$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: DC5mscmCabHxcECAeCORC+ic7HrJwsI+uyr+c0z2q/U= Subject key identifier: EA:C0:AD:31:A5:E9:2C:48:DB:8C:53:EC:D0:56:A8:49:8A:A2:D9:5B Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 36A6A3F02127BF3C84B7CA7C8C9C94B26FBCFF97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: C9 Signing time: Tue 17 Jun 2025 07:51:48 +0000 Manifest this update: Tue 17 Jun 2025 07:46:48 +0000 Manifest next update: Fri 20 Jun 2025 12:52:48 +0000 Files and hashes: 1: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) 2: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: GoSQbbR7c7kjOV99KYtRadUpp5JcHxWU9nqpMiinm3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a6:a3:f0:21:27:bf:3c:84:b7:ca:7c:8c:9c:94:b2:6f:bc:ff:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Jun 17 07:46:48 2025 GMT Not After : Jun 20 12:52:48 2025 GMT Subject: CN=EAC0AD31A5E92C48DB8C53ECD056A8498AA2D95B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:24:7a:ee:9e:f1:e6:b5:70:45:63:e7:65: 7b:a4:23:94:38:20:45:c7:41:b2:4a:5c:ad:79:29: 6a:ab:07:5b:b9:c1:49:b5:5b:9c:e0:75:01:cd:1a: 09:9d:20:99:95:3b:6a:ae:e0:b4:cd:a6:cc:8a:70: 35:bb:84:04:28:38:4a:d8:16:80:38:de:00:3b:07: 88:21:09:1e:35:be:a2:30:a0:2e:41:2c:d9:e7:22: ba:09:61:fe:df:b8:76:f6:ff:76:d1:7e:89:f3:3d: 9c:b0:7b:63:6e:23:c5:64:64:59:7a:22:00:98:0f: 60:9c:db:ef:e0:f3:74:25:6f:81:7a:e8:31:41:99: ed:48:94:be:05:6a:5f:1f:cd:84:b7:f3:75:e4:26: da:0c:e9:8c:5c:13:e1:90:9e:ab:06:bf:e6:e7:4f: bb:17:df:a9:2f:ce:08:48:ee:26:a6:15:4e:03:4f: a7:4c:c2:f4:fd:5f:a7:0f:ef:7b:e5:e4:95:66:27: d2:39:e7:2c:9d:0d:30:87:44:9c:6d:cc:44:74:f1: 9b:ca:10:77:b4:05:4e:f9:1f:6a:4a:43:a0:33:05: 4e:34:1e:b7:1c:cf:cf:04:bf:d4:00:c4:b8:bf:4b: 62:f3:81:91:4d:ca:fa:8d:a7:97:18:eb:82:4b:81: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:AD:31:A5:E9:2C:48:DB:8C:53:EC:D0:56:A8:49:8A:A2:D9:5B X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1f:d5:ee:22:13:a2:06:4e:52:03:36:90:74:75:6a:4f:df: f6:24:b1:88:9e:72:16:4a:23:21:15:b4:71:8b:2a:4b:b4:b3: 87:39:ee:8e:d3:ba:01:d2:50:e7:31:3b:b5:5e:c8:08:c5:48: 6c:b9:47:5a:fe:51:a4:7d:3c:d8:ec:bd:64:a7:97:40:1a:91: ed:45:19:8e:8e:b8:e1:4a:a7:0e:91:70:0e:64:96:c4:4d:2e: 48:13:d0:a5:92:37:e8:5b:17:05:40:76:5d:fd:be:4b:5f:3a: 54:20:48:d1:06:21:4b:bf:a0:86:60:b4:16:9a:38:ed:fd:0b: a3:79:7e:c5:64:5e:da:e3:76:94:8c:89:50:e7:28:54:31:95: 16:ee:2a:93:8b:71:88:e5:72:e8:e3:79:ce:8d:e9:19:80:87: d6:25:8c:a7:14:50:28:d3:e0:48:80:e6:45:d5:81:5c:e2:b8: db:69:55:e2:31:0f:7a:2b:48:3b:a2:44:db:7d:6b:9a:58:a4: 33:6d:92:09:c5:e9:24:ab:69:0c:a0:53:c8:24:f2:d1:fa:60: 62:e3:95:e2:01:c4:4d:12:e1:fe:dc:31:a6:98:30:91:e7:fb: 18:41:07:99:f3:04:b9:9f:07:ea:60:e6:b3:9a:7f:10:c7:f9: a9:5f:10:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqaj8CEnvzyEt8p8jJyUsm+8/5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTA2MTcwNzQ2NDhaFw0yNTA2MjAxMjUyNDhaMDMxMTAvBgNV BAMTKEVBQzBBRDMxQTVFOTJDNDhEQjhDNTNFQ0QwNTZBODQ5OEFBMkQ5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9CR67p7x5rVwRWPnZXukI5Q4 IEXHQbJKXK15KWqrB1u5wUm1W5zgdQHNGgmdIJmVO2qu4LTNpsyKcDW7hAQoOErY FoA43gA7B4ghCR41vqIwoC5BLNnnIroJYf7fuHb2/3bRfonzPZywe2NuI8VkZFl6 IgCYD2Cc2+/g83Qlb4F66DFBme1IlL4Fal8fzYS383XkJtoM6YxcE+GQnqsGv+bn T7sX36kvzghI7iamFU4DT6dMwvT9X6cP73vl5JVmJ9I55yydDTCHRJxtzER08ZvK EHe0BU75H2pKQ6AzBU40Hrccz88Ev9QAxLi/S2LzgZFNyvqNp5cY64JLgYstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6sCtMaXpLEjbjFPs0FaoSYqi2VswHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEf1e4iE6IGTlIDNpB0dWpP3/YksYiechZK IyEVtHGLKku0s4c57o7TugHSUOcxO7VeyAjFSGy5R1r+UaR9PNjsvWSnl0Aake1F GY6OuOFKpw6RcA5klsRNLkgT0KWSN+hbFwVAdl39vktfOlQgSNEGIUu/oIZgtBaa OO39C6N5fsVkXtrjdpSMiVDnKFQxlRbuKpOLcYjlcujjec6N6RmAh9YljKcUUCjT 4EiA5kXVgVziuNtpVeIxD3orSDuiRNt9a5pYpDNtkgnF6SSraQygU8gk8tH6YGLj leIBxE0S4f7cMaaYMJHn+xhBB5nzBLmfB+pg5rOafxDH+alfEFg= -----END CERTIFICATE-----Generated at Tue Jun 17 20:49:29 2025 by rpki-client