$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: onT7WG5sMhrFZE6jXdbSWd7oOmgZn6cwl1nDcHeB06U= Subject key identifier: 23:A9:DC:FB:F6:CF:D4:8D:A5:FF:C4:67:EC:84:A3:9B:06:A7:21:C8 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 189328CEC957D53C76F0243810C247E7F3C73AFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01C5 Signing time: Tue 29 Apr 2025 07:01:22 +0000 Manifest this update: Tue 29 Apr 2025 06:56:22 +0000 Manifest next update: Fri 02 May 2025 10:27:22 +0000 Files and hashes: 1: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: bUJaMBgDgSIszX97k263Clh9elHCVGgmymmUx8iMM2M=) 2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 10:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:93:28:ce:c9:57:d5:3c:76:f0:24:38:10:c2:47:e7:f3:c7:3a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Apr 29 06:56:22 2025 GMT Not After : May 2 10:27:22 2025 GMT Subject: CN=23A9DCFBF6CFD48DA5FFC467EC84A39B06A721C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:c0:fb:9e:09:de:fa:25:a6:af:0b:cb:4e: 77:12:db:72:03:ad:c6:45:e2:2c:4f:70:bb:5b:8d: d1:6e:61:c5:56:82:ed:69:e3:16:cd:2a:29:df:20: 45:fa:1d:4b:a3:3e:4f:4c:62:7d:d7:7d:16:e8:81: 14:c7:7f:b6:8a:91:9c:33:b6:79:16:8e:d7:cd:2d: cb:b7:2e:f5:c0:ee:24:c3:ba:cb:a6:1b:bf:a3:f3: a8:ef:b6:a7:ef:92:0b:70:7d:72:99:d0:56:60:8d: 5e:42:96:0c:f5:87:7c:b5:b3:17:68:e1:b2:89:d8: 8b:ad:c2:f1:ab:55:41:52:72:c8:f3:66:22:2a:1f: 5c:65:70:7e:8b:94:b1:12:e8:d9:ef:5c:92:9b:52: 1e:d5:d5:f3:33:53:2d:d6:84:8e:e4:7a:86:f0:67: 18:60:1b:d7:34:b9:e9:5b:24:03:ac:e2:82:37:84: 20:ec:34:2d:f8:50:e5:65:78:80:57:6e:14:57:8e: c0:5e:c5:18:08:15:3d:69:2b:11:ef:d6:80:d3:1d: 4f:aa:d2:80:c4:d1:a5:22:fd:dd:d8:31:56:f9:fb: 8f:1c:9f:76:79:35:51:36:3a:2c:5c:8a:68:48:bd: 85:6f:39:c6:34:de:4b:50:6e:c9:88:5e:61:0d:58: 8a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A9:DC:FB:F6:CF:D4:8D:A5:FF:C4:67:EC:84:A3:9B:06:A7:21:C8 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4d:35:9e:e8:04:b8:3e:60:30:09:31:8a:46:6d:f2:93:ba: d5:be:c4:49:72:b1:08:04:16:4a:d9:57:ca:af:d1:5a:f9:0c: bb:3b:7c:37:c5:56:bd:1e:2e:7e:a4:35:61:dc:71:38:95:81: c6:43:cf:66:3b:61:c8:8c:cd:80:7e:4a:b9:75:e0:71:d6:7c: ed:fb:18:b6:57:a4:6e:01:91:8a:17:40:d7:4b:b8:2d:11:0e: 31:06:8e:55:05:75:6b:10:a6:73:7b:a2:9e:34:d7:eb:17:3b: 46:97:e9:99:92:d2:60:c1:52:6b:1d:c2:5f:81:76:26:4f:d8: 8b:7f:8c:25:6c:36:c4:e1:61:8f:b7:d6:b0:c8:38:62:e5:00: 7b:31:b6:c8:b3:72:a6:9c:63:15:32:dd:3a:53:e2:d0:45:ce: 88:11:2e:ab:6d:b5:9c:98:86:34:9a:cd:1b:85:ac:50:26:b9: 74:13:29:2e:0f:1c:c1:5a:fd:eb:42:ae:a5:47:4c:6e:b7:26: 65:b2:14:8e:b8:72:ea:08:cd:66:54:ba:cf:44:d4:b0:df:59: 7a:c2:ef:a7:2d:16:30:d5:a7:5b:4c:16:46:67:a6:12:18:e6: cb:f4:2b:98:73:7f:35:f5:1f:f5:04:65:98:48:67:3b:7d:5b: 2c:99:2d:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJMozslX1Tx28CQ4EMJH5/PHOvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA0MjkwNjU2MjJaFw0yNTA1MDIxMDI3MjJaMDMxMTAvBgNV BAMTKDIzQTlEQ0ZCRjZDRkQ0OERBNUZGQzQ2N0VDODRBMzlCMDZBNzIxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KcD7ngne+iWmrwvLTncS23ID rcZF4ixPcLtbjdFuYcVWgu1p4xbNKinfIEX6HUujPk9MYn3XfRbogRTHf7aKkZwz tnkWjtfNLcu3LvXA7iTDusumG7+j86jvtqfvkgtwfXKZ0FZgjV5Clgz1h3y1sxdo 4bKJ2IutwvGrVUFScsjzZiIqH1xlcH6LlLES6NnvXJKbUh7V1fMzUy3WhI7keobw ZxhgG9c0uelbJAOs4oI3hCDsNC34UOVleIBXbhRXjsBexRgIFT1pKxHv1oDTHU+q 0oDE0aUi/d3YMVb5+48cn3Z5NVE2OixcimhIvYVvOcY03ktQbsmIXmENWIoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI6nc+/bP1I2l/8Rn7ISjmwanIcgwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNNNZ7oBLg+YDAJMYpGbfKTutW+xElysQgE FkrZV8qv0Vr5DLs7fDfFVr0eLn6kNWHccTiVgcZDz2Y7YciMzYB+Srl14HHWfO37 GLZXpG4BkYoXQNdLuC0RDjEGjlUFdWsQpnN7op401+sXO0aX6ZmS0mDBUmsdwl+B diZP2It/jCVsNsThYY+31rDIOGLlAHsxtsizcqacYxUy3TpT4tBFzogRLqtttZyY hjSazRuFrFAmuXQTKS4PHMFa/etCrqVHTG63JmWyFI64cuoIzWZUus9E1LDfWXrC 76ctFjDVp1tMFkZnphIY5sv0K5hzfzX1H/UEZZhIZzt9WyyZLeE= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:19 2025 by rpki-client