$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: LmgirKZExD3y++YNmbrII/WS4h9ocgOji7XvLIsvpvE= Subject key identifier: 31:46:F9:93:A8:C6:9E:C4:F2:8C:8A:99:86:BF:54:11:7E:50:90:64 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 59693C0CDBCE5C2D39B5999AB280C1F86338B429 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: ED Signing time: Sat 06 Sep 2025 09:21:51 +0000 Manifest this update: Sat 06 Sep 2025 09:16:51 +0000 Manifest next update: Tue 09 Sep 2025 12:33:51 +0000 Files and hashes: 1: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: CRS8OZNaQfmqRQGdDFyKwQVg0FrN6iIxgiaHsZ/qoHg=) 2: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:69:3c:0c:db:ce:5c:2d:39:b5:99:9a:b2:80:c1:f8:63:38:b4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Sep 6 09:16:51 2025 GMT Not After : Sep 9 12:33:51 2025 GMT Subject: CN=3146F993A8C69EC4F28C8A9986BF54117E509064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:26:8b:e5:ec:26:d9:58:52:ea:6f:75:14: 62:6e:da:16:6d:12:c8:7e:fc:44:ec:98:7f:99:18: a2:30:51:2b:75:5e:46:9e:71:67:09:1d:0f:56:4a: 63:b5:a0:f1:53:c5:00:c2:f9:0e:35:04:d6:8f:f1: c2:f6:a9:ca:06:7c:cc:ae:e1:96:2f:7a:ed:0e:fc: 88:1e:5b:4d:35:7e:cb:38:6d:be:93:e2:9e:f5:1e: 80:44:4c:cb:55:59:31:f2:4e:13:03:b5:57:5d:8b: ca:fe:ed:ba:bb:67:6d:1c:11:3e:55:28:e6:6a:3a: 48:ec:7c:07:f1:03:aa:0e:d9:a2:93:28:0d:4d:09: 63:55:ce:d9:02:08:a6:55:ab:2b:a1:87:6a:21:75: 3b:1a:ad:0a:a6:79:58:3a:63:16:5f:c1:29:f0:0d: 6d:21:79:e7:60:0f:6b:63:18:28:d0:8a:80:d7:2e: 0c:ae:c9:1e:09:99:84:1a:60:46:31:62:43:73:cb: a2:c0:90:17:62:01:d0:cb:c7:74:53:11:82:6f:91: 8a:72:9a:b8:91:db:fb:34:ea:46:b7:49:c6:2a:8f: ab:60:58:11:63:7c:cd:5e:e7:dd:a7:39:34:47:45: d3:86:ba:1d:83:c7:61:be:0e:de:73:54:28:d1:24: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:F9:93:A8:C6:9E:C4:F2:8C:8A:99:86:BF:54:11:7E:50:90:64 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4c:2d:53:6d:d1:fa:6e:56:4d:ee:cb:6d:c9:14:8b:d6:b6: c1:08:e3:e0:06:3e:1c:38:f9:ce:75:2b:75:02:64:75:87:b8: 11:ed:bc:ef:de:ef:5f:d3:69:3a:11:60:93:94:8f:6e:31:f5: 60:44:bd:85:14:7f:f2:ee:de:3d:ef:1f:bf:15:bb:21:ba:ac: 4f:98:81:97:d1:2b:8d:ea:50:cf:ff:72:cd:af:11:d2:22:ca: 4b:c4:c0:60:df:24:56:27:3c:5d:bf:63:0b:25:a7:20:44:96: a4:88:60:38:54:67:ec:a7:5e:fb:4e:71:18:12:5d:08:63:dd: 01:03:dd:c5:0d:61:c5:66:d1:53:33:da:44:62:b0:44:98:73: 7d:ec:93:de:f0:6d:65:e5:4e:81:bb:cb:90:52:ef:d1:d5:96: 94:61:c9:06:9e:e4:03:e6:3b:96:3a:f7:0b:ba:e8:3e:6c:db: 3d:31:96:cd:cf:ca:9b:d8:83:98:6d:16:79:36:7a:6d:82:ae: f5:b8:da:48:83:49:19:b3:f5:9b:8d:7b:dd:ff:3e:b9:0e:17: 66:18:fc:42:f7:e1:f2:8a:7e:e7:f6:c1:19:d5:7f:d7:f9:03: 5a:67:00:98:f3:b2:8e:b5:ba:c1:a0:73:1c:0e:6a:cd:fc:35: 82:86:31:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWk8DNvOXC05tZmasoDB+GM4tCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTA5MDYwOTE2NTFaFw0yNTA5MDkxMjMzNTFaMDMxMTAvBgNV BAMTKDMxNDZGOTkzQThDNjlFQzRGMjhDOEE5OTg2QkY1NDExN0U1MDkwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRiaL5ewm2VhS6m91FGJu2hZt Esh+/ETsmH+ZGKIwUSt1XkaecWcJHQ9WSmO1oPFTxQDC+Q41BNaP8cL2qcoGfMyu 4ZYveu0O/IgeW001fss4bb6T4p71HoBETMtVWTHyThMDtVddi8r+7bq7Z20cET5V KOZqOkjsfAfxA6oO2aKTKA1NCWNVztkCCKZVqyuhh2ohdTsarQqmeVg6YxZfwSnw DW0heedgD2tjGCjQioDXLgyuyR4JmYQaYEYxYkNzy6LAkBdiAdDLx3RTEYJvkYpy mriR2/s06ka3ScYqj6tgWBFjfM1e592nOTRHRdOGuh2Dx2G+Dt5zVCjRJEPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMUb5k6jGnsTyjIqZhr9UEX5QkGQwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhMLVNt0fpuVk3uy23JFIvWtsEI4+AGPhw4 +c51K3UCZHWHuBHtvO/e71/TaToRYJOUj24x9WBEvYUUf/Lu3j3vH78VuyG6rE+Y gZfRK43qUM//cs2vEdIiykvEwGDfJFYnPF2/YwslpyBElqSIYDhUZ+ynXvtOcRgS XQhj3QED3cUNYcVm0VMz2kRisESYc33sk97wbWXlToG7y5BS79HVlpRhyQae5APm O5Y69wu66D5s2z0xls3PypvYg5htFnk2em2CrvW42kiDSRmz9ZuNe93/PrkOF2YY /EL34fKKfuf2wRnVf9f5A1pnAJjzso61usGgcxwOas38NYKGMXo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:32 2025 by rpki-client