$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: fZJm3js2J+8iqcbUCr/bmcOwImNZPT2e2VgAoGEwTT8= Subject key identifier: 4B:86:22:35:A6:48:87:C0:BF:21:AA:EA:A8:EE:6A:D2:7D:44:06:0A Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 7687455268F15CC3B531EF2C9A841BB981D0899E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 28 Signing time: Mon 04 Aug 2025 22:11:00 +0000 Manifest this update: Mon 04 Aug 2025 22:06:00 +0000 Manifest next update: Fri 08 Aug 2025 02:18:00 +0000 Files and hashes: 1: 323430353a353163303a3a2f33322d3332203d3e20313339333933.roa (hash: xOhwGI2U+4AffMNiCyrvrejLk4Xi3+2L832MlZGbs+w=) 2: 3130332e3134332e3132382e302f32342d3234203d3e20313437303837.roa (hash: zdExcLPsX+gsvz8qx5ZS4VyUIFTtdq1rZbCm2g2FEBA=) 3: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: tezIU950LLb0AxwyDfGvA7vIvcXVtjV2FapEQhlR0TY=) 4: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: 3wetidkcCavxQpjkiXbTz/VCnjcuje+VreUWREjQdgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:87:45:52:68:f1:5c:c3:b5:31:ef:2c:9a:84:1b:b9:81:d0:89:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Aug 4 22:06:00 2025 GMT Not After : Aug 8 02:18:00 2025 GMT Subject: CN=4B862235A64887C0BF21AAEAA8EE6AD27D44060A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:84:5d:85:fe:35:61:ba:5b:c2:4f:56:8f: 02:65:b6:e5:a0:d2:f3:38:fc:5c:14:8c:c1:f4:a1: d1:11:c7:77:69:a5:68:79:f1:0e:e0:ee:e3:00:b4: df:95:b6:1e:6c:c4:5a:62:6a:5e:40:de:fe:93:e1: f2:50:77:46:77:05:91:27:9f:fd:66:4f:0e:43:d7: 6d:a5:a6:c4:f4:e1:d2:cd:9b:ef:42:ef:57:9f:c1: 8a:34:ac:5a:c9:e4:d6:d9:85:78:ae:fe:99:0e:67: bf:0b:d8:b8:44:93:60:c1:44:bd:7d:57:34:32:a1: d3:90:ec:28:ea:48:1d:7f:12:7e:09:f9:4c:ee:21: 98:63:96:15:4f:91:49:c7:9d:7b:59:4a:27:0c:f2: 47:bc:e3:61:a4:15:46:1e:ca:e4:62:14:c0:7a:83: b5:a7:5c:aa:55:a7:04:e0:29:11:f2:ba:d4:4a:6c: d9:b8:42:7f:ea:d6:2b:22:36:16:1a:1d:f1:ab:39: 54:3b:95:79:f3:2d:38:64:89:5e:f4:cd:60:04:86: 92:f4:e2:b8:9a:fe:a6:d4:94:49:44:79:0b:a4:9c: 86:29:b4:de:4b:b6:ad:df:59:79:fe:57:38:bc:43: 4d:f1:ff:4f:17:cd:56:20:5b:9a:7a:c7:a0:29:2d: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:86:22:35:A6:48:87:C0:BF:21:AA:EA:A8:EE:6A:D2:7D:44:06:0A X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6d:a8:d9:19:ec:46:17:79:c3:cf:65:9e:83:15:b1:c6:fc: aa:cc:97:d0:19:1c:bc:1b:f4:c4:65:6b:ce:6f:6e:dc:d5:18: f9:1b:51:1c:b4:09:33:e1:f7:5d:86:67:7c:b4:d9:25:67:82: 50:a2:ff:1d:12:84:ca:d9:a6:30:ef:03:f9:e8:75:a8:5c:d6: eb:1b:52:a5:fb:61:ff:db:98:f9:22:e2:ec:3a:2d:8a:c8:2e: 7c:7a:39:6d:f8:92:c7:8b:94:a0:f4:20:c1:c4:a5:5f:e6:16: 29:a6:fb:28:b2:a7:ac:48:af:50:21:8d:f8:7e:cb:e4:89:1e: b0:00:ee:89:78:ca:c6:27:4c:23:d3:29:99:33:20:25:d4:12: 47:f9:a0:ea:e7:35:fe:01:b0:e8:87:58:24:0a:f0:1c:32:54: 4c:22:a0:73:34:95:56:26:d9:fe:ba:9e:ed:e7:17:7a:eb:5c: dc:66:0f:be:a3:7d:44:af:e8:de:7b:44:84:09:ad:cb:a6:f5: f7:67:eb:db:df:10:66:ff:d7:a4:d1:8c:07:85:38:ef:98:ea: 0a:66:68:26:c0:3e:a8:dc:ab:4a:78:24:bc:3c:df:73:1e:ca: 11:26:93:ed:c7:f7:26:d1:78:f8:dd:92:06:38:fc:18:5e:df: b1:7e:03:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdodFUmjxXMO1Me8smoQbuYHQiZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNTA4MDQyMjA2MDBaFw0yNTA4MDgwMjE4MDBaMDMxMTAvBgNV BAMTKDRCODYyMjM1QTY0ODg3QzBCRjIxQUFFQUE4RUU2QUQyN0Q0NDA2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMoRdhf41Ybpbwk9WjwJltuWg 0vM4/FwUjMH0odERx3dppWh58Q7g7uMAtN+Vth5sxFpial5A3v6T4fJQd0Z3BZEn n/1mTw5D122lpsT04dLNm+9C71efwYo0rFrJ5NbZhXiu/pkOZ78L2LhEk2DBRL19 VzQyodOQ7CjqSB1/En4J+UzuIZhjlhVPkUnHnXtZSicM8ke842GkFUYeyuRiFMB6 g7WnXKpVpwTgKRHyutRKbNm4Qn/q1isiNhYaHfGrOVQ7lXnzLThkiV70zWAEhpL0 4ria/qbUlElEeQuknIYptN5Ltq3fWXn+Vzi8Q03x/08XzVYgW5p6x6ApLdGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS4YiNaZIh8C/IarqqO5q0n1EBgowHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZtqNkZ7EYXecPPZZ6DFbHG/KrMl9AZHLwb 9MRla85vbtzVGPkbURy0CTPh912GZ3y02SVnglCi/x0ShMrZpjDvA/nodahc1usb UqX7Yf/bmPki4uw6LYrILnx6OW34kseLlKD0IMHEpV/mFimm+yiyp6xIr1Ahjfh+ y+SJHrAA7ol4ysYnTCPTKZkzICXUEkf5oOrnNf4BsOiHWCQK8BwyVEwioHM0lVYm 2f66nu3nF3rrXNxmD76jfUSv6N57RIQJrcum9fdn69vfEGb/16TRjAeFOO+Y6gpm aCbAPqjcq0p4JLw833MeyhEmk+3H9ybRePjdkgY4/Bhe37F+A00= -----END CERTIFICATE-----Generated at Thu Aug 7 00:30:21 2025 by rpki-client