$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: qdcoSm0lfwglLjA0zvwx0iYPNxTpbc2d0FiGICa5AQ4= Subject key identifier: 8C:5C:DA:4A:22:28:FE:E6:1B:B9:F5:D1:BA:43:8C:F5:2B:98:F1:B1 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 0C175D7DE173CB016F25BF4F7FBA4A369F6A346F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01DA Signing time: Mon 16 Jun 2025 05:40:52 +0000 Manifest this update: Mon 16 Jun 2025 05:35:52 +0000 Manifest next update: Thu 19 Jun 2025 14:39:52 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: LAyrzJWfYkGpH9uMAK9val6KaF/cHntX5DfMXFTyw/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:17:5d:7d:e1:73:cb:01:6f:25:bf:4f:7f:ba:4a:36:9f:6a:34:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Jun 16 05:35:52 2025 GMT Not After : Jun 19 14:39:52 2025 GMT Subject: CN=8C5CDA4A2228FEE61BB9F5D1BA438CF52B98F1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:1d:25:d8:1f:85:c6:78:b0:d6:ad:84:c7: 6d:a3:89:e0:d6:41:82:d0:ea:0b:33:99:73:8b:d7: f5:37:57:a2:90:1f:1f:bd:0d:c5:a1:8d:a2:54:5d: bb:8e:40:95:37:09:c4:29:46:1a:42:c5:90:a4:c0: 3d:96:bb:f8:a1:18:66:87:35:46:d0:d9:3c:1d:ba: 6a:a9:05:81:ce:d6:43:6d:b9:4a:c6:8e:ad:b1:ec: 9d:4a:e1:66:ba:3f:78:c6:76:ca:20:47:16:3f:75: 24:83:b7:87:f3:84:4f:86:c5:27:3c:e0:87:c2:0d: 2f:db:d5:d0:6f:bd:a9:4d:c1:c0:e6:74:e6:9e:9a: d3:39:2a:86:83:cd:c6:1b:b8:39:04:e8:c5:e9:45: 17:e4:bc:f8:f4:45:6b:0e:83:22:80:e3:47:29:7d: 59:d3:c7:97:8b:3f:da:6e:39:3b:9e:39:ec:09:e3: 8a:8a:34:f7:93:af:59:f8:b5:26:2e:63:4b:0c:40: 32:9f:cb:8d:76:f3:76:27:ee:0a:c2:6f:0d:ad:0a: 96:a7:c6:a2:7b:47:5e:cb:a9:5e:74:5d:9f:79:e4: 3d:7b:15:a6:63:26:80:89:27:06:19:4e:cb:ea:b3: 9a:41:78:07:9b:88:2d:05:ef:43:64:9f:30:01:f4: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5C:DA:4A:22:28:FE:E6:1B:B9:F5:D1:BA:43:8C:F5:2B:98:F1:B1 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3a:97:c4:9a:7d:5f:db:8d:2b:80:cb:0a:8d:10:58:b9:ff: 74:77:86:80:7a:61:29:ff:bf:28:0d:32:bb:69:f1:2a:1b:ef: 7a:7b:12:ca:06:e4:c7:f3:6d:28:15:8c:66:cb:7e:1d:e1:fa: 28:1e:8e:03:58:79:e7:de:a5:fb:34:50:9b:36:24:e8:33:14: 5b:a0:1f:e3:25:20:9e:d2:1d:7a:cc:ef:ad:ec:b9:2c:e4:f5: 0b:47:b9:76:08:51:dc:c0:cd:fb:34:5f:fb:e5:e5:04:9f:97: 8b:28:db:75:44:ca:6b:85:59:97:60:34:ca:15:2b:24:18:5c: 27:22:e8:f4:2a:0b:2c:02:7b:82:2b:a7:9d:e9:8f:47:5a:36: c4:92:59:56:61:31:26:2a:2e:b7:10:f0:e6:20:4c:a6:2b:16: 2c:a8:a1:5b:0c:89:a8:56:8f:d4:6e:0d:ac:9a:2c:39:11:5d: 96:a0:f0:58:f2:72:83:56:0b:4b:9c:20:07:2e:3b:9d:6c:a5: 66:26:fa:88:d9:bc:09:ac:1d:a4:28:06:e2:b2:76:1f:fd:e7: 7e:10:e4:fe:04:14:9e:40:87:db:51:31:bf:0d:f6:07:25:90: 63:37:5f:b3:67:5b:c8:5b:9a:9c:8b:79:63:0f:35:42:c3:c1: a5:e5:9f:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBddfeFzywFvJb9Pf7pKNp9qNG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA2MTYwNTM1NTJaFw0yNTA2MTkxNDM5NTJaMDMxMTAvBgNV BAMTKDhDNUNEQTRBMjIyOEZFRTYxQkI5RjVEMUJBNDM4Q0Y1MkI5OEYxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aB0l2B+Fxniw1q2Ex22jieDW QYLQ6gszmXOL1/U3V6KQHx+9DcWhjaJUXbuOQJU3CcQpRhpCxZCkwD2Wu/ihGGaH NUbQ2TwdumqpBYHO1kNtuUrGjq2x7J1K4Wa6P3jGdsogRxY/dSSDt4fzhE+GxSc8 4IfCDS/b1dBvvalNwcDmdOaemtM5KoaDzcYbuDkE6MXpRRfkvPj0RWsOgyKA40cp fVnTx5eLP9puOTueOewJ44qKNPeTr1n4tSYuY0sMQDKfy41283Yn7grCbw2tCpan xqJ7R17LqV50XZ955D17FaZjJoCJJwYZTsvqs5pBeAebiC0F70NknzAB9FLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjFzaSiIo/uYbufXRukOM9SuY8bEwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY6l8SafV/bjSuAywqNEFi5/3R3hoB6YSn/ vygNMrtp8Sob73p7EsoG5MfzbSgVjGbLfh3h+igejgNYeefepfs0UJs2JOgzFFug H+MlIJ7SHXrM763suSzk9QtHuXYIUdzAzfs0X/vl5QSfl4so23VEymuFWZdgNMoV KyQYXCci6PQqCywCe4Irp53pj0daNsSSWVZhMSYqLrcQ8OYgTKYrFiyooVsMiahW j9RuDayaLDkRXZag8FjycoNWC0ucIAcuO51spWYm+ojZvAmsHaQoBuKydh/9534Q 5P4EFJ5Ah9tRMb8N9gclkGM3X7NnW8hbmpyLeWMPNULDwaXln4w= -----END CERTIFICATE-----Generated at Tue Jun 17 10:04:05 2025 by rpki-client