$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: OAl6jfiSiHYZ0AJFCkucMp5BPClrFvcIq0yM1oAmVT8= Subject key identifier: 38:51:1A:A1:69:62:59:B6:FA:58:44:94:D8:E3:E5:FD:8B:94:C3:C6 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 726803DF376477E5A31F9B9559471AD5C6935252 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0276 Signing time: Mon 23 Mar 2026 21:41:06 +0000 Manifest this update: Mon 23 Mar 2026 21:36:06 +0000 Manifest next update: Thu 26 Mar 2026 23:32:06 +0000 Files and hashes: 1: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: xHmvrCIKYlLL6B1cyru2GOJq1DNjS7bmnhh5pq2Bt6U=) 2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: Nc/rGbjilKhDUINae4y6wIX+B0v7DnEiiCYl62dNR3U=) 3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: 78O1ueVQuFfOoEIhy2/u3I+vzcB/NPyQz3uKyD8I2xQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 23:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:68:03:df:37:64:77:e5:a3:1f:9b:95:59:47:1a:d5:c6:93:52:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Mar 23 21:36:06 2026 GMT Not After : Mar 26 23:32:06 2026 GMT Subject: CN=38511AA1696259B6FA584494D8E3E5FD8B94C3C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:73:85:f4:a3:d2:70:e7:d2:f9:71:76:88: ae:c7:61:65:3a:ae:fd:f8:f8:2b:d2:47:69:a1:df: b3:aa:3d:2e:88:0c:fa:f1:79:21:d5:26:44:11:96: 39:5b:b2:44:ea:c1:3f:6b:0d:b7:8d:17:1a:fc:64: 1e:49:94:ad:7d:bf:7e:c7:13:ee:20:56:3b:86:ed: 2c:6b:18:da:4d:40:06:c0:94:d2:0c:cf:5d:5d:24: 64:9e:57:0e:16:f8:c7:9c:b9:62:37:a1:5a:f6:fe: 83:95:28:f1:92:fc:cc:b7:c6:1d:ac:49:64:9a:8b: 35:61:e2:93:e6:c2:08:e4:be:1e:b2:20:28:d9:da: 07:43:ee:76:ad:d3:7e:8e:59:49:0a:ec:01:9a:41: 46:94:38:59:cf:73:e6:d8:bc:75:5b:ad:23:d5:ab: aa:92:ca:19:dc:24:d6:02:d6:cf:ad:08:21:28:2a: 56:df:f2:46:dd:74:9c:da:fd:b7:8a:41:8a:21:0e: b6:1f:87:85:a6:90:eb:85:b1:ad:3b:77:a3:4d:15: 82:ac:45:f7:04:bc:50:c5:34:50:7a:ad:f5:43:ce: 91:3b:9f:01:4f:19:42:f2:a2:a8:27:24:01:75:2a: 1c:89:66:39:4d:f8:0e:16:2d:45:75:36:93:1f:9b: 01:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:1A:A1:69:62:59:B6:FA:58:44:94:D8:E3:E5:FD:8B:94:C3:C6 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:30:fc:ac:82:08:65:40:07:68:df:09:6c:1b:2d:0a:bb:78: 5d:c6:51:41:c8:d9:b7:95:0a:1c:23:16:bf:10:07:df:72:1b: 51:96:64:40:0b:ad:a6:06:71:a1:9b:5b:f1:64:11:ab:a3:14: 83:c1:0c:03:af:58:46:67:e5:b2:af:51:02:11:63:d3:1b:31: d2:ac:08:a9:d2:43:33:67:27:53:45:43:7f:ac:4c:3b:ad:7b: 82:70:44:1e:27:37:3f:59:62:6d:c0:cd:8d:27:11:f0:83:e1: 86:1e:e1:a8:c8:06:4f:e7:d7:60:35:83:01:f0:98:9f:9c:f6: b2:94:a3:6c:29:ce:b5:85:11:11:62:24:17:58:aa:94:f2:d5: 95:01:2c:64:63:8e:01:53:99:88:34:df:2d:b2:8e:89:7d:4d: fb:10:59:35:b5:b7:2b:3b:52:41:d7:f8:2d:1a:b9:9b:e3:59: e3:49:aa:1a:d1:e5:4b:c8:a7:a5:8a:bf:f5:99:30:5e:d4:d7: 52:4a:48:23:92:82:56:23:37:56:ea:01:18:8a:de:5b:6b:bc: 95:be:9c:69:fa:3a:29:e8:d4:65:8f:b7:ff:56:bf:93:6b:c1: 40:3f:53:8b:c0:04:34:37:57:64:71:50:d5:13:c6:b1:c2:01: ac:8d:97:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmgD3zdkd+WjH5uVWUca1caTUlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNjAzMjMyMTM2MDZaFw0yNjAzMjYyMzMyMDZaMDMxMTAvBgNV BAMTKDM4NTExQUExNjk2MjU5QjZGQTU4NDQ5NEQ4RTNFNUZEOEI5NEMzQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrnOF9KPScOfS+XF2iK7HYWU6 rv34+CvSR2mh37OqPS6IDPrxeSHVJkQRljlbskTqwT9rDbeNFxr8ZB5JlK19v37H E+4gVjuG7SxrGNpNQAbAlNIMz11dJGSeVw4W+MecuWI3oVr2/oOVKPGS/My3xh2s SWSaizVh4pPmwgjkvh6yICjZ2gdD7nat036OWUkK7AGaQUaUOFnPc+bYvHVbrSPV q6qSyhncJNYC1s+tCCEoKlbf8kbddJza/beKQYohDrYfh4WmkOuFsa07d6NNFYKs RfcEvFDFNFB6rfVDzpE7nwFPGULyoqgnJAF1KhyJZjlN+A4WLUV1NpMfmwEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOFEaoWliWbb6WESU2OPl/YuUw8YwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUw/KyCCGVAB2jfCWwbLQq7eF3GUUHI2beV ChwjFr8QB99yG1GWZEALraYGcaGbW/FkEaujFIPBDAOvWEZn5bKvUQIRY9MbMdKs CKnSQzNnJ1NFQ3+sTDute4JwRB4nNz9ZYm3AzY0nEfCD4YYe4ajIBk/n12A1gwHw mJ+c9rKUo2wpzrWFERFiJBdYqpTy1ZUBLGRjjgFTmYg03y2yjol9TfsQWTW1tys7 UkHX+C0auZvjWeNJqhrR5UvIp6WKv/WZMF7U11JKSCOSglYjN1bqARiK3ltrvJW+ nGn6Oino1GWPt/9Wv5NrwUA/U4vABDQ3V2RxUNUTxrHCAayNl0E= -----END CERTIFICATE-----Generated at Tue Mar 24 12:27:23 2026 by rpki-client