$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft File: 129285A478A166EE0B54DBCDA60771DA54C4F65F.mft (raw, json) Hash identifier: 0ASpYrcrOGJmuCDnoiomgD9PSRkPjQVfMp20H3ZM5KQ= Subject key identifier: EA:0B:C4:97:A0:7F:E1:2D:17:2B:36:21:26:BD:EA:F0:79:C7:86:D4 Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Certificate serial: 713B2E9DEFAD66A036CAC40131AFA9F0013F7C0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft Manifest number: 0525 Signing time: Sun 19 Oct 2025 19:20:37 +0000 Manifest this update: Sun 19 Oct 2025 19:15:37 +0000 Manifest next update: Thu 23 Oct 2025 06:11:37 +0000 Files and hashes: 1: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: IVCqBdFN38jWB6ahE4bcDTBKo48M7ALZxNEE15iGilE=) 2: 129285A478A166EE0B54DBCDA60771DA54C4F65F.crl (hash: preOMWQP47ymPn0RYaEdDMaOmwpnZBA5e9+nyjaL4Q8=) 3: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: Bb/OkwwJmJHe8/z9Qp5PTG+7pV0l1ZMHq6rEYToHVas=) 4: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: noI2jWxEeYAXqaAE/PBFmQAfbP3FU/DH8uqnt/6EwU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3b:2e:9d:ef:ad:66:a0:36:ca:c4:01:31:af:a9:f0:01:3f:7c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Validity Not Before: Oct 19 19:15:37 2025 GMT Not After : Oct 23 06:11:37 2025 GMT Subject: CN=EA0BC497A07FE12D172B362126BDEAF079C786D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:f9:f6:8f:91:37:53:4e:a7:01:10:f4:b4: 96:af:5a:25:ef:86:3d:af:ed:51:ac:77:c8:80:ea: 70:85:46:0e:2c:21:46:58:65:1b:64:e7:d6:44:53: 7e:31:06:56:aa:fc:86:7f:6d:49:73:aa:76:f9:b3: 3c:ee:d2:55:50:2b:ce:c1:d9:2e:58:17:23:43:1a: 6f:9c:ab:70:97:f0:d2:c6:97:cb:e1:ae:6e:dd:20: 79:d6:c1:c5:bd:67:76:86:71:7d:42:fe:31:1d:73: 1e:b0:66:ca:df:be:f2:d9:45:a0:58:85:ee:da:49: b9:3a:b7:e1:81:cc:4f:96:25:5b:b2:27:dc:f0:47: ac:ee:5d:90:6c:02:b1:9a:32:26:5c:4a:8e:ca:e4: 55:75:d1:e3:91:01:66:bb:63:22:76:07:5f:b7:6b: ef:c9:67:f9:13:68:98:9f:b0:f8:1f:82:e5:2c:7a: 27:0a:1c:7f:68:55:e1:f7:fd:a2:e2:83:ec:54:f8: 99:af:b1:08:aa:78:ec:74:04:fd:fa:2c:0f:11:72: 24:50:ec:73:21:8d:3f:fa:c7:ac:e6:d0:21:0d:ba: 21:42:e8:b5:d4:6b:42:51:b5:03:fe:ac:37:39:88: d0:07:ac:f9:a3:f4:f7:90:65:b7:92:bb:5a:3f:3d: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0B:C4:97:A0:7F:E1:2D:17:2B:36:21:26:BD:EA:F0:79:C7:86:D4 X509v3 Authority Key Identifier: keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4d:63:54:da:2c:64:12:76:9c:93:80:c6:b3:ce:40:df:2c: 65:c7:01:e1:c1:3c:b1:82:64:dd:44:f8:d0:5c:17:8b:3c:57: f9:dd:00:65:35:97:79:68:f1:c9:42:67:56:cd:93:a7:83:ca: 01:73:c3:4e:f3:b2:99:67:79:35:bd:a7:1d:4d:2a:01:a9:fe: 60:a9:8a:75:25:1c:93:32:5b:c0:3d:ea:55:ba:ca:e8:49:fd: 17:e2:8c:b9:cb:d9:21:ee:42:a6:a9:03:31:3a:b5:32:1d:dc: 51:1b:cf:a7:70:fd:60:79:83:62:9a:cc:0f:3a:b6:66:65:79: a7:d2:29:67:d1:f9:e3:64:9b:90:10:07:4a:e8:17:1a:85:3c: 14:8f:3e:62:f6:b7:9c:cf:36:38:9a:62:2b:43:b4:0c:2c:a9: be:7b:6d:97:ab:6a:b2:e6:9e:e9:d1:99:e4:fe:65:6b:ca:4b: 3a:1a:4e:28:18:20:b3:d3:30:11:5c:50:0b:40:0b:20:2c:2f: 05:1e:4c:03:53:4f:65:51:5b:b1:fb:8b:68:af:2b:1b:58:40: e1:2b:2d:58:11:8e:a8:bb:f7:4a:c3:9f:c6:24:fd:a4:e7:70: 70:84:ed:ca:2c:a0:27:f8:04:61:03:2b:4e:4a:53:20:6b:49: ca:df:d1:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTsune+tZqA2ysQBMa+p8AE/fA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1 NEM0RjY1RjAeFw0yNTEwMTkxOTE1MzdaFw0yNTEwMjMwNjExMzdaMDMxMTAvBgNV BAMTKEVBMEJDNDk3QTA3RkUxMkQxNzJCMzYyMTI2QkRFQUYwNzlDNzg2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+R/n2j5E3U06nARD0tJavWiXv hj2v7VGsd8iA6nCFRg4sIUZYZRtk59ZEU34xBlaq/IZ/bUlzqnb5szzu0lVQK87B 2S5YFyNDGm+cq3CX8NLGl8vhrm7dIHnWwcW9Z3aGcX1C/jEdcx6wZsrfvvLZRaBY he7aSbk6t+GBzE+WJVuyJ9zwR6zuXZBsArGaMiZcSo7K5FV10eORAWa7YyJ2B1+3 a+/JZ/kTaJifsPgfguUseicKHH9oVeH3/aLig+xU+JmvsQiqeOx0BP36LA8RciRQ 7HMhjT/6x6zm0CENuiFC6LXUa0JRtQP+rDc5iNAHrPmj9PeQZbeSu1o/PXsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gvEl6B/4S0XKzYhJr3q8HnHhtQwHwYDVR0j BBgwFoAUEpKFpHihZu4LVNvNpgdx2lTE9l8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC8xMjkyODVBNDc4 QTE2NkVFMEI1NERCQ0RBNjA3NzFEQTU0QzRGNjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1NEM0 RjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcx REE1NEM0RjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlNY1TaLGQSdpyTgMazzkDfLGXHAeHBPLGC ZN1E+NBcF4s8V/ndAGU1l3lo8clCZ1bNk6eDygFzw07zsplneTW9px1NKgGp/mCp inUlHJMyW8A96lW6yuhJ/RfijLnL2SHuQqapAzE6tTId3FEbz6dw/WB5g2KazA86 tmZleafSKWfR+eNkm5AQB0roFxqFPBSPPmL2t5zPNjiaYitDtAwsqb57bZerarLm nunRmeT+ZWvKSzoaTigYILPTMBFcUAtACyAsLwUeTANTT2VRW7H7i2ivKxtYQOEr LVgRjqi790rDn8Yk/aTncHCE7cosoCf4BGEDK05KUyBrScrf0RE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:27 2025 by rpki-client