$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: HOhmjz3TvKBuMmqwEWc2Dl0uM1JW2CFMi5eveQ0d1mE= Subject key identifier: 90:5A:8A:3E:C9:5C:06:6B:AE:93:17:E9:2E:64:50:14:21:4C:62:F4 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 2775B72AF2F35EEDC8347946F5FB279A1674068A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 017E Signing time: Sat 28 Feb 2026 22:40:58 +0000 Manifest this update: Sat 28 Feb 2026 22:35:58 +0000 Manifest next update: Wed 04 Mar 2026 07:33:58 +0000 Files and hashes: 1: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: 332oshVVXwCrb2Uu4CZcij2fofMYsyJISk/4XiWZpYk=) 2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: 9JDBXYlD9SqW2BMyADf7uhmLucs+uFWH56a3wjHsOJc=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:75:b7:2a:f2:f3:5e:ed:c8:34:79:46:f5:fb:27:9a:16:74:06:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Feb 28 22:35:58 2026 GMT Not After : Mar 4 07:33:58 2026 GMT Subject: CN=905A8A3EC95C066BAE9317E92E645014214C62F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6e:5e:a7:28:85:00:44:90:f5:85:64:cb:4c: 42:0b:8b:40:11:db:f8:51:4f:16:07:96:38:6c:33: 6c:7b:c6:4d:4a:46:24:fe:2f:df:66:8e:91:04:40: 6e:59:d2:17:7e:67:3c:0d:25:19:d3:19:46:ca:77: ce:c8:8a:ab:93:2a:05:0f:91:64:b3:08:97:b5:21: 83:57:36:05:61:95:5a:ae:1f:c6:8e:16:c3:96:6f: ac:aa:6b:f9:df:eb:97:27:a1:d1:05:6e:6c:b3:e0: 63:89:4d:7c:7c:e8:81:c2:a5:91:21:fe:5c:db:0f: d2:ca:99:b9:80:56:f5:1e:71:a8:ac:ee:75:9e:55: 93:5d:1d:87:09:d6:9c:d8:e3:e9:0d:a4:b0:0f:94: ec:e0:8a:ec:6c:91:9a:b1:31:ca:a1:25:5a:68:bc: e7:0c:f9:b7:39:2d:0b:a8:47:76:21:db:a3:4a:69: 61:84:22:1c:a1:04:05:75:75:d0:0c:0e:c7:71:9c: 8b:4d:ee:da:c3:e8:5f:c3:0d:4c:ba:ba:bc:ff:6d: eb:1f:36:d3:c7:8d:dd:a0:e9:49:3d:9c:8d:79:3d: de:f4:45:22:40:12:e6:a1:23:59:16:4a:03:1e:89: bc:ad:0b:a7:02:7c:f4:4c:ed:95:ae:b2:3e:21:51: c5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5A:8A:3E:C9:5C:06:6B:AE:93:17:E9:2E:64:50:14:21:4C:62:F4 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e3:85:f7:21:87:c1:71:06:de:52:c2:62:9d:29:e8:f5:ef: 41:05:94:6a:88:67:8a:22:c7:58:8b:2b:9a:2f:31:0f:04:92: 7d:e7:b3:65:1d:c9:90:33:e2:f2:95:82:a1:8b:e0:34:aa:4c: 4a:ca:de:b4:fd:d6:36:1e:82:ed:40:f3:6d:fa:18:57:9a:1b: 8e:94:38:55:48:dc:f9:12:70:3d:be:f5:d9:28:c9:b5:63:42: 50:da:db:19:98:8c:3b:20:bc:ae:13:09:07:c3:70:7b:d3:a0: 7e:1c:e4:13:43:d1:9e:d7:c5:d5:86:d1:be:20:4a:c3:25:b3: ff:42:f3:a7:80:0b:40:98:14:82:fb:94:b2:d6:c3:32:3a:d2: f8:2a:ba:2c:fe:b7:ff:6b:e3:b7:0f:e3:77:e1:f0:b2:36:74: b8:9c:c8:de:85:13:5a:c0:cc:74:bd:47:1b:02:68:55:7e:b4: 33:ee:48:4e:5f:73:cc:04:77:e5:d4:1d:8b:d2:17:6b:2c:db: 4c:3c:a4:98:c1:fb:fb:fc:a6:65:85:23:3a:93:f8:8f:20:80: f4:0b:b9:3f:47:16:7b:c7:02:56:c2:2e:26:80:26:66:cb:90: 20:dd:57:85:5b:f4:e7:cc:27:31:df:77:2d:23:51:6e:42:11: 1d:3a:af:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3W3KvLzXu3INHlG9fsnmhZ0BoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNjAyMjgyMjM1NThaFw0yNjAzMDQwNzMzNThaMDMxMTAvBgNV BAMTKDkwNUE4QTNFQzk1QzA2NkJBRTkzMTdFOTJFNjQ1MDE0MjE0QzYyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrbl6nKIUARJD1hWTLTEILi0AR 2/hRTxYHljhsM2x7xk1KRiT+L99mjpEEQG5Z0hd+ZzwNJRnTGUbKd87IiquTKgUP kWSzCJe1IYNXNgVhlVquH8aOFsOWb6yqa/nf65cnodEFbmyz4GOJTXx86IHCpZEh /lzbD9LKmbmAVvUecais7nWeVZNdHYcJ1pzY4+kNpLAPlOzgiuxskZqxMcqhJVpo vOcM+bc5LQuoR3Yh26NKaWGEIhyhBAV1ddAMDsdxnItN7trD6F/DDUy6urz/besf NtPHjd2g6Uk9nI15Pd70RSJAEuahI1kWSgMeibytC6cCfPRM7ZWusj4hUcV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkFqKPslcBmuukxfpLmRQFCFMYvQwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnjhfchh8FxBt5SwmKdKej170EFlGqIZ4oi x1iLK5ovMQ8Ekn3ns2UdyZAz4vKVgqGL4DSqTErK3rT91jYegu1A8236GFeaG46U OFVI3PkScD2+9dkoybVjQlDa2xmYjDsgvK4TCQfDcHvToH4c5BND0Z7XxdWG0b4g SsMls/9C86eAC0CYFIL7lLLWwzI60vgquiz+t/9r47cP43fh8LI2dLicyN6FE1rA zHS9RxsCaFV+tDPuSE5fc8wEd+XUHYvSF2ss20w8pJjB+/v8pmWFIzqT+I8ggPQL uT9HFnvHAlbCLiaAJmbLkCDdV4Vb9OfMJzHfdy0jUW5CER06rxo= -----END CERTIFICATE-----Generated at Mon Mar 2 17:55:15 2026 by rpki-client