$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: TcWrwWRVgiHTh22/tQOUYSxekZCZzcPX8YwYjKqdeFQ= Subject key identifier: BD:67:D1:9B:32:B7:17:23:CA:49:69:DC:91:AB:26:63:FD:48:DD:6D Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 672B118C4CC4CC0A7E328BBA2A3EB620A403C441 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 01E2 Signing time: Tue 29 Apr 2025 02:30:51 +0000 Manifest this update: Tue 29 Apr 2025 02:25:51 +0000 Manifest next update: Fri 02 May 2025 08:42:51 +0000 Files and hashes: 1: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: KVX2yXcKSbf+m6o3NcbwrHSANjxppY+qL1OzKaGFZmw=) 2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) 3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2b:11:8c:4c:c4:cc:0a:7e:32:8b:ba:2a:3e:b6:20:a4:03:c4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Apr 29 02:25:51 2025 GMT Not After : May 2 08:42:51 2025 GMT Subject: CN=BD67D19B32B71723CA4969DC91AB2663FD48DD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:92:7f:d1:81:4f:08:ad:51:27:dd:70:e3: 96:73:eb:3b:05:3e:26:46:8c:02:ed:d1:96:a4:c1: 10:51:82:d9:a0:ba:b3:ad:88:97:8d:6a:c0:7d:fe: f2:65:da:c4:83:14:69:5e:1e:ce:46:2b:4b:3f:b7: 41:cc:86:9d:0e:5d:e3:f0:cc:f2:ec:bb:af:cd:bd: 44:31:35:a0:3f:6a:68:91:3b:5c:35:bb:5f:dc:9f: b1:25:b1:7e:03:cb:db:26:e7:71:32:ca:65:c5:57: dc:cf:1d:c4:ad:59:ad:71:69:05:2e:6f:c5:ec:76: d2:47:3f:fb:a3:45:d8:64:5e:b2:97:ac:27:71:53: 2e:28:43:6a:2d:3f:77:d6:01:98:d9:74:03:45:01: 63:28:40:39:2d:94:15:11:f1:d7:7d:5a:8c:40:6f: b3:e1:e2:ce:5a:db:50:a7:77:22:80:c0:41:43:5d: 7c:52:07:25:b4:50:ce:50:4a:73:3d:62:41:c0:d9: bc:83:b0:a3:72:26:f9:09:46:ff:82:75:21:ae:c3: 36:7c:a9:7d:6f:c5:6a:e3:a9:98:ad:58:1d:7d:46: f5:1a:10:15:27:de:af:38:89:9b:3e:2e:dc:64:d5: c7:5b:32:48:f7:bb:9b:31:15:21:36:de:08:17:be: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:67:D1:9B:32:B7:17:23:CA:49:69:DC:91:AB:26:63:FD:48:DD:6D X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ad:dc:84:62:7b:83:d2:15:cd:ec:20:f4:95:d2:29:80:c6: 0d:c5:a3:5b:02:61:4d:d6:2c:0b:e4:fd:d5:c3:91:d5:77:fc: cf:70:3c:3b:ca:1f:11:1b:b4:a0:b3:86:23:dd:15:46:08:3e: d0:83:48:22:70:bf:3a:e1:28:bb:43:03:74:a1:76:81:e1:46: ff:63:af:be:2a:ce:66:36:8c:4b:63:61:18:54:ab:9b:73:0f: df:79:81:d2:f8:66:bb:be:67:6f:ef:ae:81:57:a1:4e:50:df: 38:f4:3e:23:f0:1a:73:48:fc:b0:0f:9c:04:d2:31:37:5a:c8: 5c:a8:f7:c8:30:b7:1a:ad:24:e3:4b:87:28:a3:5e:ec:bc:be: d6:32:4a:27:27:e1:08:db:1d:b6:d5:cb:4b:77:72:b8:da:33: be:94:be:75:a2:e4:92:61:15:a9:4b:04:69:28:5a:4f:f9:7c: f8:85:12:53:17:dd:bc:01:d4:d0:17:81:41:9c:69:f0:18:ae: 97:51:40:1d:58:41:c0:29:a2:fc:8e:c8:c8:79:2e:42:37:12: 12:60:2e:00:a0:18:52:54:8d:11:9b:27:cc:38:f7:d6:6f:43: 7d:aa:1a:16:73:fd:c3:25:74:a8:86:76:a7:2a:14:bf:d3:96: d4:a7:cf:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZysRjEzEzAp+Mou6Kj62IKQDxEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTA0MjkwMjI1NTFaFw0yNTA1MDIwODQyNTFaMDMxMTAvBgNV BAMTKEJENjdEMTlCMzJCNzE3MjNDQTQ5NjlEQzkxQUIyNjYzRkQ0OERENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ppJ/0YFPCK1RJ91w45Zz6zsF PiZGjALt0ZakwRBRgtmgurOtiJeNasB9/vJl2sSDFGleHs5GK0s/t0HMhp0OXePw zPLsu6/NvUQxNaA/amiRO1w1u1/cn7ElsX4Dy9sm53EyymXFV9zPHcStWa1xaQUu b8XsdtJHP/ujRdhkXrKXrCdxUy4oQ2otP3fWAZjZdANFAWMoQDktlBUR8dd9WoxA b7Ph4s5a21CndyKAwEFDXXxSByW0UM5QSnM9YkHA2byDsKNyJvkJRv+CdSGuwzZ8 qX1vxWrjqZitWB19RvUaEBUn3q84iZs+Ltxk1cdbMkj3u5sxFSE23ggXvmxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWfRmzK3FyPKSWnckasmY/1I3W0wHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+t3IRie4PSFc3sIPSV0imAxg3Fo1sCYU3W LAvk/dXDkdV3/M9wPDvKHxEbtKCzhiPdFUYIPtCDSCJwvzrhKLtDA3ShdoHhRv9j r74qzmY2jEtjYRhUq5tzD995gdL4Zru+Z2/vroFXoU5Q3zj0PiPwGnNI/LAPnATS MTdayFyo98gwtxqtJONLhyijXuy8vtYySicn4QjbHbbVy0t3crjaM76UvnWi5JJh FalLBGkoWk/5fPiFElMX3bwB1NAXgUGcafAYrpdRQB1YQcApovyOyMh5LkI3EhJg LgCgGFJUjRGbJ8w499ZvQ32qGhZz/cMldKiGdqcqFL/TltSnz6k= -----END CERTIFICATE-----Generated at Tue Apr 29 06:57:35 2025 by rpki-client