$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: Vwqy5xdBx6xEawcj6aFrto0A3MJkaVPRbftWMD66yRI= Subject key identifier: 14:DE:B0:AD:08:66:93:CD:39:C5:04:05:D7:2C:3A:56:3B:2C:56:8E Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 6239F4492C2FBA528874399B872FC35D105561F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 0216 Signing time: Mon 16 Jun 2025 00:11:00 +0000 Manifest this update: Mon 16 Jun 2025 00:06:00 +0000 Manifest next update: Thu 19 Jun 2025 05:32:00 +0000 Files and hashes: 1: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: sFE+akTqbgNbexk44Z+aL3bYKgzEmYgkv0u9Z2k9EDQ=) 2: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: OEcoBkoG7Ieje5kz6iCayAVIs4OuEBZdw+TGiUfzbw0=) 3: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: Sc7V8HjoJlvlyPs0x8OcUDy/oyEPZU0ZY61rdBTppuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 05:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:39:f4:49:2c:2f:ba:52:88:74:39:9b:87:2f:c3:5d:10:55:61:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Jun 16 00:06:00 2025 GMT Not After : Jun 19 05:32:00 2025 GMT Subject: CN=14DEB0AD086693CD39C50405D72C3A563B2C568E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:12:65:61:b3:e1:13:9d:bb:2a:50:d0:92: c9:fc:34:c0:87:32:d1:9e:9c:95:6f:ed:e6:b4:b3: 38:32:71:44:80:3b:89:25:6b:68:a4:9b:bc:0e:c1: cc:3c:1b:45:99:2a:b4:af:ca:d0:8e:d2:10:2e:eb: 8b:67:6c:8e:69:0a:72:3e:6a:50:e8:60:1b:6a:b5: 29:7a:ca:ad:bf:a6:a1:32:44:9e:49:4c:06:cc:6c: 01:ff:f9:1d:ad:ac:2e:d2:db:81:5a:c5:0b:36:52: 50:21:da:07:3f:10:63:be:48:aa:be:a2:1d:5f:ab: 26:ab:3b:ac:23:a0:c6:da:9e:f4:81:af:3e:82:b5: c0:69:20:18:0d:e6:fc:09:34:8b:ca:a6:c8:8d:b0: d1:15:4b:40:bc:fa:b6:e4:81:7f:2b:fc:77:b2:d1: 00:84:cc:25:b2:59:19:c6:03:63:8d:17:f4:9a:5e: f4:b3:59:e9:b5:c9:38:b2:a4:f9:65:3d:4e:45:45: 71:59:7e:6c:c1:2c:1a:09:78:d0:71:e5:da:b3:f7: bf:cf:f9:26:66:e3:84:b5:12:09:00:23:f9:92:72: 64:fc:8f:16:90:e3:8e:3a:9d:65:84:19:46:21:06: d2:eb:d1:03:23:54:5d:65:e4:a8:29:ef:35:18:29: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DE:B0:AD:08:66:93:CD:39:C5:04:05:D7:2C:3A:56:3B:2C:56:8E X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5e:2f:d0:3d:d5:6b:02:3f:77:37:59:26:87:98:aa:3b:e9: 11:e5:8f:7f:29:3b:0d:2a:45:cb:7a:e5:02:2c:fc:a5:04:ea: a6:5f:92:64:0c:73:a1:2c:ae:77:f5:5c:b5:30:65:5c:85:27: 45:25:fb:d2:1e:0f:83:fc:6e:f0:8c:2c:9a:6b:3d:01:b8:fb: 2e:40:9a:b3:7e:26:43:49:9e:03:2c:ae:83:6e:3b:ec:78:59: b3:a7:6d:ed:d3:b4:c6:f1:0a:45:e9:92:ff:47:e8:f9:82:f6: 85:83:07:54:fd:ef:de:06:30:0b:dd:98:0d:11:a4:2e:75:e3: 3c:75:56:cb:e8:35:40:49:df:76:ed:06:66:18:70:25:28:1b: f4:23:a5:5e:a6:94:0e:ec:e2:c6:b1:a3:85:88:12:44:a4:02: 5a:4d:ec:74:77:db:67:19:01:0e:51:b0:ac:e4:43:8c:3c:9d: 76:4c:5d:dd:ca:02:d6:59:5c:e9:c0:1b:7e:8b:38:16:0c:a2: 9f:29:2d:96:e9:d2:e8:e9:32:89:9b:c7:fb:39:0a:6d:8c:19: aa:30:da:e9:c0:9b:01:69:17:b6:d8:0a:f1:52:e6:f7:8e:f7: ff:0c:98:d3:1a:ad:06:d2:dc:92:53:4e:88:1b:ee:02:1c:e7: b2:81:e6:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjn0SSwvulKIdDmbhy/DXRBVYfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTA2MTYwMDA2MDBaFw0yNTA2MTkwNTMyMDBaMDMxMTAvBgNV BAMTKDE0REVCMEFEMDg2NjkzQ0QzOUM1MDQwNUQ3MkMzQTU2M0IyQzU2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1RJlYbPhE527KlDQksn8NMCH MtGenJVv7ea0szgycUSAO4kla2ikm7wOwcw8G0WZKrSvytCO0hAu64tnbI5pCnI+ alDoYBtqtSl6yq2/pqEyRJ5JTAbMbAH/+R2trC7S24FaxQs2UlAh2gc/EGO+SKq+ oh1fqyarO6wjoMbanvSBrz6CtcBpIBgN5vwJNIvKpsiNsNEVS0C8+rbkgX8r/Hey 0QCEzCWyWRnGA2ONF/SaXvSzWem1yTiypPllPU5FRXFZfmzBLBoJeNBx5dqz97/P +SZm44S1EgkAI/mScmT8jxaQ4446nWWEGUYhBtLr0QMjVF1l5Kgp7zUYKcj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFN6wrQhmk805xQQF1yw6VjssVo4wHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFeL9A91WsCP3c3WSaHmKo76RHlj38pOw0q Rct65QIs/KUE6qZfkmQMc6Esrnf1XLUwZVyFJ0Ul+9IeD4P8bvCMLJprPQG4+y5A mrN+JkNJngMsroNuO+x4WbOnbe3TtMbxCkXpkv9H6PmC9oWDB1T9794GMAvdmA0R pC514zx1VsvoNUBJ33btBmYYcCUoG/QjpV6mlA7s4saxo4WIEkSkAlpN7HR322cZ AQ5RsKzkQ4w8nXZMXd3KAtZZXOnAG36LOBYMop8pLZbp0ujpMombx/s5Cm2MGaow 2unAmwFpF7bYCvFS5veO9/8MmNMarQbS3JJTTogb7gIc57KB5gs= -----END CERTIFICATE-----Generated at Tue Jun 17 17:54:22 2025 by rpki-client