$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: edCv8i5wc1pHK5UPZbVg2TknbfvxTdalpCLdOCJ5sYU= Subject key identifier: 4F:EB:03:E1:30:89:33:DA:C3:D9:7D:51:47:A4:DF:D7:5D:2A:43:28 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 55DED54EB7A59A9139077D55CFB05E84EF7D512C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0232 Signing time: Mon 27 Oct 2025 04:00:52 +0000 Manifest this update: Mon 27 Oct 2025 03:55:52 +0000 Manifest next update: Thu 30 Oct 2025 11:05:52 +0000 Files and hashes: 1: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: KC6BjIR+vukppo4ACySCcD23Vgt1gJtMJK90PpRqzMc=) 2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) 3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 10:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:de:d5:4e:b7:a5:9a:91:39:07:7d:55:cf:b0:5e:84:ef:7d:51:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Oct 27 03:55:52 2025 GMT Not After : Oct 30 11:05:52 2025 GMT Subject: CN=4FEB03E1308933DAC3D97D5147A4DFD75D2A4328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:b4:4d:14:18:93:b5:65:d5:be:e1:e7:a2: 0b:80:94:68:3a:ca:1f:82:a2:7a:9f:85:68:cd:c7: 54:22:7a:96:6f:53:1d:b4:cb:4a:96:b6:5d:72:b7: e4:58:72:75:d9:4a:05:e2:28:dd:03:21:09:3e:36: 27:fd:d8:cd:7a:b7:db:6b:1c:5f:6c:98:2a:fc:04: fe:10:1a:d0:e5:db:10:c0:35:fc:e3:91:35:3e:6b: 65:62:9e:af:87:71:ec:22:8a:04:9f:ff:ed:7a:a6: 34:ab:51:99:43:b0:5f:d6:17:40:43:f1:c6:e3:93: 9c:db:99:e8:bd:51:59:21:ad:5f:70:03:ba:d7:3c: 03:34:9c:67:a0:59:97:7e:7c:3d:a3:47:4e:22:c7: 18:0d:95:c8:3b:ee:86:ad:40:ce:25:98:89:ae:46: 39:94:cf:d3:48:34:d1:02:69:c7:45:04:10:00:5a: 2b:0d:1f:df:0d:37:d3:f4:29:0f:e7:25:1f:4f:56: 15:a2:09:65:5e:aa:8a:7c:e2:ee:b9:5a:b6:02:74: bb:48:22:00:1a:e2:66:7c:25:0f:ef:d8:d2:6c:00: 87:55:5d:76:f7:30:52:88:94:5a:0b:fc:2c:f5:4d: 17:74:43:a7:4c:27:1d:d6:af:2a:e2:92:84:ef:1b: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EB:03:E1:30:89:33:DA:C3:D9:7D:51:47:A4:DF:D7:5D:2A:43:28 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:58:a6:23:59:de:e1:98:d6:06:ba:3e:df:48:75:fa:c1:ca: e1:94:fb:78:30:b2:ea:c1:f2:07:e9:02:57:fc:f5:2c:73:62: 52:86:05:f3:d5:c7:11:b8:7c:4b:dd:e5:97:99:dc:4d:d4:69: c6:fd:66:1a:36:12:77:39:bb:15:5b:b6:74:5a:54:b1:f2:24: 1f:f7:87:0a:7b:c2:af:46:fc:13:86:02:78:74:13:cd:71:c8: 75:33:f2:ce:1f:67:2c:17:c5:d5:6f:09:45:ee:19:cf:43:a9: ec:42:30:50:67:89:11:9f:14:3a:f8:00:8e:8e:15:b8:93:30: 84:db:25:7e:f0:d0:d2:ae:bf:80:4c:74:ad:92:df:3b:04:4c: e7:97:ef:13:8e:6a:48:42:f7:d4:10:57:2a:9b:6d:28:5a:7c: d1:5c:13:78:13:be:5a:65:61:6d:2e:ae:0e:de:07:6f:d2:aa: 62:4e:d8:50:cf:fd:82:c4:4c:78:4b:6f:0a:66:76:ba:47:a6: 3d:95:bd:f2:0a:42:49:7d:2a:79:e1:25:ad:0c:93:7f:65:ff: 40:ba:ba:46:88:31:51:a3:69:c8:84:2b:e0:5e:a6:05:3e:10: 86:9d:0e:87:01:13:14:ed:55:7b:63:fb:14:c4:eb:81:09:6e: 1b:1d:d2:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVd7VTrelmpE5B31Vz7BehO99USwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTEwMjcwMzU1NTJaFw0yNTEwMzAxMTA1NTJaMDMxMTAvBgNV BAMTKDRGRUIwM0UxMzA4OTMzREFDM0Q5N0Q1MTQ3QTRERkQ3NUQyQTQzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxrRNFBiTtWXVvuHnoguAlGg6 yh+ConqfhWjNx1QiepZvUx20y0qWtl1yt+RYcnXZSgXiKN0DIQk+Nif92M16t9tr HF9smCr8BP4QGtDl2xDANfzjkTU+a2Vinq+HcewiigSf/+16pjSrUZlDsF/WF0BD 8cbjk5zbmei9UVkhrV9wA7rXPAM0nGegWZd+fD2jR04ixxgNlcg77oatQM4lmImu RjmUz9NINNECacdFBBAAWisNH98NN9P0KQ/nJR9PVhWiCWVeqop84u65WrYCdLtI IgAa4mZ8JQ/v2NJsAIdVXXb3MFKIlFoL/Cz1TRd0Q6dMJx3WryrikoTvG1HPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT+sD4TCJM9rD2X1RR6Tf110qQygwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlYpiNZ3uGY1ga6Pt9IdfrByuGU+3gwsurB 8gfpAlf89SxzYlKGBfPVxxG4fEvd5ZeZ3E3Uacb9Zho2Enc5uxVbtnRaVLHyJB/3 hwp7wq9G/BOGAnh0E81xyHUz8s4fZywXxdVvCUXuGc9DqexCMFBniRGfFDr4AI6O FbiTMITbJX7w0NKuv4BMdK2S3zsETOeX7xOOakhC99QQVyqbbShafNFcE3gTvlpl YW0urg7eB2/SqmJO2FDP/YLETHhLbwpmdrpHpj2VvfIKQkl9KnnhJa0Mk39l/0C6 ukaIMVGjaciEK+BepgU+EIadDocBExTtVXtj+xTE64EJbhsd0gM= -----END CERTIFICATE-----Generated at Mon Oct 27 13:26:59 2025 by rpki-client