$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: /5/qM2tUVKKpKWeov/avkvhgPQ6UH4KzOOdhyITDfmM= Subject key identifier: 38:E1:F5:75:DE:4E:D2:CE:12:DD:35:8C:C7:A4:A3:22:79:B3:98:68 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 7FB80A290C92474076F06F4FE7F320A9164FB2C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0206 Signing time: Sun 20 Jul 2025 07:50:51 +0000 Manifest this update: Sun 20 Jul 2025 07:45:51 +0000 Manifest next update: Wed 23 Jul 2025 12:50:51 +0000 Files and hashes: 1: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: Tei2Jwzbl+TOXhs2TqZ+C7/NTyDSIYlF0XStxJE7QRQ=) 2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) 3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b8:0a:29:0c:92:47:40:76:f0:6f:4f:e7:f3:20:a9:16:4f:b2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Jul 20 07:45:51 2025 GMT Not After : Jul 23 12:50:51 2025 GMT Subject: CN=38E1F575DE4ED2CE12DD358CC7A4A32279B39868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:dc:36:1d:d3:44:68:ea:e1:71:3f:9d:02: de:8d:13:e1:5c:31:f3:0e:09:86:c0:8e:0b:ee:f8: c6:dc:b7:6e:37:d9:78:a3:68:76:44:72:a0:41:68: 35:ed:27:b1:07:e0:7d:51:eb:d4:2b:cb:34:cf:d5: 2e:14:b4:ba:95:f2:49:c0:30:9a:dc:9a:e0:a0:6c: 40:ec:35:f8:97:7e:d7:9b:52:9f:c1:25:07:44:db: 10:bf:2b:86:3e:fd:3f:31:d4:7d:7c:68:c4:37:61: cc:ea:5a:63:85:a9:7c:dd:a8:e1:7d:26:de:03:33: 64:3b:a7:33:0b:01:f0:29:7c:af:ab:9e:93:ab:15: 4b:51:87:af:65:80:92:5d:09:63:79:d0:2f:5b:1c: 18:56:2d:bc:f7:49:33:87:22:c2:3f:25:aa:bd:a5: 6b:96:fa:38:16:39:b7:28:87:00:93:a1:b5:21:c9: fc:31:8d:d1:21:51:03:29:22:56:18:60:59:af:d1: 4d:26:5f:1d:99:56:50:8a:59:5e:b0:45:42:25:c7: 0c:97:23:63:5d:87:05:5d:67:8c:cd:8a:13:5b:25: 98:e7:38:95:f3:b4:5b:66:fa:9d:60:9c:be:c4:42: e6:2f:51:7e:c1:e6:c8:06:17:6d:42:af:a9:e4:1c: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E1:F5:75:DE:4E:D2:CE:12:DD:35:8C:C7:A4:A3:22:79:B3:98:68 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:50:0d:b1:b3:ee:f3:1a:8e:ec:12:cb:14:2f:94:eb:2c:37: 83:4f:1b:c1:d3:c3:f1:3b:9a:61:2a:c0:5e:36:54:9b:b6:1d: 20:19:a0:24:77:cd:9b:e0:d5:94:f2:2c:bd:f8:de:05:ed:53: 38:b3:99:59:ab:52:d2:bb:2d:b0:4f:2f:b1:7d:be:2e:f0:8c: 37:9e:95:4d:6f:f3:13:d9:4b:03:f0:22:24:a4:d3:c0:80:a7: 8e:42:b5:33:d1:3d:ce:61:fe:dd:18:c9:f7:f2:61:b0:89:d5: d8:3e:e6:53:8f:19:49:14:0b:04:29:22:e4:2f:4f:e2:e4:47: b0:06:3b:ea:06:2a:5c:a8:50:9f:c7:2e:bf:0b:a9:d6:61:8e: ab:67:bd:07:18:9a:3d:4f:57:d2:dd:90:76:02:aa:9d:9c:7a: a9:7d:4c:9c:4b:bb:cb:af:f5:25:e3:c6:15:c7:55:7d:18:17: 25:71:63:96:0b:a4:f3:bf:cc:79:6e:61:d9:7b:71:d4:c1:cb: 58:0e:bd:cc:b6:61:c7:91:3c:0e:b5:b6:b9:79:06:99:4b:79: f3:cf:45:50:c0:db:7a:58:e5:5b:8b:05:f6:4e:4b:a4:88:a5: 33:ba:de:7b:fc:78:b8:98:87:6f:fb:32:57:82:e2:53:d6:23: e0:19:f5:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7gKKQySR0B28G9P5/MgqRZPssEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTA3MjAwNzQ1NTFaFw0yNTA3MjMxMjUwNTFaMDMxMTAvBgNV BAMTKDM4RTFGNTc1REU0RUQyQ0UxMkREMzU4Q0M3QTRBMzIyNzlCMzk4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZNw2HdNEaOrhcT+dAt6NE+Fc MfMOCYbAjgvu+Mbct2432XijaHZEcqBBaDXtJ7EH4H1R69QryzTP1S4UtLqV8knA MJrcmuCgbEDsNfiXftebUp/BJQdE2xC/K4Y+/T8x1H18aMQ3YczqWmOFqXzdqOF9 Jt4DM2Q7pzMLAfApfK+rnpOrFUtRh69lgJJdCWN50C9bHBhWLbz3STOHIsI/Jaq9 pWuW+jgWObcohwCTobUhyfwxjdEhUQMpIlYYYFmv0U0mXx2ZVlCKWV6wRUIlxwyX I2NdhwVdZ4zNihNbJZjnOJXztFtm+p1gnL7EQuYvUX7B5sgGF21Cr6nkHFEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOH1dd5O0s4S3TWMx6SjInmzmGgwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtQDbGz7vMajuwSyxQvlOssN4NPG8HTw/E7 mmEqwF42VJu2HSAZoCR3zZvg1ZTyLL343gXtUzizmVmrUtK7LbBPL7F9vi7wjDee lU1v8xPZSwPwIiSk08CAp45CtTPRPc5h/t0YyffyYbCJ1dg+5lOPGUkUCwQpIuQv T+LkR7AGO+oGKlyoUJ/HLr8LqdZhjqtnvQcYmj1PV9LdkHYCqp2ceql9TJxLu8uv 9SXjxhXHVX0YFyVxY5YLpPO/zHluYdl7cdTBy1gOvcy2YceRPA61trl5BplLefPP RVDA23pY5VuLBfZOS6SIpTO63nv8eLiYh2/7MleC4lPWI+AZ9bk= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:09 2025 by rpki-client