$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: 5RF6AWL2hDxNneP98GQMC03SqHZWpB1krC2cy0r3NE0= Subject key identifier: 6E:3C:E0:58:62:AA:55:B0:D2:6A:2A:24:B6:37:4E:42:3F:F5:A5:87 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 5F8BF97F690DB31EEA70BED86FC7D7F0B8823FF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 014B Signing time: Wed 05 Nov 2025 22:40:55 +0000 Manifest this update: Wed 05 Nov 2025 22:35:55 +0000 Manifest next update: Sun 09 Nov 2025 01:40:55 +0000 Files and hashes: 1: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: YBLeLN0w06nEEnAk6Y6zyehyg603km8sUzI0mW2cSAs=) 2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: 9JDBXYlD9SqW2BMyADf7uhmLucs+uFWH56a3wjHsOJc=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 01:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8b:f9:7f:69:0d:b3:1e:ea:70:be:d8:6f:c7:d7:f0:b8:82:3f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Nov 5 22:35:55 2025 GMT Not After : Nov 9 01:40:55 2025 GMT Subject: CN=6E3CE05862AA55B0D26A2A24B6374E423FF5A587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:dc:13:18:32:d2:a0:bd:53:38:e7:24:cf: f2:73:2f:11:2a:5f:ca:29:98:c6:23:d6:b4:63:4c: 90:83:b2:cd:35:68:d3:b2:e9:c4:5a:2d:1c:af:6a: f5:46:7f:bb:cf:24:1f:5c:65:90:c5:08:7a:93:5c: 57:e5:79:38:58:d4:0d:e2:66:26:21:26:14:e7:21: 40:ab:64:e2:bd:d7:81:6f:84:cb:2f:41:24:02:42: e8:c9:a6:cd:f7:e5:10:70:5e:d6:5f:42:66:17:18: 8b:95:ca:8f:36:e2:80:1a:1c:48:01:69:70:24:24: 4c:34:6e:6f:a9:85:be:c9:24:90:06:21:41:75:f1: 5b:f7:41:96:16:52:08:32:8e:d6:68:ef:27:42:7b: 7a:0d:d9:7b:aa:b7:20:15:c1:8b:5c:58:30:b7:0d: 39:db:01:1b:51:ff:aa:c2:0f:94:e6:2d:d0:b6:17: 3f:17:33:42:99:64:4e:a6:36:29:cf:cc:05:61:75: a8:fc:91:de:37:e1:4f:33:e2:3e:f0:7b:59:89:fa: 06:1f:5c:d5:9a:78:cf:7d:14:c4:93:ff:46:32:5c: 71:0e:18:75:62:08:0f:09:14:c9:bd:af:9b:e3:32: 15:9b:ea:a1:3c:9b:3e:18:27:6b:f8:7e:13:98:b9: c9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3C:E0:58:62:AA:55:B0:D2:6A:2A:24:B6:37:4E:42:3F:F5:A5:87 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4d:91:f9:75:fd:89:05:e5:de:de:3a:3c:8c:95:7b:5f:4f: af:bb:e0:88:c9:85:ac:8a:0b:ae:64:75:c3:28:d6:c2:fa:6b: fe:91:d0:1c:6f:b9:f6:27:3e:dc:92:44:d8:df:b6:42:85:39: 15:3f:11:a2:cd:6a:8a:5b:bb:39:38:12:26:64:69:04:b1:49: 0e:a5:61:a3:14:2c:15:38:ae:9f:06:e3:d6:e9:f1:22:06:1c: 15:7a:51:5c:f7:ed:2d:07:4a:35:a8:7d:1c:d8:c5:8f:39:75: 66:2e:7b:12:88:5a:6e:55:b0:4f:14:9b:3a:83:69:82:d6:09: fc:42:2a:07:99:08:5c:78:77:45:b0:72:8b:8d:73:7b:1c:a1: a7:9f:59:f0:49:2f:52:fa:f7:c3:a1:53:ac:d3:bf:da:bf:15: 4a:24:ad:91:3a:0e:bd:17:b0:f0:a7:dd:56:ff:1f:f3:a7:b3: a2:15:54:4e:80:5e:fd:e2:30:54:55:94:28:fb:c1:1b:89:ef: 51:a9:57:6f:17:19:7a:e8:e2:d3:99:5a:45:10:37:cb:20:ae: 17:5c:23:dc:ee:06:34:be:c6:a2:7e:80:40:9c:86:50:01:59: 94:95:78:e1:ef:3a:80:59:50:6f:d0:a6:5d:ff:5a:18:7f:67: 9a:22:3d:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4v5f2kNsx7qcL7Yb8fX8LiCP/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTExMDUyMjM1NTVaFw0yNTExMDkwMTQwNTVaMDMxMTAvBgNV BAMTKDZFM0NFMDU4NjJBQTU1QjBEMjZBMkEyNEI2Mzc0RTQyM0ZGNUE1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7dwTGDLSoL1TOOckz/JzLxEq X8opmMYj1rRjTJCDss01aNOy6cRaLRyvavVGf7vPJB9cZZDFCHqTXFfleThY1A3i ZiYhJhTnIUCrZOK914FvhMsvQSQCQujJps335RBwXtZfQmYXGIuVyo824oAaHEgB aXAkJEw0bm+phb7JJJAGIUF18Vv3QZYWUggyjtZo7ydCe3oN2XuqtyAVwYtcWDC3 DTnbARtR/6rCD5TmLdC2Fz8XM0KZZE6mNinPzAVhdaj8kd434U8z4j7we1mJ+gYf XNWaeM99FMST/0YyXHEOGHViCA8JFMm9r5vjMhWb6qE8mz4YJ2v4fhOYucnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbjzgWGKqVbDSaioktjdOQj/1pYcwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJNkfl1/YkF5d7eOjyMlXtfT6+74IjJhayK C65kdcMo1sL6a/6R0BxvufYnPtySRNjftkKFORU/EaLNaopbuzk4EiZkaQSxSQ6l YaMULBU4rp8G49bp8SIGHBV6UVz37S0HSjWofRzYxY85dWYuexKIWm5VsE8UmzqD aYLWCfxCKgeZCFx4d0WwcouNc3scoaefWfBJL1L698OhU6zTv9q/FUokrZE6Dr0X sPCn3Vb/H/Ons6IVVE6AXv3iMFRVlCj7wRuJ71GpV28XGXro4tOZWkUQN8sgrhdc I9zuBjS+xqJ+gECchlABWZSVeOHvOoBZUG/Qpl3/Whh/Z5oiPUQ= -----END CERTIFICATE-----Generated at Thu Nov 6 05:32:42 2025 by rpki-client