF+F8ZZZS mGxhWRSzx96JfN9xDJrP+a4xq8SMJ+fWjtzKk2fMynltKgy5FzwZWAEwQdAk1acx vpGyXzwewEpiQq/bgCeG3uDbay34uGrbsuf6loW9ZWWU48L+kZHtC9Wc16ctZsAw be5vcnogkQIDun8SUORLM+6p595V7iHDh1xW2qt8WeuVRK3xh3g= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:14 2025 by rpki-client