$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: 6b9kerOOhgO5YkClUeSSn/6jsD6mcn7KYhcIwoequFg= Subject key identifier: 40:3A:5A:09:9F:31:2C:C5:5F:3D:85:E1:8D:56:2D:98:77:C7:88:A1 Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 43D03176D79E39153C695B5859EB880E6C801AB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: D1 Signing time: Thu 04 Sep 2025 03:51:42 +0000 Manifest this update: Thu 04 Sep 2025 03:46:42 +0000 Manifest next update: Sun 07 Sep 2025 06:06:42 +0000 Files and hashes: 1: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 3: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) 4: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: sY7L7Xdvr7Od8iUU1QiHhunN+e4jwW+GCLPkzTGLJMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 06:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d0:31:76:d7:9e:39:15:3c:69:5b:58:59:eb:88:0e:6c:80:1a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Sep 4 03:46:42 2025 GMT Not After : Sep 7 06:06:42 2025 GMT Subject: CN=403A5A099F312CC55F3D85E18D562D9877C788A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:91:ec:12:26:15:dd:8e:a6:6c:3a:f4:a8: fd:9d:55:5b:9f:20:96:a0:1a:de:52:32:df:89:ee: ec:a8:55:ab:39:f8:4c:35:eb:74:8f:d4:91:01:78: b6:08:c2:98:ee:fc:9e:0e:fe:84:f6:b8:eb:2c:be: ef:6e:6d:e4:56:bd:3f:57:37:1c:b2:92:76:c9:ee: b8:f1:6f:c6:b1:f5:bd:68:a0:69:ce:34:e7:08:94: a3:48:8d:9f:d2:5c:72:89:43:68:9d:6b:ea:8c:3d: 4a:82:67:69:e1:b1:95:cb:06:eb:8a:e7:9e:a9:e4: 10:c9:99:32:53:4d:05:94:4e:ac:77:84:15:84:9c: 5e:81:75:a1:3e:2d:ac:e0:9c:82:97:39:1a:fb:ba: ba:10:ea:e3:e9:71:e4:6c:e5:0d:a4:0e:08:b6:da: 23:0e:ba:6c:20:ad:02:ca:33:db:4e:b9:84:7e:9b: e0:c3:68:54:20:3b:cb:73:50:e9:a3:f8:ba:51:91: 94:7a:88:19:9c:1d:3c:67:75:7a:a0:3c:37:09:70: af:3c:a9:ee:82:be:8a:e6:9d:99:28:9e:80:0e:aa: 47:75:01:81:48:d9:1f:57:47:1f:d6:50:7f:89:74: f3:17:25:63:9a:a4:d9:15:30:f2:e0:aa:ab:b2:11: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3A:5A:09:9F:31:2C:C5:5F:3D:85:E1:8D:56:2D:98:77:C7:88:A1 X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d5:8d:84:8f:dc:e7:81:b4:be:a5:71:9b:c9:69:54:2d:d7: fe:c3:6a:06:c2:39:53:a0:22:e8:a2:9b:20:6e:98:ea:6e:01: e7:6d:34:82:d5:2b:f3:b2:43:dd:a4:cc:29:a7:94:76:cc:45: 7c:0c:aa:b5:77:dd:15:46:4f:7b:76:6c:21:9f:d1:42:ee:9e: bd:d5:f5:96:c2:8d:15:20:be:2c:7a:1a:6e:0e:2a:66:9d:4d: 36:fa:35:8c:1f:ee:9d:87:de:20:2c:bf:f6:0e:96:92:fa:d2: 2a:ad:6c:b5:bd:46:22:92:36:ca:d5:0f:93:59:ff:15:b4:2a: e5:ca:af:86:81:b0:26:fe:17:6e:cb:6f:28:dc:d1:38:e5:8e: 53:12:66:00:13:e0:05:5d:71:a4:2a:26:26:b2:f7:1b:72:dd: b8:c0:85:b3:76:2f:c8:99:3d:3e:cb:bb:86:87:81:78:46:8a: 54:87:76:34:b2:7e:0b:d8:86:e9:e8:53:d5:db:9d:6b:26:21: 73:73:02:f4:4a:12:3e:34:db:41:14:29:f9:23:05:41:34:09: 30:95:bd:e8:46:8c:99:c7:07:bc:69:8e:a1:13:d5:f8:61:90: 59:e9:79:17:ca:1c:06:59:9a:68:fe:0d:8a:74:56:22:45:ce: db:33:ac:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9AxdteeORU8aVtYWeuIDmyAGrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTA5MDQwMzQ2NDJaFw0yNTA5MDcwNjA2NDJaMDMxMTAvBgNV BAMTKDQwM0E1QTA5OUYzMTJDQzU1RjNEODVFMThENTYyRDk4NzdDNzg4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5u5HsEiYV3Y6mbDr0qP2dVVuf IJagGt5SMt+J7uyoVas5+Ew163SP1JEBeLYIwpju/J4O/oT2uOssvu9ubeRWvT9X NxyyknbJ7rjxb8ax9b1ooGnONOcIlKNIjZ/SXHKJQ2ida+qMPUqCZ2nhsZXLBuuK 556p5BDJmTJTTQWUTqx3hBWEnF6BdaE+LazgnIKXORr7uroQ6uPpceRs5Q2kDgi2 2iMOumwgrQLKM9tOuYR+m+DDaFQgO8tzUOmj+LpRkZR6iBmcHTxndXqgPDcJcK88 qe6CvormnZkonoAOqkd1AYFI2R9XRx/WUH+JdPMXJWOapNkVMPLgqquyEdaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDpaCZ8xLMVfPYXhjVYtmHfHiKEwHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjVjYSP3OeBtL6lcZvJaVQt1/7DagbCOVOg IuiimyBumOpuAedtNILVK/OyQ92kzCmnlHbMRXwMqrV33RVGT3t2bCGf0ULunr3V 9ZbCjRUgvix6Gm4OKmadTTb6NYwf7p2H3iAsv/YOlpL60iqtbLW9RiKSNsrVD5NZ /xW0KuXKr4aBsCb+F27Lbyjc0TjljlMSZgAT4AVdcaQqJiay9xty3bjAhbN2L8iZ PT7Lu4aHgXhGilSHdjSyfgvYhunoU9XbnWsmIXNzAvRKEj4020EUKfkjBUE0CTCV vehGjJnHB7xpjqET1fhhkFnpeRfKHAZZmmj+DYp0ViJFztszrBA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:15 2025 by rpki-client