$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: xURh6nMML5ZtgdfXh83349huOUzSHW2M/d+6K86GdZw= Subject key identifier: E3:5C:BF:EB:95:7A:81:46:7E:E3:BA:8A:20:51:D3:82:DA:D4:7A:08 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 54FE47A2381AC46F5B10D3A3D223E4E36BA18FF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 0193 Signing time: Thu 16 Apr 2026 21:51:00 +0000 Manifest this update: Thu 16 Apr 2026 21:46:00 +0000 Manifest next update: Mon 20 Apr 2026 03:47:00 +0000 Files and hashes: 1: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: S/MmXFKCi1O33m8OKB7liqE+LQV77IwfsLmpE8RByaE=) 2: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=) 3: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: 9JDBXYlD9SqW2BMyADf7uhmLucs+uFWH56a3wjHsOJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fe:47:a2:38:1a:c4:6f:5b:10:d3:a3:d2:23:e4:e3:6b:a1:8f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Apr 16 21:46:00 2026 GMT Not After : Apr 20 03:47:00 2026 GMT Subject: CN=E35CBFEB957A81467EE3BA8A2051D382DAD47A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:38:e3:40:b4:fc:7d:7a:19:50:07:be:bc: 86:6b:36:b7:3b:7e:7a:c4:9a:5d:b2:98:59:10:e9: 6e:95:0e:02:59:d4:9b:e6:b1:e2:07:8c:59:39:16: c8:af:7e:fe:57:bc:89:6e:f7:0b:20:00:b3:a5:d6: 94:fc:e5:84:e9:a8:90:99:bc:e4:d2:30:7c:19:2a: c4:21:f4:bf:13:44:1d:3a:ac:3b:70:e8:d5:d9:39: 3d:2a:2e:c7:b7:7c:1b:93:15:65:15:25:a8:ef:2a: 5c:98:03:79:5b:86:57:f7:0f:7e:e0:62:da:0a:18: ee:da:84:12:b1:c7:04:ba:d8:30:53:dd:3b:25:9a: 7e:60:34:63:6a:a0:ea:9d:93:5e:a6:e8:97:75:79: 2a:46:b8:02:5e:07:7d:56:d5:c0:75:93:f3:1d:0a: 77:ba:82:c3:cd:54:ab:12:9c:24:ac:11:e7:f6:4e: 03:01:5d:37:1a:61:9a:f2:d8:3d:1b:a9:05:68:db: e5:d6:8b:4c:e8:72:81:b5:57:2a:20:dd:4d:95:58: c5:6a:a0:dd:8d:a8:22:bb:d4:3d:21:5b:d6:1f:6d: e9:b5:d5:b4:ed:fb:ef:ce:50:9c:f5:ac:74:7d:10: 14:05:00:89:3b:9c:d8:99:2e:cf:ca:0f:f7:e6:82: 76:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5C:BF:EB:95:7A:81:46:7E:E3:BA:8A:20:51:D3:82:DA:D4:7A:08 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c6:21:5e:a6:c3:fd:71:9c:11:b3:1a:5b:3c:be:c6:0f:84: e2:24:5b:2f:20:bc:22:95:76:e6:4d:06:ad:86:bb:4d:de:59: a9:81:aa:ac:24:b9:24:85:50:29:44:c2:f5:9c:4c:15:2c:60: f4:c4:15:7e:02:95:12:80:0c:fb:d1:34:7c:ee:04:9a:a9:e8: 2b:f7:35:d2:d1:2d:ad:7d:4a:bd:c8:2b:3e:72:c7:27:57:24: 41:f1:db:05:a6:9a:7f:22:c3:20:44:91:b7:47:b6:fd:7f:0a: 49:08:32:b2:4b:bf:fd:b3:d7:41:da:65:46:34:de:a5:f5:eb: 93:2b:cc:4b:52:a1:ac:85:7e:08:f1:7f:6d:e3:47:8f:85:ff: 2b:a9:75:4d:28:b6:bd:4c:de:26:b1:0c:15:23:4c:57:b8:25: 01:4f:6f:8b:ad:d1:76:af:17:16:f1:b7:23:8a:0c:ff:bd:85: 16:bf:ac:30:60:8d:bd:5d:99:cb:f9:b9:1c:40:8d:14:0a:b7: 7f:92:8c:af:90:36:d4:ca:57:96:8b:24:41:cb:99:91:d5:37: 93:1f:c4:ca:19:92:9e:e4:b7:bb:f4:53:af:30:58:26:46:55: 2c:eb:75:57:a3:e5:0e:77:01:16:0c:2d:a5:97:45:ee:e8:ea: 65:60:7d:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVP5HojgaxG9bENOj0iPk42uhj/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNjA0MTYyMTQ2MDBaFw0yNjA0MjAwMzQ3MDBaMDMxMTAvBgNV BAMTKEUzNUNCRkVCOTU3QTgxNDY3RUUzQkE4QTIwNTFEMzgyREFENDdBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDDjjQLT8fXoZUAe+vIZrNrc7 fnrEml2ymFkQ6W6VDgJZ1JvmseIHjFk5Fsivfv5XvIlu9wsgALOl1pT85YTpqJCZ vOTSMHwZKsQh9L8TRB06rDtw6NXZOT0qLse3fBuTFWUVJajvKlyYA3lbhlf3D37g YtoKGO7ahBKxxwS62DBT3Tslmn5gNGNqoOqdk16m6Jd1eSpGuAJeB31W1cB1k/Md Cne6gsPNVKsSnCSsEef2TgMBXTcaYZry2D0bqQVo2+XWi0zocoG1Vyog3U2VWMVq oN2NqCK71D0hW9Yfbem11bTt++/OUJz1rHR9EBQFAIk7nNiZLs/KD/fmgnYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU41y/65V6gUZ+47qKIFHTgtrUeggwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXGIV6mw/1xnBGzGls8vsYPhOIkWy8gvCKV duZNBq2Gu03eWamBqqwkuSSFUClEwvWcTBUsYPTEFX4ClRKADPvRNHzuBJqp6Cv3 NdLRLa19Sr3IKz5yxydXJEHx2wWmmn8iwyBEkbdHtv1/CkkIMrJLv/2z10HaZUY0 3qX165MrzEtSoayFfgjxf23jR4+F/yupdU0otr1M3iaxDBUjTFe4JQFPb4ut0Xav FxbxtyOKDP+9hRa/rDBgjb1dmcv5uRxAjRQKt3+SjK+QNtTKV5aLJEHLmZHVN5Mf xMoZkp7kt7v0U68wWCZGVSzrdVej5Q53ARYMLaWXRe7o6mVgfVY= -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:52 2026 by rpki-client