$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: OKh+wFq7kHDCuvCQu5DqFwkzJbkNWRZgbq+vPpk+BcI= Subject key identifier: AD:A2:99:92:25:5F:D1:69:33:A9:38:65:A4:82:81:6B:38:66:59:1B Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 5824D66BEC5D1D280C74108F7481E7FB6F89EC60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0246 Signing time: Fri 05 Sep 2025 10:42:07 +0000 Manifest this update: Fri 05 Sep 2025 10:37:07 +0000 Manifest next update: Mon 08 Sep 2025 17:25:07 +0000 Files and hashes: 1: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) 2: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: v0CtgO/9lKcAPosUieGvVX2kFgy1F6BuDgVYnqXUSBk=) 3: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:24:d6:6b:ec:5d:1d:28:0c:74:10:8f:74:81:e7:fb:6f:89:ec:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Sep 5 10:37:07 2025 GMT Not After : Sep 8 17:25:07 2025 GMT Subject: CN=ADA29992255FD16933A93865A482816B3866591B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:35:c9:6c:be:4a:02:a7:48:5c:57:f3:bf: f4:4a:61:f2:c4:95:47:ed:59:d4:28:78:99:9f:61: 17:ab:ed:f3:aa:04:b1:4b:54:49:11:5b:3a:7b:7e: 99:94:05:31:bf:2f:42:e2:16:f4:8d:6a:30:25:d4: 54:da:96:d4:d2:4d:fe:9b:6a:0e:0e:93:40:47:1b: 0d:35:59:a8:fc:5b:4b:38:c1:45:80:cd:f1:e2:25: 77:23:00:d7:10:a5:9b:77:b7:f0:24:01:6d:c4:a1: c0:f1:7b:d9:f9:30:55:74:d3:a6:14:ba:3d:d5:50: bd:3b:85:65:58:cf:f0:43:c5:ae:0d:b5:70:9e:42: 02:31:d3:fc:cd:9a:d1:29:da:b7:1c:25:e4:24:85: 25:b0:0e:1a:a1:0c:56:00:6f:a5:79:53:b6:86:ac: d2:78:95:39:f3:37:dd:f5:7b:e4:ae:1f:38:99:11: 9c:63:5b:69:80:28:85:6e:08:e1:b8:fd:39:69:a2: 87:9b:e6:21:5e:8f:44:0d:a9:2e:07:d3:f0:9f:d3: 7a:ef:61:eb:10:14:01:3d:c1:fd:25:90:05:62:e9: bf:33:8c:a1:09:2a:c1:63:20:53:9a:5b:e4:e6:9a: 1e:e3:52:5e:de:da:84:d1:43:4e:38:d0:66:af:f9: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A2:99:92:25:5F:D1:69:33:A9:38:65:A4:82:81:6B:38:66:59:1B X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:25:66:ab:29:76:1e:a9:29:cd:06:07:11:a4:a8:f8:f6:d7: 16:97:68:f2:57:c5:d5:e8:1c:37:03:e1:28:d4:8d:67:98:52: 5c:e1:1b:bd:d2:c7:80:6e:6d:4d:a3:9d:76:1e:6a:95:48:bd: 77:bd:9a:3f:fb:5d:3f:5e:93:0a:f3:47:22:ff:3d:58:3b:2a: 4c:2d:50:33:34:72:53:d8:6d:5d:be:b3:4c:f0:28:10:0e:a9: c8:fa:ab:0b:48:3e:06:ef:90:f2:54:72:eb:a2:f1:0c:0f:98: de:c8:4e:37:14:67:f7:14:2c:88:b0:ae:0d:b3:72:77:7f:fb: 2d:43:24:f1:60:55:3b:6c:42:8f:f3:95:af:f2:12:db:b6:53: c6:f6:31:7b:ac:e5:8c:38:30:b4:6f:b0:d7:90:3c:4c:d3:f8: 64:2a:71:b5:2a:c5:d1:d2:f1:6f:57:f0:12:4a:b0:ca:f2:99: 93:3b:5c:88:88:c2:a1:7b:5a:c5:ff:8a:1c:71:6e:e8:14:a1: 2c:80:55:b6:73:a6:ff:6f:12:55:de:87:bf:6e:fd:24:b9:52: 8b:15:9b:6c:81:70:ed:5f:c5:3e:f2:35:f9:71:d1:54:11:25: a4:b8:ac:e1:fe:e8:f8:44:d0:0c:a9:a3:c3:ae:3e:40:ef:f9: c6:3d:ff:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWCTWa+xdHSgMdBCPdIHn+2+J7GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTA5MDUxMDM3MDdaFw0yNTA5MDgxNzI1MDdaMDMxMTAvBgNV BAMTKEFEQTI5OTkyMjU1RkQxNjkzM0E5Mzg2NUE0ODI4MTZCMzg2NjU5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftjXJbL5KAqdIXFfzv/RKYfLE lUftWdQoeJmfYRer7fOqBLFLVEkRWzp7fpmUBTG/L0LiFvSNajAl1FTaltTSTf6b ag4Ok0BHGw01Waj8W0s4wUWAzfHiJXcjANcQpZt3t/AkAW3EocDxe9n5MFV006YU uj3VUL07hWVYz/BDxa4NtXCeQgIx0/zNmtEp2rccJeQkhSWwDhqhDFYAb6V5U7aG rNJ4lTnzN931e+SuHziZEZxjW2mAKIVuCOG4/Tlpooeb5iFej0QNqS4H0/Cf03rv YesQFAE9wf0lkAVi6b8zjKEJKsFjIFOaW+Tmmh7jUl7e2oTRQ0440Gav+Rg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUraKZkiVf0WkzqThlpIKBazhmWRswHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8lZqspdh6pKc0GBxGkqPj21xaXaPJXxdXo HDcD4SjUjWeYUlzhG73Sx4BubU2jnXYeapVIvXe9mj/7XT9ekwrzRyL/PVg7Kkwt UDM0clPYbV2+s0zwKBAOqcj6qwtIPgbvkPJUcuui8QwPmN7ITjcUZ/cULIiwrg2z cnd/+y1DJPFgVTtsQo/zla/yEtu2U8b2MXus5Yw4MLRvsNeQPEzT+GQqcbUqxdHS 8W9X8BJKsMrymZM7XIiIwqF7WsX/ihxxbugUoSyAVbZzpv9vElXeh79u/SS5UosV m2yBcO1fxT7yNflx0VQRJaS4rOH+6PhE0Aypo8OuPkDv+cY9/xY= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:51 2025 by rpki-client