$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: SvNGsB0FetINkIr76xPl9IsUByvjEEaAgv932nki3FU= Subject key identifier: 29:C3:99:91:3C:62:1C:A1:03:57:3D:8C:21:44:75:48:48:9B:1C:B5 Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 37625BA369725F72D865115CA7E9602A2AA97506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: 013A Signing time: Mon 20 Oct 2025 00:11:23 +0000 Manifest this update: Mon 20 Oct 2025 00:06:23 +0000 Manifest next update: Thu 23 Oct 2025 09:32:23 +0000 Files and hashes: 1: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: xozAiF19qdvD8L8pC2OGg0/fqZR+yELFs8DYCAlXKWU=) 2: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: y+pOgbqr/4nBP6Xg7gKAHBTgr5jiSBCliJYarhS89jE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:62:5b:a3:69:72:5f:72:d8:65:11:5c:a7:e9:60:2a:2a:a9:75:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: Oct 20 00:06:23 2025 GMT Not After : Oct 23 09:32:23 2025 GMT Subject: CN=29C399913C621CA103573D8C21447548489B1CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:85:dd:84:27:7a:83:c8:6a:5e:7b:d8:e5: 34:27:9e:60:0c:77:8b:e0:b0:43:04:7a:6a:7b:2b: 9b:fa:d7:48:27:3f:03:0a:35:e7:0a:bb:f2:7b:db: cc:35:f8:63:2d:b4:a5:2c:96:5f:13:9e:37:fc:11: bc:31:e8:5b:d3:6e:21:83:fe:9d:ca:6a:f0:a1:e8: 51:f3:c9:42:12:db:2a:9c:fa:de:25:e5:1b:dc:7b: 53:bc:61:cf:3e:ee:78:0a:6b:54:81:12:f0:02:c1: 9f:c6:af:90:1a:ba:80:54:44:c2:1b:4a:23:6a:4d: db:3e:d4:28:89:a8:f2:52:03:73:a0:2a:62:e5:19: 47:02:d8:13:f0:29:db:7a:5d:ff:82:77:e3:50:47: e4:83:95:d0:5a:66:d6:cb:79:0e:81:41:6e:4e:0a: df:9d:2c:22:0f:bd:6e:55:ae:7b:f4:67:7c:f9:d2: af:c4:5d:66:71:5c:c1:f4:eb:2d:96:bf:0f:65:aa: 83:77:9c:88:06:ce:51:e4:5f:be:00:90:e4:1c:2a: 7e:34:3a:40:c4:77:50:70:c8:b7:93:89:b8:53:b3: c8:bf:32:c9:3f:cc:2d:56:0f:16:75:43:9e:f4:08: bd:bf:a0:04:a7:b1:93:5f:4c:24:25:b4:bf:f0:b6: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C3:99:91:3C:62:1C:A1:03:57:3D:8C:21:44:75:48:48:9B:1C:B5 X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:f7:df:17:03:44:c3:19:02:8e:72:01:69:3f:28:e2:5c:00: 63:74:a3:5a:50:a7:06:a2:4b:ab:e9:52:58:b0:69:52:e7:be: 47:4a:1a:1c:00:6b:96:b5:6d:cb:08:71:dd:00:5e:1c:99:4e: 51:a1:26:b0:99:18:3a:87:b5:fe:de:59:7a:ac:7e:d7:55:81: a8:65:42:b1:39:9d:54:81:fc:03:ab:53:63:fc:a1:aa:50:e3: 62:0b:df:4b:77:51:ba:eb:8c:d1:07:8e:d5:3a:45:4a:66:00: f1:9d:b1:5b:0b:12:df:ac:85:a3:52:3d:4b:43:a7:c8:e7:9e: 8c:4d:45:e3:a5:c9:4f:62:d5:77:27:7a:9e:88:5c:ac:24:aa: 2a:0c:0c:fa:fd:89:b5:6f:5f:07:15:ad:83:f3:f0:dd:8f:2d: 4c:17:76:50:b9:de:3a:09:1e:a6:8c:90:a8:05:24:b2:fb:09: 79:15:d2:c5:25:79:5d:fc:d9:69:9b:b0:bf:30:c8:37:dc:af: da:68:6f:7e:7c:eb:84:f1:92:88:6e:d4:9d:2e:e3:b7:05:d0: f1:85:ea:a8:0e:f9:db:39:63:64:b0:82:aa:ba:37:76:24:f6: 27:67:a6:cf:dc:0b:bc:32:df:60:54:84:db:16:a5:0b:ba:21: a2:07:2d:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2Jbo2lyX3LYZRFcp+lgKiqpdQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNTEwMjAwMDA2MjNaFw0yNTEwMjMwOTMyMjNaMDMxMTAvBgNV BAMTKDI5QzM5OTkxM0M2MjFDQTEwMzU3M0Q4QzIxNDQ3NTQ4NDg5QjFDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu14XdhCd6g8hqXnvY5TQnnmAM d4vgsEMEemp7K5v610gnPwMKNecKu/J728w1+GMttKUsll8Tnjf8Ebwx6FvTbiGD /p3KavCh6FHzyUIS2yqc+t4l5Rvce1O8Yc8+7ngKa1SBEvACwZ/Gr5AauoBURMIb SiNqTds+1CiJqPJSA3OgKmLlGUcC2BPwKdt6Xf+Cd+NQR+SDldBaZtbLeQ6BQW5O Ct+dLCIPvW5Vrnv0Z3z50q/EXWZxXMH06y2Wvw9lqoN3nIgGzlHkX74AkOQcKn40 OkDEd1BwyLeTibhTs8i/Msk/zC1WDxZ1Q570CL2/oASnsZNfTCQltL/wtpbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKcOZkTxiHKEDVz2MIUR1SEibHLUwHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOX33xcDRMMZAo5yAWk/KOJcAGN0o1pQpwai S6vpUliwaVLnvkdKGhwAa5a1bcsIcd0AXhyZTlGhJrCZGDqHtf7eWXqsftdVgahl QrE5nVSB/AOrU2P8oapQ42IL30t3UbrrjNEHjtU6RUpmAPGdsVsLEt+shaNSPUtD p8jnnoxNReOlyU9i1Xcnep6IXKwkqioMDPr9ibVvXwcVrYPz8N2PLUwXdlC53joJ HqaMkKgFJLL7CXkV0sUleV382WmbsL8wyDfcr9pob35864Txkohu1J0u47cF0PGF 6qgO+ds5Y2Swgqq6N3Yk9idnps/cC7wy32BUhNsWpQu6IaIHLS4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:08 2025 by rpki-client