$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: CwEahMYpe8oVE98Qx9C/I1ksuDzoLwqklUfFYvVS/Gg= Subject key identifier: 0C:7B:3C:42:85:F6:25:45:E3:08:85:22:CC:5F:A9:DA:36:95:94:F6 Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 7A95B0DDADBA1A24557AF678C6F317A27B54F4AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 0397 Signing time: Sat 18 Oct 2025 14:32:21 +0000 Manifest this update: Sat 18 Oct 2025 14:27:21 +0000 Manifest next update: Tue 21 Oct 2025 20:55:21 +0000 Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: ZcD3mD57lgCRAJVZI2u0DYU+h4rTyPB5dMW159Kc2nM=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:95:b0:dd:ad:ba:1a:24:55:7a:f6:78:c6:f3:17:a2:7b:54:f4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Oct 18 14:27:21 2025 GMT Not After : Oct 21 20:55:21 2025 GMT Subject: CN=0C7B3C4285F62545E3088522CC5FA9DA369594F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:b1:da:4e:b2:f7:be:97:fd:a3:d9:37:2e: 78:46:f3:6d:ea:24:72:5b:2c:66:3b:dd:be:16:5d: 21:c4:c6:77:d4:de:c0:80:19:5e:e8:c7:0a:a7:9e: e7:c1:58:d6:23:87:65:a8:c9:fe:b0:f3:7b:d7:3e: c3:aa:8a:a2:fc:a3:97:46:69:5f:74:a5:fb:0e:d2: a0:65:2a:36:af:7f:f8:33:53:d7:93:fd:0f:22:f8: 12:cc:db:20:81:8f:ae:b0:d5:58:63:51:ea:5a:6e: ea:b7:db:91:32:e1:70:b3:cd:e9:35:9d:7b:d6:92: 16:f2:0c:67:43:92:f7:78:8b:43:05:35:6c:92:7c: 68:d0:c5:fc:5a:ff:95:68:fa:9a:89:a7:af:2c:41: 22:f0:15:5f:63:ce:52:9a:dc:53:a2:d8:6e:fe:b3: 1a:2d:e3:9d:e6:07:32:31:ca:94:61:41:60:39:f6: 25:03:51:cf:aa:36:84:d4:ea:97:69:b1:60:fe:9c: 21:4a:c3:04:4a:7e:1b:56:fd:0b:b9:5e:4c:64:58: ad:0f:c0:74:f5:8f:7d:6b:46:5c:10:d4:9b:77:87: 3f:46:0b:ef:b7:5b:41:8d:7a:f1:50:6b:48:9b:3b: ae:a9:fc:f0:e7:58:ac:e1:21:45:ce:a5:f9:d8:a7: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7B:3C:42:85:F6:25:45:E3:08:85:22:CC:5F:A9:DA:36:95:94:F6 X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e2:e7:c5:3d:ba:29:ce:fc:23:da:e2:7a:c9:84:9d:1a:6c: 4d:2a:25:f4:14:0b:33:64:f1:ab:b2:82:10:3d:c1:51:80:25: da:91:01:12:c2:e8:7c:e2:cd:b0:36:af:58:0a:d4:c7:e0:b6: 21:0b:bb:1b:af:f9:83:bb:d5:85:39:97:72:ca:d5:a8:ed:f9: 70:a9:70:bb:06:89:95:8d:d0:3f:e8:60:3e:63:3e:e7:e7:15: 4b:35:6e:b7:af:bd:91:2f:a3:01:69:08:f9:24:ef:ae:0e:89: c7:c0:8c:05:30:92:94:59:2e:e8:d0:87:b7:32:85:09:ed:e5: e2:fc:ab:f3:72:88:99:73:cd:0f:1e:93:7a:a9:01:23:4a:02: bc:b4:8d:b6:12:3a:81:1f:4b:67:fc:e4:15:09:fd:0a:93:a0: 8b:fb:25:ec:52:39:e6:32:97:76:d8:73:30:d1:2f:38:cc:5c: 5a:54:c0:89:a0:92:0b:f4:f5:1b:18:82:31:cc:ac:2e:30:5f: 39:20:bf:6f:39:dc:9a:ab:ab:d7:51:1c:fd:b3:d0:3d:88:53: b1:4f:a9:f2:93:d9:d5:ec:fe:be:b1:be:b4:ae:2f:d8:64:f1: fb:f8:c3:b7:15:4c:d7:e1:fa:43:c5:8f:24:62:34:8c:89:57: 20:e5:20:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepWw3a26GiRVevZ4xvMXontU9KswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNTEwMTgxNDI3MjFaFw0yNTEwMjEyMDU1MjFaMDMxMTAvBgNV BAMTKDBDN0IzQzQyODVGNjI1NDVFMzA4ODUyMkNDNUZBOURBMzY5NTk0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcnrHaTrL3vpf9o9k3LnhG823q JHJbLGY73b4WXSHExnfU3sCAGV7oxwqnnufBWNYjh2Woyf6w83vXPsOqiqL8o5dG aV90pfsO0qBlKjavf/gzU9eT/Q8i+BLM2yCBj66w1VhjUepabuq325Ey4XCzzek1 nXvWkhbyDGdDkvd4i0MFNWySfGjQxfxa/5Vo+pqJp68sQSLwFV9jzlKa3FOi2G7+ sxot453mBzIxypRhQWA59iUDUc+qNoTU6pdpsWD+nCFKwwRKfhtW/Qu5XkxkWK0P wHT1j31rRlwQ1Jt3hz9GC++3W0GNevFQa0ibO66p/PDnWKzhIUXOpfnYp22BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHs8QoX2JUXjCIUizF+p2jaVlPYwHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPi58U9uinO/CPa4nrJhJ0abE0qJfQUCzNk 8auyghA9wVGAJdqRARLC6HzizbA2r1gK1MfgtiELuxuv+YO71YU5l3LK1ajt+XCp cLsGiZWN0D/oYD5jPufnFUs1brevvZEvowFpCPkk764OicfAjAUwkpRZLujQh7cy hQnt5eL8q/NyiJlzzQ8ek3qpASNKAry0jbYSOoEfS2f85BUJ/QqToIv7JexSOeYy l3bYczDRLzjMXFpUwImgkgv09RsYgjHMrC4wXzkgv2853Jqrq9dRHP2z0D2IU7FP qfKT2dXs/r6xvrSuL9hk8fv4w7cVTNfh+kPFjyRiNIyJVyDlINo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:44 2025 by rpki-client