$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: 0KkbLcWEBc3gdrlhD8kyr0bgG21xae/76kHweWXquZU= Subject key identifier: 84:E3:E5:19:0A:37:43:2C:9C:4B:D7:CE:6F:DF:A4:7B:13:5E:9A:06 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 188691DBCA24F03F18CA58E06E452B4C2B16FE0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01E9 Signing time: Sat 19 Jul 2025 22:20:51 +0000 Manifest this update: Sat 19 Jul 2025 22:15:51 +0000 Manifest next update: Wed 23 Jul 2025 00:50:51 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: pKoT0vz8lOLFhpMYx7/2O8ckNtcYCxJG/V087FtRWmU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:86:91:db:ca:24:f0:3f:18:ca:58:e0:6e:45:2b:4c:2b:16:fe:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Jul 19 22:15:51 2025 GMT Not After : Jul 23 00:50:51 2025 GMT Subject: CN=84E3E5190A37432C9C4BD7CE6FDFA47B135E9A06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:f4:ff:b6:a0:7a:48:dd:28:1a:f0:ff:23: 87:cb:d3:70:c3:54:e5:28:d5:0e:7b:61:64:a4:5e: ab:98:2c:9f:fa:0e:5a:f1:7e:7e:55:c4:43:cb:7d: 3b:a3:1c:18:85:e1:55:5c:e0:c6:b6:e6:cf:3f:cc: 42:8d:b4:09:97:ed:ec:a7:74:74:7c:77:46:36:c3: 58:9c:f9:07:32:cb:6f:30:dc:b9:b6:8a:95:13:ce: ef:7e:66:db:2d:cd:ad:c7:ed:b3:7f:43:87:d0:13: ab:02:40:2a:02:14:6f:14:da:16:7e:a5:0d:ff:cb: dd:2d:e4:ea:60:22:76:95:ae:6a:de:14:c8:e1:68: 84:c1:d0:c0:e6:e8:92:84:12:f6:fa:60:aa:cb:d8: 07:d5:b0:45:96:2d:57:2d:ff:d3:de:9e:2d:14:3b: 67:37:b5:10:3f:51:db:31:1e:15:6f:89:f3:3a:09: 0b:f3:df:de:1e:68:1e:06:12:5a:7f:b3:bd:1c:92: 80:8d:35:37:4a:2f:ce:11:4f:e0:48:cb:50:72:33: 0f:9d:7f:93:a1:9d:c9:94:2c:2c:d9:33:41:99:25: 44:47:41:fa:37:d5:43:49:cb:a9:03:7a:f6:c7:4b: 50:61:c3:77:0e:8e:a3:c6:a5:f9:ef:97:3e:f8:00: ad:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E3:E5:19:0A:37:43:2C:9C:4B:D7:CE:6F:DF:A4:7B:13:5E:9A:06 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3b:ac:84:06:4d:25:8d:65:35:c5:ec:a6:20:e5:9e:26:f0: ba:fa:b2:d4:e5:88:e7:d6:21:4c:44:e0:04:ba:6b:c4:5a:bb: 7f:2e:54:16:fb:4e:13:45:2d:89:83:e8:dd:87:c6:bb:5d:ab: 67:36:d2:b0:df:f9:b5:85:d1:37:79:21:08:57:17:b1:d9:d9: 79:af:8b:94:c6:b3:f1:ab:d3:43:ee:e1:00:d9:55:96:90:75: bd:97:9e:58:e6:45:78:6f:e7:40:55:55:be:2b:1a:fb:d3:b1: d3:6c:4d:3c:7a:76:31:27:38:40:8c:dc:61:4d:e3:54:3c:a9: 96:56:da:15:77:39:c8:c7:fa:e3:a1:44:3b:3f:e8:bc:26:5f: 8a:5c:c8:37:58:29:54:91:87:2a:18:00:03:fe:bb:2f:cc:77: f5:b9:2e:57:11:0e:fc:29:d6:10:0b:69:e9:fa:32:61:7d:e6: 2b:26:da:61:08:11:0c:bf:49:b8:5e:9e:eb:82:bb:ad:a9:cb: 43:9a:63:b7:f5:eb:c6:ba:68:03:42:f2:5f:8b:c3:e2:e8:5c: 02:4e:8c:05:a4:6a:7c:aa:4b:3c:dd:2f:6f:92:39:06:dc:a8: 90:fc:f0:94:82:b2:83:eb:14:3d:55:e9:05:a5:4b:fd:11:f6: 9b:46:d8:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIaR28ok8D8YyljgbkUrTCsW/g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA3MTkyMjE1NTFaFw0yNTA3MjMwMDUwNTFaMDMxMTAvBgNV BAMTKDg0RTNFNTE5MEEzNzQzMkM5QzRCRDdDRTZGREZBNDdCMTM1RTlBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24vT/tqB6SN0oGvD/I4fL03DD VOUo1Q57YWSkXquYLJ/6Dlrxfn5VxEPLfTujHBiF4VVc4Ma25s8/zEKNtAmX7eyn dHR8d0Y2w1ic+Qcyy28w3Lm2ipUTzu9+Ztstza3H7bN/Q4fQE6sCQCoCFG8U2hZ+ pQ3/y90t5OpgInaVrmreFMjhaITB0MDm6JKEEvb6YKrL2AfVsEWWLVct/9Peni0U O2c3tRA/UdsxHhVvifM6CQvz394eaB4GElp/s70ckoCNNTdKL84RT+BIy1ByMw+d f5OhncmULCzZM0GZJURHQfo31UNJy6kDevbHS1Bhw3cOjqPGpfnvlz74AK0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhOPlGQo3QyycS9fOb9+kexNemgYwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg7rIQGTSWNZTXF7KYg5Z4m8Lr6stTliOfW IUxE4AS6a8Rau38uVBb7ThNFLYmD6N2Hxrtdq2c20rDf+bWF0Td5IQhXF7HZ2Xmv i5TGs/Gr00Pu4QDZVZaQdb2XnljmRXhv50BVVb4rGvvTsdNsTTx6djEnOECM3GFN 41Q8qZZW2hV3OcjH+uOhRDs/6LwmX4pcyDdYKVSRhyoYAAP+uy/Md/W5LlcRDvwp 1hALaen6MmF95ism2mEIEQy/SbhenuuCu62py0OaY7f168a6aANC8l+Lw+LoXAJO jAWkanyqSzzdL2+SOQbcqJD88JSCsoPrFD1V6QWlS/0R9ptG2GM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:50 2025 by rpki-client