$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: GlJza0E+hek4prsri6Cv/U5Bjzxv0JTIHCnJyVnlBns= Subject key identifier: 1D:D9:7C:29:8A:FC:EE:48:59:8E:10:13:98:B6:3D:33:C1:FB:1D:1B Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 710326285B6DD4614607B797E6140585E3E17C12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 035B Signing time: Fri 06 Jun 2025 05:32:21 +0000 Manifest this update: Fri 06 Jun 2025 05:27:21 +0000 Manifest next update: Mon 09 Jun 2025 09:01:21 +0000 Files and hashes: 1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: RBc8t0SzZzq6PvIsQn/Y8gWPBkf8OuMfzBXzr0Qs6z4=) 2: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: bsSSPzkjsagXO9URyoS+2GFbMosZ9LMpwSknKOH9TTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:03:26:28:5b:6d:d4:61:46:07:b7:97:e6:14:05:85:e3:e1:7c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Jun 6 05:27:21 2025 GMT Not After : Jun 9 09:01:21 2025 GMT Subject: CN=1DD97C298AFCEE48598E101398B63D33C1FB1D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:f2:c6:2c:46:8a:cd:63:8a:08:95:b7:d8: 0b:84:40:4a:63:ad:4a:72:e2:f8:99:04:11:b0:32: 5f:f0:07:5b:08:ca:c9:c0:51:e0:a6:39:dc:e9:30: d0:51:83:8b:5c:ee:6c:16:09:cb:d9:21:4e:30:17: 68:52:e5:c5:c1:8e:86:25:47:99:17:95:99:6b:7e: e5:5d:4c:57:60:7b:a8:f2:fe:0e:c2:cf:32:6a:f7: 6d:ea:b6:c5:48:4c:d4:3e:81:20:be:81:1d:b8:4b: c5:ff:71:2b:c3:be:45:de:0a:ab:5d:41:c7:b8:fb: 2e:6c:28:31:45:b6:78:e9:e4:6d:df:4b:5a:4b:54: 89:0d:1e:1f:b7:e6:ee:f1:f1:ad:a4:04:0f:f4:12: 11:29:cb:a0:9b:c7:5b:be:e8:50:aa:c8:6b:2a:c2: e0:80:44:f7:29:84:f8:6a:0c:58:9c:0a:49:b9:64: 16:87:47:0a:ca:15:c7:52:ef:b0:86:61:f9:f4:86: 44:b0:1a:29:83:30:a5:54:82:4e:9a:4d:b6:e1:f4: 6b:80:e0:93:4e:bf:a0:8c:c2:9d:f8:e7:c5:b8:7a: bd:87:2c:76:66:54:36:80:cd:4d:bf:38:2c:c2:7f: 21:7a:3c:21:07:6b:f9:96:e2:f5:ea:af:91:f9:95: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D9:7C:29:8A:FC:EE:48:59:8E:10:13:98:B6:3D:33:C1:FB:1D:1B X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3f:99:cd:53:64:6e:eb:1b:57:e7:46:7b:28:ec:db:44:a5: ce:22:09:aa:d9:00:9e:33:2f:4f:bc:6f:31:1a:09:af:0c:b9: fd:d7:4f:a5:51:ef:1e:08:d4:d9:c5:2b:64:42:e9:06:ec:8d: 59:33:26:a7:3c:70:55:4d:a5:e5:e7:46:89:ea:0b:79:b1:3b: c0:bf:e8:e5:5c:49:1a:3d:06:59:40:64:cd:10:e3:08:57:9b: 8f:9d:1b:71:53:ad:30:e7:71:32:59:13:1a:2a:92:9e:a0:57: 7c:89:a0:cf:6e:8f:60:24:ec:80:46:00:4c:cb:83:9e:c6:14: 33:83:d1:56:26:b6:a0:d4:ab:39:08:28:1d:00:fb:35:4b:cf: 01:72:4e:2d:a0:76:54:20:6c:29:b4:91:ef:3a:b1:1a:f5:dc: 4c:8b:50:1f:cd:2a:28:8d:7b:fd:d2:cf:5d:ed:40:0a:31:6c: 56:bc:c8:a9:91:20:7d:a8:35:35:23:92:59:e4:a3:d3:21:e4: a6:a1:88:9f:fe:3c:ec:fb:d8:3b:ba:0f:cc:eb:3d:13:02:26: 9c:98:79:8a:ad:82:fd:5b:be:ab:cc:c2:72:3b:d5:eb:fd:ea: 04:ae:62:01:7e:e0:79:35:48:8e:f5:79:12:5a:02:51:ec:4b: 59:bc:51:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQMmKFtt1GFGB7eX5hQFhePhfBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNTA2MDYwNTI3MjFaFw0yNTA2MDkwOTAxMjFaMDMxMTAvBgNV BAMTKDFERDk3QzI5OEFGQ0VFNDg1OThFMTAxMzk4QjYzRDMzQzFGQjFEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohfLGLEaKzWOKCJW32AuEQEpj rUpy4viZBBGwMl/wB1sIysnAUeCmOdzpMNBRg4tc7mwWCcvZIU4wF2hS5cXBjoYl R5kXlZlrfuVdTFdge6jy/g7CzzJq923qtsVITNQ+gSC+gR24S8X/cSvDvkXeCqtd Qce4+y5sKDFFtnjp5G3fS1pLVIkNHh+35u7x8a2kBA/0EhEpy6Cbx1u+6FCqyGsq wuCARPcphPhqDFicCkm5ZBaHRwrKFcdS77CGYfn0hkSwGimDMKVUgk6aTbbh9GuA 4JNOv6CMwp3458W4er2HLHZmVDaAzU2/OCzCfyF6PCEHa/mW4vXqr5H5lZVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdl8KYr87khZjhATmLY9M8H7HRswHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc/mc1TZG7rG1fnRnso7NtEpc4iCarZAJ4z L0+8bzEaCa8Muf3XT6VR7x4I1NnFK2RC6QbsjVkzJqc8cFVNpeXnRonqC3mxO8C/ 6OVcSRo9BllAZM0Q4whXm4+dG3FTrTDncTJZExoqkp6gV3yJoM9uj2Ak7IBGAEzL g57GFDOD0VYmtqDUqzkIKB0A+zVLzwFyTi2gdlQgbCm0ke86sRr13EyLUB/NKiiN e/3Sz13tQAoxbFa8yKmRIH2oNTUjklnko9Mh5KahiJ/+POz72Du6D8zrPRMCJpyY eYqtgv1bvqvMwnI71ev96gSuYgF+4Hk1SI71eRJaAlHsS1m8UX8= -----END CERTIFICATE-----Generated at Fri Jun 6 17:11:56 2025 by rpki-client