$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: k8Ts1m2KAGW6qd2ahsVVRq+P3IW9GiPcMGghXO6qjR0= Subject key identifier: 84:61:2A:19:5F:34:0F:54:BD:92:30:99:99:71:C1:6D:6A:63:C5:69 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 73B0B811B01F7EDAE4AAAC69EB2EBAC34A1E17EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01FE Signing time: Thu 04 Sep 2025 07:00:52 +0000 Manifest this update: Thu 04 Sep 2025 06:55:52 +0000 Manifest next update: Sun 07 Sep 2025 10:25:52 +0000 Files and hashes: 1: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: Vwl2wmwTYE05INrKA2TQCOJRBxFBLkjqGlQ3VF4QSc0=) 2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 10:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b0:b8:11:b0:1f:7e:da:e4:aa:ac:69:eb:2e:ba:c3:4a:1e:17:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Sep 4 06:55:52 2025 GMT Not After : Sep 7 10:25:52 2025 GMT Subject: CN=84612A195F340F54BD9230999971C16D6A63C569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:0a:1c:8f:88:ab:8f:83:54:8e:3f:4c:c8: 7c:ba:fb:f8:85:a7:75:c5:da:d4:22:58:64:8f:d5: 02:09:11:d1:d1:bb:1f:02:cc:5a:7f:d4:f5:4d:a1: b7:6e:52:5b:ac:d2:a1:c4:0c:71:c8:d1:f0:30:f6: d3:69:2e:91:35:4e:74:9c:ae:7e:e0:8c:1c:65:01: b4:f4:6a:66:c4:11:42:3c:37:69:72:04:2e:62:7b: 55:8d:7d:35:f3:cb:a2:08:15:15:ba:b2:6e:3c:cb: 06:4f:60:7d:79:c8:c0:92:b5:9f:af:e0:38:05:58: 2c:d7:de:c8:ba:b2:99:9b:8d:8f:99:0f:97:c6:3d: be:56:8f:78:94:af:f7:27:53:22:58:d0:b8:d5:b3: b7:3d:3a:24:e3:01:0e:ec:4d:e5:22:30:39:59:30: a9:7d:d8:98:bc:9f:8b:f6:64:b9:3f:17:29:8e:5c: 2c:23:b3:62:dd:96:59:6a:04:bf:98:1f:dd:75:e4: b7:98:e0:13:53:a1:67:1e:10:e7:9b:57:a0:cc:8e: 34:29:8b:e6:a4:2f:97:fd:19:08:c8:6c:7f:74:40: fe:5e:d7:23:8a:c0:31:c2:e1:19:84:76:0b:c3:54: 3e:4d:6b:f0:20:8c:9e:45:7d:f0:c9:2f:26:4d:d3: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:61:2A:19:5F:34:0F:54:BD:92:30:99:99:71:C1:6D:6A:63:C5:69 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5e:17:2d:03:e1:fe:aa:d5:b5:5f:4e:5b:ce:2c:89:27:8d: 6c:08:2e:95:94:66:1f:a3:e2:a0:aa:e5:d5:c7:53:a6:81:8c: 9e:95:ce:91:68:2a:00:9e:f5:0b:c2:10:a6:e4:66:55:c7:07: bd:33:ed:94:c9:56:db:0c:7d:c5:c6:3c:d9:0e:2d:5f:08:e9: fe:64:4b:17:87:83:dd:33:ed:62:23:5c:16:11:79:26:99:25: ab:ca:a3:7f:5f:51:7d:38:d4:f4:a3:c4:c4:6a:2e:fb:25:cb: 0b:a0:9f:3e:ba:34:17:02:c2:83:ef:d8:37:41:5b:d3:15:e8: 26:cd:4f:74:a6:bb:91:58:22:df:ca:b9:7f:af:83:e4:b6:ca: 58:8c:3d:2b:9c:30:ec:47:7c:f1:a3:01:47:67:8d:da:44:bd: 2b:0e:0b:64:48:de:1a:1d:03:b9:f9:20:57:80:c1:10:09:9e: 15:d5:b4:d0:d3:a6:6d:d4:cf:dd:16:33:bf:66:c0:63:87:b7: 90:e1:2d:32:db:b4:97:80:a8:07:a3:19:d6:d7:76:95:17:78: ca:9b:d8:03:07:1c:18:72:9a:27:f9:7e:60:31:91:82:72:5b: b6:ba:a9:dc:16:67:5a:99:59:90:ed:0a:e9:a4:1b:65:c8:dd: 2c:52:5b:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7C4EbAfftrkqqxp6y66w0oeF+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA5MDQwNjU1NTJaFw0yNTA5MDcxMDI1NTJaMDMxMTAvBgNV BAMTKDg0NjEyQTE5NUYzNDBGNTRCRDkyMzA5OTk5NzFDMTZENkE2M0M1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDihgocj4irj4NUjj9MyHy6+/iF p3XF2tQiWGSP1QIJEdHRux8CzFp/1PVNobduUlus0qHEDHHI0fAw9tNpLpE1TnSc rn7gjBxlAbT0ambEEUI8N2lyBC5ie1WNfTXzy6IIFRW6sm48ywZPYH15yMCStZ+v 4DgFWCzX3si6spmbjY+ZD5fGPb5Wj3iUr/cnUyJY0LjVs7c9OiTjAQ7sTeUiMDlZ MKl92Ji8n4v2ZLk/FymOXCwjs2LdlllqBL+YH9115LeY4BNToWceEOebV6DMjjQp i+akL5f9GQjIbH90QP5e1yOKwDHC4RmEdgvDVD5Na/AgjJ5FffDJLyZN09npAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGEqGV80D1S9kjCZmXHBbWpjxWkwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFeFy0D4f6q1bVfTlvOLIknjWwILpWUZh+j 4qCq5dXHU6aBjJ6VzpFoKgCe9QvCEKbkZlXHB70z7ZTJVtsMfcXGPNkOLV8I6f5k SxeHg90z7WIjXBYReSaZJavKo39fUX041PSjxMRqLvslywugnz66NBcCwoPv2DdB W9MV6CbNT3Smu5FYIt/KuX+vg+S2yliMPSucMOxHfPGjAUdnjdpEvSsOC2RI3hod A7n5IFeAwRAJnhXVtNDTpm3Uz90WM79mwGOHt5DhLTLbtJeAqAejGdbXdpUXeMqb 2AMHHBhymif5fmAxkYJyW7a6qdwWZ1qZWZDtCumkG2XI3SxSWx8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:50 2025 by rpki-client