$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: DRhAZGcNQJAs6HSVnyCfDx7nt+E6Hqh/eKMCxUvNCy8= Subject key identifier: AB:02:05:68:BA:F5:AF:45:88:26:9D:F8:6F:20:B1:4C:76:0D:8E:7D Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 51C3D3D9180FB8370FAB9ADB685D944144269AB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 0252 Signing time: Sun 26 Oct 2025 22:01:03 +0000 Manifest this update: Sun 26 Oct 2025 21:56:03 +0000 Manifest next update: Thu 30 Oct 2025 00:11:03 +0000 Files and hashes: 1: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: 4wMpj/mGLgRs4T11WvPLLit7/KfbpAXDgzMMDxRGflw=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: wQ45tmfAW0vTrcP1CHqdkU4kV8VsIFLIOnBtD5fu+LU=) 3: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: gJ4+RIzMU3sNK8zgeNrc/IFATPDJCmEd1aztpgZm3dA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c3:d3:d9:18:0f:b8:37:0f:ab:9a:db:68:5d:94:41:44:26:9a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Oct 26 21:56:03 2025 GMT Not After : Oct 30 00:11:03 2025 GMT Subject: CN=AB020568BAF5AF4588269DF86F20B14C760D8E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:32:4b:84:f8:46:67:8e:19:87:32:5a:44: e8:00:1b:90:b8:51:18:de:69:b6:94:b3:85:da:1a: cb:9c:6a:ce:18:fd:aa:37:54:bd:b3:c4:08:a1:cd: 63:69:e7:70:f3:ca:a7:f9:db:42:2e:59:ef:b7:52: 20:47:87:03:d1:79:c2:90:89:85:38:11:bd:ed:88: 31:36:b1:b3:07:ae:ca:e0:3f:36:ba:fd:fc:4e:63: a4:49:80:eb:5f:51:f3:42:ec:00:c8:e6:25:27:57: 62:10:2d:9e:30:08:c6:b3:81:5b:8d:53:85:2d:c0: b6:56:52:60:d0:09:fa:85:3f:54:7c:d2:74:33:d3: 83:05:99:ef:85:69:21:36:a8:97:9d:92:4b:44:6a: c1:8b:9c:fd:5a:2e:8c:7b:bb:53:e8:39:18:db:ae: 34:f4:6c:c1:2a:5a:05:fb:06:da:eb:45:71:33:85: 03:86:3c:95:3a:21:42:c6:14:b4:e1:a2:15:08:2d: 43:21:34:69:cf:5a:5a:e9:fb:d6:33:63:84:a0:aa: 38:5e:98:66:ed:e1:1f:14:48:4f:ae:ac:58:4a:b3: 18:ed:34:1f:f3:3a:07:85:b4:64:76:f8:e2:a0:00: 22:2f:7d:1d:30:28:ff:84:8c:ae:e6:4f:9b:22:8e: 4f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:05:68:BA:F5:AF:45:88:26:9D:F8:6F:20:B1:4C:76:0D:8E:7D X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:59:9b:54:18:ad:57:65:1a:fe:13:93:83:53:e9:73:d9:71: be:93:0c:35:44:51:e9:65:54:31:8d:31:07:b2:b5:45:89:13: 84:23:bc:fc:d3:01:4c:b8:7a:21:21:d7:c9:ac:12:24:21:2b: 0c:a0:2c:87:09:31:9d:1f:a7:f7:e8:5c:09:c5:02:d2:6c:63: b1:e6:9d:67:05:28:8a:20:d5:6a:c3:80:50:60:d5:b2:d0:3b: bc:95:ff:4c:7c:08:7d:9f:16:7a:1b:31:fb:24:94:64:e2:d3: 9d:b8:13:60:ba:64:14:68:cd:55:b3:1a:1c:24:d1:c2:61:25: d6:b8:17:7f:12:85:9c:d3:57:cd:bd:7e:8e:bb:98:36:1e:d4: ae:5e:06:d7:37:db:52:15:7c:96:01:ae:85:68:b4:68:2d:7d: 00:f4:0d:12:b6:19:9b:8a:a7:bf:10:8a:a0:28:c4:c9:57:e3: 03:c1:16:db:75:2b:42:47:5c:b2:31:72:fd:aa:06:0f:5c:30: 45:8c:d5:41:61:9a:6e:b8:08:09:aa:53:30:76:65:df:c4:78: 9e:0c:52:d3:fe:4f:98:ee:47:c6:75:2d:50:15:73:9c:b7:cf: 54:1f:6f:5b:d2:a6:da:6f:e4:e9:3f:7f:20:50:61:62:ba:0f: d8:23:b5:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcPT2RgPuDcPq5rbaF2UQUQmmrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTEwMjYyMTU2MDNaFw0yNTEwMzAwMDExMDNaMDMxMTAvBgNV BAMTKEFCMDIwNTY4QkFGNUFGNDU4ODI2OURGODZGMjBCMTRDNzYwRDhFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8TJLhPhGZ44ZhzJaROgAG5C4 URjeabaUs4XaGsucas4Y/ao3VL2zxAihzWNp53Dzyqf520IuWe+3UiBHhwPRecKQ iYU4Eb3tiDE2sbMHrsrgPza6/fxOY6RJgOtfUfNC7ADI5iUnV2IQLZ4wCMazgVuN U4UtwLZWUmDQCfqFP1R80nQz04MFme+FaSE2qJedkktEasGLnP1aLox7u1PoORjb rjT0bMEqWgX7BtrrRXEzhQOGPJU6IULGFLThohUILUMhNGnPWlrp+9YzY4Sgqjhe mGbt4R8USE+urFhKsxjtNB/zOgeFtGR2+OKgACIvfR0wKP+EjK7mT5sijk/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqwIFaLr1r0WIJp34byCxTHYNjn0wHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABZm1QYrVdlGv4Tk4NT6XPZcb6TDDVEUell VDGNMQeytUWJE4QjvPzTAUy4eiEh18msEiQhKwygLIcJMZ0fp/foXAnFAtJsY7Hm nWcFKIog1WrDgFBg1bLQO7yV/0x8CH2fFnobMfsklGTi0524E2C6ZBRozVWzGhwk 0cJhJda4F38ShZzTV829fo67mDYe1K5eBtc321IVfJYBroVotGgtfQD0DRK2GZuK p78QiqAoxMlX4wPBFtt1K0JHXLIxcv2qBg9cMEWM1UFhmm64CAmqUzB2Zd/EeJ4M UtP+T5juR8Z1LVAVc5y3z1Qfb1vSptpv5Ok/fyBQYWK6D9gjtZQ= -----END CERTIFICATE-----Generated at Tue Oct 28 16:06:37 2025 by rpki-client