$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft File: 29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json) Hash identifier: 3+RLHVfzAbAmLsqQlQzX8p7VmUeB6oqJEmE8uAGhB1A= Subject key identifier: BB:6E:A1:56:70:AD:8F:7D:11:24:EB:24:72:E1:1E:E1:D4:C5:51:C7 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 19646136A74D4EDD872B952BB486FD011B3BDD7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft Manifest number: 01B7 Signing time: Sun 20 Jul 2025 02:00:54 +0000 Manifest this update: Sun 20 Jul 2025 01:55:54 +0000 Manifest next update: Wed 23 Jul 2025 13:34:54 +0000 Files and hashes: 1: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: p88SKszqxgKJl2zFe9Ix9VzOkkPPIGnrGQlceJpq1Is=) 2: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: P6ntY2yEhntkcQoC2QezxV/SxChW1e9QIusqd+CGFLo=) 3: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: Q4L5Bzc5PAgnS3en5iCGkdfsYZiseb5S267daUQcEZ0=) 4: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: i6EDiTdMclRBYpvIVrK48fCJh2o5PNaEH/CBRrGOXIU=) 5: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: GSwWK5SKTFAU7AOJ/9DuPKdDxhcqh8eUZIsdCou3WA4=) 6: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: 2/Cw3A1dSRg+Ts21fc2NwcUb6gMHV9LcM0XWFRm53vo=) 7: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: RB7D/SJUrlL2iPypVkULBTpibH96XBcLleeWSsiOxLI=) 8: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: pskMfYPfJQyJpqkNm3oh9E3JvBHhwECedewtWAR2iFU=) 9: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: R8tKT5t+qGKeLH+mvJmhZYmQ+JVJFCVIeC0OR+NlWGo=) 10: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: g5oUWyflfRouyPyLNpfaSTU/dpJeBwA9pkPOqpUphxM=) 11: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: lltuIPEk+BVWdUULpXiLbJeUz6Fla9jWTH/D4vTGGig=) 12: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: VvCiNNZNkR+jOL82aTEAoMNVNijK6DWUneBhRdG1bTg=) 13: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: TkM70rMf+ZfBRNei/e49W4wEHFGWueoMkkciY1FDq5I=) 14: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: 91eiJyGAtCZEdj+H4LaJ35hkFRrcG4XIG2UpAPMXkVQ=) 15: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: NxNlrKrZTlmWmVaaoGudLY4lFXk9X6JplSyhuLDh9i0=) 16: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 7ZU6XQSzatgJu+l+DGXob1hGuSGT5xqJ7YTseOv5Aj8=) 17: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: dG8//08WgWJdVwfWHOamSCBCgAVZtc+xat2iGit/ozU=) 18: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 9rMYsccqlUlU/MG43HYhUrMN+tfhHpYZ3vOxhHvtNFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:64:61:36:a7:4d:4e:dd:87:2b:95:2b:b4:86:fd:01:1b:3b:dd:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Jul 20 01:55:54 2025 GMT Not After : Jul 23 13:34:54 2025 GMT Subject: CN=BB6EA15670AD8F7D1124EB2472E11EE1D4C551C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:17:b3:84:07:d0:c3:c7:05:27:5f:5f:9b: 79:ee:63:32:d1:2c:4b:58:71:f9:1e:29:5b:02:31: 52:89:5b:6f:16:3c:a2:ce:35:ce:05:0f:ea:6a:b1: