$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: 8C4Vw4j/76gY1VjTwSOYxpvJz4d6d46qhGJ+gqeaIow= Subject key identifier: CB:EC:0C:D7:D6:69:3D:CC:55:F3:7A:5B:F6:03:17:F8:1A:A4:F7:0B Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 1A07B406307236C55136AFB294F84E6555085B53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 03A9 Signing time: Thu 16 Apr 2026 16:51:06 +0000 Manifest this update: Thu 16 Apr 2026 16:46:06 +0000 Manifest next update: Mon 20 Apr 2026 01:48:06 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: ClxdPTmM4wFV4pOOmjz2GRtWClPPtj4eDgM/3r0XArQ=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: ulG9hAPafYF/fjm1VCpnsLbedi2oEF3AIxqv5ctSs9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:07:b4:06:30:72:36:c5:51:36:af:b2:94:f8:4e:65:55:08:5b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Apr 16 16:46:06 2026 GMT Not After : Apr 20 01:48:06 2026 GMT Subject: CN=CBEC0CD7D6693DCC55F37A5BF60317F81AA4F70B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:31:ca:62:60:7a:81:bb:dc:b5:93:56:90: fc:0e:99:db:8d:ec:7e:15:da:35:71:e1:2b:c0:3f: 1d:46:90:58:f6:62:96:e4:1b:da:3e:4e:c3:86:50: b5:f1:d4:05:8f:9e:61:f6:2b:47:6b:5b:76:33:37: df:c7:9f:b1:c9:49:80:e0:13:5d:a2:35:5d:60:f7: 67:c3:d9:4e:4b:22:3a:29:10:16:fc:c0:86:0d:1d: 44:ec:97:60:d4:bd:13:07:46:72:5e:ad:9d:c9:8b: 00:4e:31:c3:da:0b:b9:3c:ba:cb:0e:db:66:cf:a7: 8f:55:a6:10:91:ae:93:1f:3e:5d:a0:8d:20:79:be: 88:df:f8:85:72:c0:db:69:25:d4:7a:d5:a1:1c:11: dc:c5:6e:7f:bf:5d:8a:00:43:9f:35:a1:ce:aa:56: 43:17:9f:da:36:15:7d:a9:28:95:02:36:ec:35:2c: 76:7f:98:23:da:a7:20:60:71:7c:60:2a:55:9a:37: a8:6b:7e:48:f7:5b:4a:e9:69:55:e0:40:31:c3:9c: 7a:0f:79:fa:e7:45:28:4d:46:9c:dc:47:37:d2:9c: 0f:a1:c9:88:5a:bb:0f:9d:c6:78:f0:2c:73:e3:1d: f6:e4:c4:78:29:ae:60:6e:39:02:dc:f2:5e:03:57: 9d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EC:0C:D7:D6:69:3D:CC:55:F3:7A:5B:F6:03:17:F8:1A:A4:F7:0B X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:df:fb:fc:f9:7b:8a:2a:61:df:af:54:0c:23:a3:ad:24:66: b5:ae:a9:40:f0:9c:69:8f:03:a7:a8:51:18:a4:d9:aa:b4:54: cf:a3:db:aa:78:d3:75:b8:8d:53:7f:cc:d9:04:06:75:0f:cd: 74:7b:cd:13:6a:53:02:b5:26:a8:5b:fd:15:06:b5:5d:55:0d: d0:51:10:a4:fa:2e:db:75:01:c9:8d:e7:56:df:9d:ad:82:92: 26:04:bb:b4:4a:fa:d0:d4:36:c1:56:c7:e6:5a:19:cf:ef:84: b1:4c:44:cd:8a:cd:d8:48:3c:7c:59:cb:75:9b:64:2b:16:0a: 67:c0:80:c7:aa:26:16:e7:d1:05:b5:1d:00:81:6c:23:cf:77: 41:19:b5:ec:41:b2:25:1d:d1:30:be:81:38:d7:a7:9e:d6:03: 81:c5:52:47:1e:0e:ad:dd:54:35:5b:a6:76:15:ba:bf:3d:37: 36:51:ae:f3:f0:57:e7:d9:72:d6:33:f9:e5:75:82:2b:74:8e: 98:39:0d:e2:24:31:0a:49:30:cd:60:6a:e6:68:85:12:4a:2a: 2e:5c:0c:d4:9a:c3:89:d6:e9:b8:f1:29:92:61:df:eb:52:5b: 5d:97:0d:0f:0b:a4:d9:a5:b5:64:7e:ef:1b:3f:2c:cb:cf:cc: 07:95:40:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGge0BjByNsVRNq+ylPhOZVUIW1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNjA0MTYxNjQ2MDZaFw0yNjA0MjAwMTQ4MDZaMDMxMTAvBgNV BAMTKENCRUMwQ0Q3RDY2OTNEQ0M1NUYzN0E1QkY2MDMxN0Y4MUFBNEY3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0jHKYmB6gbvctZNWkPwOmduN 7H4V2jVx4SvAPx1GkFj2YpbkG9o+TsOGULXx1AWPnmH2K0drW3YzN9/Hn7HJSYDg E12iNV1g92fD2U5LIjopEBb8wIYNHUTsl2DUvRMHRnJerZ3JiwBOMcPaC7k8ussO 22bPp49VphCRrpMfPl2gjSB5vojf+IVywNtpJdR61aEcEdzFbn+/XYoAQ581oc6q VkMXn9o2FX2pKJUCNuw1LHZ/mCPapyBgcXxgKlWaN6hrfkj3W0rpaVXgQDHDnHoP efrnRShNRpzcRzfSnA+hyYhauw+dxnjwLHPjHfbkxHgprmBuOQLc8l4DV50nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+wM19ZpPcxV83pb9gMX+Bqk9wswHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPf+/z5e4oqYd+vVAwjo60kZrWuqUDwnGmP A6eoURik2aq0VM+j26p403W4jVN/zNkEBnUPzXR7zRNqUwK1Jqhb/RUGtV1VDdBR EKT6Ltt1AcmN51bfna2CkiYEu7RK+tDUNsFWx+ZaGc/vhLFMRM2KzdhIPHxZy3Wb ZCsWCmfAgMeqJhbn0QW1HQCBbCPPd0EZtexBsiUd0TC+gTjXp57WA4HFUkceDq3d VDVbpnYVur89NzZRrvPwV+fZctYz+eV1git0jpg5DeIkMQpJMM1gauZohRJKKi5c DNSaw4nW6bjxKZJh3+tSW12XDQ8LpNmltWR+7xs/LMvPzAeVQPg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:29:56 2026 by rpki-client