$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: VzlawSxZ14/R/C//BcBcv5/brQUw6vTcvELSLWJVaFs= Subject key identifier: 12:F7:7F:D8:1A:72:CB:DE:F3:41:9C:20:0E:3B:98:E5:CB:EF:26:9D Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 272D7EB9CDA39DDA13F3736738D75DE2E72E6DB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: EB Signing time: Sat 05 Apr 2025 09:50:50 +0000 Manifest this update: Sat 05 Apr 2025 09:45:50 +0000 Manifest next update: Tue 08 Apr 2025 14:31:50 +0000 Files and hashes: 1: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: HQmVbfWutZ2fC074/Ux0lY+ph7dZIfvBgd/1Hm1UpCI=) 2: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: 9LyYShzkdqUmjXcoA0/PYQogyxU8fH6z129rc/uR00Q=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: EalNqK7fN+uMVwzoEzqTg9FoUorTzcn6dWS2phuXyqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 14:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2d:7e:b9:cd:a3:9d:da:13:f3:73:67:38:d7:5d:e2:e7:2e:6d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Apr 5 09:45:50 2025 GMT Not After : Apr 8 14:31:50 2025 GMT Subject: CN=12F77FD81A72CBDEF3419C200E3B98E5CBEF269D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:d2:ae:52:c5:88:3e:37:a3:fd:69:5d:1b: bf:af:96:ab:5e:6b:94:4d:89:56:0f:e9:04:3b:b0: 27:05:7d:59:64:3f:61:29:e4:0d:90:e0:9a:fd:ec: 4d:54:cf:54:13:38:3e:f8:ac:67:44:24:8c:76:2a: 5b:bd:99:a5:5b:49:18:42:29:b6:7a:2c:4e:b4:53: 89:30:bc:6d:c9:bc:ee:ea:34:5d:9c:10:1e:c4:b3: a1:c4:7d:1f:98:0f:ce:53:bb:3b:5c:3c:aa:a9:4e: a8:a2:d5:2f:57:b8:f7:e7:a9:7d:d2:8b:7b:45:b9: a7:89:36:d4:5d:0e:3c:2f:ce:a6:5d:53:b1:8c:e5: c0:7a:18:3d:28:59:45:23:c3:52:19:41:d0:7a:84: ca:a1:14:02:5f:a8:ec:2c:24:05:3c:f2:b0:21:ee: c6:71:c6:df:6b:e8:d9:f7:d9:c7:4c:9c:90:6d:6e: c0:5f:6c:d1:a8:a9:bd:3d:12:c3:8a:62:b2:6b:f9: cc:16:03:d9:dd:50:75:5a:42:73:b8:a2:e4:8b:b2: 3a:3a:40:97:c5:b1:69:43:a7:3d:02:7f:d8:c8:3e: 36:c0:76:e3:17:a0:12:d5:96:d2:a4:bb:52:de:1f: 1b:21:33:97:e4:d3:db:1f:7e:56:32:c0:d5:2a:de: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F7:7F:D8:1A:72:CB:DE:F3:41:9C:20:0E:3B:98:E5:CB:EF:26:9D X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:fc:09:4d:56:f4:81:6c:f2:4d:18:62:37:3a:23:fb:eb:5c: fc:f9:8b:18:a6:6d:82:e0:5a:ee:5d:ef:05:c9:78:4c:dd:4e: 04:d4:3f:36:da:60:de:e7:48:3e:6c:0a:ce:09:7b:26:40:8b: 45:82:8f:3a:fb:c0:8d:a5:92:49:cd:83:24:4b:c3:0e:c2:00: da:d7:d7:3a:04:02:ec:b0:a7:ef:91:d0:68:44:1e:ec:e4:4c: 44:01:2e:76:ab:6e:5f:58:de:f8:ee:6d:09:f2:36:ae:d3:19: 6f:42:4e:37:e5:e5:d5:94:ff:55:86:f0:e0:27:cd:37:a1:23: 87:69:1b:c2:10:a2:6a:ee:f0:d5:d3:d6:81:ab:24:34:85:d9: f5:c2:5a:58:c0:a1:f2:21:64:f3:9a:e9:91:ff:3f:37:bd:59: 9a:9e:57:5a:8e:47:d9:7b:62:a3:ec:0f:40:5e:95:30:13:9f: c2:d1:46:ed:01:66:46:15:bf:ca:5b:70:36:c5:80:56:1b:e8: 78:c0:c0:53:e4:76:07:ab:41:26:58:a1:0c:48:84:a3:e8:33: 2b:17:20:e4:0a:0d:8f:e0:cc:29:f6:a6:35:b4:11:53:a1:84: d5:51:ef:f9:bb:e6:49:7d:43:89:be:9b:3f:34:a5:70:b1:4a: ce:cd:a3:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJy1+uc2jndoT83NnONdd4ucubbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTA0MDUwOTQ1NTBaFw0yNTA0MDgxNDMxNTBaMDMxMTAvBgNV BAMTKDEyRjc3RkQ4MUE3MkNCREVGMzQxOUMyMDBFM0I5OEU1Q0JFRjI2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCab9KuUsWIPjej/WldG7+vlqte a5RNiVYP6QQ7sCcFfVlkP2Ep5A2Q4Jr97E1Uz1QTOD74rGdEJIx2Klu9maVbSRhC KbZ6LE60U4kwvG3JvO7qNF2cEB7Es6HEfR+YD85TuztcPKqpTqii1S9XuPfnqX3S i3tFuaeJNtRdDjwvzqZdU7GM5cB6GD0oWUUjw1IZQdB6hMqhFAJfqOwsJAU88rAh 7sZxxt9r6Nn32cdMnJBtbsBfbNGoqb09EsOKYrJr+cwWA9ndUHVaQnO4ouSLsjo6 QJfFsWlDpz0Cf9jIPjbAduMXoBLVltKku1LeHxshM5fk09sfflYywNUq3s99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvd/2Bpyy97zQZwgDjuY5cvvJp0wHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALD8CU1W9IFs8k0YYjc6I/vrXPz5iximbYLg Wu5d7wXJeEzdTgTUPzbaYN7nSD5sCs4JeyZAi0WCjzr7wI2lkknNgyRLww7CANrX 1zoEAuywp++R0GhEHuzkTEQBLnarbl9Y3vjubQnyNq7TGW9CTjfl5dWU/1WG8OAn zTehI4dpG8IQomru8NXT1oGrJDSF2fXCWljAofIhZPOa6ZH/Pze9WZqeV1qOR9l7 YqPsD0BelTATn8LRRu0BZkYVv8pbcDbFgFYb6HjAwFPkdgerQSZYoQxIhKPoMysX IOQKDY/gzCn2pjW0EVOhhNVR7/m75kl9Q4m+mz80pXCxSs7No80= -----END CERTIFICATE-----Generated at Sun Apr 6 14:46:46 2025 by rpki-client