$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: RL80c3oCbOSaxtfL7EDo+vvibNYUjXsNbtqWtll5WiU= Subject key identifier: B5:EA:F9:34:B7:1A:35:AE:6D:81:C2:A2:C0:5A:95:F8:5A:95:B7:2D Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 557BF59471FD2BA28DAC8F553C915E7B8D936B8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 022F Signing time: Mon 20 Oct 2025 14:30:53 +0000 Manifest this update: Mon 20 Oct 2025 14:25:53 +0000 Manifest next update: Thu 23 Oct 2025 16:13:53 +0000 Files and hashes: 1: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) 2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) 3: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: ZqfzKwLTWLaMAOC+fJwxv99qhkfpUYCc3BmoY1G7yo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7b:f5:94:71:fd:2b:a2:8d:ac:8f:55:3c:91:5e:7b:8d:93:6b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Oct 20 14:25:53 2025 GMT Not After : Oct 23 16:13:53 2025 GMT Subject: CN=B5EAF934B71A35AE6D81C2A2C05A95F85A95B72D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:fa:a2:65:37:b5:a2:40:76:59:f5:7e:03: 08:37:09:03:59:6c:0b:6a:24:30:96:6d:f4:66:94: 4a:fc:f8:35:a7:6e:1f:a9:d6:a2:09:d3:0f:aa:e7: 8b:f9:ce:89:68:ba:5c:67:5d:3b:07:9d:11:af:0e: 4c:b8:d1:9d:bc:93:2c:b0:d1:b0:e6:12:ef:02:60: ec:13:68:9e:2e:a3:75:39:e3:c1:42:c9:0f:31:c0: d9:bf:20:38:ad:33:c2:c5:f5:89:99:ac:a4:fc:2b: 72:b3:e8:00:c8:13:08:49:f7:30:bd:03:7c:46:89: 38:d0:55:f3:e4:07:ca:cb:09:96:f4:ee:67:fb:98: 33:69:85:d2:f2:e5:1f:82:c8:cc:de:f0:62:b1:0d: ad:66:e0:c9:df:56:56:51:b6:ce:95:14:c6:b7:23: 57:bb:3f:98:9a:c0:26:9d:42:12:82:90:60:47:f9: d8:5d:24:48:2d:87:69:82:16:8a:0e:de:36:16:f9: 6f:3b:eb:c7:e1:20:38:81:b6:1f:9b:27:40:6f:f7: 27:b0:9d:08:e1:2e:c6:a6:55:cf:63:0d:27:e5:1a: 64:18:61:6d:6f:e8:a0:79:0c:79:8d:e2:6e:1d:00: 5a:b3:c6:13:46:68:a9:a7:a2:99:21:06:05:22:61: 29:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EA:F9:34:B7:1A:35:AE:6D:81:C2:A2:C0:5A:95:F8:5A:95:B7:2D X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:88:27:d7:f5:43:9a:03:20:71:56:17:81:27:81:d9:59:5e: 2e:37:4f:7e:86:af:40:e5:7f:2a:5d:8f:42:a8:2e:9b:b7:0f: 72:64:30:21:95:45:14:41:97:5d:42:06:1e:df:96:92:08:fb: 3d:7c:ef:33:ca:b8:a3:f4:0b:b6:b7:15:9f:22:ce:b7:a2:54: 54:60:b9:69:93:ff:34:2d:b5:ac:b8:4b:3a:a7:38:d9:9d:04: 6e:c6:20:1c:44:f7:c9:aa:7c:7d:89:29:33:44:c7:85:5c:9e: 95:84:b7:cf:60:dd:43:8d:99:f6:20:76:b4:d0:02:5a:6d:f8: 36:58:50:95:8a:65:55:b8:3d:dd:dd:54:f8:cd:6b:38:e2:30: d9:03:cd:ec:8f:f6:15:ad:35:6d:24:87:ce:b9:47:72:05:24: bb:08:dc:a4:90:af:f2:46:67:75:be:a0:66:ba:a4:dd:e2:c7: 59:53:89:42:cc:d9:dd:20:b6:8c:21:9a:24:60:96:87:29:7e: cd:ac:46:62:e4:02:6d:32:05:c5:ca:ad:f9:58:25:ce:85:37: c2:9b:ec:92:52:0e:d7:dd:7c:7d:29:d0:12:47:d1:ec:57:90: b8:41:b8:b4:13:14:45:af:4c:54:58:19:75:db:3b:c2:f2:80: f3:24:63:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXv1lHH9K6KNrI9VPJFee42Ta44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTEwMjAxNDI1NTNaFw0yNTEwMjMxNjEzNTNaMDMxMTAvBgNV BAMTKEI1RUFGOTM0QjcxQTM1QUU2RDgxQzJBMkMwNUE5NUY4NUE5NUI3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99PqiZTe1okB2WfV+Awg3CQNZ bAtqJDCWbfRmlEr8+DWnbh+p1qIJ0w+q54v5zoloulxnXTsHnRGvDky40Z28kyyw 0bDmEu8CYOwTaJ4uo3U548FCyQ8xwNm/IDitM8LF9YmZrKT8K3Kz6ADIEwhJ9zC9 A3xGiTjQVfPkB8rLCZb07mf7mDNphdLy5R+CyMze8GKxDa1m4MnfVlZRts6VFMa3 I1e7P5iawCadQhKCkGBH+dhdJEgth2mCFooO3jYW+W8768fhIDiBth+bJ0Bv9yew nQjhLsamVc9jDSflGmQYYW1v6KB5DHmN4m4dAFqzxhNGaKmnopkhBgUiYSmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUter5NLcaNa5tgcKiwFqV+FqVty0wHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGIJ9f1Q5oDIHFWF4EngdlZXi43T36Gr0Dl fypdj0KoLpu3D3JkMCGVRRRBl11CBh7flpII+z187zPKuKP0C7a3FZ8izreiVFRg uWmT/zQttay4SzqnONmdBG7GIBxE98mqfH2JKTNEx4VcnpWEt89g3UONmfYgdrTQ Alpt+DZYUJWKZVW4Pd3dVPjNazjiMNkDzeyP9hWtNW0kh865R3IFJLsI3KSQr/JG Z3W+oGa6pN3ix1lTiULM2d0gtowhmiRglocpfs2sRmLkAm0yBcXKrflYJc6FN8Kb 7JJSDtfdfH0p0BJH0exXkLhBuLQTFEWvTFRYGXXbO8LygPMkY3M= -----END CERTIFICATE-----Generated at Mon Oct 20 21:21:17 2025 by rpki-client