$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: IySPa7grfI2Zr+CqrVzEXDd/y3a7NAA07zFgABWKvX0= Subject key identifier: BE:6E:61:DD:E8:B6:50:23:DE:D4:40:18:3E:76:F7:C5:0D:AF:9E:8E Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 6D8A4D85E2AC227B96AEFCBA48115DD3C548650B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 0330 Signing time: Mon 21 Jul 2025 01:40:57 +0000 Manifest this update: Mon 21 Jul 2025 01:35:57 +0000 Manifest next update: Thu 24 Jul 2025 11:47:57 +0000 Files and hashes: 1: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) 2: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: qqMttaV7UoDUCL9WgKgbw0EYKs8LIOhzyfiy3WCk3GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8a:4d:85:e2:ac:22:7b:96:ae:fc:ba:48:11:5d:d3:c5:48:65:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Jul 21 01:35:57 2025 GMT Not After : Jul 24 11:47:57 2025 GMT Subject: CN=BE6E61DDE8B65023DED440183E76F7C50DAF9E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:45:cf:56:88:53:ea:5e:7a:6b:f4:48:fd: 2c:68:33:c8:de:7d:e6:64:83:65:fd:32:73:8b:5a: 86:cf:7f:e5:24:cb:0a:ee:54:f6:cd:2b:8a:5f:5d: e6:4d:4e:89:14:5a:0d:ab:d3:e9:c0:9d:c5:59:19: bf:7a:29:35:0f:d9:e3:4c:c8:79:c5:56:8a:b0:9b: dc:76:ac:70:7f:f6:07:7e:de:bc:9b:88:4d:5f:47: fd:ca:ef:70:05:ad:f7:79:76:4e:8b:21:b3:4d:ed: ff:46:6d:6d:6a:94:b1:33:ec:07:4f:75:ee:0a:b3: f3:41:7b:03:61:c3:8e:22:f4:98:1a:f6:5a:7e:d9: 9c:7f:8c:1c:1c:03:bc:8a:0f:d7:73:9a:4e:34:f1: 3a:40:cb:24:8a:98:43:2b:77:9c:69:36:c7:ef:72: b1:75:23:da:53:48:3f:c9:ae:0e:ec:55:63:a9:de: 5e:d9:a6:86:d1:ad:69:3e:ce:c6:63:dc:42:f6:13: 6d:11:9c:6b:5c:75:60:00:db:5a:04:dd:bc:2d:31: c6:11:73:c3:f2:ea:ca:7b:99:ee:f8:6d:13:4b:6e: 55:09:ce:a4:f1:49:6d:f5:ec:6d:44:79:8e:bd:c7: 00:67:da:b7:61:15:b6:d4:2d:3d:cd:e3:27:8b:97: b0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6E:61:DD:E8:B6:50:23:DE:D4:40:18:3E:76:F7:C5:0D:AF:9E:8E X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:40:3e:b5:c9:e5:a1:ec:f5:db:f7:8d:b9:c1:9e:36:98:d9: 3b:ce:c7:8c:14:45:92:55:b3:b9:af:20:96:95:c1:93:f8:8e: 27:0a:37:84:a1:c3:c8:51:5f:22:4d:4f:6f:ff:90:fa:c7:4f: 06:48:9c:63:c7:2d:b3:b0:64:6c:85:39:1e:23:0a:bc:b1:3e: 47:9b:e4:8a:72:45:73:e6:0e:b9:a2:f1:12:30:92:48:20:cf: 81:8b:f9:a9:20:74:92:99:1d:9d:47:52:3f:44:24:59:33:a2: b6:6c:8e:2d:56:5a:97:8d:51:c8:49:ca:9f:b3:34:9e:aa:bb: 04:74:7f:a5:ec:3f:ac:e3:b0:ff:83:5a:c9:03:04:76:2c:30: 45:8c:83:a0:2e:ab:2d:77:ef:ab:32:21:6a:99:07:d3:80:f3: 78:a8:8f:6b:11:d1:ae:25:47:e4:32:2e:86:64:15:53:20:f1: 24:84:f5:9b:8b:f9:0b:fd:c8:c6:bf:c9:1d:a6:18:4a:6d:5e: 98:90:ad:95:06:14:c2:08:c9:6b:49:f1:a1:87:3f:65:ed:15: f8:0b:1a:8c:30:98:6b:56:9c:b4:a4:5f:be:02:6f:4d:fc:8a: af:a5:6d:9c:6f:0d:82:a6:90:18:43:df:cd:c9:71:47:4b:4a: 45:4d:5b:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYpNheKsInuWrvy6SBFd08VIZQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTA3MjEwMTM1NTdaFw0yNTA3MjQxMTQ3NTdaMDMxMTAvBgNV BAMTKEJFNkU2MURERThCNjUwMjNERUQ0NDAxODNFNzZGN0M1MERBRjlFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnUXPVohT6l56a/RI/SxoM8je feZkg2X9MnOLWobPf+UkywruVPbNK4pfXeZNTokUWg2r0+nAncVZGb96KTUP2eNM yHnFVoqwm9x2rHB/9gd+3rybiE1fR/3K73AFrfd5dk6LIbNN7f9GbW1qlLEz7AdP de4Ks/NBewNhw44i9Jga9lp+2Zx/jBwcA7yKD9dzmk408TpAyySKmEMrd5xpNsfv crF1I9pTSD/Jrg7sVWOp3l7ZpobRrWk+zsZj3EL2E20RnGtcdWAA21oE3bwtMcYR c8Py6sp7me74bRNLblUJzqTxSW317G1EeY69xwBn2rdhFbbULT3N4yeLl7DhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvm5h3ei2UCPe1EAYPnb3xQ2vno4wHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxAPrXJ5aHs9dv3jbnBnjaY2TvOx4wURZJV s7mvIJaVwZP4jicKN4Shw8hRXyJNT2//kPrHTwZInGPHLbOwZGyFOR4jCryxPkeb 5IpyRXPmDrmi8RIwkkggz4GL+akgdJKZHZ1HUj9EJFkzorZsji1WWpeNUchJyp+z NJ6quwR0f6XsP6zjsP+DWskDBHYsMEWMg6Auqy1376syIWqZB9OA83ioj2sR0a4l R+QyLoZkFVMg8SSE9ZuL+Qv9yMa/yR2mGEptXpiQrZUGFMIIyWtJ8aGHP2XtFfgL GowwmGtWnLSkX74Cb038iq+lbZxvDYKmkBhD383JcUdLSkVNW3Q= -----END CERTIFICATE-----Generated at Wed Jul 23 12:47:12 2025 by rpki-client