$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: 9A5dUqJSCC6ymCuzCA5c2iyCuHOtfjKyu8CzaTHvqUk= Subject key identifier: 27:70:5D:63:84:05:C7:E8:F5:DB:0F:20:BB:35:81:6E:3A:6F:18:A0 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 78C0EE891ADABC15A65739D9BD6C4B4BF02AE4E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 0107 Signing time: Sat 07 Jun 2025 05:50:51 +0000 Manifest this update: Sat 07 Jun 2025 05:45:51 +0000 Manifest next update: Tue 10 Jun 2025 13:18:51 +0000 Files and hashes: 1: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: HQmVbfWutZ2fC074/Ux0lY+ph7dZIfvBgd/1Hm1UpCI=) 2: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: g6ccoj52xzFfoBUORlDgZYxYX2tVO6Ya5vZR5Y7bBhA=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: EalNqK7fN+uMVwzoEzqTg9FoUorTzcn6dWS2phuXyqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 13:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c0:ee:89:1a:da:bc:15:a6:57:39:d9:bd:6c:4b:4b:f0:2a:e4:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Jun 7 05:45:51 2025 GMT Not After : Jun 10 13:18:51 2025 GMT Subject: CN=27705D638405C7E8F5DB0F20BB35816E3A6F18A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:a3:23:4e:54:d2:2c:a2:02:cc:da:e3:80: e6:3c:f4:0d:7f:17:8a:cd:31:51:3f:8c:d2:5a:54: 09:98:64:c2:fe:60:59:d5:0f:a3:d0:ee:71:db:96: 0b:bf:74:bd:37:43:c3:13:6e:cc:c7:2a:61:1a:c9: be:15:18:01:f8:01:9f:1e:89:14:f6:b3:d6:c9:55: 9a:9b:28:4f:44:b6:e4:6e:a9:48:c5:1c:80:69:ff: 10:35:3b:48:7e:90:c9:4d:87:da:ea:14:4d:c4:75: 27:8e:c1:66:93:08:ff:0d:ae:4a:40:a9:eb:10:c0: 3f:36:cd:96:bd:00:04:97:3d:d2:ee:07:bd:66:c9: c9:21:7d:15:cd:f4:23:2f:b1:e5:ca:c1:b6:5c:68: 0d:48:83:84:4c:2f:93:85:1a:83:29:dc:18:24:ba: 4d:d7:42:a7:fa:bc:38:4e:fc:24:bf:b8:61:9c:81: 4d:fc:e0:d8:20:f1:9c:34:ad:ee:7a:1f:21:4e:9e: 6d:e3:22:65:e5:4e:ab:21:55:01:08:a8:58:71:f7: c9:17:d7:28:cd:ba:9e:fc:4b:5e:36:07:5e:e7:44: e1:a1:b9:96:2f:8d:91:32:7d:4a:f5:73:88:79:3e: 3d:61:1b:aa:2d:35:35:c2:15:57:2e:cb:30:2d:a8: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:5D:63:84:05:C7:E8:F5:DB:0F:20:BB:35:81:6E:3A:6F:18:A0 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d2:0e:d3:c6:5c:a4:77:c2:45:6f:cb:ab:58:da:2b:fe:32: 9b:6f:38:f7:e5:03:ab:c1:c4:6d:99:67:ab:ea:7d:8f:0e:ee: 22:bb:49:d9:0f:12:88:bb:21:5c:1e:95:76:36:86:3c:6a:2c: 85:65:de:04:f9:ad:7c:79:b0:1f:90:37:f1:f4:56:de:89:77: 43:20:f8:ee:5f:fd:7c:03:d1:58:08:5f:07:2a:5c:01:66:35: 90:00:f1:ab:be:87:b1:0e:64:c7:4e:28:03:e1:45:05:90:15: 98:ab:28:cd:26:7f:b9:d4:d8:72:b2:4f:48:aa:c2:38:33:7f: 79:31:2b:8e:4d:7d:a5:b7:c4:1a:9b:fa:d0:ff:8b:56:4a:46: 7b:38:f8:7d:a7:9d:ce:34:98:39:7b:b8:ba:ea:4c:d9:9a:32: 2e:44:37:3f:19:7e:ea:55:45:f2:24:c4:c1:8f:7f:5d:9c:f0: 1e:d2:bd:29:b0:7f:73:88:fd:d8:94:4e:84:9c:23:c4:31:72: 4f:6c:2d:22:d9:44:d4:db:41:14:61:8a:2a:59:73:77:a4:01: 17:70:82:8b:68:d0:50:f0:4d:31:28:1c:5d:03:b1:cd:c4:95: 34:b4:0e:39:aa:4e:12:6b:e6:15:87:37:8a:f6:fe:36:a0:74: 38:d0:9e:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMDuiRravBWmVznZvWxLS/Aq5OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTA2MDcwNTQ1NTFaFw0yNTA2MTAxMzE4NTFaMDMxMTAvBgNV BAMTKDI3NzA1RDYzODQwNUM3RThGNURCMEYyMEJCMzU4MTZFM0E2RjE4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgKMjTlTSLKICzNrjgOY89A1/ F4rNMVE/jNJaVAmYZML+YFnVD6PQ7nHblgu/dL03Q8MTbszHKmEayb4VGAH4AZ8e iRT2s9bJVZqbKE9EtuRuqUjFHIBp/xA1O0h+kMlNh9rqFE3EdSeOwWaTCP8NrkpA qesQwD82zZa9AASXPdLuB71myckhfRXN9CMvseXKwbZcaA1Ig4RML5OFGoMp3Bgk uk3XQqf6vDhO/CS/uGGcgU384Ngg8Zw0re56HyFOnm3jImXlTqshVQEIqFhx98kX 1yjNup78S142B17nROGhuZYvjZEyfUr1c4h5Pj1hG6otNTXCFVcuyzAtqFrZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3BdY4QFx+j12w8guzWBbjpvGKAwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPSDtPGXKR3wkVvy6tY2iv+MptvOPflA6vB xG2ZZ6vqfY8O7iK7SdkPEoi7IVwelXY2hjxqLIVl3gT5rXx5sB+QN/H0Vt6Jd0Mg +O5f/XwD0VgIXwcqXAFmNZAA8au+h7EOZMdOKAPhRQWQFZirKM0mf7nU2HKyT0iq wjgzf3kxK45NfaW3xBqb+tD/i1ZKRns4+H2nnc40mDl7uLrqTNmaMi5ENz8ZfupV RfIkxMGPf12c8B7SvSmwf3OI/diUToScI8Qxck9sLSLZRNTbQRRhiipZc3ekARdw goto0FDwTTEoHF0Dsc3ElTS0DjmqThJr5hWHN4r2/jagdDjQnpY= -----END CERTIFICATE-----Generated at Sat Jun 7 23:21:51 2025 by rpki-client