$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: xIQr83RgfCyKzfcrLTQK6GOV1ikM13KTOpF10849xFE= Subject key identifier: 35:24:DA:B8:E6:A6:F2:4D:BF:A5:6D:3B:EF:39:C8:CC:00:EE:EF:02 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 79B62641840AD1278BECF4069E28D99DFAB668BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01BB Signing time: Mon 07 Apr 2025 19:30:51 +0000 Manifest this update: Mon 07 Apr 2025 19:25:51 +0000 Manifest next update: Fri 11 Apr 2025 07:16:51 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: mtf1xMtoJbLE8Jx2IVqXk1cBVj2Aj8ZoG4gK6+pogqs=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: hf5gpBOXRbmUGvkOcBQ033JrPowbSIjg5AaS/jjlrbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 07:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b6:26:41:84:0a:d1:27:8b:ec:f4:06:9e:28:d9:9d:fa:b6:68:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Apr 7 19:25:51 2025 GMT Not After : Apr 11 07:16:51 2025 GMT Subject: CN=3524DAB8E6A6F24DBFA56D3BEF39C8CC00EEEF02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:c2:52:58:4d:e5:10:00:9d:57:46:72:5f: 74:7a:2d:46:09:43:fc:6d:19:cc:84:ee:c8:ec:82: 39:40:2d:fe:fd:12:cd:bc:a4:52:81:4c:c2:e5:60: ac:bf:07:e2:c2:e6:29:79:f8:aa:38:3e:66:0d:7c: c8:38:2f:04:37:57:08:a1:94:cb:a6:7c:bb:17:fd: 73:40:78:c5:81:1a:67:30:7d:18:94:ba:57:49:a8: 0e:73:c0:c7:35:d2:58:a8:19:23:25:11:f7:5a:60: 2c:53:a5:15:b4:b3:4c:db:41:1f:60:26:98:ed:12: ce:b2:54:9e:37:c1:0f:26:d4:54:7e:17:c7:89:2e: 10:f1:25:ad:7e:7d:07:c7:90:73:c3:4f:cf:d2:a7: 9e:d6:35:1a:25:38:cf:44:92:dc:c3:12:9f:87:23: cb:d1:2d:f6:76:18:5d:17:16:76:9b:b3:28:21:68: 6d:34:60:24:ec:19:bc:26:f9:96:02:3b:24:4d:3d: bf:b6:8b:8d:89:18:25:2d:9b:a3:b1:6f:be:fe:6c: b7:2e:77:5e:35:5e:71:c8:1f:d1:25:a3:30:29:17: 5a:08:54:e5:a7:5f:da:97:81:07:dd:44:45:05:db: 3f:ea:c5:13:bc:a8:50:d9:91:02:06:c1:e9:39:af: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:DA:B8:E6:A6:F2:4D:BF:A5:6D:3B:EF:39:C8:CC:00:EE:EF:02 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:19:bd:db:ad:6d:fa:03:30:43:00:96:63:81:aa:08:48:bb: 1a:30:42:4f:c3:96:95:04:e7:4d:87:86:a0:eb:ad:14:ea:96: fa:8a:b3:9f:0c:b1:2c:9e:50:61:61:e2:a1:eb:9d:03:47:06: 62:89:bc:06:fb:f4:b0:bd:d0:34:83:3f:15:9a:e6:ca:99:58: 99:29:46:63:87:9c:48:ec:e5:a1:4c:85:13:0d:2b:22:47:14: c3:2d:0f:aa:eb:1c:9a:37:c9:0d:12:ad:af:4f:bb:5a:e1:47: a6:d0:77:ce:0f:81:e5:bd:b1:eb:f5:75:0b:79:a0:67:2e:e6: 75:9e:09:18:fe:3a:92:7d:c3:56:09:fd:cd:4c:d1:00:2b:60: 28:6a:1c:f4:b0:5c:fc:52:41:26:c0:43:d3:ea:38:cc:97:f0: d9:ac:d6:b4:b4:0d:7d:93:a8:5b:63:64:aa:06:6a:6e:96:21: b8:a9:3d:90:e5:b8:8b:32:75:47:97:17:8e:fe:57:60:94:ce: 20:3d:3f:76:2c:7b:74:d9:18:34:e3:20:ab:e3:d0:e1:12:65: 13:a9:9e:14:4f:d9:75:94:ba:d8:58:1a:3c:e0:a8:3e:83:ae: cc:05:35:53:cc:33:bf:24:9e:c7:38:5c:48:10:14:b2:13:28: f9:c2:09:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebYmQYQK0SeL7PQGnijZnfq2aL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA0MDcxOTI1NTFaFw0yNTA0MTEwNzE2NTFaMDMxMTAvBgNV BAMTKDM1MjREQUI4RTZBNkYyNERCRkE1NkQzQkVGMzlDOENDMDBFRUVGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EcJSWE3lEACdV0ZyX3R6LUYJ Q/xtGcyE7sjsgjlALf79Es28pFKBTMLlYKy/B+LC5il5+Ko4PmYNfMg4LwQ3Vwih lMumfLsX/XNAeMWBGmcwfRiUuldJqA5zwMc10lioGSMlEfdaYCxTpRW0s0zbQR9g JpjtEs6yVJ43wQ8m1FR+F8eJLhDxJa1+fQfHkHPDT8/Sp57WNRolOM9EktzDEp+H I8vRLfZ2GF0XFnabsyghaG00YCTsGbwm+ZYCOyRNPb+2i42JGCUtm6Oxb77+bLcu d141XnHIH9ElozApF1oIVOWnX9qXgQfdREUF2z/qxRO8qFDZkQIGwek5rwfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNSTauOam8k2/pW077znIzADu7wIwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0ZvdutbfoDMEMAlmOBqghIuxowQk/DlpUE 502HhqDrrRTqlvqKs58MsSyeUGFh4qHrnQNHBmKJvAb79LC90DSDPxWa5sqZWJkp RmOHnEjs5aFMhRMNKyJHFMMtD6rrHJo3yQ0Sra9Pu1rhR6bQd84PgeW9sev1dQt5 oGcu5nWeCRj+OpJ9w1YJ/c1M0QArYChqHPSwXPxSQSbAQ9PqOMyX8Nms1rS0DX2T qFtjZKoGam6WIbipPZDluIsydUeXF47+V2CUziA9P3Yse3TZGDTjIKvj0OESZROp nhRP2XWUuthYGjzgqD6DrswFNVPMM78knsc4XEgQFLITKPnCCTA= -----END CERTIFICATE-----Generated at Tue Apr 8 18:24:33 2025 by rpki-client