$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: JdCtuTrcTdNYIh08TcyMUyxOli240E6NTzDykd/0otY= Subject key identifier: 88:6C:F6:51:B9:22:9C:17:42:34:B7:12:1C:0E:34:7B:B6:59:68:55 Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 48C366CD3AB043C4804BABC3DD811B34A1039619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 0385 Signing time: Mon 08 Sep 2025 12:12:21 +0000 Manifest this update: Mon 08 Sep 2025 12:07:21 +0000 Manifest next update: Thu 11 Sep 2025 18:36:21 +0000 Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: i7V1x1kUr/5GrAzA5NQRuB9JfeNbdQ2fUPlDise9tds=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c3:66:cd:3a:b0:43:c4:80:4b:ab:c3:dd:81:1b:34:a1:03:96:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Sep 8 12:07:21 2025 GMT Not After : Sep 11 18:36:21 2025 GMT Subject: CN=886CF651B9229C174234B7121C0E347BB6596855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:ca:0b:7f:7f:83:0d:b2:87:8a:2f:41:3c: 3a:95:22:9c:44:7d:df:92:9c:8d:d4:cd:65:f3:8c: f0:f8:17:b7:bc:73:6b:76:b1:8d:86:7a:b9:99:76: 46:be:45:fc:f9:b5:b0:b9:97:91:a8:3a:c6:2e:cc: cd:c6:ce:4d:30:59:cb:55:b3:c5:cc:38:19:bc:61: 4a:08:4f:27:80:32:31:f9:31:fe:89:9e:c7:27:2c: df:4d:f5:c9:3e:fd:c2:a1:b5:df:17:c0:8e:6a:f8: 2b:b8:6e:42:5a:60:10:eb:e0:33:5d:bc:ef:6e:35: b0:6f:4c:3c:36:2d:0b:6b:52:99:3f:e4:d6:a0:92: be:d5:a3:41:c3:3a:52:58:d1:46:98:cf:4b:0d:7b: 97:ce:7b:e8:a0:60:95:81:36:78:e6:0d:03:bd:dd: fd:0b:85:99:cc:4e:49:aa:23:21:0b:14:e6:3e:1a: fd:37:f1:ec:41:fd:cd:4c:2c:9b:4f:eb:ae:3d:97: 4c:c5:e2:95:d3:7e:6d:97:91:f5:f0:44:d6:9b:9a: 33:52:4a:0b:aa:1c:70:78:b6:8d:ae:7b:a1:4b:5c: ec:3d:5d:b9:4e:86:d5:96:a7:d1:a7:60:c1:9b:71: 7f:66:d7:d2:09:1c:d8:63:20:31:9c:49:12:e2:d5: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6C:F6:51:B9:22:9C:17:42:34:B7:12:1C:0E:34:7B:B6:59:68:55 X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:be:ca:f7:ff:ca:fd:b9:7a:60:a4:9f:a4:86:b1:4b:c6:4d: 73:7b:47:c4:83:88:6e:e3:78:b2:55:ff:a5:42:dc:d3:77:cb: ac:ae:ef:8c:aa:8c:f3:83:e3:7e:7b:19:aa:18:6a:4e:e1:b5: 20:4c:69:11:b6:14:86:a7:c3:7a:3a:c4:80:57:8e:74:af:d6: 63:3b:2c:c1:aa:9f:4a:09:85:3d:4d:0e:bc:cf:47:3b:00:06: 82:2e:e2:14:b8:96:63:90:0e:10:b4:23:ae:c0:82:3d:c7:91: 7b:78:3d:eb:df:14:44:73:00:d1:ef:d6:4e:a3:25:e1:13:fe: ac:f9:3c:f4:3d:5e:d7:b6:2a:c7:83:0d:32:77:9f:c8:5e:1c: 2c:01:e8:80:6d:88:c3:b3:29:fe:8c:24:eb:7a:5b:57:c6:d5: 13:df:1a:06:d7:fa:3a:e2:82:65:d7:92:d7:44:61:a6:50:1c: e5:83:d5:e3:ca:ea:d2:03:b3:08:64:c2:0b:61:b6:38:f9:9f: b8:7c:64:9c:a1:13:86:4a:31:db:7b:85:cf:ae:34:75:dd:23: ee:7e:2e:5d:81:df:64:b1:54:83:5f:81:83:1e:04:64:94:4d: 27:c0:7e:b1:63:14:f3:95:c1:fd:d0:c9:5d:07:fc:92:30:15: c3:f9:86:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMNmzTqwQ8SAS6vD3YEbNKEDlhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNTA5MDgxMjA3MjFaFw0yNTA5MTExODM2MjFaMDMxMTAvBgNV BAMTKDg4NkNGNjUxQjkyMjlDMTc0MjM0QjcxMjFDMEUzNDdCQjY1OTY4NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSsoLf3+DDbKHii9BPDqVIpxE fd+SnI3UzWXzjPD4F7e8c2t2sY2GermZdka+Rfz5tbC5l5GoOsYuzM3Gzk0wWctV s8XMOBm8YUoITyeAMjH5Mf6JnscnLN9N9ck+/cKhtd8XwI5q+Cu4bkJaYBDr4DNd vO9uNbBvTDw2LQtrUpk/5Nagkr7Vo0HDOlJY0UaYz0sNe5fOe+igYJWBNnjmDQO9 3f0LhZnMTkmqIyELFOY+Gv038exB/c1MLJtP6649l0zF4pXTfm2XkfXwRNabmjNS SguqHHB4to2ue6FLXOw9XblOhtWWp9GnYMGbcX9m19IJHNhjIDGcSRLi1ZpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiGz2UbkinBdCNLcSHA40e7ZZaFUwHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACq+yvf/yv25emCkn6SGsUvGTXN7R8SDiG7j eLJV/6VC3NN3y6yu74yqjPOD4357GaoYak7htSBMaRG2FIanw3o6xIBXjnSv1mM7 LMGqn0oJhT1NDrzPRzsABoIu4hS4lmOQDhC0I67Agj3HkXt4PevfFERzANHv1k6j JeET/qz5PPQ9Xte2KseDDTJ3n8heHCwB6IBtiMOzKf6MJOt6W1fG1RPfGgbX+jri gmXXktdEYaZQHOWD1ePK6tIDswhkwgthtjj5n7h8ZJyhE4ZKMdt7hc+uNHXdI+5+ Ll2B32SxVINfgYMeBGSUTSfAfrFjFPOVwf3QyV0H/JIwFcP5hhI= -----END CERTIFICATE-----Generated at Tue Sep 9 01:16:50 2025 by rpki-client