$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: l1vVm2KMEQSPkvaOIcT0l4aj8AAr8AKQ6VN9CI853QM= Subject key identifier: BC:CD:F1:94:3D:F3:51:F4:92:75:61:02:D1:B6:F2:AC:39:69:54:E4 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 294AD193C4B280BD395B38E67C52C89C159F7BA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 0394 Signing time: Mon 02 Mar 2026 11:11:04 +0000 Manifest this update: Mon 02 Mar 2026 11:06:04 +0000 Manifest next update: Thu 05 Mar 2026 18:53:04 +0000 Files and hashes: 1: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) 2: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: F00mySHhBkuJYeiB3qY+bfNQhjZvKSiAAn7J2H+i3QE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4a:d1:93:c4:b2:80:bd:39:5b:38:e6:7c:52:c8:9c:15:9f:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Mar 2 11:06:04 2026 GMT Not After : Mar 5 18:53:04 2026 GMT Subject: CN=BCCDF1943DF351F492756102D1B6F2AC396954E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:79:b1:37:1d:c8:7c:94:bd:30:a5:9e:17: 05:7f:30:7d:2e:52:90:ae:cb:4c:6d:b6:70:d3:4a: 03:cb:d7:d4:b4:df:26:32:95:9b:4f:ac:4a:ec:aa: 08:46:a5:e6:2c:49:15:0f:0b:1b:f3:a1:af:d3:b1: 8c:d9:c8:74:4c:08:f2:06:58:c2:c1:95:73:b7:cf: 79:01:e7:a9:b1:04:c5:63:95:ac:92:51:ba:2f:df: 07:4a:64:45:fe:fc:bc:58:1e:f3:ba:9a:8d:11:cc: b0:d4:71:cd:f2:f5:c1:c4:ca:d2:e1:0a:18:f8:32: 2c:2c:ec:bf:e8:f5:98:f5:4f:8e:fc:95:5c:6b:12: b5:1d:c0:ca:f5:be:68:2c:67:66:6b:45:7c:d9:d6: 2e:01:e7:3b:64:38:1c:bc:be:d4:35:50:5e:11:5b: 89:98:74:10:36:2d:31:94:ca:32:99:84:e5:ed:60: 39:e1:62:03:4a:73:69:9a:34:29:fe:0e:08:ef:12: 78:f4:cd:ff:05:6c:5c:1f:29:c1:b1:1b:d6:42:49: 25:ab:f2:c2:48:ca:24:d6:28:90:e1:d2:da:00:98: 8c:eb:98:bd:3c:29:ac:99:22:3e:14:ff:13:36:07: a2:56:3e:2e:68:97:4f:15:65:a8:8c:1b:29:6d:45: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:F1:94:3D:F3:51:F4:92:75:61:02:D1:B6:F2:AC:39:69:54:E4 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:aa:7d:62:d9:6c:9d:c4:ce:cf:b1:15:1d:76:fe:cc:7b:7f: 89:53:d9:02:1f:ac:a2:2a:6e:55:ca:0b:62:95:e8:9f:fd:40: 3d:a4:a5:e9:13:c7:b9:4a:5d:30:1d:28:91:e5:83:6c:65:6b: 75:9a:b5:c4:83:f3:c3:d8:3b:2d:9d:c5:5b:3e:09:25:43:47: 5e:fc:9d:d5:46:22:9c:eb:c7:2b:dc:fb:80:84:5e:52:cd:06: ba:d2:3f:3c:30:2d:b2:df:a5:19:67:8c:1d:21:76:19:b8:6a: 68:68:38:46:9d:59:c9:a5:41:83:98:ab:5e:0f:e8:26:89:fb: a7:71:4e:75:a5:75:3c:12:6c:bf:c0:4d:73:b3:09:63:3c:8b: ba:74:fa:7a:fd:6e:e9:40:bd:01:04:67:f5:b1:6c:16:ad:fa: c3:e6:d8:eb:8c:2f:71:23:cf:5f:f6:2d:bd:8e:d6:2d:eb:bd: fc:10:45:90:79:de:6b:54:7c:b6:ea:31:f9:d9:14:4d:86:ca: 4d:25:8e:d7:47:a6:5e:5c:75:aa:07:f6:42:70:7d:48:dd:c9: a2:58:e1:8e:69:db:10:aa:f7:22:0a:43:d9:5f:a8:13:d5:53: 71:bb:11:e0:52:99:19:c7:3e:10:64:49:f0:ee:11:68:f5:fd: eb:1f:41:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUrRk8SygL05WzjmfFLInBWfe6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNjAzMDIxMTA2MDRaFw0yNjAzMDUxODUzMDRaMDMxMTAvBgNV BAMTKEJDQ0RGMTk0M0RGMzUxRjQ5Mjc1NjEwMkQxQjZGMkFDMzk2OTU0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjunmxNx3IfJS9MKWeFwV/MH0u UpCuy0xttnDTSgPL19S03yYylZtPrErsqghGpeYsSRUPCxvzoa/TsYzZyHRMCPIG WMLBlXO3z3kB56mxBMVjlaySUbov3wdKZEX+/LxYHvO6mo0RzLDUcc3y9cHEytLh Chj4Miws7L/o9Zj1T478lVxrErUdwMr1vmgsZ2ZrRXzZ1i4B5ztkOBy8vtQ1UF4R W4mYdBA2LTGUyjKZhOXtYDnhYgNKc2maNCn+DgjvEnj0zf8FbFwfKcGxG9ZCSSWr 8sJIyiTWKJDh0toAmIzrmL08KayZIj4U/xM2B6JWPi5ol08VZaiMGyltRToFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvM3xlD3zUfSSdWEC0bbyrDlpVOQwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuqfWLZbJ3Ezs+xFR12/sx7f4lT2QIfrKIq blXKC2KV6J/9QD2kpekTx7lKXTAdKJHlg2xla3WatcSD88PYOy2dxVs+CSVDR178 ndVGIpzrxyvc+4CEXlLNBrrSPzwwLbLfpRlnjB0hdhm4amhoOEadWcmlQYOYq14P 6CaJ+6dxTnWldTwSbL/ATXOzCWM8i7p0+nr9bulAvQEEZ/WxbBat+sPm2OuML3Ej z1/2Lb2O1i3rvfwQRZB53mtUfLbqMfnZFE2Gyk0ljtdHpl5cdaoH9kJwfUjdyaJY 4Y5p2xCq9yIKQ9lfqBPVU3G7EeBSmRnHPhBkSfDuEWj1/esfQVs= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:05 2026 by rpki-client