$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: DSKndf1G5APwZRYIjTZCKrlfrKTnFDm62gfK8pA29ao= Subject key identifier: 53:67:F7:68:67:79:AA:2F:7B:F7:70:A8:75:E1:51:0C:45:90:14:71 Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 05A4178A3970C170DD7BA2F3F5134779D93CF698 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 0226 Signing time: Mon 21 Jul 2025 10:31:00 +0000 Manifest this update: Mon 21 Jul 2025 10:26:00 +0000 Manifest next update: Thu 24 Jul 2025 19:18:00 +0000 Files and hashes: 1: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: Sc7V8HjoJlvlyPs0x8OcUDy/oyEPZU0ZY61rdBTppuU=) 2: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: xpd0NOO+0jOyN36pv2dHMBbrKdZWKjpZd1AAhuplUdQ=) 3: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: OEcoBkoG7Ieje5kz6iCayAVIs4OuEBZdw+TGiUfzbw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 19:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a4:17:8a:39:70:c1:70:dd:7b:a2:f3:f5:13:47:79:d9:3c:f6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Jul 21 10:26:00 2025 GMT Not After : Jul 24 19:18:00 2025 GMT Subject: CN=5367F7686779AA2F7BF770A875E1510C45901471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2e:ec:a6:92:10:bd:07:1f:54:5c:03:01:62: 4d:fd:b5:49:92:6f:4c:bb:31:72:f0:ef:b5:a8:3f: 81:91:7a:ee:1e:07:b5:07:84:30:1e:5f:aa:a8:e3: 6f:76:6e:bd:79:24:17:e9:a2:8f:2d:e4:68:53:de: 74:88:33:80:74:d1:4d:7c:77:02:da:e1:07:8a:83: ba:18:ce:d9:1f:41:c4:5c:3f:a9:cb:bb:37:cd:aa: fd:a2:25:dc:ef:5b:fe:f6:28:b1:1e:7d:88:ab:80: 0d:c7:15:1a:bd:98:84:84:af:0e:ae:2d:e6:5f:d2: 99:db:d0:9b:f3:0c:d4:4d:2e:98:70:6b:3a:ef:0c: 8f:44:7d:dc:20:9f:61:00:f5:7b:cf:4f:0d:1a:f4: c2:d3:12:68:ad:57:a5:c4:d9:12:04:fb:c9:77:f2: 5f:07:70:37:95:c6:62:6e:cc:9a:b3:d7:84:5b:8a: f0:1d:2a:a3:fc:82:8a:8e:22:47:09:94:43:97:1c: 05:28:f1:5a:c3:ef:06:c7:52:82:99:41:aa:27:62: 27:d4:d5:c5:fa:63:bd:7b:74:f5:f5:e9:5f:41:b1: a2:77:4c:9b:ec:6b:b7:ec:8e:3a:9e:e8:79:92:04: ac:a1:81:93:92:6d:06:88:01:0d:5f:4a:60:0a:55: 32:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:67:F7:68:67:79:AA:2F:7B:F7:70:A8:75:E1:51:0C:45:90:14:71 X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:72:67:47:c3:0b:11:db:27:a8:18:99:dc:f6:52:b3:49:83: d2:c6:f4:95:23:dc:c0:df:9c:9b:28:b1:c0:b7:65:e3:27:a4: cb:a7:b0:c5:1a:82:bd:16:fb:f6:a7:4a:2c:8e:36:82:28:a2: 70:3a:51:79:12:a5:85:34:75:df:ba:9f:5d:19:cc:1b:b0:af: 1c:6d:38:d8:da:21:71:53:c5:ff:79:3e:a3:31:76:e3:1e:49: 5b:c5:87:da:6e:89:23:0a:99:55:4f:72:70:8e:1c:55:bc:27: a1:0a:69:a4:09:f7:b4:ca:06:a5:cd:0e:a8:ff:36:a1:27:0e: b0:a9:0c:a7:fc:dc:2e:a6:d9:32:a3:cc:e0:46:f9:d2:1e:09: ea:1d:c1:5d:cd:a2:2a:76:c8:c3:5b:43:14:38:00:54:03:0d: 24:47:55:18:2c:de:31:04:c4:5d:64:17:11:e9:24:17:4a:d9: f7:e5:cb:54:a2:4b:34:bf:cf:67:09:3c:23:dc:99:46:b1:20: 0f:62:cd:fb:66:ed:f9:cb:17:a1:35:0c:e1:c8:6d:40:16:bc: 4f:fc:46:a2:8d:42:9b:21:e1:05:10:d9:5b:51:a2:50:d9:17: bf:32:06:e0:02:d8:4a:6b:c0:5f:25:7d:e7:7d:31:51:b2:4d: e2:09:f2:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaQXijlwwXDde6Lz9RNHedk89pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTA3MjExMDI2MDBaFw0yNTA3MjQxOTE4MDBaMDMxMTAvBgNV BAMTKDUzNjdGNzY4Njc3OUFBMkY3QkY3NzBBODc1RTE1MTBDNDU5MDE0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLuymkhC9Bx9UXAMBYk39tUmS b0y7MXLw77WoP4GReu4eB7UHhDAeX6qo4292br15JBfpoo8t5GhT3nSIM4B00U18 dwLa4QeKg7oYztkfQcRcP6nLuzfNqv2iJdzvW/72KLEefYirgA3HFRq9mISErw6u LeZf0pnb0JvzDNRNLphwazrvDI9Efdwgn2EA9XvPTw0a9MLTEmitV6XE2RIE+8l3 8l8HcDeVxmJuzJqz14RbivAdKqP8goqOIkcJlEOXHAUo8VrD7wbHUoKZQaonYifU 1cX6Y717dPX16V9BsaJ3TJvsa7fsjjqe6HmSBKyhgZOSbQaIAQ1fSmAKVTITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU2f3aGd5qi9793CodeFRDEWQFHEwHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJyZ0fDCxHbJ6gYmdz2UrNJg9LG9JUj3MDf nJsoscC3ZeMnpMunsMUagr0W+/anSiyONoIoonA6UXkSpYU0dd+6n10ZzBuwrxxt ONjaIXFTxf95PqMxduMeSVvFh9puiSMKmVVPcnCOHFW8J6EKaaQJ97TKBqXNDqj/ NqEnDrCpDKf83C6m2TKjzOBG+dIeCeodwV3Noip2yMNbQxQ4AFQDDSRHVRgs3jEE xF1kFxHpJBdK2ffly1SiSzS/z2cJPCPcmUaxIA9izftm7fnLF6E1DOHIbUAWvE/8 RqKNQpsh4QUQ2VtRolDZF78yBuAC2EprwF8lfed9MVGyTeIJ8tM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:17 2025 by rpki-client