$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: dBV/STdrnEUE9SckzHbr4IEwZcO4j37XWRx2JbKQY/c= Subject key identifier: 3C:A5:A4:DA:34:B8:4A:4A:10:96:70:06:A4:11:AD:DB:F3:8F:AB:96 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 6135F97ED1D145C84C7D5F99D52F10191E86CF40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 0339 Signing time: Sun 10 Aug 2025 03:00:58 +0000 Manifest this update: Sun 10 Aug 2025 02:55:58 +0000 Manifest next update: Wed 13 Aug 2025 13:30:58 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: cf1wDGOyUzzE+c1WwFswzool9YoaTZDGCEX5VJu5eg8=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 13:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:35:f9:7e:d1:d1:45:c8:4c:7d:5f:99:d5:2f:10:19:1e:86:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Aug 10 02:55:58 2025 GMT Not After : Aug 13 13:30:58 2025 GMT Subject: CN=3CA5A4DA34B84A4A10967006A411ADDBF38FAB96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:49:f8:4b:7f:ef:ef:34:f3:5d:e0:79:d5: 83:a2:f9:39:c6:46:4f:5c:bc:58:db:5c:fb:80:c3: 86:9e:2c:fc:70:97:f8:07:d3:18:0e:f6:5d:c9:f6: a0:1b:bd:85:23:52:b1:d6:6a:75:a4:63:43:b3:5a: 82:ae:8f:9b:e8:2a:c3:97:63:b2:7f:71:32:61:6e: 52:2f:70:58:33:86:ab:a6:81:a5:87:47:2f:a7:d3: bd:02:8c:f9:4c:ea:47:6f:a0:e0:87:47:d4:92:74: b2:a0:b1:29:a7:9d:02:fa:89:ff:6a:e2:10:ce:f0: ac:82:fa:c6:a0:55:df:30:4b:9b:9f:5a:0b:45:36: 37:15:27:21:cd:bb:24:b8:4e:91:d3:8b:3f:ff:3d: 1e:94:58:02:2a:0f:e6:db:a0:35:e4:f0:49:32:f9: 6e:66:f8:32:27:d9:d2:87:24:52:6f:d5:59:2e:49: fc:4b:6e:07:2e:c8:97:34:f3:91:ba:5d:a2:1b:cb: ab:f0:69:6f:89:bd:f2:d6:01:fa:61:be:6d:1e:74: 1c:66:35:0c:64:2e:22:cc:60:37:6f:a6:7e:65:87: b0:fb:1d:1a:87:ea:49:fb:33:50:e2:41:f0:da:1e: 14:79:dd:4a:17:ab:54:6b:cc:c6:aa:42:d7:97:76: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:A4:DA:34:B8:4A:4A:10:96:70:06:A4:11:AD:DB:F3:8F:AB:96 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:61:d7:5f:69:07:27:3d:c4:d9:7c:1f:7d:5d:13:c4:64:c0: 85:50:a3:59:d3:d6:33:40:48:36:39:0d:ed:7b:71:0f:9f:01: d2:4b:d3:76:57:a7:e6:b3:d4:fc:af:28:04:90:d9:ec:b2:5b: 87:54:e8:ce:97:be:9d:df:22:dd:bc:3e:8f:73:94:40:f4:4b: 20:c2:c9:e9:d7:56:80:01:80:8f:0e:41:af:bb:f0:bf:ef:17: 23:42:50:3f:fa:86:8c:9c:fb:4a:a7:16:87:77:c9:ef:10:83: 1a:68:08:e0:f9:0c:d3:fa:3b:75:52:cb:91:f8:c2:83:5f:06: 21:50:35:ab:93:39:0d:d3:f2:f1:93:e3:65:29:f7:5f:1c:d1: 89:eb:f0:72:fc:41:a1:da:7b:ac:87:f5:2f:5c:31:2b:c1:84: 56:b1:79:a2:b1:2f:79:2b:a2:44:f2:0d:20:3e:f3:5f:c1:51: 0c:4b:67:e2:fe:60:fd:bb:e0:a2:b7:b9:3f:78:08:a3:8e:a9: d4:62:04:5f:3f:48:a6:f3:9f:f6:88:4d:0a:81:e0:b4:6b:c3: bc:0b:5c:0c:86:22:a4:4c:fb:ab:20:23:84:55:5b:99:80:c6: ba:68:1b:4c:a2:b4:22:34:d6:8e:8d:54:43:95:0e:98:38:f5: 8e:e8:82:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYTX5ftHRRchMfV+Z1S8QGR6Gz0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTA4MTAwMjU1NThaFw0yNTA4MTMxMzMwNThaMDMxMTAvBgNV BAMTKDNDQTVBNERBMzRCODRBNEExMDk2NzAwNkE0MTFBRERCRjM4RkFCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXT0n4S3/v7zTzXeB51YOi+TnG Rk9cvFjbXPuAw4aeLPxwl/gH0xgO9l3J9qAbvYUjUrHWanWkY0OzWoKuj5voKsOX Y7J/cTJhblIvcFgzhqumgaWHRy+n070CjPlM6kdvoOCHR9SSdLKgsSmnnQL6if9q 4hDO8KyC+sagVd8wS5ufWgtFNjcVJyHNuyS4TpHTiz//PR6UWAIqD+bboDXk8Eky +W5m+DIn2dKHJFJv1VkuSfxLbgcuyJc085G6XaIby6vwaW+JvfLWAfphvm0edBxm NQxkLiLMYDdvpn5lh7D7HRqH6kn7M1DiQfDaHhR53UoXq1RrzMaqQteXdlLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKWk2jS4SkoQlnAGpBGt2/OPq5YwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVh119pByc9xNl8H31dE8RkwIVQo1nT1jNA SDY5De17cQ+fAdJL03ZXp+az1PyvKASQ2eyyW4dU6M6Xvp3fIt28Po9zlED0SyDC yenXVoABgI8OQa+78L/vFyNCUD/6hoyc+0qnFod3ye8QgxpoCOD5DNP6O3VSy5H4 woNfBiFQNauTOQ3T8vGT42Up918c0Ynr8HL8QaHae6yH9S9cMSvBhFaxeaKxL3kr okTyDSA+81/BUQxLZ+L+YP274KK3uT94CKOOqdRiBF8/SKbzn/aITQqB4LRrw7wL XAyGIqRM+6sgI4RVW5mAxrpoG0yitCI01o6NVEOVDpg49Y7oglo= -----END CERTIFICATE-----Generated at Sun Aug 10 18:13:29 2025 by rpki-client