$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: Blr+AlN2V8iaWfbtm4skLpwiU7KJ0Dgm+m/XwyvGddk= Subject key identifier: 9D:16:0F:E9:EA:D7:8B:F3:6F:5A:E4:9D:EE:46:64:F7:3A:A0:8D:B4 Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 249C941495B0D7AA3DE19E8F183DB97A8BD49F11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 028B Signing time: Thu 21 Aug 2025 23:20:47 +0000 Manifest this update: Thu 21 Aug 2025 23:15:47 +0000 Manifest next update: Mon 25 Aug 2025 02:43:47 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: yQfQ+VGPdflv9ZZOLsU4vzVngIgi+5jVd+yS9C33ZzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9c:94:14:95:b0:d7:aa:3d:e1:9e:8f:18:3d:b9:7a:8b:d4:9f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: Aug 21 23:15:47 2025 GMT Not After : Aug 25 02:43:47 2025 GMT Subject: CN=9D160FE9EAD78BF36F5AE49DEE4664F73AA08DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:39:32:ce:5f:09:86:9c:ec:20:5f:d3:84: 73:e1:01:d8:af:91:91:49:a7:0c:03:8b:98:a8:70: 13:75:40:61:46:e4:bc:51:0b:6d:1d:e9:3d:cc:0b: 0a:b2:3c:66:4a:d5:4b:3f:e6:df:d1:04:73:dc:7f: 42:35:ca:6e:de:10:0e:74:a5:28:f3:7d:26:35:4c: 42:4e:6d:1d:9b:64:7a:9a:f1:b5:81:8b:e1:38:09: 17:5e:ce:8b:6a:3a:4c:13:68:5a:28:a5:8c:1f:b3: ac:16:1f:70:6d:43:d2:ea:b5:cb:5f:1b:ff:c7:04: 36:ab:58:09:44:4f:ee:e4:43:a4:4e:54:47:62:78: 97:03:ac:7c:2d:9a:72:c1:f3:49:75:33:0c:1a:0f: 33:2b:43:2e:fc:35:a2:7e:fd:c7:6f:e5:66:58:f9: 4a:5b:94:dc:51:a0:ac:d6:03:b0:4a:80:a7:96:e6: bd:ad:6a:66:ed:7f:cd:a7:e6:cd:13:b2:1d:cc:9a: 5c:a8:62:11:08:a0:58:34:06:e2:c0:50:4e:f8:00: 2e:23:6f:55:77:44:56:68:57:95:09:e7:f4:cc:1f: 14:e9:39:8e:d8:85:ed:fe:4b:c3:62:f1:30:e9:7d: 86:35:5f:0e:bb:c3:56:ea:53:39:27:07:59:4d:a0: 7b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:16:0F:E9:EA:D7:8B:F3:6F:5A:E4:9D:EE:46:64:F7:3A:A0:8D:B4 X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:05:4a:a8:a6:9f:2e:0d:c8:6b:a7:60:34:1b:ff:12:71:f1: eb:ec:c2:2f:f1:d4:1b:08:e2:19:9f:37:b6:b8:4a:df:fa:d9: 0c:83:6f:9d:38:f5:5d:53:9c:5d:07:09:19:5d:31:83:55:eb: 6e:aa:56:5b:a5:d4:d3:48:71:ec:86:b1:f8:87:a8:d4:63:10: e6:c4:14:ee:2b:02:06:75:80:80:e4:cb:31:c7:77:39:e5:05: 07:c2:06:28:97:1b:46:54:b1:38:db:53:87:78:82:6b:67:53: 90:a6:ac:cc:bb:ad:b3:60:d5:e0:d2:e5:cb:8f:08:18:ac:6a: 9f:fb:fd:2c:fe:f1:13:f6:27:19:00:41:d0:5e:fb:75:7a:ae: 7d:68:90:44:d1:ef:32:ee:a5:ad:fe:0e:21:30:1d:a5:e5:4a: 09:00:53:a1:15:68:81:6c:31:54:ff:64:5d:31:dd:e2:d7:32: 71:35:2c:49:5c:37:57:95:1d:e2:56:11:a5:5b:1d:a1:11:ce: 3a:c3:10:ff:7f:23:d1:2b:3a:7e:e9:28:c4:b9:f7:57:d2:a4: 56:89:be:ac:13:e2:94:48:64:b6:e0:fe:c3:53:b5:9e:83:e9: a2:87:30:48:bd:4f:c9:26:1a:2e:17:d6:83:eb:52:de:7c:0c: 2d:cc:5d:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJyUFJWw16o94Z6PGD25eovUnxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNTA4MjEyMzE1NDdaFw0yNTA4MjUwMjQzNDdaMDMxMTAvBgNV BAMTKDlEMTYwRkU5RUFENzhCRjM2RjVBRTQ5REVFNDY2NEY3M0FBMDhEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf7Tkyzl8JhpzsIF/ThHPhAdiv kZFJpwwDi5iocBN1QGFG5LxRC20d6T3MCwqyPGZK1Us/5t/RBHPcf0I1ym7eEA50 pSjzfSY1TEJObR2bZHqa8bWBi+E4CRdezotqOkwTaFoopYwfs6wWH3BtQ9Lqtctf G//HBDarWAlET+7kQ6ROVEdieJcDrHwtmnLB80l1MwwaDzMrQy78NaJ+/cdv5WZY +UpblNxRoKzWA7BKgKeW5r2tambtf82n5s0Tsh3MmlyoYhEIoFg0BuLAUE74AC4j b1V3RFZoV5UJ5/TMHxTpOY7Yhe3+S8Ni8TDpfYY1Xw67w1bqUzknB1lNoHunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnRYP6erXi/NvWuSd7kZk9zqgjbQwHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIFSqimny4NyGunYDQb/xJx8evswi/x1BsI 4hmfN7a4St/62QyDb5049V1TnF0HCRldMYNV626qVlul1NNIceyGsfiHqNRjEObE FO4rAgZ1gIDkyzHHdznlBQfCBiiXG0ZUsTjbU4d4gmtnU5CmrMy7rbNg1eDS5cuP CBisap/7/Sz+8RP2JxkAQdBe+3V6rn1okETR7zLupa3+DiEwHaXlSgkAU6EVaIFs MVT/ZF0x3eLXMnE1LElcN1eVHeJWEaVbHaERzjrDEP9/I9ErOn7pKMS591fSpFaJ vqwT4pRIZLbg/sNTtZ6D6aKHMEi9T8kmGi4X1oPrUt58DC3MXak= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:42 2025 by rpki-client