$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: BMyOx51wA75OzEmpoKJKV+WPtEdK6kZ8Uqv532T9pv0= Subject key identifier: DC:9D:D1:48:38:17:F2:58:5F:E7:51:9E:D9:A1:33:87:6F:B7:E7:E8 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 250CDFEDE9BB1B66593A5A1146061E5FC6299A46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 010A Signing time: Sat 14 Jun 2025 07:10:51 +0000 Manifest this update: Sat 14 Jun 2025 07:05:51 +0000 Manifest next update: Tue 17 Jun 2025 10:30:51 +0000 Files and hashes: 1: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: 3zhrWWbHg3P13BrTUpT2iJ/COaO4low5DI3VVYSU0yQ=) 2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: HQmVbfWutZ2fC074/Ux0lY+ph7dZIfvBgd/1Hm1UpCI=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: EalNqK7fN+uMVwzoEzqTg9FoUorTzcn6dWS2phuXyqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 10:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0c:df:ed:e9:bb:1b:66:59:3a:5a:11:46:06:1e:5f:c6:29:9a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Jun 14 07:05:51 2025 GMT Not After : Jun 17 10:30:51 2025 GMT Subject: CN=DC9DD1483817F2585FE7519ED9A133876FB7E7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:57:98:b5:7a:5c:e2:f3:39:fa:f2:03:7f: d8:ca:87:55:11:56:d6:05:01:f7:47:50:2d:d1:18: 0f:1e:ee:37:19:01:31:77:ca:d8:73:45:4f:02:72: 74:6d:56:5f:87:62:66:4d:c5:f7:0d:26:5a:9e:c4: 57:eb:1f:8a:ac:e1:bc:6c:d9:0c:ec:f4:62:70:d1: 9e:a8:c1:cd:e5:17:26:64:90:a3:01:aa:a8:51:4d: 43:b3:2f:c3:2b:33:f0:78:85:6f:ec:4b:51:fd:c7: ad:e0:38:9b:0d:e2:41:6d:ab:e3:1e:fa:1f:4c:7e: c0:85:13:b9:27:64:98:42:4a:73:78:93:3b:9b:64: ad:58:b6:2f:bb:2c:5e:34:f8:87:9b:16:58:38:21: fc:bc:8d:31:ba:e4:81:48:7a:b6:79:53:e0:fd:bc: 21:78:16:61:b1:07:be:1a:14:4d:5b:17:6d:fc:00: ad:8d:1c:7e:03:1c:7b:60:47:93:8e:23:08:6b:09: 36:a3:e0:72:35:91:f6:8d:13:b6:dd:8b:6f:dd:16: 68:36:45:34:a8:af:87:9a:68:92:f1:56:92:03:2d: 03:78:ca:25:0a:d4:c7:76:06:f4:5a:6b:97:39:1b: bb:c9:c0:19:42:ac:1a:42:df:1b:b8:9e:8f:d7:88: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9D:D1:48:38:17:F2:58:5F:E7:51:9E:D9:A1:33:87:6F:B7:E7:E8 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b8:7a:60:a2:c8:b2:36:17:5a:c8:ba:78:4c:9c:cb:42:44: d5:d3:80:2f:6e:0e:57:b4:4d:e2:10:4d:49:ed:f0:61:67:c9: 42:a9:b2:f7:c8:61:bc:7f:6e:69:d3:4a:da:c3:7c:59:de:0c: c5:64:48:a2:bb:13:25:7d:ba:51:fe:c7:1f:12:dd:61:ff:1c: c9:04:d2:6b:17:ae:fb:ea:59:a5:28:9f:81:40:e8:64:74:f6: 7f:07:04:5a:94:93:03:b1:3f:99:a5:17:6f:66:4a:7a:75:74: 2c:05:6f:8b:4f:0a:91:c8:de:96:9a:a0:c3:e8:50:1a:8f:ce: ad:93:b6:af:60:90:a6:c0:49:5f:b1:21:f6:b8:2d:3c:fc:29: 37:79:bb:08:93:26:ce:01:75:0d:40:29:da:e6:92:ab:9f:a8: b1:ff:c4:e1:b9:8e:cb:b6:81:a4:d7:ee:05:9b:97:63:9f:be: f7:59:a3:df:3e:63:10:98:5e:48:ec:80:d4:9f:0d:cd:68:4a: 80:26:19:8e:62:16:b1:b4:5f:bd:7b:72:2e:e8:5d:18:5b:cc: fe:05:ec:07:f3:14:18:e8:89:49:6c:ea:11:e4:95:70:f8:0c: 35:79:0a:93:ae:eb:64:e2:3f:85:8c:b1:01:4c:a3:89:5d:92: 3c:bf:bb:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQzf7em7G2ZZOloRRgYeX8YpmkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTA2MTQwNzA1NTFaFw0yNTA2MTcxMDMwNTFaMDMxMTAvBgNV BAMTKERDOUREMTQ4MzgxN0YyNTg1RkU3NTE5RUQ5QTEzMzg3NkZCN0U3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQF1eYtXpc4vM5+vIDf9jKh1UR VtYFAfdHUC3RGA8e7jcZATF3ythzRU8CcnRtVl+HYmZNxfcNJlqexFfrH4qs4bxs 2Qzs9GJw0Z6owc3lFyZkkKMBqqhRTUOzL8MrM/B4hW/sS1H9x63gOJsN4kFtq+Me +h9MfsCFE7knZJhCSnN4kzubZK1Yti+7LF40+IebFlg4Ify8jTG65IFIerZ5U+D9 vCF4FmGxB74aFE1bF238AK2NHH4DHHtgR5OOIwhrCTaj4HI1kfaNE7bdi2/dFmg2 RTSor4eaaJLxVpIDLQN4yiUK1Md2BvRaa5c5G7vJwBlCrBpC3xu4no/XiEX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3J3RSDgX8lhf51Ge2aEzh2+35+gwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFi4emCiyLI2F1rIunhMnMtCRNXTgC9uDle0 TeIQTUnt8GFnyUKpsvfIYbx/bmnTStrDfFneDMVkSKK7EyV9ulH+xx8S3WH/HMkE 0msXrvvqWaUon4FA6GR09n8HBFqUkwOxP5mlF29mSnp1dCwFb4tPCpHI3paaoMPo UBqPzq2Ttq9gkKbASV+xIfa4LTz8KTd5uwiTJs4BdQ1AKdrmkqufqLH/xOG5jsu2 gaTX7gWbl2OfvvdZo98+YxCYXkjsgNSfDc1oSoAmGY5iFrG0X717ci7oXRhbzP4F 7AfzFBjoiUls6hHklXD4DDV5CpOu62TiP4WMsQFMo4ldkjy/uyw= -----END CERTIFICATE-----Generated at Mon Jun 16 01:25:57 2025 by rpki-client