$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: OMU2mkpcIculW4HkcaMATyseTmYl2mclsYkNyhRfsMo= Subject key identifier: 6C:1C:17:C6:5C:16:82:82:E0:C3:55:8E:4D:A1:5A:F6:25:32:57:61 Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 2245153B1AE75261D79745AA97B199E61A7F4DEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 0210 Signing time: Tue 03 Jun 2025 00:02:09 +0000 Manifest this update: Mon 02 Jun 2025 23:57:09 +0000 Manifest next update: Fri 06 Jun 2025 03:07:09 +0000 Files and hashes: 1: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: lMU98K8boixSwzf8yweiKT9KTZwQ9/U6CZkZM4463yE=) 2: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: OEcoBkoG7Ieje5kz6iCayAVIs4OuEBZdw+TGiUfzbw0=) 3: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: Sc7V8HjoJlvlyPs0x8OcUDy/oyEPZU0ZY61rdBTppuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 03:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:45:15:3b:1a:e7:52:61:d7:97:45:aa:97:b1:99:e6:1a:7f:4d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Jun 2 23:57:09 2025 GMT Not After : Jun 6 03:07:09 2025 GMT Subject: CN=6C1C17C65C168282E0C3558E4DA15AF625325761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:54:4f:1f:c3:72:8c:54:bd:55:e6:d5:b5:8a: 76:05:b1:4d:52:5c:c1:40:c5:37:f5:26:fd:a4:b8: ad:35:8c:01:46:38:7c:66:6d:3b:aa:0e:40:ef:3a: 73:a4:45:94:cc:53:52:9e:a1:ea:03:c9:59:29:e5: f4:f6:c8:49:4d:dc:bd:f1:17:6c:b8:c9:2e:0a:b7: 6c:99:e0:0c:16:0c:7e:25:99:16:28:99:22:40:93: 3c:05:a9:b6:2b:c9:68:6c:ea:95:73:4f:a6:36:79: 17:46:1f:38:a1:0d:a2:66:ac:6c:ae:57:b6:5c:d4: 32:7c:40:8a:e1:72:68:0b:08:e8:69:e5:95:5a:bc: b3:cb:af:de:21:21:4f:5c:97:89:b0:94:bd:6d:f3: 42:76:c9:c7:8c:29:a5:55:d0:40:b0:d5:3d:72:a4: e9:fc:28:d3:41:49:a5:f5:06:fd:1e:e3:6f:74:cf: a1:64:80:04:6a:10:f0:7e:be:2c:77:e3:c1:96:eb: 7a:c7:e8:60:dc:10:f8:2c:e6:3d:28:bf:df:a9:e6: b2:2f:bb:ff:77:fa:d0:7b:b5:75:d7:d7:a2:bc:1d: 4e:27:0d:25:24:5e:21:30:e2:72:9f:0a:b8:69:90: da:44:5e:e1:a5:b8:bf:f7:3f:53:12:f4:32:e3:77: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1C:17:C6:5C:16:82:82:E0:C3:55:8E:4D:A1:5A:F6:25:32:57:61 X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a4:39:77:78:4f:d5:c2:d0:5e:d8:38:15:5b:31:e7:4f:ad: 10:b0:cd:1b:c4:a2:85:03:a1:ec:b2:91:ab:43:9b:ca:7a:f8: e1:04:4f:ee:37:c2:81:8a:54:09:2f:e8:20:cc:64:a3:43:a9: 0c:77:4a:27:51:b9:2a:18:0f:8e:9d:de:ad:a6:f4:dc:c3:ce: 0a:30:d9:a8:6d:a7:5e:16:ad:45:f4:35:64:49:d5:a7:56:7b: af:4b:e2:5b:1d:8c:57:c4:49:c2:e8:eb:db:47:13:bd:e6:61: ba:f2:6c:b3:77:2f:02:7c:b8:dd:b1:b8:87:66:e0:46:d5:db: 1d:d5:5a:85:12:39:68:5f:ed:3b:e4:0b:62:17:35:98:78:15: 00:7e:cc:26:bd:54:72:67:71:1e:41:5b:5f:c8:0f:af:02:a3: 7f:6f:dc:f9:67:4d:aa:95:0f:7b:a7:0c:f8:cb:a9:e0:7c:ea: c3:43:aa:39:51:44:1b:f3:8d:d9:c3:e1:1d:00:d1:22:e6:4e: 2b:c5:65:4a:f0:44:6d:d4:84:ab:5f:81:b2:65:98:fd:e2:5b: 37:d7:e8:19:5c:f2:30:0b:be:32:ed:db:47:5b:ce:7e:7e:72: 2e:3d:d6:db:40:8d:6c:d8:9b:bd:99:0e:88:c8:49:b7:ef:9f: 1f:ae:e8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkUVOxrnUmHXl0Wql7GZ5hp/Te4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTA2MDIyMzU3MDlaFw0yNTA2MDYwMzA3MDlaMDMxMTAvBgNV BAMTKDZDMUMxN0M2NUMxNjgyODJFMEMzNTU4RTREQTE1QUY2MjUzMjU3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVE8fw3KMVL1V5tW1inYFsU1S XMFAxTf1Jv2kuK01jAFGOHxmbTuqDkDvOnOkRZTMU1KeoeoDyVkp5fT2yElN3L3x F2y4yS4Kt2yZ4AwWDH4lmRYomSJAkzwFqbYryWhs6pVzT6Y2eRdGHzihDaJmrGyu V7Zc1DJ8QIrhcmgLCOhp5ZVavLPLr94hIU9cl4mwlL1t80J2yceMKaVV0ECw1T1y pOn8KNNBSaX1Bv0e4290z6FkgARqEPB+vix348GW63rH6GDcEPgs5j0ov9+p5rIv u/93+tB7tXXX16K8HU4nDSUkXiEw4nKfCrhpkNpEXuGluL/3P1MS9DLjd1pHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbBwXxlwWgoLgw1WOTaFa9iUyV2EwHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6kOXd4T9XC0F7YOBVbMedPrRCwzRvEooUD oeyykatDm8p6+OEET+43woGKVAkv6CDMZKNDqQx3SidRuSoYD46d3q2m9NzDzgow 2ahtp14WrUX0NWRJ1adWe69L4lsdjFfEScLo69tHE73mYbrybLN3LwJ8uN2xuIdm 4EbV2x3VWoUSOWhf7TvkC2IXNZh4FQB+zCa9VHJncR5BW1/ID68Co39v3PlnTaqV D3unDPjLqeB86sNDqjlRRBvzjdnD4R0A0SLmTivFZUrwRG3UhKtfgbJlmP3iWzfX 6Blc8jALvjLt20dbzn5+ci491ttAjWzYm72ZDojISbfvnx+u6Bo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:07 2025 by rpki-client