$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft File: D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json) Hash identifier: jq8ckFJf9eVXYGCg8VpgLcwdg0wFubpQ1st3N6abVqQ= Subject key identifier: BA:12:22:9B:37:05:F3:25:A7:C0:EF:2A:C8:F6:53:56:85:B2:43:05 Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 Certificate issuer: /CN=D6729321F95E264CBE7373469790C77F8B57E268 Certificate serial: 2DF2F1A20E0DB8BBB4E95CB7C711F9082D5357D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft Manifest number: 029B Signing time: Tue 22 Jul 2025 12:50:00 +0000 Manifest this update: Tue 22 Jul 2025 12:45:00 +0000 Manifest next update: Sat 26 Jul 2025 00:07:00 +0000 Files and hashes: 1: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: GzPhe/FHAzKWcFGzhJ3yzciMVW730zuvH2EeYtfsJ1g=) 2: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: R6T9d3ss52Sj/3a+7EfjE4HhpULOZgnTxWsDyEbQqK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f2:f1:a2:0e:0d:b8:bb:b4:e9:5c:b7:c7:11:f9:08:2d:53:57:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268 Validity Not Before: Jul 22 12:45:00 2025 GMT Not After : Jul 26 00:07:00 2025 GMT Subject: CN=BA12229B3705F325A7C0EF2AC8F6535685B24305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:a1:88:41:ed:13:0e:9b:ae:fb:6d:7a:6f: f7:b4:71:8e:91:77:ae:83:38:4b:ef:69:e4:ee:e6: ec:47:e2:04:45:4f:7c:bf:1f:6b:92:ff:5c:db:a4: d9:80:ac:87:bc:01:7b:1d:1e:0c:d9:ed:4e:fd:07: 99:e0:70:10:5d:9a:65:f1:9d:ed:8b:5a:9a:c3:7d: 3d:8b:13:0e:7b:6c:62:90:4c:38:48:f7:34:14:98: 30:cf:2c:9d:83:84:f1:df:3e:ff:df:a4:72:4d:9c: 5b:09:0c:0d:e2:d6:e5:5b:b4:d5:e8:e4:4d:f6:b9: 3f:95:92:24:93:ec:1d:d1:a2:5d:98:f5:29:ad:34: 67:3a:cd:4c:46:dc:41:7a:09:9d:78:61:6c:d1:8c: fe:4c:e7:27:1d:8e:00:25:d1:09:f0:13:73:51:22: b4:0d:f7:4c:3b:c0:01:7c:51:4a:c3:d3:7e:56:5c: d9:f1:98:f1:f7:85:d6:ba:b9:fb:ad:5f:fd:6b:8e: 27:89:ad:ac:75:53:4c:67:aa:91:ab:e5:8b:1f:06: 85:54:4b:91:7f:d5:1c:89:c1:c0:80:7f:f7:a9:76: af:2d:65:d8:72:1a:ac:24:64:96:63:f0:e4:04:0a: 7e:46:49:7a:72:2b:05:37:23:56:14:c9:60:94:42: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:12:22:9B:37:05:F3:25:A7:C0:EF:2A:C8:F6:53:56:85:B2:43:05 X509v3 Authority Key Identifier: keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:64:c1:1a:f6:5a:89:89:ff:31:96:8d:93:e4:8d:72:9b:92: 8b:69:cc:e0:c4:81:be:9d:fe:68:2e:38:59:f6:97:89:a3:ae: bf:d3:36:2e:38:19:30:b2:20:88:17:b8:73:91:ec:bd:b4:77: 93:74:4a:dd:f6:16:f1:fc:bf:96:c4:a0:f2:b9:a3:26:c9:cf: 19:c5:13:f1:fc:3b:30:6a:dc:4c:5f:4c:a3:39:78:93:14:c3: a4:28:80:d9:3c:19:85:1d:11:96:ca:11:fa:b3:02:99:44:b2: ba:2c:98:a7:95:91:cb:77:c4:d5:58:f6:d4:e8:8e:42:63:07: 29:aa:40:92:0a:e4:c0:53:aa:a6:cd:f7:02:0f:cf:51:43:3a: 41:15:d1:55:37:39:35:a0:6a:79:24:6c:e9:9a:b5:10:33:ea: e8:16:66:79:fd:a3:18:48:11:a4:e3:cd:f5:fd:6f:87:77:4d: f6:0d:e8:4a:ca:3e:26:74:58:71:12:7e:6d:85:c7:b0:50:f7: 56:83:b3:78:18:eb:ac:33:83:f2:12:d2:c2:b4:e5:11:7c:b7: a9:9a:40:41:0b:cb:c3:6d:5c:42:99:39:54:d6:87:18:71:c7: b2:33:c9:49:4b:d3:16:93:94:fa:1c:e3:56:ee:db:16:23:63: 57:e2:3f:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfLxog4NuLu06Vy3xxH5CC1TV9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4 QjU3RTI2ODAeFw0yNTA3MjIxMjQ1MDBaFw0yNTA3MjYwMDA3MDBaMDMxMTAvBgNV BAMTKEJBMTIyMjlCMzcwNUYzMjVBN0MwRUYyQUM4RjY1MzU2ODVCMjQzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2qGIQe0TDpuu+216b/e0cY6R d66DOEvvaeTu5uxH4gRFT3y/H2uS/1zbpNmArIe8AXsdHgzZ7U79B5ngcBBdmmXx ne2LWprDfT2LEw57bGKQTDhI9zQUmDDPLJ2DhPHfPv/fpHJNnFsJDA3i1uVbtNXo 5E32uT+VkiST7B3Rol2Y9SmtNGc6zUxG3EF6CZ14YWzRjP5M5ycdjgAl0QnwE3NR IrQN90w7wAF8UUrD035WXNnxmPH3hda6ufutX/1rjieJrax1U0xnqpGr5YsfBoVU S5F/1RyJwcCAf/epdq8tZdhyGqwkZJZj8OQECn5GSXpyKwU3I1YUyWCUQnR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhIimzcF8yWnwO8qyPZTVoWyQwUwHwYDVR0j BBgwFoAU1nKTIfleJky+c3NGl5DHf4tX4mgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RjZjBhNC1hZDFiLTRiNzItODQwZi0xZjRhODA3ZjY1OTQvMC9ENjcyOTMyMUY5 NUUyNjRDQkU3MzczNDY5NzkwQzc3RjhCNTdFMjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4QjU3 RTI2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3 N0Y4QjU3RTI2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9kwRr2WomJ/zGWjZPkjXKbkotpzODEgb6d /mguOFn2l4mjrr/TNi44GTCyIIgXuHOR7L20d5N0St32FvH8v5bEoPK5oybJzxnF E/H8OzBq3ExfTKM5eJMUw6QogNk8GYUdEZbKEfqzAplEsrosmKeVkct3xNVY9tTo jkJjBymqQJIK5MBTqqbN9wIPz1FDOkEV0VU3OTWgankkbOmatRAz6ugWZnn9oxhI EaTjzfX9b4d3TfYN6ErKPiZ0WHESfm2Fx7BQ91aDs3gY66wzg/IS0sK05RF8t6ma QEELy8NtXEKZOVTWhxhxx7IzyUlL0xaTlPoc41bu2xYjY1fiP+E= -----END CERTIFICATE-----Generated at Wed Jul 23 12:47:16 2025 by rpki-client