$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: ubTKcwfswsRYwRbpm01GQG/mFC4Os9A1vhSXNJfejYc= Subject key identifier: CF:C9:9D:2F:14:F5:D5:F4:87:A0:96:16:45:CF:91:E9:DF:68:49:A3 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 7D2FDA5EADF8A739561924D12B897878E03234D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0277 Signing time: Wed 25 Mar 2026 23:41:03 +0000 Manifest this update: Wed 25 Mar 2026 23:36:03 +0000 Manifest next update: Sun 29 Mar 2026 11:35:03 +0000 Files and hashes: 1: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: BbUIVOAImrplv1PeQkYphNiajGoCv83+5IlTdu0wi90=) 2: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: 78O1ueVQuFfOoEIhy2/u3I+vzcB/NPyQz3uKyD8I2xQ=) 3: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: Nc/rGbjilKhDUINae4y6wIX+B0v7DnEiiCYl62dNR3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2f:da:5e:ad:f8:a7:39:56:19:24:d1:2b:89:78:78:e0:32:34:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Mar 25 23:36:03 2026 GMT Not After : Mar 29 11:35:03 2026 GMT Subject: CN=CFC99D2F14F5D5F487A0961645CF91E9DF6849A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:de:83:ab:2f:d9:2e:04:72:5f:d4:68:26: e4:67:b5:5e:a3:16:1b:69:1f:7f:5b:fb:e9:b0:ab: 7b:5c:0c:0c:5d:08:b3:fd:cb:37:21:30:08:18:e4: 74:62:ff:94:25:3b:f1:63:9c:91:10:27:67:77:dc: b2:36:27:89:78:d6:40:09:3b:0b:c4:86:ff:53:5b: 0c:b0:a3:9b:99:4a:0c:c0:8c:e8:a0:4f:9f:a2:cc: 48:97:d1:1c:99:35:49:f3:89:ef:6b:86:fc:3c:b0: 95:b8:64:6d:6e:79:cc:c5:19:ac:0e:b2:d4:af:ab: 16:10:77:dd:84:f4:be:c7:d1:2c:fd:36:e9:16:72: 5c:16:2b:aa:10:cc:25:24:40:51:38:3a:73:c7:be: f6:cf:3b:d3:de:fa:f6:41:45:c8:2c:ef:c0:c0:54: 1a:c4:19:27:f1:0c:b1:1f:88:42:95:81:2b:7e:4c: 03:a0:17:65:bb:6d:05:bd:c5:26:3e:fc:ae:cd:08: 45:bf:d4:3e:12:7e:a9:3a:5d:bc:b7:40:a6:af:7b: b9:b2:63:6d:f7:4c:0c:2e:bd:a5:40:a1:7d:49:7e: ee:7e:73:47:68:99:98:95:88:70:b8:07:70:79:5f: 25:e5:db:93:a9:eb:73:a9:98:85:9b:e6:4d:65:ba: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C9:9D:2F:14:F5:D5:F4:87:A0:96:16:45:CF:91:E9:DF:68:49:A3 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:99:eb:fa:d9:8a:b5:21:bb:1b:3c:7b:dd:83:97:14:be:29: 72:f7:76:dc:ff:8c:f5:c5:2c:bf:0a:50:8e:51:0e:be:28:2f: e8:e9:d7:9f:d3:02:c4:54:2f:c6:73:16:4f:1b:41:90:3f:45: 05:13:b8:bb:05:55:a7:d3:a5:3b:b8:39:47:e3:e3:fb:13:d5: 68:e2:ca:b7:81:98:c4:87:71:67:1e:14:92:51:73:f9:92:74: c1:37:48:3b:14:e4:4d:9a:f2:4c:70:fc:62:26:f3:f6:de:3a: 95:3d:33:9d:f6:03:bf:a7:a0:d8:7f:02:f9:c2:c3:b5:ff:79: 58:b0:89:dc:49:60:68:95:e2:d6:d3:a2:3c:41:74:f9:25:98: 8b:8c:59:8a:c7:61:0e:a3:4d:ff:a2:8b:09:55:2f:fe:e2:40: c2:ab:2d:ad:44:e2:bb:cd:5e:f3:48:fb:93:dc:cf:d4:ba:44: fe:38:2d:aa:72:2b:08:60:0d:50:17:c1:30:09:5f:d6:a2:da: 23:cd:54:a4:c6:28:a0:f9:48:82:f7:f2:79:c6:43:aa:0a:33: b2:62:4b:90:90:0a:64:51:83:d4:83:d3:d1:72:3f:22:53:1f: 22:d3:31:6a:eb:d8:d4:7d:0c:4b:8d:f9:55:45:9f:8f:2d:f1: 32:20:7e:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfS/aXq34pzlWGSTRK4l4eOAyNNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNjAzMjUyMzM2MDNaFw0yNjAzMjkxMTM1MDNaMDMxMTAvBgNV BAMTKENGQzk5RDJGMTRGNUQ1RjQ4N0EwOTYxNjQ1Q0Y5MUU5REY2ODQ5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwt6Dqy/ZLgRyX9RoJuRntV6j FhtpH39b++mwq3tcDAxdCLP9yzchMAgY5HRi/5QlO/FjnJEQJ2d33LI2J4l41kAJ OwvEhv9TWwywo5uZSgzAjOigT5+izEiX0RyZNUnzie9rhvw8sJW4ZG1ueczFGawO stSvqxYQd92E9L7H0Sz9NukWclwWK6oQzCUkQFE4OnPHvvbPO9Pe+vZBRcgs78DA VBrEGSfxDLEfiEKVgSt+TAOgF2W7bQW9xSY+/K7NCEW/1D4Sfqk6Xby3QKave7my Y233TAwuvaVAoX1Jfu5+c0domZiViHC4B3B5XyXl25Op63OpmIWb5k1lumMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz8mdLxT11fSHoJYWRc+R6d9oSaMwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2Z6/rZirUhuxs8e92DlxS+KXL3dtz/jPXF LL8KUI5RDr4oL+jp15/TAsRUL8ZzFk8bQZA/RQUTuLsFVafTpTu4OUfj4/sT1Wji yreBmMSHcWceFJJRc/mSdME3SDsU5E2a8kxw/GIm8/beOpU9M532A7+noNh/AvnC w7X/eViwidxJYGiV4tbTojxBdPklmIuMWYrHYQ6jTf+iiwlVL/7iQMKrLa1E4rvN XvNI+5Pcz9S6RP44LapyKwhgDVAXwTAJX9ai2iPNVKTGKKD5SIL38nnGQ6oKM7Ji S5CQCmRRg9SD09FyPyJTHyLTMWrr2NR9DEuN+VVFn48t8TIgfnA= -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:36 2026 by rpki-client