$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: t7q/GOZhhR4c/TgnowCLlscRadnd2R4Cu81rtTtqeVU= Subject key identifier: 23:C5:F5:7F:9C:D6:96:6C:D4:A9:F3:DF:CF:65:52:FC:0D:B5:A6:0E Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 1DD17046D8DE5F97C3D57C368410AEC6DEDA40FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01F1 Signing time: Thu 07 Aug 2025 02:10:52 +0000 Manifest this update: Thu 07 Aug 2025 02:05:52 +0000 Manifest next update: Sun 10 Aug 2025 08:12:52 +0000 Files and hashes: 1: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: nuEpxRJ8SWGmHYV4vBkewHlHEhRnbMCebcTAv+0sNxQ=) 2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:70:46:d8:de:5f:97:c3:d5:7c:36:84:10:ae:c6:de:da:40:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Aug 7 02:05:52 2025 GMT Not After : Aug 10 08:12:52 2025 GMT Subject: CN=23C5F57F9CD6966CD4A9F3DFCF6552FC0DB5A60E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:f7:e6:bf:ff:fb:b1:0a:19:bd:f9:27:f7: f8:bf:e3:2b:1c:f4:a8:80:cb:b4:b3:0a:88:9b:8e: 13:c9:1e:7e:85:96:c7:f8:c2:f4:f5:14:3e:79:35: e6:56:86:15:da:d9:8a:bf:06:27:2f:79:3d:b1:8c: 87:6b:5a:85:ba:13:90:11:a3:22:f6:3e:00:61:8b: 35:ab:5a:15:72:2d:f0:bf:07:7d:85:1c:4a:76:6b: fb:e1:0c:1e:73:3d:98:4f:a9:f2:79:15:0c:9b:0d: 44:bf:3a:5a:05:72:f7:28:80:9e:06:5e:e1:87:7f: 72:b0:b6:34:4b:9d:80:15:c3:cf:88:31:d5:0a:75: e3:f6:96:99:49:1c:b4:a9:bf:85:69:c8:77:7a:a4: 74:d0:18:97:d9:61:28:43:7c:21:8f:d0:72:0f:a2: 73:05:9e:2a:b9:aa:c3:40:a1:70:f1:f1:4b:76:be: f6:e1:47:ca:c3:70:cf:0f:49:51:10:15:91:a8:d1: 5d:74:3b:8c:21:0c:d3:06:c5:68:fc:02:55:e5:55: 4d:b3:b0:fd:d1:96:db:63:90:10:ef:0f:d7:92:4d: 2d:09:5e:cd:c1:01:82:0a:4b:b1:da:15:f1:24:59: e5:19:b2:26:41:f8:bb:3a:2b:6a:d5:39:53:62:e8: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C5:F5:7F:9C:D6:96:6C:D4:A9:F3:DF:CF:65:52:FC:0D:B5:A6:0E X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e0:00:08:cb:ae:9f:c3:5e:62:a9:ae:24:30:d5:b2:56:07: 66:d2:58:11:f4:d3:fd:8b:3f:7e:d4:50:a1:e9:88:ba:b8:fa: b7:fa:f2:19:70:74:64:08:c1:ec:e3:06:54:be:85:12:c1:32: 1b:de:d7:b9:df:39:f5:9a:f6:bd:f6:0c:43:9d:54:b9:e6:79: e5:5b:0f:86:1a:63:ef:95:37:16:71:c7:50:ac:c5:2a:b2:b4: 16:be:3c:92:fb:29:54:90:97:fb:c8:87:3b:ce:7f:37:68:a7: 12:21:72:5f:bd:ff:d0:85:b1:e0:ed:98:a4:d0:20:e9:74:c0: 83:36:60:d9:22:d0:2c:94:17:80:f1:bd:69:40:b0:85:fd:6a: f1:2d:93:18:9e:d2:75:b0:8e:56:8c:86:9e:8d:72:4a:6f:3e: 60:b2:4a:e3:85:8a:dc:04:4d:4f:16:23:8c:57:01:fc:c3:bf: 81:ff:8f:ac:43:f3:26:f3:54:ae:fa:fc:83:08:79:d9:64:65: 72:2b:7e:1d:34:17:aa:b3:77:49:25:2f:23:29:58:b7:cb:f8: 57:0f:ae:54:cb:d1:ad:ef:c9:4a:bc:16:a4:a2:2d:f3:39:be: 7a:0c:91:71:82:44:ac:ae:74:55:80:e3:5a:34:e2:e4:68:1c: 9b:1a:4f:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdFwRtjeX5fD1Xw2hBCuxt7aQPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA4MDcwMjA1NTJaFw0yNTA4MTAwODEyNTJaMDMxMTAvBgNV BAMTKDIzQzVGNTdGOUNENjk2NkNENEE5RjNERkNGNjU1MkZDMERCNUE2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNPfmv//7sQoZvfkn9/i/4ysc 9KiAy7SzCoibjhPJHn6Flsf4wvT1FD55NeZWhhXa2Yq/BicveT2xjIdrWoW6E5AR oyL2PgBhizWrWhVyLfC/B32FHEp2a/vhDB5zPZhPqfJ5FQybDUS/OloFcvcogJ4G XuGHf3KwtjRLnYAVw8+IMdUKdeP2lplJHLSpv4VpyHd6pHTQGJfZYShDfCGP0HIP onMFniq5qsNAoXDx8Ut2vvbhR8rDcM8PSVEQFZGo0V10O4whDNMGxWj8AlXlVU2z sP3RlttjkBDvD9eSTS0JXs3BAYIKS7HaFfEkWeUZsiZB+Ls6K2rVOVNi6FEnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI8X1f5zWlmzUqfPfz2VS/A21pg4wHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/gAAjLrp/DXmKpriQw1bJWB2bSWBH00/2L P37UUKHpiLq4+rf68hlwdGQIwezjBlS+hRLBMhve17nfOfWa9r32DEOdVLnmeeVb D4YaY++VNxZxx1CsxSqytBa+PJL7KVSQl/vIhzvOfzdopxIhcl+9/9CFseDtmKTQ IOl0wIM2YNki0CyUF4DxvWlAsIX9avEtkxie0nWwjlaMhp6NckpvPmCySuOFitwE TU8WI4xXAfzDv4H/j6xD8ybzVK76/IMIedlkZXIrfh00F6qzd0klLyMpWLfL+FcP rlTL0a3vyUq8FqSiLfM5vnoMkXGCRKyudFWA41o04uRoHJsaT2E= -----END CERTIFICATE-----Generated at Thu Aug 7 13:00:20 2025 by rpki-client