$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: lR3B/U5S8p/UIDco/YIPL+8dOQ3f4JGut4bilz7OEvU= Subject key identifier: 19:BD:2D:D9:01:49:28:F9:1B:49:A9:96:61:7C:F8:C6:E9:81:42:93 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 3823866271F170E1E59767CA7074CDA73CA40E04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 026C Signing time: Sun 01 Mar 2026 01:31:00 +0000 Manifest this update: Sun 01 Mar 2026 01:26:00 +0000 Manifest next update: Wed 04 Mar 2026 01:59:00 +0000 Files and hashes: 1: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: Nc/rGbjilKhDUINae4y6wIX+B0v7DnEiiCYl62dNR3U=) 2: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: dyLN9IHhAazjq34HSczZfVCXE8rg1IN+v1/iUpvpLcw=) 3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: 78O1ueVQuFfOoEIhy2/u3I+vzcB/NPyQz3uKyD8I2xQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:23:86:62:71:f1:70:e1:e5:97:67:ca:70:74:cd:a7:3c:a4:0e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Mar 1 01:26:00 2026 GMT Not After : Mar 4 01:59:00 2026 GMT Subject: CN=19BD2DD9014928F91B49A996617CF8C6E9814293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:ed:d3:f3:d0:d9:02:a9:09:f4:2d:ef:38: 3d:15:77:eb:47:1f:a0:fd:f6:eb:04:bd:c5:5e:ec: 06:91:24:63:b5:77:e5:57:5d:c4:7e:26:c0:8b:6e: 2a:cd:d7:5f:87:ef:e0:22:60:44:e9:b9:10:67:54: 46:8d:f0:17:d0:10:fc:63:bb:06:55:68:b6:a6:b0: 3b:db:67:ea:05:3a:7a:f9:36:2a:87:68:79:08:63: cb:e0:2d:0f:90:f4:7e:91:0a:10:5a:86:8f:07:dd: 33:5c:3b:cc:45:39:22:d4:5a:c8:8a:2c:ac:fa:fe: 44:77:8b:12:42:29:84:16:1a:20:13:a5:05:df:40: d5:4e:1e:54:c0:d0:c5:0d:e5:14:7a:eb:8a:81:be: 74:3d:0e:e9:22:54:9b:c9:c8:7e:3e:48:48:db:20: e1:0e:21:9e:5b:4b:13:2e:18:c3:92:34:61:ea:90: 13:c5:b4:e3:a5:b1:9e:c3:ab:da:74:cc:dd:31:80: 78:64:53:b9:f1:c5:01:21:de:77:aa:aa:82:c2:56: 97:a5:f7:ac:86:6f:9d:ab:a5:74:46:eb:1a:5c:7a: f8:bf:8f:9c:9b:36:b3:82:f3:e8:d1:af:c1:07:3d: 47:e3:8a:00:95:dd:10:df:b4:c3:98:15:75:df:b3: 48:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BD:2D:D9:01:49:28:F9:1B:49:A9:96:61:7C:F8:C6:E9:81:42:93 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f1:8a:83:6b:26:9c:e1:2c:01:db:6a:be:05:d2:62:d1:7c: f0:68:11:54:d7:41:47:e1:aa:05:dc:3f:23:d9:e8:33:f8:ad: ec:25:fa:11:5b:e0:97:bd:29:35:3e:17:06:8a:c6:8f:b7:5f: 8e:cc:07:b2:87:ac:76:6f:d9:a5:7b:0f:23:2a:18:25:2a:f9: 60:92:a7:05:67:33:84:3a:96:16:c1:82:4e:42:8e:88:20:23: 0d:b9:65:b6:2e:6e:e4:23:e2:58:a4:83:1c:e8:1d:16:6a:4f: a2:59:e4:65:28:40:67:a9:ca:84:86:7c:50:87:34:1d:64:db: 24:c5:47:ab:7b:6b:46:2b:56:23:d9:54:50:22:f5:a3:b4:3d: a2:d6:18:c8:72:13:ec:a5:03:65:d9:62:fc:14:08:8f:8a:4e: 06:06:b7:a4:07:47:d8:d0:f9:8b:2a:e7:d5:bd:e0:53:53:e6: eb:46:50:bc:e3:d6:40:7d:18:32:1b:8d:b0:48:b5:e5:4b:4d: d0:21:1b:15:46:49:2f:7c:2a:ed:62:ac:cb:ea:9e:3c:58:4e: df:7e:32:b8:cc:4b:38:d0:25:a2:cf:19:60:e9:25:a5:5c:b1: 1b:cf:70:91:84:1d:09:98:53:53:c1:90:06:37:63:f2:cf:49: 28:bf:d5:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCOGYnHxcOHll2fKcHTNpzykDgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNjAzMDEwMTI2MDBaFw0yNjAzMDQwMTU5MDBaMDMxMTAvBgNV BAMTKDE5QkQyREQ5MDE0OTI4RjkxQjQ5QTk5NjYxN0NGOEM2RTk4MTQyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviu3T89DZAqkJ9C3vOD0Vd+tH H6D99usEvcVe7AaRJGO1d+VXXcR+JsCLbirN11+H7+AiYETpuRBnVEaN8BfQEPxj uwZVaLamsDvbZ+oFOnr5NiqHaHkIY8vgLQ+Q9H6RChBaho8H3TNcO8xFOSLUWsiK LKz6/kR3ixJCKYQWGiATpQXfQNVOHlTA0MUN5RR664qBvnQ9DukiVJvJyH4+SEjb IOEOIZ5bSxMuGMOSNGHqkBPFtOOlsZ7Dq9p0zN0xgHhkU7nxxQEh3neqqoLCVpel 96yGb52rpXRG6xpcevi/j5ybNrOC8+jRr8EHPUfjigCV3RDftMOYFXXfs0iPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGb0t2QFJKPkbSamWYXz4xumBQpMwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfxioNrJpzhLAHbar4F0mLRfPBoEVTXQUfh qgXcPyPZ6DP4rewl+hFb4Je9KTU+FwaKxo+3X47MB7KHrHZv2aV7DyMqGCUq+WCS pwVnM4Q6lhbBgk5CjoggIw25ZbYubuQj4likgxzoHRZqT6JZ5GUoQGepyoSGfFCH NB1k2yTFR6t7a0YrViPZVFAi9aO0PaLWGMhyE+ylA2XZYvwUCI+KTgYGt6QHR9jQ +Ysq59W94FNT5utGULzj1kB9GDIbjbBIteVLTdAhGxVGSS98Ku1irMvqnjxYTt9+ MrjMSzjQJaLPGWDpJaVcsRvPcJGEHQmYU1PBkAY3Y/LPSSi/1WI= -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:51 2026 by rpki-client