$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: 2nh3RVi/4QxC01ohRV7S9javIsShAyWZon5eHshAmeQ= Subject key identifier: 40:93:04:58:CD:E4:83:EC:5A:EC:CD:29:A6:92:22:36:39:9C:0A:DA Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 1D9943AF916A9ABBF1013383BB5036D9A25C78F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: EC Signing time: Mon 03 Nov 2025 07:31:38 +0000 Manifest this update: Mon 03 Nov 2025 07:26:38 +0000 Manifest next update: Thu 06 Nov 2025 18:47:38 +0000 Files and hashes: 1: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 3: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: O9Csw46o6LYBGFMI9MrWBkXubNL8B8S4TvylqMFJe28=) 4: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:99:43:af:91:6a:9a:bb:f1:01:33:83:bb:50:36:d9:a2:5c:78:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Nov 3 07:26:38 2025 GMT Not After : Nov 6 18:47:38 2025 GMT Subject: CN=40930458CDE483EC5AECCD29A6922236399C0ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:67:7e:5c:cd:14:c5:31:5d:fd:8e:94:0b: d5:2e:9d:b9:95:5f:46:83:a9:4c:cf:b4:4c:5d:b5: 6e:b1:44:f0:1a:f4:ec:86:f4:7e:71:5a:41:3c:0d: b6:0a:0f:9b:00:c2:b3:88:fd:e9:00:88:ec:6a:88: 5b:11:1e:e5:e1:a8:28:94:9a:e3:df:18:b2:3e:0d: b1:f6:64:68:14:e5:c6:c1:7c:1e:4d:17:0c:8c:58: df:9b:ae:54:d2:93:5f:f0:7e:df:15:86:fa:a0:da: 47:b4:1b:0d:e3:73:6b:e6:33:c8:45:9d:0e:07:49: df:ab:1f:82:15:44:ba:f9:8c:cc:5a:73:8b:2f:7d: 6b:02:e3:69:26:65:06:83:2f:94:42:52:21:3e:b2: b7:c0:39:5e:07:e8:15:b5:d2:8b:75:5c:82:cc:6c: 58:34:37:a0:37:6b:48:5f:15:91:65:fa:29:5b:e7: c2:25:78:e0:dc:fc:75:a0:35:3e:f5:31:e5:7c:37: 7e:fa:b1:69:07:ae:59:6b:79:96:1c:48:ae:7e:9b: 88:2f:b0:cf:ec:04:4f:3d:f6:05:38:ed:51:ef:77: 4e:c2:ec:e1:5f:04:ac:a6:22:97:ad:10:46:ff:93: ce:e3:42:40:48:42:64:e6:5a:90:0e:27:e5:10:b8: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:93:04:58:CD:E4:83:EC:5A:EC:CD:29:A6:92:22:36:39:9C:0A:DA X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:55:ed:2e:2a:11:a8:d4:50:1c:85:63:cc:40:08:02:53:16: da:59:85:ee:fc:03:f7:c7:92:76:09:dd:49:95:49:8f:c0:94: 58:27:23:bd:a5:f8:52:27:06:e6:9f:d6:ab:b8:0f:b1:eb:16: 98:0a:e9:e9:cb:65:fd:68:cb:20:83:1e:9b:5d:fd:4f:fa:f4: 03:ea:db:d7:4c:ad:d4:fc:97:ba:d1:f5:ca:b1:df:31:71:d5: 1a:4d:bf:eb:e7:b5:a0:de:93:86:ad:63:e5:b9:fa:42:73:ea: 98:f1:3c:1b:bc:67:29:dc:39:2e:90:c0:86:74:64:52:38:9a: 39:9a:8a:58:0d:13:4c:1c:82:5d:1d:68:a1:dc:8a:80:f0:97: 95:42:04:fd:6b:d0:9c:22:43:cf:a6:4b:ef:4f:db:07:00:c2: bf:f3:a3:91:6a:2d:b2:39:04:80:12:b7:ea:fd:12:eb:fc:1c: 7f:df:19:5d:79:e0:95:e3:40:90:eb:7d:0f:d5:44:5b:77:b1: d8:70:12:ca:e6:82:c5:56:d1:c1:da:85:7b:8d:76:5a:0a:4f: df:d5:a0:ae:67:93:6b:0a:dc:db:be:1e:36:83:ac:aa:9d:16: 9d:f1:1b:3e:0f:71:e5:cc:49:99:a0:2f:90:94:60:a3:2b:de: 3f:c7:5e:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZlDr5FqmrvxATODu1A22aJcePUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTExMDMwNzI2MzhaFw0yNTExMDYxODQ3MzhaMDMxMTAvBgNV BAMTKDQwOTMwNDU4Q0RFNDgzRUM1QUVDQ0QyOUE2OTIyMjM2Mzk5QzBBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtB2d+XM0UxTFd/Y6UC9UunbmV X0aDqUzPtExdtW6xRPAa9OyG9H5xWkE8DbYKD5sAwrOI/ekAiOxqiFsRHuXhqCiU muPfGLI+DbH2ZGgU5cbBfB5NFwyMWN+brlTSk1/wft8Vhvqg2ke0Gw3jc2vmM8hF nQ4HSd+rH4IVRLr5jMxac4svfWsC42kmZQaDL5RCUiE+srfAOV4H6BW10ot1XILM bFg0N6A3a0hfFZFl+ilb58IleODc/HWgNT71MeV8N376sWkHrllreZYcSK5+m4gv sM/sBE899gU47VHvd07C7OFfBKymIpetEEb/k87jQkBIQmTmWpAOJ+UQuHKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJMEWM3kg+xa7M0pppIiNjmcCtowHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdV7S4qEajUUByFY8xACAJTFtpZhe78A/fH knYJ3UmVSY/AlFgnI72l+FInBuaf1qu4D7HrFpgK6enLZf1oyyCDHptd/U/69APq 29dMrdT8l7rR9cqx3zFx1RpNv+vntaDek4atY+W5+kJz6pjxPBu8ZyncOS6QwIZ0 ZFI4mjmailgNE0wcgl0daKHcioDwl5VCBP1r0JwiQ8+mS+9P2wcAwr/zo5FqLbI5 BIASt+r9Euv8HH/fGV154JXjQJDrfQ/VRFt3sdhwEsrmgsVW0cHahXuNdloKT9/V oK5nk2sK3Nu+HjaDrKqdFp3xGz4PceXMSZmgL5CUYKMr3j/HXkQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:58:08 2025 by rpki-client