$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: 4Lv8Q307jrY3ZdZxc2fBzsUX4579yamKhcaVwP1lsBg= Subject key identifier: 0E:4B:D8:88:48:D0:77:6C:CF:BE:90:C4:76:1C:9D:5A:F2:5B:DD:A7 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 555E9CED15D7D0F490411B0C7E53C0862FFBF914 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 021A Signing time: Wed 03 Sep 2025 09:20:52 +0000 Manifest this update: Wed 03 Sep 2025 09:15:52 +0000 Manifest next update: Sat 06 Sep 2025 12:38:52 +0000 Files and hashes: 1: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: iDFjk9M2yszIs9SvWIgLI3eIvLt9pUM2f7TjOvE4PGA=) 2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) 3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 12:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5e:9c:ed:15:d7:d0:f4:90:41:1b:0c:7e:53:c0:86:2f:fb:f9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Sep 3 09:15:52 2025 GMT Not After : Sep 6 12:38:52 2025 GMT Subject: CN=0E4BD88848D0776CCFBE90C4761C9D5AF25BDDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:c9:31:d6:1b:a5:31:9e:3d:4d:cd:6a:89: 8b:d0:a0:ce:e7:74:98:21:cc:df:4e:25:c4:d0:1b: c7:53:25:d1:16:dc:78:58:fe:f1:2c:b0:89:7f:8a: 39:c6:72:50:b3:e9:5a:9c:bc:c5:7f:9d:b6:52:fd: 9e:8f:ba:50:2a:44:a0:99:52:da:32:4b:f6:36:d2: 07:e2:79:2a:4c:a3:38:13:85:13:cf:26:d7:1f:81: 28:09:26:7e:89:3c:ef:0d:99:48:68:2c:b7:c2:35: b9:52:e0:69:d8:b8:4f:cb:15:fa:ac:c9:e2:4b:ee: ed:b9:b3:40:f0:0f:47:e9:23:eb:c9:f3:c1:a8:c8: cb:43:08:14:8d:9f:95:35:9c:ba:65:cb:ed:49:9e: 4f:aa:1c:4c:62:62:f4:cc:03:6c:12:92:41:7a:c2: b5:15:d9:f9:ab:58:3d:dd:bb:2f:ee:72:69:47:6f: eb:e5:0e:cd:da:38:0e:16:7c:0d:e7:43:ea:c3:99: 17:1a:8a:76:3e:ba:a3:e7:a1:5f:fb:e5:2c:da:58: 94:e6:df:75:59:4b:aa:9d:88:a2:61:44:a0:4d:17: 23:ab:5e:fc:3a:34:8c:0f:08:9e:a1:e3:09:6b:3f: b0:36:df:a7:18:05:81:ba:f6:ca:a7:b4:a7:e2:8e: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4B:D8:88:48:D0:77:6C:CF:BE:90:C4:76:1C:9D:5A:F2:5B:DD:A7 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:11:da:2d:29:2a:75:6f:06:97:00:47:13:ac:f5:42:80:ce: 29:b9:30:75:13:1d:24:22:2b:48:e8:e4:8a:ae:d7:7b:68:2b: 4f:ec:10:35:d4:95:96:58:06:d0:7b:d4:23:82:1d:73:d2:0b: 8a:ff:c2:db:82:28:57:41:c9:d0:69:79:89:91:fa:1c:05:0a: 68:e5:d0:c8:de:cc:68:00:37:b1:1a:bb:a6:40:2f:09:c0:d9: 77:77:76:89:59:be:fb:20:de:9a:48:68:8c:98:e6:70:6d:29: c9:6d:32:6c:9b:9e:95:3e:07:1b:ef:e8:5a:63:bc:a5:58:27: 56:64:ff:c2:aa:f4:9f:c7:33:b6:aa:b4:a0:67:e8:a9:01:03: 86:68:8c:b8:c5:eb:2f:27:db:d7:e3:db:7b:0a:01:3f:27:74: 89:44:ea:cc:28:b6:9f:36:f5:24:10:80:a5:1e:a2:52:bd:56: 3a:31:07:46:d4:5a:cc:4a:a2:a1:12:b0:4b:9f:07:33:8e:09: 2b:30:b5:41:5f:eb:77:0d:0e:1c:96:fe:0f:bf:c3:c7:fc:94: c1:9b:32:53:99:1a:b6:73:0b:36:b0:11:2f:a0:8c:34:61:c6: 19:0d:2b:c9:4f:d6:cf:ee:f5:63:6c:85:d1:72:2f:12:d3:2a: 2b:e8:f1:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVV6c7RXX0PSQQRsMflPAhi/7+RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTA5MDMwOTE1NTJaFw0yNTA5MDYxMjM4NTJaMDMxMTAvBgNV BAMTKDBFNEJEODg4NDhEMDc3NkNDRkJFOTBDNDc2MUM5RDVBRjI1QkREQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+8kx1hulMZ49Tc1qiYvQoM7n dJghzN9OJcTQG8dTJdEW3HhY/vEssIl/ijnGclCz6VqcvMV/nbZS/Z6PulAqRKCZ UtoyS/Y20gfieSpMozgThRPPJtcfgSgJJn6JPO8NmUhoLLfCNblS4GnYuE/LFfqs yeJL7u25s0DwD0fpI+vJ88GoyMtDCBSNn5U1nLply+1Jnk+qHExiYvTMA2wSkkF6 wrUV2fmrWD3duy/ucmlHb+vlDs3aOA4WfA3nQ+rDmRcainY+uqPnoV/75SzaWJTm 33VZS6qdiKJhRKBNFyOrXvw6NIwPCJ6h4wlrP7A236cYBYG69sqntKfijp1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkvYiEjQd2zPvpDEdhydWvJb3acwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIR2i0pKnVvBpcARxOs9UKAzim5MHUTHSQi K0jo5Iqu13toK0/sEDXUlZZYBtB71COCHXPSC4r/wtuCKFdBydBpeYmR+hwFCmjl 0MjezGgAN7Eau6ZALwnA2Xd3dolZvvsg3ppIaIyY5nBtKcltMmybnpU+Bxvv6Fpj vKVYJ1Zk/8Kq9J/HM7aqtKBn6KkBA4ZojLjF6y8n29fj23sKAT8ndIlE6swotp82 9SQQgKUeolK9VjoxB0bUWsxKoqESsEufBzOOCSswtUFf63cNDhyW/g+/w8f8lMGb MlOZGrZzCzawES+gjDRhxhkNK8lP1s/u9WNshdFyLxLTKivo8bI= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:49 2025 by rpki-client