$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: 8wzFYy/wWcXeU5/XnOLur9/mGBFEM7qojkyZfEHd4TM= Subject key identifier: 4A:28:A1:6B:F9:75:21:D7:57:55:38:F5:60:5F:DD:56:28:7A:0C:B9 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 381D1EAE46309E38C6DA723EE860396FAB15BC88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 0218 Signing time: Mon 03 Nov 2025 05:00:53 +0000 Manifest this update: Mon 03 Nov 2025 04:55:52 +0000 Manifest next update: Thu 06 Nov 2025 09:13:52 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: 77idRRwzSsufWyIm7EwT7a8VPn6iczHLNqHv3OQiZwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1d:1e:ae:46:30:9e:38:c6:da:72:3e:e8:60:39:6f:ab:15:bc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Nov 3 04:55:52 2025 GMT Not After : Nov 6 09:13:52 2025 GMT Subject: CN=4A28A16BF97521D7575538F5605FDD56287A0CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:9d:6d:14:db:35:56:f6:f5:41:98:46:92: 97:c1:2b:4d:bc:fe:6e:99:96:fb:5d:03:1b:d7:96: e0:8b:c7:32:4d:9d:a4:3c:d0:75:ea:2d:c1:59:4a: e7:3f:10:8a:e8:8d:b8:b4:af:68:f1:e2:6b:ad:44: 77:10:59:6b:62:7b:4f:9e:e2:76:8f:0e:08:b6:7a: 34:e3:83:3c:45:fb:60:a1:99:51:a6:21:be:56:df: 89:14:a6:05:3f:76:2b:ee:2c:cd:0c:e4:b1:f2:5a: 55:d5:0b:f0:b7:93:8a:cb:f2:b6:da:2e:5e:ce:3f: 19:bb:a8:67:8e:8d:77:2b:60:c7:83:55:79:03:aa: 8c:b0:aa:fe:20:34:1d:6a:81:37:8f:9a:6a:94:f7: 73:82:ad:56:9e:e4:7b:ab:ca:42:95:8b:6a:86:55: 82:a8:29:82:98:44:ec:86:e7:7a:64:c7:76:25:70: 63:4a:a0:20:db:86:f9:84:94:ea:ab:fe:bc:71:94: 7c:e9:8d:fa:56:20:92:3d:28:23:7c:2e:b4:9c:17: 0c:57:37:3c:af:a3:dd:9c:46:0e:d6:ac:4e:f0:8c: e4:61:2e:c6:82:f5:6f:5a:dd:f6:38:87:27:54:a5: 7b:98:56:92:d7:2e:a5:e0:15:e7:43:71:cc:be:aa: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:A1:6B:F9:75:21:D7:57:55:38:F5:60:5F:DD:56:28:7A:0C:B9 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e0:5b:0b:84:69:00:83:75:cc:1d:75:02:0e:45:8b:88:ce: 26:e5:08:0f:63:27:47:0b:e5:40:0c:85:2a:2b:ea:2a:9f:3a: 2d:18:65:ff:fb:c1:e5:18:7d:8b:34:50:03:93:5c:91:f1:4b: d1:2c:8a:81:b2:60:b1:4a:9d:34:34:12:12:46:23:e1:65:7a: 18:65:08:e1:ff:39:4f:07:57:91:47:52:71:d4:3d:e4:c5:74: 71:fc:51:03:64:e0:8e:d0:9a:ab:a6:f2:77:41:a6:76:f6:28: e1:b2:53:1b:aa:bc:5c:05:e9:68:57:81:60:24:2f:4e:15:29: a3:50:5d:be:c8:60:8c:c2:b2:9b:18:85:af:d8:7d:7f:2e:57: de:29:61:f5:2d:2e:b0:ac:a9:08:99:61:cc:17:b8:5f:12:c5: 10:a8:14:24:89:ba:b9:e9:d8:e2:2d:11:81:e2:6b:3a:ca:30: a5:a1:8c:d0:cd:fd:01:ab:90:d9:40:ee:13:c0:ac:d5:03:11: 46:51:8e:b6:5e:c7:47:08:50:cd:50:b1:7d:ac:06:0e:3f:14: f6:73:56:1d:03:d7:e3:aa:6f:59:63:ef:8d:06:d4:db:af:90: 79:ec:79:c8:cc:71:5f:23:96:41:41:6f:08:24:a6:42:7b:ea: 95:e6:36:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOB0erkYwnjjG2nI+6GA5b6sVvIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTExMDMwNDU1NTJaFw0yNTExMDYwOTEzNTJaMDMxMTAvBgNV BAMTKDRBMjhBMTZCRjk3NTIxRDc1NzU1MzhGNTYwNUZERDU2Mjg3QTBDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX051tFNs1Vvb1QZhGkpfBK028 /m6ZlvtdAxvXluCLxzJNnaQ80HXqLcFZSuc/EIrojbi0r2jx4mutRHcQWWtie0+e 4naPDgi2ejTjgzxF+2ChmVGmIb5W34kUpgU/divuLM0M5LHyWlXVC/C3k4rL8rba Ll7OPxm7qGeOjXcrYMeDVXkDqoywqv4gNB1qgTePmmqU93OCrVae5HurykKVi2qG VYKoKYKYROyG53pkx3YlcGNKoCDbhvmElOqr/rxxlHzpjfpWIJI9KCN8LrScFwxX Nzyvo92cRg7WrE7wjORhLsaC9W9a3fY4hydUpXuYVpLXLqXgFedDccy+qhzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSiiha/l1IddXVTj1YF/dVih6DLkwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbgWwuEaQCDdcwddQIORYuIziblCA9jJ0cL 5UAMhSor6iqfOi0YZf/7weUYfYs0UAOTXJHxS9EsioGyYLFKnTQ0EhJGI+Flehhl COH/OU8HV5FHUnHUPeTFdHH8UQNk4I7Qmqum8ndBpnb2KOGyUxuqvFwF6WhXgWAk L04VKaNQXb7IYIzCspsYha/YfX8uV94pYfUtLrCsqQiZYcwXuF8SxRCoFCSJurnp 2OItEYHiazrKMKWhjNDN/QGrkNlA7hPArNUDEUZRjrZex0cIUM1QsX2sBg4/FPZz Vh0D1+Oqb1lj740G1NuvkHnsecjMcV8jlkFBbwgkpkJ76pXmNpE= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:32 2025 by rpki-client