a3:72:1b:8a:f1:9c:77:d5:7f:19:22:17:33:3e:c2: 66:98:fa:97:68:43:17:88:49:12:26:ec:26:f3:8c: 4a:d5:56:34:bc:a6:27:9d:a2:1c:3b:b2:d9:f0:8f: fb:4f:71:aa:1a:5b:9c:f1:f2:a3:d9:78:d7:e5:e4: f7:82:05:b9:05:a6:5c:dd:68:90:19:0a:b3:3d:56: 89:d2:4c:04:73:6e:43:f5:e9:ec:d9:02:96:ea:29: 0a:03:65:93:ac:2d:0c:61:48:ba:ee:dd:d9:b5:da: 27:c5:b5:28:09:f7:4f:46:3f:ba:04:9a:53:42:29: 83:31:2a:f0:c4:a0:94:c0:c2:f6:e2:58:5d:97:48: bf:ac:a6:1a:f2:ed:6b:da:3d:4a:8c:c0:97:8c:7a: 84:30:76:54:05:11:21:93:0d:3e:2c:ea:85:c4:e6: 1d:4e:94:7b:35:20:41:ee:17:67:cc:b6:da:6b:9b: 5c:6e:ca:ba:22:9f:b5:96:3c:f1:bb:11:6f:03:6b: f1:03:5c:8d:06:06:ae:c6:d9:b8:9b:b3:15:d8:50: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6E:A1:56:70:AD:8F:7D:11:24:EB:24:72:E1:1E:E1:D4:C5:51:C7 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4a:57:09:85:8b:da:cf:d2:94:2d:22:26:1b:37:7e:c0:5b: b5:c6:e4:84:85:ae:c3:bb:23:29:01:f6:4a:f1:d0:fc:41:1d: 04:d1:b0:e2:22:8d:bd:11:5f:6b:d0:dc:b6:12:9f:79:32:0a: ad:73:00:21:9e:1c:1f:e7:39:ff:48:50:8c:5a:c7:da:1f:a1: 16:75:bb:52:b2:9f:12:ce:85:e9:f8:45:17:6b:11:0a:4f:29: a6:6d:be:c0:84:0c:ae:fe:63:c6:5c:b7:3e:93:34:bd:5a:fd: c0:5a:11:5e:97:01:95:46:4b:14:91:17:a5:b0:b1:ef:cc:c1: 99:3a:c8:3e:cd:df:85:b8:9b:b7:ed:df:0a:c7:86:66:3b:98: f7:dd:de:80:bd:12:f4:d8:bc:da:c9:dc:e6:fc:83:4e:cf:de: 8f:a1:a2:15:e9:1f:91:0c:22:9a:98:c1:9e:af:4d:c0:b0:e2: 5d:91:4b:9a:54:12:cd:b5:25:32:e4:cc:40:87:cb:ac:7f:f7: a9:f7:c4:06:c5:56:c3:14:d6:10:b5:21:9c:a2:2c:6e:ee:13: ea:2f:1a:2d:e0:16:83:a0:b0:01:fd:fe:26:98:0c:18:14:09: 41:71:3e:9d:45:cf:fa:08:ac:01:71:6c:b6:19:ea:b3:3c:eb: e5:c8:ed:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWRhNqdNTt2HK5UrtIb9ARs73XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTA3MjAwMTU1NTRaFw0yNTA3MjMxMzM0NTRaMDMxMTAvBgNV BAMTKEJCNkVBMTU2NzBBRDhGN0QxMTI0RUIyNDcyRTExRUUxRDRDNTUxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCxezhAfQw8cFJ19fm3nuYzLR LEtYcfkeKVsCMVKJW28WPKLONc4FD+pqsaNyG4rxnHfVfxkiFzM+wmaY+pdoQxeI SRIm7CbzjErVVjS8piedohw7stnwj/tPcaoaW5zx8qPZeNfl5PeCBbkFplzdaJAZ CrM9VonSTARzbkP16ezZApbqKQoDZZOsLQxhSLru3dm12ifFtSgJ909GP7oEmlNC KYMxKvDEoJTAwvbiWF2XSL+sphry7WvaPUqMwJeMeoQwdlQFESGTDT4s6oXE5h1O lHs1IEHuF2fMttprm1xuyroin7WWPPG7EW8Da/EDXI0GBq7G2bibsxXYUPtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu26hVnCtj30RJOskcuEe4dTFUccwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4YjI5NTktMWMyNS00NmEwLTg5 ZDEtZjc3ZDVjNDc0NjkxLzAvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3 NTY2RTYwOTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5KVwmFi9rP0pQtIiYbN37AW7XG5ISFrsO7 IykB9krx0PxBHQTRsOIijb0RX2vQ3LYSn3kyCq1zACGeHB/nOf9IUIxax9ofoRZ1 u1KynxLOhen4RRdrEQpPKaZtvsCEDK7+Y8Zctz6TNL1a/cBaEV6XAZVGSxSRF6Ww se/MwZk6yD7N34W4m7ft3wrHhmY7mPfd3oC9EvTYvNrJ3Ob8g07P3o+hohXpH5EM IpqYwZ6vTcCw4l2RS5pUEs21JTLkzECHy6x/96n3xAbFVsMU1hC1IZyiLG7uE+ov Gi3gFoOgsAH9/iaYDBgUCUFxPp1Fz/oIrAFxbLYZ6rM86+XI7YA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:22 2025 by rpki-client