$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: kDiejajERAMNLXXRP8XbzP69IWOvuQDCcmRtL+6Rv+s= Subject key identifier: 9B:D5:18:31:68:3E:D4:87:D5:E8:E5:58:9D:67:79:8D:A5:C7:71:94 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 23B903704569B1E131136B408A53405C864CA44C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0235 Signing time: Sun 02 Nov 2025 23:30:54 +0000 Manifest this update: Sun 02 Nov 2025 23:25:54 +0000 Manifest next update: Thu 06 Nov 2025 09:30:54 +0000 Files and hashes: 1: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: MMuhm5et6fvaf6/6qAguX3m1YSAxPaF1cLSOMSfZ87w=) 2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) 3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b9:03:70:45:69:b1:e1:31:13:6b:40:8a:53:40:5c:86:4c:a4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Nov 2 23:25:54 2025 GMT Not After : Nov 6 09:30:54 2025 GMT Subject: CN=9BD51831683ED487D5E8E5589D67798DA5C77194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:75:e1:31:16:62:68:4d:9f:03:40:b3:a0: 0b:b5:38:01:82:e3:95:c9:27:20:47:9d:8a:04:3e: 6a:68:a8:dd:76:04:e2:1b:36:de:5e:33:82:cb:73: c9:c9:0b:4a:5f:1d:c2:b4:38:f1:27:f8:bd:a5:b3: 75:62:b8:02:2a:59:69:c8:77:28:e7:06:41:8d:ab: 49:0d:85:90:24:d9:6d:9f:99:58:5d:56:fe:be:54: 50:94:6e:7d:59:b5:22:1d:cc:5f:c9:b7:7d:e4:6c: 03:44:a3:05:60:9c:29:49:b4:4e:51:23:82:f8:68: dc:b7:4a:53:a0:30:5d:81:99:6b:19:a9:1e:97:a6: 75:1b:76:6b:5f:97:11:97:f8:50:3b:0d:d2:30:d1: 76:6c:66:74:0c:74:c4:ee:26:48:1f:e8:fc:ba:9b: 1b:1f:e4:f5:67:f2:6c:b7:79:64:d1:0e:27:ff:0c: a7:b7:51:54:7e:53:4c:5c:c4:4f:c1:93:d5:49:5c: 37:7e:0e:e2:c3:45:e5:70:33:e0:d4:ad:4a:95:84: 12:d4:11:c4:03:2e:a2:d4:6c:b3:53:4f:70:fe:b2: 7c:f0:13:15:63:6f:5a:b1:a9:fb:26:7e:d4:f3:59: 82:f2:b5:db:1e:e4:1d:54:90:ae:df:ab:40:81:37: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D5:18:31:68:3E:D4:87:D5:E8:E5:58:9D:67:79:8D:A5:C7:71:94 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f2:bf:68:2f:f7:c2:74:17:37:98:97:4d:56:a1:35:dd:9d: b2:21:6c:ba:e1:30:ea:c9:3b:0f:16:6f:4e:bb:21:d0:b5:89: 48:04:1d:bd:fc:eb:c5:bf:a8:d1:1d:0e:15:f5:ea:cf:4c:39: 69:4d:18:f9:76:66:bd:6d:2d:d9:26:a9:09:b8:4c:d2:e3:4e: 4e:09:67:6a:0a:f4:9e:e7:50:2f:5d:7c:d6:22:8b:ae:b6:88: 26:59:82:17:5c:65:30:3e:bc:a8:74:2f:61:98:23:4f:3c:12: d2:a3:09:4a:36:ea:f8:3e:be:5d:6c:4d:74:d1:f3:16:5a:cc: 62:59:f8:ca:4f:d3:61:03:25:14:de:9f:b9:5a:67:9a:56:c2: 83:6a:dd:fd:e8:5f:4d:dc:42:a4:db:01:7e:4d:7a:2f:a4:0d: 1f:b4:f3:ba:cd:15:9b:b7:46:63:52:b2:67:cd:2b:98:4f:8a: df:ca:80:48:e5:7d:b4:b1:d7:2e:d1:fb:4f:74:5c:9f:1f:95: 2a:8d:1b:e8:e4:27:8b:92:19:04:c4:2a:51:16:28:18:ff:a4: 60:92:98:b8:6c:5e:d3:53:de:6d:d9:cd:da:d8:d9:b7:f6:7a: 25:f0:78:02:83:f1:4d:1a:ee:b1:ee:1b:8a:b7:07:46:45:93: c9:cd:e3:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7kDcEVpseExE2tAilNAXIZMpEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTExMDIyMzI1NTRaFw0yNTExMDYwOTMwNTRaMDMxMTAvBgNV BAMTKDlCRDUxODMxNjgzRUQ0ODdENUU4RTU1ODlENjc3OThEQTVDNzcxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgnXhMRZiaE2fA0CzoAu1OAGC 45XJJyBHnYoEPmpoqN12BOIbNt5eM4LLc8nJC0pfHcK0OPEn+L2ls3ViuAIqWWnI dyjnBkGNq0kNhZAk2W2fmVhdVv6+VFCUbn1ZtSIdzF/Jt33kbANEowVgnClJtE5R I4L4aNy3SlOgMF2BmWsZqR6XpnUbdmtflxGX+FA7DdIw0XZsZnQMdMTuJkgf6Py6 mxsf5PVn8my3eWTRDif/DKe3UVR+U0xcxE/Bk9VJXDd+DuLDReVwM+DUrUqVhBLU EcQDLqLUbLNTT3D+snzwExVjb1qxqfsmftTzWYLytdse5B1UkK7fq0CBN7W9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9UYMWg+1IfV6OVYnWd5jaXHcZQwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInyv2gv98J0FzeYl01WoTXdnbIhbLrhMOrJ Ow8Wb067IdC1iUgEHb3868W/qNEdDhX16s9MOWlNGPl2Zr1tLdkmqQm4TNLjTk4J Z2oK9J7nUC9dfNYii662iCZZghdcZTA+vKh0L2GYI088EtKjCUo26vg+vl1sTXTR 8xZazGJZ+MpP02EDJRTen7laZ5pWwoNq3f3oX03cQqTbAX5Nei+kDR+087rNFZu3 RmNSsmfNK5hPit/KgEjlfbSx1y7R+090XJ8flSqNG+jkJ4uSGQTEKlEWKBj/pGCS mLhsXtNT3m3ZzdrY2bf2eiXweAKD8U0a7rHuG4q3B0ZFk8nN4xU= -----END CERTIFICATE-----Generated at Tue Nov 4 18:37:47 2025 by rpki-client