$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: wX7MkFC2SzmOzAcfHY3lMvr9riZWAVIQYpGz3SoHxZs= Subject key identifier: E3:FC:69:77:4B:4A:89:DE:3D:EA:E5:68:25:17:0E:92:CB:88:E2:B5 Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 5304192E7694575B3639B9C24024355809E4195B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 0292 Signing time: Sat 06 Sep 2025 10:30:47 +0000 Manifest this update: Sat 06 Sep 2025 10:25:47 +0000 Manifest next update: Tue 09 Sep 2025 15:52:47 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: qS95pV6CQs0uik/caH9sSslW3R2gqECA0REzAyKr+po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:04:19:2e:76:94:57:5b:36:39:b9:c2:40:24:35:58:09:e4:19:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: Sep 6 10:25:47 2025 GMT Not After : Sep 9 15:52:47 2025 GMT Subject: CN=E3FC69774B4A89DE3DEAE56825170E92CB88E2B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:07:76:c1:aa:e4:98:fd:6d:e6:88:41:aa: ba:70:52:e4:3e:00:86:42:42:07:67:ac:ee:50:86: 76:2b:18:de:06:a5:f5:b0:92:ff:7b:7c:96:36:d1: 9f:07:14:6a:7c:7f:c8:a2:54:73:32:c4:4e:0b:d7: e7:0a:23:7c:d7:1c:1b:05:8a:80:a5:9e:9f:34:32: 03:6f:ed:a9:3c:c8:8f:6a:53:9a:47:6a:e1:b5:ff: 50:40:99:b8:c5:19:a7:6c:91:34:3e:7a:1d:24:87: 26:7c:fd:57:04:62:f5:f0:0e:68:47:16:46:b8:cd: 1d:d0:f8:76:55:51:26:f9:ad:70:32:9e:c5:33:59: dd:f9:ba:b2:37:68:1e:d2:ef:3a:69:34:08:06:b5: 11:e1:8e:63:a9:4f:65:38:92:d9:7f:74:fe:02:db: a3:9c:8f:8e:3e:a9:31:7c:3d:6d:cf:c3:39:57:3d: 89:c9:4c:c4:72:8f:b1:5c:0d:c9:6e:62:7e:61:4c: fa:85:82:bc:13:d1:a4:27:9f:51:58:a7:b5:5b:4d: 84:52:af:1d:4e:8e:44:d3:0b:ad:35:bf:6e:2d:45: e7:32:3b:57:19:72:f0:ec:f3:73:b8:c5:73:c7:7a: 46:69:8e:bf:b6:49:58:f3:9c:2a:e8:7c:61:1b:16: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FC:69:77:4B:4A:89:DE:3D:EA:E5:68:25:17:0E:92:CB:88:E2:B5 X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:40:ca:ea:ab:fc:58:36:96:07:00:b3:57:8b:76:1f:9d:f9: 8b:db:f8:a1:0d:f2:2b:fe:63:84:9d:28:85:0c:d8:aa:ac:56: 98:76:30:34:06:c4:32:10:8e:84:a6:8c:ae:b0:3e:ed:d3:a8: d2:c1:dc:95:60:24:b0:04:27:b8:de:f1:76:68:6e:9f:3d:a5: 55:e7:09:15:bb:25:3a:83:6d:a9:d0:55:a0:87:1d:79:38:51: 56:59:85:89:85:6c:e4:36:fe:52:d1:1e:06:e4:77:99:2f:c9: a2:32:89:70:89:12:d9:44:7c:6c:5c:da:0b:5c:ec:3f:73:27: 7c:a8:b4:b2:4b:78:d9:49:f8:e2:bd:86:ce:e2:8d:02:73:cd: 43:cb:30:01:85:ee:e1:df:59:76:92:50:8c:ae:80:84:02:11: 79:b0:00:be:d8:aa:53:ee:02:e1:c3:13:35:7b:89:06:f8:a7: 34:ce:22:47:41:73:14:0f:5a:f9:6b:b8:1a:11:07:95:1e:f3: e6:c2:d9:0e:c6:05:b2:16:f6:af:96:ab:62:c7:23:93:46:2c: 26:b1:f6:64:66:b8:4b:c6:49:df:a7:3a:fe:07:72:f7:07:23: e3:d3:ef:bb:6c:fb:5f:f0:bf:5c:00:ec:43:83:b6:ae:cb:94: 93:8f:11:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwQZLnaUV1s2ObnCQCQ1WAnkGVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNTA5MDYxMDI1NDdaFw0yNTA5MDkxNTUyNDdaMDMxMTAvBgNV BAMTKEUzRkM2OTc3NEI0QTg5REUzREVBRTU2ODI1MTcwRTkyQ0I4OEUyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkAd2warkmP1t5ohBqrpwUuQ+ AIZCQgdnrO5QhnYrGN4GpfWwkv97fJY20Z8HFGp8f8iiVHMyxE4L1+cKI3zXHBsF ioClnp80MgNv7ak8yI9qU5pHauG1/1BAmbjFGadskTQ+eh0khyZ8/VcEYvXwDmhH Fka4zR3Q+HZVUSb5rXAynsUzWd35urI3aB7S7zppNAgGtRHhjmOpT2U4ktl/dP4C 26Ocj44+qTF8PW3PwzlXPYnJTMRyj7FcDcluYn5hTPqFgrwT0aQnn1FYp7VbTYRS rx1OjkTTC601v24tRecyO1cZcvDs83O4xXPHekZpjr+2SVjznCrofGEbFtzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4/xpd0tKid496uVoJRcOksuI4rUwHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdAyuqr/Fg2lgcAs1eLdh+d+Yvb+KEN8iv+ Y4SdKIUM2KqsVph2MDQGxDIQjoSmjK6wPu3TqNLB3JVgJLAEJ7je8XZobp89pVXn CRW7JTqDbanQVaCHHXk4UVZZhYmFbOQ2/lLRHgbkd5kvyaIyiXCJEtlEfGxc2gtc 7D9zJ3yotLJLeNlJ+OK9hs7ijQJzzUPLMAGF7uHfWXaSUIyugIQCEXmwAL7YqlPu AuHDEzV7iQb4pzTOIkdBcxQPWvlruBoRB5Ue8+bC2Q7GBbIW9q+Wq2LHI5NGLCax 9mRmuEvGSd+nOv4HcvcHI+PT77ts+1/wv1wA7EODtq7LlJOPEaQ= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:27 2025 by rpki-client