$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: 4SLANMPK+wnGsHjQj/dfutTsJvef9oUjrUjpdDGEZ2Y= Subject key identifier: 52:8D:8E:09:F1:AD:6C:3B:63:2F:58:E4:55:E0:35:7A:E5:01:EA:16 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 40446BC5F6A470DE186DBBA24CD7252A4148D26B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 0130 Signing time: Sat 06 Sep 2025 12:10:52 +0000 Manifest this update: Sat 06 Sep 2025 12:05:52 +0000 Manifest next update: Tue 09 Sep 2025 17:09:52 +0000 Files and hashes: 1: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=) 2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: HQmVbfWutZ2fC074/Ux0lY+ph7dZIfvBgd/1Hm1UpCI=) 3: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: wnoeyLXC1EzT3UqytzCcZgga9q4ukPk27bpXbLKKarg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:44:6b:c5:f6:a4:70:de:18:6d:bb:a2:4c:d7:25:2a:41:48:d2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Sep 6 12:05:52 2025 GMT Not After : Sep 9 17:09:52 2025 GMT Subject: CN=528D8E09F1AD6C3B632F58E455E0357AE501EA16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:b8:80:cf:c4:6e:37:0f:bc:df:3a:9c:e2: 3a:cf:81:df:33:e6:66:dc:5a:6c:9f:12:2d:1e:ad: 8c:d0:27:0c:e6:30:16:da:36:03:7c:96:0b:bd:51: 5c:66:c3:74:b2:ad:d2:93:80:7f:c2:ce:64:19:95: 80:ce:ce:a0:5c:d5:c2:28:7c:98:90:7f:e5:4a:ec: ef:82:df:52:db:50:8c:f8:87:61:6e:0a:85:6d:75: ae:e7:a1:a4:f9:59:20:45:ca:35:61:bf:df:35:f4: 2e:45:ad:87:52:8f:1e:2e:ae:d5:5f:e4:31:bd:cf: 3e:ba:73:56:f9:63:83:87:3a:ac:0e:80:a8:ce:18: 46:5b:a8:e0:72:9d:23:73:5c:66:d7:83:d0:8a:fc: 8a:08:a0:27:11:76:53:8f:7a:0d:65:9c:af:63:86: 43:41:55:3c:bd:26:0d:5a:a8:01:9c:28:97:b0:b9: 12:b2:37:f2:6f:81:5b:4e:e5:c0:84:30:99:de:65: d0:3b:7f:14:66:15:b6:26:b6:9c:a9:ef:7c:be:23: 59:f2:9d:fa:df:ce:01:f0:d3:bc:83:b3:5e:36:f3: 09:c5:04:88:c3:60:a8:93:7a:f2:c2:69:02:dc:20: 51:cf:ce:50:48:e1:84:af:8f:af:17:a4:f4:a8:90: 80:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8D:8E:09:F1:AD:6C:3B:63:2F:58:E4:55:E0:35:7A:E5:01:EA:16 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a5:94:d2:b6:de:56:6e:d4:f5:b8:a9:e6:3f:d9:40:ab:d1: d4:45:e0:20:56:18:c1:43:7e:13:c5:94:ff:f9:3d:29:84:55: d3:75:38:6c:f9:19:82:45:0c:62:fb:c4:1e:e4:2d:58:04:c3: f6:f5:15:1d:99:7a:bf:a0:09:9e:e1:56:98:78:02:39:ac:35: ce:a4:a9:44:b2:43:d2:64:18:9e:1b:82:8e:0d:10:df:51:aa: 2c:b9:92:f2:c8:d7:48:3d:aa:f3:e2:de:cf:b3:58:ca:de:4b: d4:05:5c:2a:05:4d:1f:82:8a:b1:1f:63:d7:74:df:49:39:34: 95:ab:61:b4:c9:32:14:b3:0f:4b:86:27:1c:4d:00:f5:bd:78: 74:eb:68:c9:25:62:97:9c:02:ac:01:7c:16:1e:c3:75:06:33: f2:ad:10:43:93:96:84:54:cb:ec:25:2f:31:8a:ac:2e:ee:4e: 9c:29:7a:a2:a8:64:6f:7d:fd:ad:62:f1:17:11:0b:3a:d4:0b: 49:4b:b1:93:90:e2:a8:0f:ff:d0:cd:57:25:4b:f1:1c:de:57: 47:5d:10:ca:a6:43:e9:12:d5:d7:67:f4:71:f9:19:e8:9a:76: 49:e4:e0:72:de:0b:86:b9:ff:e7:9f:2b:5d:df:ed:20:12:47: ee:9c:14:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQERrxfakcN4YbbuiTNclKkFI0mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTA5MDYxMjA1NTJaFw0yNTA5MDkxNzA5NTJaMDMxMTAvBgNV BAMTKDUyOEQ4RTA5RjFBRDZDM0I2MzJGNThFNDU1RTAzNTdBRTUwMUVBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UriAz8RuNw+83zqc4jrPgd8z 5mbcWmyfEi0erYzQJwzmMBbaNgN8lgu9UVxmw3SyrdKTgH/CzmQZlYDOzqBc1cIo fJiQf+VK7O+C31LbUIz4h2FuCoVtda7noaT5WSBFyjVhv9819C5FrYdSjx4urtVf 5DG9zz66c1b5Y4OHOqwOgKjOGEZbqOBynSNzXGbXg9CK/IoIoCcRdlOPeg1lnK9j hkNBVTy9Jg1aqAGcKJewuRKyN/JvgVtO5cCEMJneZdA7fxRmFbYmtpyp73y+I1ny nfrfzgHw07yDs1428wnFBIjDYKiTevLCaQLcIFHPzlBI4YSvj68XpPSokICjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUo2OCfGtbDtjL1jkVeA1euUB6hYwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGllNK23lZu1PW4qeY/2UCr0dRF4CBWGMFD fhPFlP/5PSmEVdN1OGz5GYJFDGL7xB7kLVgEw/b1FR2Zer+gCZ7hVph4AjmsNc6k qUSyQ9JkGJ4bgo4NEN9Rqiy5kvLI10g9qvPi3s+zWMreS9QFXCoFTR+CirEfY9d0 30k5NJWrYbTJMhSzD0uGJxxNAPW9eHTraMklYpecAqwBfBYew3UGM/KtEEOTloRU y+wlLzGKrC7uTpwpeqKoZG99/a1i8RcRCzrUC0lLsZOQ4qgP/9DNVyVL8RzeV0dd EMqmQ+kS1ddn9HH5Geiadknk4HLeC4a5/+efK13f7SASR+6cFKo= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:47 2025 by rpki-client