$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: AFQ+b6Lggz3imM1gPRtctUJ0xAg/pW6dHNeR0DByi30= Subject key identifier: 1D:10:CB:03:2C:8A:05:93:36:6D:39:A3:A7:D1:06:1A:24:26:96:29 Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 0E4709D5BD5F6632E9CD05EE0BA71F3F4C671A9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 034F Signing time: Fri 09 May 2025 13:22:19 +0000 Manifest this update: Fri 09 May 2025 13:17:19 +0000 Manifest next update: Mon 12 May 2025 18:55:19 +0000 Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: 11RD8t+lHt0xh07R7GjveyZeH9jdfFjzHG+gwKgLzu0=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: RBc8t0SzZzq6PvIsQn/Y8gWPBkf8OuMfzBXzr0Qs6z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 18:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:47:09:d5:bd:5f:66:32:e9:cd:05:ee:0b:a7:1f:3f:4c:67:1a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: May 9 13:17:19 2025 GMT Not After : May 12 18:55:19 2025 GMT Subject: CN=1D10CB032C8A0593366D39A3A7D1061A24269629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ee:1c:77:f3:3e:b2:9a:9a:57:f7:d8:4d:93: c4:c6:7e:cd:f0:9d:a2:86:48:30:de:8b:b4:3d:70: 59:bc:c6:ed:38:11:a5:73:ae:5e:17:1a:fe:91:fd: b6:dd:08:20:86:ec:65:36:a9:5a:f0:14:25:ec:31: 01:ff:21:3d:ae:22:09:50:18:a7:9f:b7:43:04:71: 4b:05:b8:9d:cd:07:83:98:2e:2a:88:21:72:fe:f8: 58:3c:a1:51:7a:2e:3a:70:e0:f5:d0:75:a0:1c:85: 74:87:99:81:29:55:a0:8b:21:1d:59:31:59:15:c8: 61:b1:77:0e:fa:1d:3a:c2:6b:2e:c1:b4:b6:79:1a: 85:8f:90:d6:7c:ca:ee:9f:30:2a:9f:24:df:d7:a4: 95:bb:7d:4e:b0:52:9d:37:41:36:a2:a8:03:aa:05: 38:ea:7e:eb:bd:f1:10:6a:8f:94:d2:50:9a:7a:ff: af:be:31:5f:7f:c0:78:38:c8:82:db:25:b8:fc:f6: bc:38:fe:06:7e:c2:cc:2d:58:30:0f:d3:96:d0:98: 32:01:56:08:c8:a6:62:89:23:23:b0:92:6b:1f:aa: bf:0a:d5:2a:49:0c:b3:9b:5f:5b:57:73:18:f9:a5: 02:3a:8c:7b:66:9d:d3:43:30:24:5b:99:44:36:94: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:10:CB:03:2C:8A:05:93:36:6D:39:A3:A7:D1:06:1A:24:26:96:29 X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b8:3b:4e:90:fe:f9:a5:88:c8:43:8b:35:a7:0f:d6:e3:67: a6:f4:7b:d0:2a:be:3d:a9:86:e8:b9:10:9c:74:d4:37:04:b8: 87:01:39:f9:8a:c5:e0:af:1a:da:e6:c1:62:00:7c:b1:f1:b0: ff:4e:09:2a:d9:88:39:07:b3:84:4e:e3:16:68:c0:06:7f:23: 10:1f:36:02:ae:f8:03:8c:3f:88:5a:51:11:72:a7:76:63:88: bf:c0:ff:c4:f9:d2:61:9e:80:11:f1:47:3c:74:e5:cc:59:37: 56:bc:9b:ef:99:68:3c:0d:32:df:0a:52:ed:04:51:d2:4a:69: 9e:1f:c5:b1:71:6a:56:fa:aa:1c:33:fd:53:f0:3d:61:4e:e9: 9a:51:89:6d:42:32:e1:79:d7:a5:6b:d0:27:26:f8:d3:72:40: 93:57:90:c0:86:f3:3c:bb:ca:19:f0:ad:af:f7:e9:ab:1a:d3: 64:d5:ea:1a:2e:08:c7:77:31:44:30:81:63:46:95:5e:69:40: 65:3a:ca:90:96:46:c8:e4:75:f6:64:61:d5:b3:af:b4:b8:ea: dd:dd:16:45:6e:31:d2:eb:63:8c:74:e9:63:8a:45:b8:65:fa: e9:7c:9e:f2:6d:71:f1:23:4f:2d:dd:2e:f2:fb:ec:a7:14:70: 34:33:ee:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkcJ1b1fZjLpzQXuC6cfP0xnGpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNTA1MDkxMzE3MTlaFw0yNTA1MTIxODU1MTlaMDMxMTAvBgNV BAMTKDFEMTBDQjAzMkM4QTA1OTMzNjZEMzlBM0E3RDEwNjFBMjQyNjk2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa7hx38z6ymppX99hNk8TGfs3w naKGSDDei7Q9cFm8xu04EaVzrl4XGv6R/bbdCCCG7GU2qVrwFCXsMQH/IT2uIglQ GKeft0MEcUsFuJ3NB4OYLiqIIXL++Fg8oVF6Ljpw4PXQdaAchXSHmYEpVaCLIR1Z MVkVyGGxdw76HTrCay7BtLZ5GoWPkNZ8yu6fMCqfJN/XpJW7fU6wUp03QTaiqAOq BTjqfuu98RBqj5TSUJp6/6++MV9/wHg4yILbJbj89rw4/gZ+wswtWDAP05bQmDIB VgjIpmKJIyOwkmsfqr8K1SpJDLObX1tXcxj5pQI6jHtmndNDMCRbmUQ2lIejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHRDLAyyKBZM2bTmjp9EGGiQmlikwHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADq4O06Q/vmliMhDizWnD9bjZ6b0e9Aqvj2p hui5EJx01DcEuIcBOfmKxeCvGtrmwWIAfLHxsP9OCSrZiDkHs4RO4xZowAZ/IxAf NgKu+AOMP4haURFyp3ZjiL/A/8T50mGegBHxRzx05cxZN1a8m++ZaDwNMt8KUu0E UdJKaZ4fxbFxalb6qhwz/VPwPWFO6ZpRiW1CMuF516Vr0Ccm+NNyQJNXkMCG8zy7 yhnwra/36asa02TV6houCMd3MUQwgWNGlV5pQGU6ypCWRsjkdfZkYdWzr7S46t3d FkVuMdLrY4x06WOKRbhl+ul8nvJtcfEjTy3dLvL77KcUcDQz7pQ= -----END CERTIFICATE-----Generated at Sun May 11 18:53:08 2025 by rpki-client