$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: 6USjqbyDj9yxQmXlzn14FD7tW6y2MAxhSONm20S/7E8= Subject key identifier: 30:D8:F4:CA:37:4E:44:5B:4B:62:62:38:C3:1A:FB:99:15:43:E6:B0 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 2722E81D0A6C32611F06BB79502571DCF5010608 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: D8 Signing time: Sun 20 Jul 2025 11:41:49 +0000 Manifest this update: Sun 20 Jul 2025 11:36:49 +0000 Manifest next update: Wed 23 Jul 2025 20:54:49 +0000 Files and hashes: 1: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) 2: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: dVqwHDBoO8T/Z/Dm3F8THx3a/rWyMHxFis7ZdJxN3a8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:22:e8:1d:0a:6c:32:61:1f:06:bb:79:50:25:71:dc:f5:01:06:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Jul 20 11:36:49 2025 GMT Not After : Jul 23 20:54:49 2025 GMT Subject: CN=30D8F4CA374E445B4B626238C31AFB991543E6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:91:21:eb:d4:7d:fd:90:d2:72:9b:97:37: 62:04:b4:95:1a:43:91:a3:ad:74:be:1f:c5:67:d5: b0:99:07:d9:54:64:cb:49:0e:4e:02:e3:0c:eb:fd: 15:ef:a8:0b:91:d1:c9:b7:5f:ce:de:26:a6:6c:3b: 90:49:26:7d:47:8b:77:3b:fa:4e:7b:28:ea:76:f5: 4a:37:aa:30:d9:9f:bf:be:6f:96:e1:ff:d4:d6:76: 93:19:3f:1f:fe:50:03:cc:8a:5e:6d:e0:2a:ee:51: d2:90:10:c2:28:89:82:d9:04:e5:51:7b:30:58:e9: 3d:57:11:ae:46:5c:74:8d:9b:16:bf:39:09:ae:4d: 84:82:a1:1b:e4:8d:72:22:2d:2d:04:9d:55:a0:c7: 67:09:a6:80:62:77:9a:5f:53:e8:8d:47:c6:df:aa: 61:2f:ac:3d:1f:8b:8f:c7:75:99:fe:53:9f:93:3b: de:80:8a:68:03:47:e8:d5:d6:62:87:d2:46:01:9a: 26:c0:bd:67:af:ff:d0:b6:fb:9e:d6:99:4c:e4:8c: 74:be:fa:07:23:bf:c8:ee:15:59:97:1d:cd:f3:0c: 64:ea:9f:11:92:8d:8a:34:68:06:ed:3e:58:a3:d5: ab:0e:80:ad:9f:26:07:f3:db:7f:da:52:e9:cc:ca: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:F4:CA:37:4E:44:5B:4B:62:62:38:C3:1A:FB:99:15:43:E6:B0 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:d4:2a:94:9b:09:9d:ed:8a:65:a6:a9:ff:34:ab:3a:a6: a3:54:d8:c1:47:55:99:61:98:f0:ae:a1:02:a5:b9:00:7e:1a: 66:47:56:a7:dc:ca:89:cf:35:54:7c:73:67:76:b2:06:e2:8c: 40:40:e6:37:2a:ea:37:0d:4c:4e:f5:e0:59:90:7e:06:bd:d2: fb:1d:30:f8:12:84:ae:4f:9f:b3:52:e9:dc:39:ee:5e:3d:64: 46:b8:a0:0e:3b:fe:ea:ff:91:34:cd:fa:e9:dd:14:0a:17:e0: af:6a:aa:9c:cd:a8:95:3b:42:08:b7:f5:6a:86:11:31:9d:2c: 37:4f:c9:27:29:e6:4a:00:6c:62:48:e2:ca:be:f4:ec:90:3a: 0d:79:50:b9:69:c4:e8:68:d2:d1:90:a4:a3:27:23:8d:75:0d: 1d:74:0e:da:cb:67:21:a6:e1:4c:8a:5e:21:65:e5:8e:cb:4b: 51:aa:2c:1b:fb:fb:8a:07:f1:f3:e2:f5:7c:2a:58:a8:29:66: 1d:2b:27:47:35:56:b2:dc:f5:be:02:65:3e:54:1d:de:fe:f1: 67:ad:32:24:1f:b0:5b:0a:e6:8f:8f:2e:2f:2a:1e:d9:6d:48: 9f:9f:05:33:a8:7f:b4:b7:4e:fb:86:f5:80:3a:af:03:42:24: ce:eb:1f:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyLoHQpsMmEfBrt5UCVx3PUBBggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTA3MjAxMTM2NDlaFw0yNTA3MjMyMDU0NDlaMDMxMTAvBgNV BAMTKDMwRDhGNENBMzc0RTQ0NUI0QjYyNjIzOEMzMUFGQjk5MTU0M0U2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgZEh69R9/ZDScpuXN2IEtJUa Q5GjrXS+H8Vn1bCZB9lUZMtJDk4C4wzr/RXvqAuR0cm3X87eJqZsO5BJJn1Hi3c7 +k57KOp29Uo3qjDZn7++b5bh/9TWdpMZPx/+UAPMil5t4CruUdKQEMIoiYLZBOVR ezBY6T1XEa5GXHSNmxa/OQmuTYSCoRvkjXIiLS0EnVWgx2cJpoBid5pfU+iNR8bf qmEvrD0fi4/HdZn+U5+TO96AimgDR+jV1mKH0kYBmibAvWev/9C2+57WmUzkjHS+ +gcjv8juFVmXHc3zDGTqnxGSjYo0aAbtPlij1asOgK2fJgfz23/aUunMyoe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNj0yjdORFtLYmI4wxr7mRVD5rAwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBK1CqUmwmd7Yplpqn/NKs6pqNU2MFHVZlh mPCuoQKluQB+GmZHVqfcyonPNVR8c2d2sgbijEBA5jcq6jcNTE714FmQfga90vsd MPgShK5Pn7NS6dw57l49ZEa4oA47/ur/kTTN+undFAoX4K9qqpzNqJU7Qgi39WqG ETGdLDdPyScp5koAbGJI4sq+9OyQOg15ULlpxOho0tGQpKMnI411DR10DtrLZyGm 4UyKXiFl5Y7LS1GqLBv7+4oH8fPi9XwqWKgpZh0rJ0c1VrLc9b4CZT5UHd7+8Wet MiQfsFsK5o+PLi8qHtltSJ+fBTOof7S3TvuG9YA6rwNCJM7rH7s= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:38 2025 by rpki-client