$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: iH0UL5SsiAjrwAsxyBGX/rqgwrWP7agIU1rTvEyZcng= Subject key identifier: CD:96:DE:5E:B6:9A:FC:B7:2D:64:72:E3:D2:0E:3F:6D:A8:7D:A9:AB Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 12A3E55B3146679FD1E873EA13CFFC9076FCDF88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 022D Signing time: Wed 06 Aug 2025 13:31:01 +0000 Manifest this update: Wed 06 Aug 2025 13:26:01 +0000 Manifest next update: Sat 09 Aug 2025 19:36:01 +0000 Files and hashes: 1: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: WXNYRJHB/QNc6KGaNDZFg/AFOX+/Q6J/rqMlV09746c=) 2: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: OEcoBkoG7Ieje5kz6iCayAVIs4OuEBZdw+TGiUfzbw0=) 3: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: Sc7V8HjoJlvlyPs0x8OcUDy/oyEPZU0ZY61rdBTppuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a3:e5:5b:31:46:67:9f:d1:e8:73:ea:13:cf:fc:90:76:fc:df:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Aug 6 13:26:01 2025 GMT Not After : Aug 9 19:36:01 2025 GMT Subject: CN=CD96DE5EB69AFCB72D6472E3D20E3F6DA87DA9AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:4c:b6:6c:73:9c:bc:d5:fa:67:7a:40:b3: cd:d9:bf:52:9f:2f:f6:ad:46:93:9b:2e:be:e6:c7: b2:fc:58:8f:1c:0d:be:20:d3:6d:4a:19:18:f2:b9: 68:03:2a:3d:0e:72:8a:8b:13:cf:23:06:31:29:8d: c2:f2:c4:d4:88:06:e7:4f:17:16:ac:32:78:1c:38: fe:2c:e6:44:0d:91:f5:06:1a:89:98:e9:8e:b3:eb: 11:4a:ad:62:8c:d3:a0:ed:91:b8:bf:a6:3a:33:4e: 97:d2:d1:fe:0d:96:2e:a0:fb:3d:43:d0:0f:3a:35: 0e:61:28:39:34:98:93:ac:ac:1b:6e:bb:e7:0e:f0: 57:de:e1:1b:0d:f6:bd:fd:fd:02:7d:b5:3d:06:51: 52:32:10:b7:c3:55:c1:6a:cf:25:2f:44:b7:6a:a6: 34:59:f5:7b:77:ca:e8:35:96:c7:90:1c:67:ac:f0: 65:55:52:a7:a1:c0:96:e6:b5:2e:af:fd:b0:f4:46: 15:4d:e9:14:77:01:1f:5b:7d:74:49:eb:03:4b:6e: d9:51:02:a8:eb:be:34:50:b5:5c:98:b8:95:10:3f: 52:40:a2:39:75:a1:a1:c3:31:d7:fd:e1:00:8d:48: 3e:63:97:46:2e:56:d3:fd:39:05:7e:cb:4f:33:a8: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:96:DE:5E:B6:9A:FC:B7:2D:64:72:E3:D2:0E:3F:6D:A8:7D:A9:AB X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b7:83:18:97:d5:42:a1:8d:b4:2b:97:61:9e:80:e2:04:c1: c1:a6:c3:19:a9:d6:f6:bb:c9:d0:be:e9:85:9d:d0:56:4f:55: 28:a7:de:d2:08:ae:1e:23:bd:4b:7e:8e:09:61:a0:9a:c6:41: d7:0e:79:d1:b9:fe:57:ad:ae:b2:5d:24:8d:1f:5c:f3:12:06: 56:7e:db:94:ad:c2:f5:3a:5d:87:30:fb:b8:98:a3:90:e9:90: 2c:45:a0:af:b5:6d:68:d1:c3:e2:e3:d6:73:d5:67:b1:9b:fe: 37:6b:a4:50:24:9b:f7:76:d2:72:81:cc:c4:1d:7a:dd:09:60: 4a:9a:22:98:f5:79:df:f4:3b:ec:42:62:d5:ee:fe:b2:4b:cf: 95:e6:8c:88:1e:9e:39:79:04:50:55:b1:f3:e9:3d:85:a2:2c: 55:09:2a:19:74:c3:3e:1d:ec:83:43:75:56:26:39:68:7a:95: cc:eb:bd:d5:7d:cb:b9:b3:2d:83:e5:e7:16:24:ce:e2:a8:1e: 84:4a:59:ac:47:de:af:40:db:d1:39:bd:83:7f:0b:99:2d:ac: 3a:3d:00:01:d8:20:0b:e8:2d:84:6c:81:38:5e:c1:46:c2:5e: 7b:76:d5:7c:78:b2:a5:1e:ee:15:f8:b8:5b:d8:52:02:02:47: 3c:cc:c3:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqPlWzFGZ5/R6HPqE8/8kHb834gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTA4MDYxMzI2MDFaFw0yNTA4MDkxOTM2MDFaMDMxMTAvBgNV BAMTKENEOTZERTVFQjY5QUZDQjcyRDY0NzJFM0QyMEUzRjZEQTg3REE5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDclEy2bHOcvNX6Z3pAs83Zv1Kf L/atRpObLr7mx7L8WI8cDb4g021KGRjyuWgDKj0OcoqLE88jBjEpjcLyxNSIBudP FxasMngcOP4s5kQNkfUGGomY6Y6z6xFKrWKM06Dtkbi/pjozTpfS0f4Nli6g+z1D 0A86NQ5hKDk0mJOsrBtuu+cO8Ffe4RsN9r39/QJ9tT0GUVIyELfDVcFqzyUvRLdq pjRZ9Xt3yug1lseQHGes8GVVUqehwJbmtS6v/bD0RhVN6RR3AR9bfXRJ6wNLbtlR AqjrvjRQtVyYuJUQP1JAojl1oaHDMdf94QCNSD5jl0YuVtP9OQV+y08zqGY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzZbeXraa/LctZHLj0g4/bah9qaswHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy3gxiX1UKhjbQrl2GegOIEwcGmwxmp1va7 ydC+6YWd0FZPVSin3tIIrh4jvUt+jglhoJrGQdcOedG5/letrrJdJI0fXPMSBlZ+ 25StwvU6XYcw+7iYo5DpkCxFoK+1bWjRw+Lj1nPVZ7Gb/jdrpFAkm/d20nKBzMQd et0JYEqaIpj1ed/0O+xCYtXu/rJLz5XmjIgenjl5BFBVsfPpPYWiLFUJKhl0wz4d 7INDdVYmOWh6lczrvdV9y7mzLYPl5xYkzuKoHoRKWaxH3q9A29E5vYN/C5ktrDo9 AAHYIAvoLYRsgThewUbCXnt21Xx4sqUe7hX4uFvYUgICRzzMw3I= -----END CERTIFICATE-----Generated at Thu Aug 7 23:59:54 2025 by rpki-client