$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: JS8lVvBFBT8iw+z9K/HZ6Oj7kizYM2lFpGxvF7mc/DY= Subject key identifier: 90:4B:25:BD:4F:51:C4:BA:F3:39:08:C0:5D:E1:18:57:24:46:70:C3 Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 011C9886E7B741BD3215A280F3A3607BBFEDB76B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: 98 Signing time: Mon 28 Apr 2025 17:41:35 +0000 Manifest this update: Mon 28 Apr 2025 17:36:35 +0000 Manifest next update: Thu 01 May 2025 22:00:35 +0000 Files and hashes: 1: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: uwdYr6Vc4obI5UkZd3aysyOqaW/UmE8m3/nxpyz48I4=) 2: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 9m+4v7BYbM9SS9Yvhf+ii+qFUs/B5Cv8TrlKAtlSBSI=) 3: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: 3efNQQ2X7QHqKBbOVWvNaKPEQE27+zjZLBx3jM+OboU=) 4: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: m4o9tmG8VWbfYauSbCi6chKVKssFkKAm15xM3xmJaes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1c:98:86:e7:b7:41:bd:32:15:a2:80:f3:a3:60:7b:bf:ed:b7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Apr 28 17:36:35 2025 GMT Not After : May 1 22:00:35 2025 GMT Subject: CN=904B25BD4F51C4BAF33908C05DE11857244670C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:73:92:db:da:1c:f5:b3:09:dd:ed:30:e8: 05:e5:97:be:69:c4:87:f9:38:11:17:a1:e4:ad:86: 7a:c3:bd:56:e2:e4:68:e7:f4:1a:6a:d2:1f:26:4c: e8:ad:08:6c:6c:b8:f5:eb:9d:1d:26:a7:77:b4:6f: 27:e1:92:56:62:f4:dd:ba:f7:47:78:bb:98:c7:df: 57:d9:6f:16:79:44:38:80:36:3c:e9:07:df:5d:2f: 46:2a:79:19:16:08:9e:34:3f:07:84:27:c4:34:e7: 3b:26:2b:ec:2e:b1:62:b1:4e:d2:b8:04:e8:9e:7e: 67:f8:02:b3:2f:48:b6:80:d2:b4:11:82:c5:6a:49: 48:23:7c:be:a4:4a:d1:ff:69:0c:02:e5:1d:26:c8: fa:27:27:35:c9:f5:fc:93:c9:85:6f:3f:c6:c9:77: 39:a2:b4:7a:bf:23:42:40:29:75:bd:f6:b1:8f:d8: e7:34:4e:69:92:6c:45:04:a1:b5:f7:e0:1f:93:21: 8c:d4:33:53:34:51:9c:51:78:63:49:c9:11:8d:dc: ca:87:a1:d1:43:a0:7b:73:c9:4b:90:37:db:75:68: 1f:5f:de:6b:84:09:62:8c:5e:7a:52:c9:9f:85:c9: 0f:51:f4:ae:b0:99:1d:6a:a5:27:01:2e:da:4c:39: 2e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4B:25:BD:4F:51:C4:BA:F3:39:08:C0:5D:E1:18:57:24:46:70:C3 X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:44:79:03:e2:db:36:3f:c4:75:d5:77:0e:84:b4:7b:68:24: 51:23:d9:dd:cf:f6:00:cc:92:e1:c9:3c:ee:82:af:65:bf:01: 1d:b2:dd:bf:97:6c:2f:c1:54:79:6e:d4:b3:de:65:b5:93:67: e9:27:bb:a7:8d:71:c7:11:42:77:53:f8:81:74:2d:a7:61:ac: d2:ef:9c:4e:ba:ab:e4:52:1c:1e:c4:94:ed:0a:bc:17:ce:27: 5b:ae:ef:43:bf:ff:c6:5e:7d:5e:54:23:30:b4:13:c1:c6:87: 6c:0a:2b:0e:9e:f8:1e:d6:b4:18:6e:4d:3f:af:73:18:f7:dd: 79:0c:6e:89:f9:02:fe:f7:23:32:4c:a1:65:a4:aa:b9:0d:71: 52:88:18:37:f3:ed:95:0b:31:a3:09:1f:bb:37:3f:0c:23:7b: 39:a8:6a:d7:5f:d5:ea:18:f4:45:16:a6:10:d9:f4:3c:f2:a8: 5d:30:cd:cb:57:7c:8d:6d:69:28:20:d9:78:8c:f0:a8:34:60: a4:8d:fb:b8:55:7c:7d:e9:d0:f6:ba:e7:30:49:a2:2d:a0:b8: a3:43:36:4b:97:a2:83:c2:4f:fc:9b:93:ae:ab:9d:e3:ae:e7: 28:b0:71:0b:42:f4:ca:48:fb:3f:94:f9:df:53:c8:e9:4e:93: b2:4f:4e:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARyYhue3Qb0yFaKA86Nge7/tt2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTA0MjgxNzM2MzVaFw0yNTA1MDEyMjAwMzVaMDMxMTAvBgNV BAMTKDkwNEIyNUJENEY1MUM0QkFGMzM5MDhDMDVERTExODU3MjQ0NjcwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoHOS29oc9bMJ3e0w6AXll75p xIf5OBEXoeSthnrDvVbi5Gjn9Bpq0h8mTOitCGxsuPXrnR0mp3e0byfhklZi9N26 90d4u5jH31fZbxZ5RDiANjzpB99dL0YqeRkWCJ40PweEJ8Q05zsmK+wusWKxTtK4 BOiefmf4ArMvSLaA0rQRgsVqSUgjfL6kStH/aQwC5R0myPonJzXJ9fyTyYVvP8bJ dzmitHq/I0JAKXW99rGP2Oc0TmmSbEUEobX34B+TIYzUM1M0UZxReGNJyRGN3MqH odFDoHtzyUuQN9t1aB9f3muECWKMXnpSyZ+FyQ9R9K6wmR1qpScBLtpMOS75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEslvU9RxLrzOQjAXeEYVyRGcMMwHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChEeQPi2zY/xHXVdw6EtHtoJFEj2d3P9gDM kuHJPO6Cr2W/AR2y3b+XbC/BVHlu1LPeZbWTZ+knu6eNcccRQndT+IF0LadhrNLv nE66q+RSHB7ElO0KvBfOJ1uu70O//8ZefV5UIzC0E8HGh2wKKw6e+B7WtBhuTT+v cxj33XkMbon5Av73IzJMoWWkqrkNcVKIGDfz7ZULMaMJH7s3Pwwjezmoatdf1eoY 9EUWphDZ9DzyqF0wzctXfI1taSgg2XiM8Kg0YKSN+7hVfH3p0Pa65zBJoi2guKND NkuXooPCT/ybk66rneOu5yiwcQtC9MpI+z+U+d9TyOlOk7JPTmg= -----END CERTIFICATE-----Generated at Wed Apr 30 01:27:53 2025 by rpki-client