$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: vrHt3PGyctIZ/aL/aVVT0nqSA2eDuflpB/CXFqhsZAk= Subject key identifier: F6:17:38:34:14:D7:CB:F7:6B:A3:4A:3A:D9:DD:8D:8C:70:F8:37:06 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 489B23E722EAF85CB9E41DE65BB2C590F2420E4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 4B Signing time: Sun 19 Oct 2025 12:50:59 +0000 Manifest this update: Sun 19 Oct 2025 12:45:59 +0000 Manifest next update: Wed 22 Oct 2025 17:49:59 +0000 Files and hashes: 1: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: GeDyq+9mfgGyvMa7Rfnx8o5p5HJ2oifDWE+l13YcBHE=) 2: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (hash: WrbEtwkzEelam58TNUV4Bn/EuB71NKCGwrujJRp3Bd8=) 3: 323430353a353163303a3a2f33322d3332203d3e20313339333933.roa (hash: xOhwGI2U+4AffMNiCyrvrejLk4Xi3+2L832MlZGbs+w=) 4: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: 3wetidkcCavxQpjkiXbTz/VCnjcuje+VreUWREjQdgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9b:23:e7:22:ea:f8:5c:b9:e4:1d:e6:5b:b2:c5:90:f2:42:0e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Oct 19 12:45:59 2025 GMT Not After : Oct 22 17:49:59 2025 GMT Subject: CN=F617383414D7CBF76BA34A3AD9DD8D8C70F83706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:b7:15:93:f7:b5:b6:a8:0d:3c:58:85:0e: 51:16:4f:11:b7:75:b0:dc:c2:b7:1b:c5:a1:97:22: 62:47:44:66:53:bb:e9:c9:d9:c3:36:e6:a7:42:8e: 7c:04:01:75:2e:ee:30:eb:d5:03:95:ac:67:ee:d1: 9e:44:1f:38:aa:1f:41:d7:8b:fa:90:de:96:39:30: 4c:7a:9b:c0:a3:99:9d:ae:e4:9a:00:ec:f2:c6:af: 5d:b0:76:17:7b:7c:6a:95:83:9b:5e:a9:e3:90:a6: bd:6d:d7:b2:3d:ae:92:c3:f0:cf:22:05:77:5c:15: c6:ee:fa:7a:07:7c:27:70:dd:29:d3:e6:23:fc:d1: 24:5c:65:91:aa:26:5a:86:41:af:8f:e0:75:46:4e: f1:a4:dc:7c:e9:c9:8d:d1:61:75:ef:d2:73:8c:42: dc:28:e2:f0:54:f9:96:1d:b0:60:e3:f7:57:f2:e8: 70:db:80:44:4f:01:b5:ef:c9:80:f0:7d:4e:f9:1f: b5:62:9b:d6:ca:b5:e4:aa:87:6f:6f:47:38:2e:92: cc:66:91:a6:ff:8d:de:d9:d3:03:c2:4e:98:7a:59: f9:9a:16:b6:74:20:46:98:3f:6d:42:02:d3:9b:00: 9b:e4:a9:8b:af:ca:be:1e:89:ac:2a:fd:22:55:35: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:17:38:34:14:D7:CB:F7:6B:A3:4A:3A:D9:DD:8D:8C:70:F8:37:06 X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f5:51:fd:0c:e4:c1:d3:eb:91:65:5b:cd:c3:00:07:43:98: 96:75:dd:d9:04:13:11:a0:ce:a3:f9:2d:6e:6a:10:54:11:36: 18:77:32:22:c1:b5:52:27:c8:e6:b6:3d:af:3a:91:e8:3e:c4: 44:9d:bf:d2:95:d1:ae:b6:9b:6f:87:1a:b8:28:68:e1:b8:f1: 84:b3:bd:6a:42:42:bb:15:c4:13:82:41:7b:ac:95:f1:3c:ee: 42:e3:18:74:09:ee:16:7d:76:23:a3:6b:6f:9b:91:96:3f:de: 47:41:5c:7e:2a:e2:49:b1:8f:0f:a5:86:b5:b0:53:b0:83:e7: 37:42:92:bd:50:6d:ed:03:d9:f8:2b:eb:f5:62:a6:a3:f7:a5: ee:71:bf:d9:3c:bb:3e:6b:71:81:75:99:61:18:81:93:fd:c4: e7:69:db:a6:72:0a:40:e9:e1:f5:ad:2f:22:85:10:8a:6d:d6: f8:2b:55:1e:87:cd:74:4e:8c:9b:01:9e:3b:9e:0b:cc:a2:61: 69:dd:44:4a:da:a0:1a:9b:09:5e:3d:8e:4d:5f:dc:8d:d2:ca: f0:69:a9:e5:bf:94:2f:3c:a1:3b:74:42:27:d2:73:c8:e9:3a: d0:a2:33:df:e8:34:3b:77:45:71:5f:0f:57:df:58:f6:26:cc: e3:5e:24:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJsj5yLq+Fy55B3mW7LFkPJCDkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNTEwMTkxMjQ1NTlaFw0yNTEwMjIxNzQ5NTlaMDMxMTAvBgNV BAMTKEY2MTczODM0MTREN0NCRjc2QkEzNEEzQUQ5REQ4RDhDNzBGODM3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoa7cVk/e1tqgNPFiFDlEWTxG3 dbDcwrcbxaGXImJHRGZTu+nJ2cM25qdCjnwEAXUu7jDr1QOVrGfu0Z5EHziqH0HX i/qQ3pY5MEx6m8CjmZ2u5JoA7PLGr12wdhd7fGqVg5teqeOQpr1t17I9rpLD8M8i BXdcFcbu+noHfCdw3SnT5iP80SRcZZGqJlqGQa+P4HVGTvGk3HzpyY3RYXXv0nOM Qtwo4vBU+ZYdsGDj91fy6HDbgERPAbXvyYDwfU75H7Vim9bKteSqh29vRzguksxm kab/jd7Z0wPCTph6WfmaFrZ0IEaYP21CAtObAJvkqYuvyr4eiawq/SJVNTXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9hc4NBTXy/dro0o62d2NjHD4NwYwHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP1Uf0M5MHT65FlW83DAAdDmJZ13dkEExGg zqP5LW5qEFQRNhh3MiLBtVInyOa2Pa86keg+xESdv9KV0a62m2+HGrgoaOG48YSz vWpCQrsVxBOCQXuslfE87kLjGHQJ7hZ9diOja2+bkZY/3kdBXH4q4kmxjw+lhrWw U7CD5zdCkr1Qbe0D2fgr6/VipqP3pe5xv9k8uz5rcYF1mWEYgZP9xOdp26ZyCkDp 4fWtLyKFEIpt1vgrVR6HzXROjJsBnjueC8yiYWndREraoBqbCV49jk1f3I3SyvBp qeW/lC88oTt0QifSc8jpOtCiM9/oNDt3RXFfD1ffWPYmzONeJIs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:00 2025 by rpki-client