$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: Uf+M3SU5TqMId/W/p6YOAJbFpfTQRVa4hkBJhUS1s8o= Subject key identifier: 0B:AF:A9:33:3D:55:5C:6A:18:77:26:1A:6F:CE:39:F9:99:10:EE:CD Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 5A3977F755CE12A3C6D2A313B42CEA3B29E43695 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 01F1 Signing time: Tue 03 Jun 2025 00:51:09 +0000 Manifest this update: Tue 03 Jun 2025 00:46:09 +0000 Manifest next update: Fri 06 Jun 2025 05:39:09 +0000 Files and hashes: 1: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) 2: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: +Hb4PPxE8Wr3WatvriXvSG6MSc5Z6g6X6KA5+6YUq74=) 3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 05:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:39:77:f7:55:ce:12:a3:c6:d2:a3:13:b4:2c:ea:3b:29:e4:36:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Jun 3 00:46:09 2025 GMT Not After : Jun 6 05:39:09 2025 GMT Subject: CN=0BAFA9333D555C6A1877261A6FCE39F99910EECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:52:0d:e8:08:0b:d7:08:cd:1a:25:a3:ef: 1f:fd:7a:01:80:10:ba:c5:e9:0d:0f:a4:5d:d6:a9: d4:a6:d7:78:e7:9e:cb:9b:56:af:cd:ad:82:62:52: a4:a2:bc:93:e5:70:9e:5d:55:42:ec:6f:1c:26:ca: 12:52:87:d6:f6:91:91:5d:45:28:2e:04:ea:f2:26: 66:0a:04:87:f5:ee:2d:9c:8f:7a:38:f7:d8:80:f8: cc:3b:2b:5a:53:30:0b:70:8c:95:ee:b3:c6:c1:22: 47:d3:96:ba:76:8a:e7:49:ca:4c:7d:68:84:66:68: de:e2:0a:c3:1b:59:da:7a:e8:bc:28:78:b5:93:14: 9b:09:43:32:14:f5:e8:ec:eb:4d:86:c3:57:5f:55: 3a:00:b1:5b:e4:19:9d:b2:72:41:4f:11:46:79:52: 3f:73:68:33:15:68:4e:ca:e8:a2:68:14:28:f3:cd: 7d:62:d5:8b:34:21:5f:32:39:39:35:f0:fb:b3:5f: 9b:f3:5b:81:9c:e0:ce:c6:71:fa:d0:7e:e0:72:01: 4d:ee:db:cc:08:19:3f:9a:82:cc:e5:3a:e4:f8:7a: 4f:da:70:31:05:6e:d0:2e:0e:e0:fa:e2:fa:9e:c5: 8b:71:5e:06:23:87:12:4b:92:e3:b9:93:ce:83:b6: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AF:A9:33:3D:55:5C:6A:18:77:26:1A:6F:CE:39:F9:99:10:EE:CD X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:74:ff:40:fd:c2:27:76:a1:9a:c5:dd:35:fa:a8:2f:31:a8: 52:55:ae:1e:e0:94:c2:62:62:60:63:e7:d5:a1:38:c5:67:2d: 26:51:12:68:ce:52:73:ed:e2:57:9c:d2:9b:f4:27:77:25:e6: c8:c4:90:f7:14:b7:ba:22:f6:14:6f:90:40:3f:e0:98:e8:a4: 6f:78:64:e9:07:13:55:d3:2c:cf:db:31:c2:34:42:ee:5e:21: 06:cb:f6:ad:95:2d:62:9d:57:9b:14:6f:64:01:7a:e8:39:38: d6:81:80:58:d5:ea:44:ee:1f:46:b6:5b:7c:5b:98:fa:50:6a: c3:d0:17:cc:e5:c6:2d:cd:95:a5:35:db:83:cb:a5:34:45:15: 09:b9:92:aa:03:6b:a0:94:d6:d5:19:1c:5d:d8:4a:b6:27:38: b5:68:20:54:85:34:64:4e:a2:95:18:e6:9a:be:ca:6f:14:37: 8b:a3:f0:d2:46:1e:70:c3:a4:5f:35:ef:6b:bb:a9:c6:bd:48: 28:18:98:cb:d9:6e:74:34:5f:51:2b:ff:66:b8:3f:13:7c:e5: 89:5b:d9:00:7d:07:04:87:f7:ea:e7:8d:d1:37:4a:80:e0:2d: 67:c7:52:27:df:3e:d5:e6:0b:8d:8f:e4:d2:f1:41:4b:8f:c7: 27:96:9c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjl391XOEqPG0qMTtCzqOynkNpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTA2MDMwMDQ2MDlaFw0yNTA2MDYwNTM5MDlaMDMxMTAvBgNV BAMTKDBCQUZBOTMzM0Q1NTVDNkExODc3MjYxQTZGQ0UzOUY5OTkxMEVFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2FIN6AgL1wjNGiWj7x/9egGA ELrF6Q0PpF3WqdSm13jnnsubVq/NrYJiUqSivJPlcJ5dVULsbxwmyhJSh9b2kZFd RSguBOryJmYKBIf17i2cj3o499iA+Mw7K1pTMAtwjJXus8bBIkfTlrp2iudJykx9 aIRmaN7iCsMbWdp66LwoeLWTFJsJQzIU9ejs602Gw1dfVToAsVvkGZ2yckFPEUZ5 Uj9zaDMVaE7K6KJoFCjzzX1i1Ys0IV8yOTk18PuzX5vzW4Gc4M7GcfrQfuByAU3u 28wIGT+agszlOuT4ek/acDEFbtAuDuD64vqexYtxXgYjhxJLkuO5k86DtiizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC6+pMz1VXGoYdyYab845+ZkQ7s0wHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHl0/0D9wid2oZrF3TX6qC8xqFJVrh7glMJi YmBj59WhOMVnLSZREmjOUnPt4lec0pv0J3cl5sjEkPcUt7oi9hRvkEA/4JjopG94 ZOkHE1XTLM/bMcI0Qu5eIQbL9q2VLWKdV5sUb2QBeug5ONaBgFjV6kTuH0a2W3xb mPpQasPQF8zlxi3NlaU124PLpTRFFQm5kqoDa6CU1tUZHF3YSrYnOLVoIFSFNGRO opUY5pq+ym8UN4uj8NJGHnDDpF8172u7qca9SCgYmMvZbnQ0X1Er/2a4PxN85Ylb 2QB9BwSH9+rnjdE3SoDgLWfHUiffPtXmC42P5NLxQUuPxyeWnCU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:37:27 2025 by rpki-client