$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: mjTdJSwRZWRndd5r58R0h+Cm2ZUyZY0lWaHdhQtVODs= Subject key identifier: 10:FA:A3:4D:AE:07:24:E2:C0:19:2D:8D:C0:E1:4D:16:FA:F7:A4:B3 Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 243BF7F8C9CDFF3BFC0068096E889FF31294BD5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 0256 Signing time: Tue 04 Nov 2025 16:51:02 +0000 Manifest this update: Tue 04 Nov 2025 16:46:02 +0000 Manifest next update: Fri 07 Nov 2025 18:50:02 +0000 Files and hashes: 1: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: w5GSzwJqRhW8+4X/aMPQ1Y6Ois9xbd4sazTD+B+WOx8=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: wQ45tmfAW0vTrcP1CHqdkU4kV8VsIFLIOnBtD5fu+LU=) 3: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: gJ4+RIzMU3sNK8zgeNrc/IFATPDJCmEd1aztpgZm3dA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3b:f7:f8:c9:cd:ff:3b:fc:00:68:09:6e:88:9f:f3:12:94:bd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Nov 4 16:46:02 2025 GMT Not After : Nov 7 18:50:02 2025 GMT Subject: CN=10FAA34DAE0724E2C0192D8DC0E14D16FAF7A4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:2a:7e:1a:65:7d:d6:1a:22:72:17:a8:aa: d5:49:d3:9d:d5:46:fe:e7:52:2b:53:25:f0:8e:63: 90:10:6d:28:8f:1e:86:7b:4b:ae:e5:f7:55:37:26: 18:41:7a:cf:02:43:f5:05:98:54:87:45:97:b9:8e: da:39:6b:67:bc:2f:b8:1e:4b:9c:9a:91:bc:a7:68: aa:ea:b8:1b:00:b8:3e:32:2d:e9:91:a0:bf:5c:f4: 1e:f3:e4:52:77:7a:9d:24:c2:58:3c:a8:74:87:2a: 9e:77:83:4a:28:b0:32:d4:54:7e:16:61:12:bf:50: f7:53:26:3a:9e:36:68:ae:0c:e3:3c:1f:75:66:9a: ee:43:da:b1:74:08:10:80:b9:f3:4d:1b:9b:db:6f: 97:26:cf:14:c9:a8:3e:e5:b4:68:e4:a4:2c:b0:cf: 76:6a:74:04:2d:df:2b:82:68:b9:24:52:15:2c:24: a9:c2:89:df:67:1d:a5:26:fb:92:2e:19:03:9d:56: e5:9a:9c:98:7c:d1:f4:c7:8d:b3:07:a2:37:5b:d3: f0:15:5e:9b:f6:99:88:b5:e6:a3:50:46:c6:5b:41: e0:79:27:27:30:67:cf:dd:fa:a5:56:f1:3b:16:b7: f9:d2:8a:32:22:27:92:a9:59:77:e3:2e:97:68:18: d2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FA:A3:4D:AE:07:24:E2:C0:19:2D:8D:C0:E1:4D:16:FA:F7:A4:B3 X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:00:0c:18:12:44:50:cd:78:1c:a5:e1:5c:3c:1e:39:b8:0d: 2d:0d:58:a2:d5:f0:c3:db:d3:ca:d5:9a:f5:64:b1:8f:5f:70: 85:c3:67:d3:05:02:d1:e7:6e:8f:ce:57:69:e8:b0:1c:29:3c: 79:2b:8a:7d:39:66:db:99:fc:cc:60:5a:dd:cc:87:fa:ee:47: ae:90:8f:dc:51:cc:a5:e1:d5:74:5b:ce:4a:bf:98:2b:b2:d7: 26:07:a9:99:15:27:3c:fa:b6:96:98:7c:8a:e4:7b:c8:bb:2e: b9:e1:67:b9:4d:a8:5d:09:80:75:48:d5:b5:ed:6f:12:ca:59: 7c:c3:65:09:3c:50:04:8c:b3:00:c2:81:28:73:b7:56:d7:c4: bd:b2:11:91:ff:15:51:ee:2e:78:36:39:93:96:0e:ab:1b:e6: 4a:4d:9b:48:a3:98:a4:03:2c:52:50:8d:08:fc:7d:b0:55:08: a7:ae:6e:a2:36:65:eb:7f:46:f0:00:86:00:69:66:c8:b5:2d: 67:a5:7e:b7:d2:1d:cb:b5:2f:ce:e8:af:78:97:30:0b:92:15: 50:0c:12:64:bd:01:79:78:2b:5b:04:cb:88:8b:ec:11:7c:29: 52:23:19:8a:6a:5d:98:32:1e:d4:5a:16:68:86:62:eb:97:e0: 64:38:af:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDv3+MnN/zv8AGgJboif8xKUvV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTExMDQxNjQ2MDJaFw0yNTExMDcxODUwMDJaMDMxMTAvBgNV BAMTKDEwRkFBMzREQUUwNzI0RTJDMDE5MkQ4REMwRTE0RDE2RkFGN0E0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreSp+GmV91hoicheoqtVJ053V Rv7nUitTJfCOY5AQbSiPHoZ7S67l91U3JhhBes8CQ/UFmFSHRZe5jto5a2e8L7ge S5yakbynaKrquBsAuD4yLemRoL9c9B7z5FJ3ep0kwlg8qHSHKp53g0oosDLUVH4W YRK/UPdTJjqeNmiuDOM8H3Vmmu5D2rF0CBCAufNNG5vbb5cmzxTJqD7ltGjkpCyw z3ZqdAQt3yuCaLkkUhUsJKnCid9nHaUm+5IuGQOdVuWanJh80fTHjbMHojdb0/AV Xpv2mYi15qNQRsZbQeB5JycwZ8/d+qVW8TsWt/nSijIiJ5KpWXfjLpdoGNJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEPqjTa4HJOLAGS2NwOFNFvr3pLMwHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMADBgSRFDNeByl4Vw8Hjm4DS0NWKLV8MPb 08rVmvVksY9fcIXDZ9MFAtHnbo/OV2nosBwpPHkrin05ZtuZ/MxgWt3Mh/ruR66Q j9xRzKXh1XRbzkq/mCuy1yYHqZkVJzz6tpaYfIrke8i7LrnhZ7lNqF0JgHVI1bXt bxLKWXzDZQk8UASMswDCgShzt1bXxL2yEZH/FVHuLng2OZOWDqsb5kpNm0ijmKQD LFJQjQj8fbBVCKeubqI2Zet/RvAAhgBpZsi1LWelfrfSHcu1L87or3iXMAuSFVAM EmS9AXl4K1sEy4iL7BF8KVIjGYpqXZgyHtRaFmiGYuuX4GQ4r28= -----END CERTIFICATE-----Generated at Wed Nov 5 10:58:07 2025 by rpki-client