$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: hkBlNbgW6fcDS5KcIh/0n0BIfqFsfGj6gNUNAz00qGQ= Subject key identifier: D8:A5:F2:6E:F2:73:57:6C:89:7A:52:17:84:09:81:7E:3E:F4:75:95 Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 56BB8D7508E6207B7FE923DCF2B3145CE9B363B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: AA Signing time: Sat 07 Jun 2025 17:01:37 +0000 Manifest this update: Sat 07 Jun 2025 16:56:37 +0000 Manifest next update: Wed 11 Jun 2025 02:18:37 +0000 Files and hashes: 1: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: GuarSFxa9oSn7dwjEpUbFZszelaHkKKs21CgjNdbh2I=) 2: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 3: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) 4: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bb:8d:75:08:e6:20:7b:7f:e9:23:dc:f2:b3:14:5c:e9:b3:63:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Jun 7 16:56:37 2025 GMT Not After : Jun 11 02:18:37 2025 GMT Subject: CN=D8A5F26EF273576C897A52178409817E3EF47595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:9e:1b:79:eb:34:d9:69:5e:be:2e:2f:ed: 40:5b:e7:57:a7:d9:5f:9d:59:51:82:e2:7d:86:49: 68:c3:a0:06:40:43:e6:99:0a:d3:98:31:6e:21:00: 02:0f:57:80:21:6d:f3:15:07:db:48:24:67:32:a3: 94:d6:98:ff:ff:b9:fe:06:21:df:dd:05:a6:c3:68: 66:50:92:eb:f0:e8:f0:ad:dd:40:46:43:2d:7b:8a: bb:0e:d2:f9:ec:0f:d4:53:04:ae:ee:9b:2e:ae:2e: e5:0b:21:f1:d7:e6:95:0f:77:96:f3:8d:e4:c0:eb: 0e:51:f8:40:39:f7:62:64:ba:2e:19:82:19:41:73: 79:f6:29:18:56:f2:5d:84:9e:33:e5:fe:33:4d:a8: f8:41:aa:15:98:fe:f7:52:bb:75:e8:b6:3f:bc:e7: 34:d3:ad:a6:e3:fa:67:dc:d0:4c:f1:f0:4b:1e:bc: 67:d8:f5:cb:9b:0e:f0:31:ea:d8:23:16:a9:1d:cc: ae:c6:ca:20:db:2a:3c:cd:8b:fe:2f:8b:12:e5:51: 02:19:23:31:b7:c4:c4:5c:31:5d:ce:9d:35:29:8c: 23:e8:e1:ec:39:ba:05:b0:a3:aa:d4:d3:fa:2b:77: 30:43:78:7d:bb:6b:1f:4d:f4:f3:21:1d:0f:d5:a4: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:F2:6E:F2:73:57:6C:89:7A:52:17:84:09:81:7E:3E:F4:75:95 X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:95:d9:38:8b:44:94:6d:68:bc:34:39:f2:b3:59:9a:bc:ff: 0a:63:bf:e0:07:e2:24:91:82:99:1d:f3:1b:2b:49:1a:27:54: 08:ee:04:fd:55:6a:21:d8:43:53:00:14:b1:71:fe:8a:20:65: 24:da:63:9f:28:63:b7:39:22:b1:08:e8:69:7c:78:e6:88:c1: bc:a3:dc:8b:de:18:e1:7b:1f:64:96:89:0a:9a:56:ad:43:65: a0:c1:c7:2a:9a:bf:0f:1c:7b:af:ca:d7:ed:09:49:8c:33:ca: 1d:4c:c6:75:df:37:fc:cf:c9:fd:c6:78:db:cb:22:6d:a9:98: 37:de:e0:01:8d:8e:07:6e:eb:c6:54:61:92:15:ca:7c:cc:26: db:49:9d:d6:43:9c:71:d5:d5:cb:de:17:cc:0e:12:fb:9f:22: b3:4d:cd:41:c6:44:2e:47:52:fe:08:26:28:49:c6:00:99:1a: eb:dc:e3:29:95:4d:63:60:6b:dc:12:c9:8b:7e:95:9d:b1:d6: 6a:8f:5c:6e:01:ec:7d:68:26:15:44:22:75:3c:00:cd:a5:d8: 5a:14:58:f4:fd:30:fa:4f:ef:39:06:2e:10:b4:f6:cc:20:59: 63:36:c5:cb:36:67:6c:d0:71:21:55:87:81:b3:cf:e0:ff:1e: 71:9c:ff:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVruNdQjmIHt/6SPc8rMUXOmzY7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTA2MDcxNjU2MzdaFw0yNTA2MTEwMjE4MzdaMDMxMTAvBgNV BAMTKEQ4QTVGMjZFRjI3MzU3NkM4OTdBNTIxNzg0MDk4MTdFM0VGNDc1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcPZ4bees02Wlevi4v7UBb51en 2V+dWVGC4n2GSWjDoAZAQ+aZCtOYMW4hAAIPV4AhbfMVB9tIJGcyo5TWmP//uf4G Id/dBabDaGZQkuvw6PCt3UBGQy17irsO0vnsD9RTBK7umy6uLuULIfHX5pUPd5bz jeTA6w5R+EA592Jkui4ZghlBc3n2KRhW8l2EnjPl/jNNqPhBqhWY/vdSu3Xotj+8 5zTTrabj+mfc0Ezx8EsevGfY9cubDvAx6tgjFqkdzK7GyiDbKjzNi/4vixLlUQIZ IzG3xMRcMV3OnTUpjCPo4ew5ugWwo6rU0/ordzBDeH27ax9N9PMhHQ/VpI/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KXybvJzV2yJelIXhAmBfj70dZUwHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmV2TiLRJRtaLw0OfKzWZq8/wpjv+AH4iSR gpkd8xsrSRonVAjuBP1VaiHYQ1MAFLFx/oogZSTaY58oY7c5IrEI6Gl8eOaIwbyj 3IveGOF7H2SWiQqaVq1DZaDBxyqavw8ce6/K1+0JSYwzyh1MxnXfN/zPyf3GeNvL Im2pmDfe4AGNjgdu68ZUYZIVynzMJttJndZDnHHV1cveF8wOEvufIrNNzUHGRC5H Uv4IJihJxgCZGuvc4ymVTWNga9wSyYt+lZ2x1mqPXG4B7H1oJhVEInU8AM2l2FoU WPT9MPpP7zkGLhC09swgWWM2xcs2Z2zQcSFVh4Gzz+D/HnGc/0U= -----END CERTIFICATE-----Generated at Sun Jun 8 10:29:29 2025 by rpki-client