$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: o0zb9fJERVwMJnuJCWf+6sbSC0ePpeG8tmA55d8SRXw= Subject key identifier: 42:C8:BC:84:03:3A:CA:25:E4:A4:50:51:55:35:48:07:68:0E:30:27 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 6ABFC9EE02EF2D6B18C0691574F0B4A86A4A4C0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: DF Signing time: Tue 05 Aug 2025 03:41:55 +0000 Manifest this update: Tue 05 Aug 2025 03:36:55 +0000 Manifest next update: Fri 08 Aug 2025 09:43:55 +0000 Files and hashes: 1: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: +zUvojXS45nFGAsnDErexCfPfuGTLkBYs8kUN8wDQbg=) 2: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:bf:c9:ee:02:ef:2d:6b:18:c0:69:15:74:f0:b4:a8:6a:4a:4c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Aug 5 03:36:55 2025 GMT Not After : Aug 8 09:43:55 2025 GMT Subject: CN=42C8BC84033ACA25E4A4505155354807680E3027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:39:3c:9f:a2:8b:5d:05:3f:d4:a8:09:e3: 3c:81:39:8d:29:d5:80:6e:1e:22:83:6f:40:2c:03: ad:a2:7d:d8:90:e3:2e:ec:48:27:e4:46:d6:d9:24: 1a:24:c9:55:55:15:30:2d:a7:d0:ab:07:20:fd:91: 0f:98:f9:b5:b8:64:13:80:65:9c:78:4e:80:5b:5a: 11:c9:57:68:c1:6b:6c:39:83:82:78:01:4e:7a:91: e7:26:8e:02:d6:a4:69:84:47:f2:db:a6:52:6a:58: 2a:c2:14:a8:6b:01:ae:50:82:27:be:82:72:24:f8: c1:9e:72:bf:7a:07:59:58:97:8c:90:32:f8:5c:1f: 44:a5:8a:9c:c7:a5:63:6e:c8:9f:0c:5d:7f:3b:6e: bb:e7:10:8d:95:28:0f:58:1c:1a:30:93:7d:73:ec: 98:b9:98:f5:1c:98:11:a1:13:66:51:08:48:24:97: db:b7:da:1e:e0:0e:28:b2:a0:21:98:4b:35:bc:71: c2:fb:d0:4d:83:ec:f4:df:37:7e:72:6c:79:f2:3a: b5:b4:81:66:f9:3b:da:d5:e8:b8:67:53:96:70:9c: c0:b3:ef:28:17:56:2c:7a:1b:8e:a1:f3:65:f3:f8: ce:ce:0e:84:b9:0b:b0:19:47:b8:1f:2c:df:b5:73: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C8:BC:84:03:3A:CA:25:E4:A4:50:51:55:35:48:07:68:0E:30:27 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:5a:46:5e:77:64:81:2d:5a:04:2f:e1:be:34:18:fa:dc:d4: 1e:f9:06:b7:f5:8a:47:f6:fd:93:15:c7:2e:2a:c1:cd:ed:b7: 88:49:96:ec:57:22:6b:65:90:8c:21:44:ac:d2:89:01:6c:44: 56:df:0b:c4:15:52:7d:d7:ab:de:eb:18:82:41:66:66:d3:4b: b2:74:e0:42:0e:f8:ff:d6:61:72:04:65:a9:f1:6a:a0:d9:32: 4a:b8:c8:33:18:47:33:3a:b0:43:a5:d8:62:ab:fe:f0:06:f6: dd:bc:bf:68:b3:44:ce:d2:f1:51:23:73:a2:51:26:ff:bc:54: 9b:51:f1:25:b1:82:93:17:a7:b7:06:cf:fe:de:7f:1c:9f:5f: 35:db:b3:15:f6:7a:70:64:dd:b7:80:b1:67:01:72:b0:3f:f1: 67:67:74:f1:2f:06:c5:37:0f:24:8a:f4:c1:ca:3a:2d:c7:49: 73:f5:17:b8:c1:40:aa:c3:a8:f2:98:d1:f7:36:52:ed:b1:23: 35:7e:cc:06:3e:e3:13:2e:2a:63:9f:b3:de:ce:ed:af:7b:5b: 99:27:18:79:77:bc:e7:a9:a1:24:f1:50:e0:f5:91:6a:ed:11: 19:77:5b:88:8e:0c:04:68:d1:f6:0c:99:96:4a:a4:62:81:f0: bf:7c:f2:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUar/J7gLvLWsYwGkVdPC0qGpKTAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTA4MDUwMzM2NTVaFw0yNTA4MDgwOTQzNTVaMDMxMTAvBgNV BAMTKDQyQzhCQzg0MDMzQUNBMjVFNEE0NTA1MTU1MzU0ODA3NjgwRTMwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWnDk8n6KLXQU/1KgJ4zyBOY0p 1YBuHiKDb0AsA62ifdiQ4y7sSCfkRtbZJBokyVVVFTAtp9CrByD9kQ+Y+bW4ZBOA ZZx4ToBbWhHJV2jBa2w5g4J4AU56kecmjgLWpGmER/LbplJqWCrCFKhrAa5Qgie+ gnIk+MGecr96B1lYl4yQMvhcH0SlipzHpWNuyJ8MXX87brvnEI2VKA9YHBowk31z 7Ji5mPUcmBGhE2ZRCEgkl9u32h7gDiiyoCGYSzW8ccL70E2D7PTfN35ybHnyOrW0 gWb5O9rV6LhnU5ZwnMCz7ygXVix6G46h82Xz+M7ODoS5C7AZR7gfLN+1cyhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsi8hAM6yiXkpFBRVTVIB2gOMCcwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJaRl53ZIEtWgQv4b40GPrc1B75Brf1ikf2 /ZMVxy4qwc3tt4hJluxXImtlkIwhRKzSiQFsRFbfC8QVUn3Xq97rGIJBZmbTS7J0 4EIO+P/WYXIEZanxaqDZMkq4yDMYRzM6sEOl2GKr/vAG9t28v2izRM7S8VEjc6JR Jv+8VJtR8SWxgpMXp7cGz/7efxyfXzXbsxX2enBk3beAsWcBcrA/8WdndPEvBsU3 DySK9MHKOi3HSXP1F7jBQKrDqPKY0fc2Uu2xIzV+zAY+4xMuKmOfs97O7a97W5kn GHl3vOepoSTxUOD1kWrtERl3W4iODARo0fYMmZZKpGKB8L988js= -----END CERTIFICATE-----Generated at Thu Aug 7 00:45:39 2025 by rpki-client