$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: efiYmcRyIARAteoB2djoiliWnxTe1PL2PyD/sXiYU1M= Subject key identifier: 94:48:C6:F9:88:64:AE:64:92:48:95:A9:E1:04:EE:F8:83:ED:42:1B Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 291B20A2B0647397C43F93BA8FED8693AD91DF1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 01F5 Signing time: Fri 04 Apr 2025 18:41:00 +0000 Manifest this update: Fri 04 Apr 2025 18:36:00 +0000 Manifest next update: Mon 07 Apr 2025 22:03:00 +0000 Files and hashes: 1: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: OEcoBkoG7Ieje5kz6iCayAVIs4OuEBZdw+TGiUfzbw0=) 2: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: lbqXIBn27t7vSDtI3L58RvJRGWtz9BK5TRUaEFfbY8I=) 3: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: Sc7V8HjoJlvlyPs0x8OcUDy/oyEPZU0ZY61rdBTppuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1b:20:a2:b0:64:73:97:c4:3f:93:ba:8f:ed:86:93:ad:91:df:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Apr 4 18:36:00 2025 GMT Not After : Apr 7 22:03:00 2025 GMT Subject: CN=9448C6F98864AE64924895A9E104EEF883ED421B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:c0:e2:e8:5a:4c:4c:f7:23:98:c7:35:0b: c2:88:83:77:d0:76:3e:86:03:13:09:ef:69:59:aa: 7a:2c:a4:0a:c0:31:a4:41:fa:ac:e9:d3:fe:55:4d: 5e:17:23:c3:8d:66:4d:0b:bb:c4:41:17:27:b1:44: eb:71:2f:b3:4c:13:6e:42:16:ec:d9:d4:e3:34:0d: 7b:7f:5f:39:06:de:f4:72:1d:9e:8f:2a:09:a0:06: 14:1a:57:97:99:1f:2f:1b:28:a6:5e:d6:79:78:6f: eb:1a:73:de:3f:af:b3:91:7a:a2:b0:7a:33:51:d9: 76:bc:ca:00:07:36:90:20:89:51:e4:98:6f:2a:72: 69:3e:27:51:b1:26:64:e1:2c:76:03:fd:10:44:ec: c1:62:a5:16:08:bf:b3:c7:d2:f3:9b:11:31:cc:eb: 78:e5:16:51:f3:85:8a:21:f7:4e:55:a6:32:f2:1a: 4f:bb:f2:4f:f0:24:03:36:ee:e4:7e:42:65:76:68: 1b:92:55:b0:24:f7:d4:57:bf:cd:fb:ea:90:6d:3e: ef:65:ca:db:fe:f5:01:9f:79:ed:9f:ca:76:cf:57: 61:46:d6:ed:95:2d:fe:a5:4b:08:f4:73:5c:43:11: 06:11:04:7c:86:d8:bd:e3:d8:37:a6:aa:5e:66:93: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:48:C6:F9:88:64:AE:64:92:48:95:A9:E1:04:EE:F8:83:ED:42:1B X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:96:45:06:4a:44:99:80:b8:3a:56:3e:06:2d:8c:89:3c:31: 29:4e:98:b6:87:7e:af:93:18:4b:a4:58:0f:5f:08:03:07:9d: f7:e6:21:66:31:a3:a6:3b:7b:df:26:16:5e:84:20:ec:95:6f: 41:ec:2d:68:82:15:26:89:ba:f1:2f:ad:cc:e5:91:fb:72:e2: 9e:28:b6:1c:c1:b8:11:e9:12:3e:a2:ff:4b:05:d9:07:29:27: 28:c5:a4:9b:1e:64:0c:b4:e4:33:65:79:8b:fa:f8:86:1a:85: a4:bc:97:83:ab:d0:66:98:ca:e5:85:a1:03:17:bd:4a:6a:52: 4d:39:24:c3:bc:60:ee:2e:58:7d:2c:16:ec:80:61:fe:7d:e4: 5d:4d:ee:5b:de:7f:b5:f9:d7:f7:5c:39:d7:6f:90:d6:ff:a8: 1b:3a:27:4f:5d:1c:2e:ec:2c:74:ac:af:35:11:73:bc:e4:d5: a1:39:3a:f0:e6:29:27:a9:84:ed:34:1f:c8:66:2a:c5:89:68: 1f:5f:2c:c2:dc:f4:0f:59:dd:2c:39:8f:9e:83:b6:0b:a6:85: 03:f3:83:85:d3:3f:52:12:da:88:35:62:1b:e2:68:28:4b:ec: 7c:0d:a9:77:39:db:87:33:70:1e:c2:d0:1b:8d:12:4c:41:93: 21:94:45:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRsgorBkc5fEP5O6j+2Gk62R3xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTA0MDQxODM2MDBaFw0yNTA0MDcyMjAzMDBaMDMxMTAvBgNV BAMTKDk0NDhDNkY5ODg2NEFFNjQ5MjQ4OTVBOUUxMDRFRUY4ODNFRDQyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQscDi6FpMTPcjmMc1C8KIg3fQ dj6GAxMJ72lZqnospArAMaRB+qzp0/5VTV4XI8ONZk0Lu8RBFyexROtxL7NME25C FuzZ1OM0DXt/XzkG3vRyHZ6PKgmgBhQaV5eZHy8bKKZe1nl4b+sac94/r7OReqKw ejNR2Xa8ygAHNpAgiVHkmG8qcmk+J1GxJmThLHYD/RBE7MFipRYIv7PH0vObETHM 63jlFlHzhYoh905VpjLyGk+78k/wJAM27uR+QmV2aBuSVbAk99RXv8376pBtPu9l ytv+9QGfee2fynbPV2FG1u2VLf6lSwj0c1xDEQYRBHyG2L3j2Demql5mk43vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlEjG+YhkrmSSSJWp4QTu+IPtQhswHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWWRQZKRJmAuDpWPgYtjIk8MSlOmLaHfq+T GEukWA9fCAMHnffmIWYxo6Y7e98mFl6EIOyVb0HsLWiCFSaJuvEvrczlkfty4p4o thzBuBHpEj6i/0sF2QcpJyjFpJseZAy05DNleYv6+IYahaS8l4Or0GaYyuWFoQMX vUpqUk05JMO8YO4uWH0sFuyAYf595F1N7lvef7X51/dcOddvkNb/qBs6J09dHC7s LHSsrzURc7zk1aE5OvDmKSephO00H8hmKsWJaB9fLMLc9A9Z3Sw5j56DtgumhQPz g4XTP1IS2og1YhviaChL7HwNqXc524czcB7C0BuNEkxBkyGURRA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:23 2025 by rpki-client