$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: Br4HU6JlyL1JGcNqjxpBxHVavsOrgB3orCAo0Q+HNog= Subject key identifier: 6B:D6:2D:AB:6C:08:9C:F0:A7:23:A6:E5:7B:AC:40:BB:26:31:06:F5 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 5FDE508CC3C69811DF00B2B5CC7BA7ABE81A0D34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 37 Signing time: Sat 06 Sep 2025 22:50:58 +0000 Manifest this update: Sat 06 Sep 2025 22:45:58 +0000 Manifest next update: Wed 10 Sep 2025 06:34:58 +0000 Files and hashes: 1: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: 3wetidkcCavxQpjkiXbTz/VCnjcuje+VreUWREjQdgQ=) 2: 3130332e3134332e3132382e302f32342d3234203d3e20313437303837.roa (hash: zdExcLPsX+gsvz8qx5ZS4VyUIFTtdq1rZbCm2g2FEBA=) 3: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: btwCXZPken7sG2nzKPQGXCfL5mOTHVReJfHGJhcFTcU=) 4: 323430353a353163303a3a2f33322d3332203d3e20313339333933.roa (hash: xOhwGI2U+4AffMNiCyrvrejLk4Xi3+2L832MlZGbs+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:de:50:8c:c3:c6:98:11:df:00:b2:b5:cc:7b:a7:ab:e8:1a:0d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Sep 6 22:45:58 2025 GMT Not After : Sep 10 06:34:58 2025 GMT Subject: CN=6BD62DAB6C089CF0A723A6E57BAC40BB263106F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:91:cd:99:f2:d5:6c:8d:5b:9d:ef:f3:0c: bc:83:8e:7d:e7:fe:d4:43:79:bf:98:45:9c:c8:85: 57:64:34:06:f6:0d:08:c6:8b:ef:b3:6f:20:3c:45: 8f:ff:b5:56:06:87:dc:1e:c4:c6:d6:c2:90:10:41: 7b:f3:74:e0:4a:54:dc:ea:9c:01:67:98:60:e2:81: 8a:4a:d8:4c:7b:d1:51:ef:df:58:1a:9c:a0:fd:2b: 7e:69:e1:1f:05:14:02:6b:af:c7:79:d7:ab:c1:82: c7:ac:92:90:d5:d1:fd:44:2c:2d:b1:57:a5:af:2c: 84:63:70:28:86:cf:a6:9b:cb:96:df:55:3f:e6:33: e5:e3:62:a6:e3:e3:cd:f7:7d:75:ba:d6:f1:2b:02: 37:38:e0:2b:59:95:97:51:0e:78:a1:29:29:e7:08: 6e:7e:03:c5:78:00:00:51:21:9a:0d:d7:35:60:e0: 77:8a:87:00:96:09:35:eb:1e:e8:dd:16:cc:00:9b: 54:98:5b:2d:63:92:ca:75:9f:4e:c2:66:b1:98:bf: cb:c0:25:a0:2d:95:ef:9b:ef:1d:e8:d1:df:a4:d6: ec:db:62:10:8a:ba:1a:1c:1e:11:5d:99:87:9f:19: 35:74:53:d8:7f:69:5c:88:0f:90:24:93:a8:14:02: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D6:2D:AB:6C:08:9C:F0:A7:23:A6:E5:7B:AC:40:BB:26:31:06:F5 X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:9e:cc:21:81:a1:af:4f:c9:5b:39:f8:4c:10:99:d7:86:cc: 1d:3c:c5:f0:6c:a0:f5:35:62:94:76:5b:24:24:eb:32:e0:7f: f6:52:f6:4b:05:78:80:10:8f:2e:d5:38:8b:36:80:92:20:ac: dc:c3:41:fb:02:03:cb:2b:7e:ea:37:ab:ed:e9:43:82:5c:0e: e4:1d:4a:cf:a2:a0:e8:0d:4d:7b:d0:08:d6:5b:cd:54:01:8f: 5c:95:c6:7d:93:f5:07:57:64:ce:dc:00:6f:70:32:60:8a:dd: 64:3f:c0:64:38:67:3a:6f:c9:57:33:49:0d:45:86:5a:f6:a6: f6:77:05:ca:03:56:52:15:b2:4a:f9:a2:0b:53:09:7c:9f:45: 9b:e1:34:70:79:fe:3f:31:0b:2b:a1:15:b2:91:e7:0c:01:c0: 4f:e8:46:a7:ef:fd:c8:2f:6c:3c:69:9a:4a:56:cd:5b:46:51: 4a:78:c8:17:20:20:85:e1:63:8e:86:10:fc:59:3f:9c:91:f5: 66:68:d4:bc:f5:89:01:9e:5d:09:d6:74:3d:60:d5:49:9d:12: 54:eb:86:85:74:e9:76:21:1d:f8:c8:9e:f0:c9:04:96:e0:bb: e8:3d:f2:30:7d:d7:a6:dd:03:9f:78:10:89:ef:6f:b0:6e:87: 0d:69:63:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX95QjMPGmBHfALK1zHunq+gaDTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNTA5MDYyMjQ1NThaFw0yNTA5MTAwNjM0NThaMDMxMTAvBgNV BAMTKDZCRDYyREFCNkMwODlDRjBBNzIzQTZFNTdCQUM0MEJCMjYzMTA2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrJHNmfLVbI1bne/zDLyDjn3n /tRDeb+YRZzIhVdkNAb2DQjGi++zbyA8RY//tVYGh9wexMbWwpAQQXvzdOBKVNzq nAFnmGDigYpK2Ex70VHv31ganKD9K35p4R8FFAJrr8d516vBgseskpDV0f1ELC2x V6WvLIRjcCiGz6aby5bfVT/mM+XjYqbj4833fXW61vErAjc44CtZlZdRDnihKSnn CG5+A8V4AABRIZoN1zVg4HeKhwCWCTXrHujdFswAm1SYWy1jksp1n07CZrGYv8vA JaAtle+b7x3o0d+k1uzbYhCKuhocHhFdmYefGTV0U9h/aVyID5Akk6gUAky7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9Ytq2wInPCnI6ble6xAuyYxBvUwHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASezCGBoa9PyVs5+EwQmdeGzB08xfBsoPU1 YpR2WyQk6zLgf/ZS9ksFeIAQjy7VOIs2gJIgrNzDQfsCA8srfuo3q+3pQ4JcDuQd Ss+ioOgNTXvQCNZbzVQBj1yVxn2T9QdXZM7cAG9wMmCK3WQ/wGQ4ZzpvyVczSQ1F hlr2pvZ3BcoDVlIVskr5ogtTCXyfRZvhNHB5/j8xCyuhFbKR5wwBwE/oRqfv/cgv bDxpmkpWzVtGUUp4yBcgIIXhY46GEPxZP5yR9WZo1Lz1iQGeXQnWdD1g1UmdElTr hoV06XYhHfjInvDJBJbgu+g98jB916bdA594EInvb7Buhw1pY8g= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:49 2025 by rpki-client