$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: fOr44qy+bmfLpOJ000EOdtXgmxfdEvf5YT+Bj5Zmx+w= Subject key identifier: D6:A7:38:72:F6:E2:92:60:88:7C:D2:13:1E:AB:A5:3B:F6:47:F9:F8 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 263CDC4A88AC125F7C4188C3FCF2212015EA4FC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 035F Signing time: Mon 03 Nov 2025 03:00:58 +0000 Manifest this update: Mon 03 Nov 2025 02:55:58 +0000 Manifest next update: Thu 06 Nov 2025 11:01:58 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: quJ0YaWkFiXKRaQl5TgL51JseeBLpfk2uodhDzeBlCg=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3c:dc:4a:88:ac:12:5f:7c:41:88:c3:fc:f2:21:20:15:ea:4f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Nov 3 02:55:58 2025 GMT Not After : Nov 6 11:01:58 2025 GMT Subject: CN=D6A73872F6E29260887CD2131EABA53BF647F9F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:f0:8c:81:d7:96:45:3d:18:10:fe:46:da: 9f:24:09:87:b3:40:0a:55:30:69:0d:af:f4:6e:15: 04:ea:34:88:dd:05:aa:32:d7:0b:9a:8d:f1:fb:8d: 99:38:04:dc:5b:ff:ae:cf:75:90:2e:60:91:85:c2: 27:bb:83:d0:b9:29:de:22:28:06:42:f9:f4:84:72: 18:73:33:ed:d8:40:88:5d:e1:5d:e0:22:16:51:be: d5:ab:41:f3:da:f7:91:30:f5:54:66:cb:02:c1:99: d4:1f:5b:2d:8e:37:64:eb:6c:cb:11:34:1c:9b:21: b1:ef:f8:8b:30:4f:53:73:84:09:70:8d:13:e9:b0: 94:54:8d:9f:89:a9:0a:f8:1d:06:00:f4:f6:51:7e: ff:9a:29:bc:a9:33:2f:4c:48:ee:5f:fc:73:38:cb: fb:c8:ca:64:4e:c7:7a:4b:08:37:8e:cc:41:63:0d: 30:84:56:14:99:80:9c:f6:3e:60:50:b5:09:60:14: 15:8d:a0:cd:01:eb:d3:7f:75:d0:69:bb:f4:95:ce: 7d:de:be:20:f2:ad:84:5a:93:16:9e:88:79:b4:85: 85:ce:e9:24:4a:b6:aa:1a:a5:13:27:31:62:73:07: 56:b8:d3:9a:98:d5:e0:e9:84:9c:dd:9b:72:34:82: 9f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A7:38:72:F6:E2:92:60:88:7C:D2:13:1E:AB:A5:3B:F6:47:F9:F8 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:32:89:83:04:f2:28:44:16:1c:e8:36:8a:ff:9a:b7:ed:09: 96:4c:e6:72:3e:36:6a:d2:87:6e:9c:54:8d:2e:97:d7:98:05: cb:38:af:0a:91:29:50:b6:da:26:09:3e:b7:a9:0c:13:a0:3a: cb:7d:08:e5:1a:d8:69:75:95:0c:08:85:84:46:3e:49:12:c7: e7:85:76:cc:e1:5e:df:a9:fb:64:58:d0:65:7b:7f:f5:bc:35: 4c:52:0c:70:5b:a8:06:fc:59:f9:5b:8a:26:41:a3:f8:1a:6b: 17:cd:12:2a:2f:72:89:b1:96:9c:1d:94:2f:16:7a:99:4f:43: 9f:f9:af:e6:c8:df:ef:b0:59:db:3c:ef:8d:5e:2b:a6:a6:91: 56:0a:4b:95:ab:6a:f7:11:2e:5d:4b:2d:2d:64:e1:67:b4:4b: 68:8c:e1:26:46:26:50:05:5f:e4:e7:8d:f6:3a:67:60:f0:65: 43:a7:bc:58:b1:cd:01:11:ee:3e:5c:5f:79:a6:4f:ac:ad:eb: c6:8b:3d:ac:79:a3:ef:47:5e:e3:a5:8b:cc:65:bc:76:da:d2: 01:ab:70:26:90:78:2b:5b:46:05:01:96:0f:7a:2a:34:fe:25: 09:7b:76:ba:d4:88:47:9b:37:0e:fc:26:8d:1c:4e:5b:f6:4f: 14:bd:ef:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjzcSoisEl98QYjD/PIhIBXqT8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTExMDMwMjU1NThaFw0yNTExMDYxMTAxNThaMDMxMTAvBgNV BAMTKEQ2QTczODcyRjZFMjkyNjA4ODdDRDIxMzFFQUJBNTNCRjY0N0Y5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfvCMgdeWRT0YEP5G2p8kCYez QApVMGkNr/RuFQTqNIjdBaoy1wuajfH7jZk4BNxb/67PdZAuYJGFwie7g9C5Kd4i KAZC+fSEchhzM+3YQIhd4V3gIhZRvtWrQfPa95Ew9VRmywLBmdQfWy2ON2TrbMsR NBybIbHv+IswT1NzhAlwjRPpsJRUjZ+JqQr4HQYA9PZRfv+aKbypMy9MSO5f/HM4 y/vIymROx3pLCDeOzEFjDTCEVhSZgJz2PmBQtQlgFBWNoM0B69N/ddBpu/SVzn3e viDyrYRakxaeiHm0hYXO6SRKtqoapRMnMWJzB1a405qY1eDphJzdm3I0gp9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qc4cvbikmCIfNITHqulO/ZH+fgwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYyiYME8ihEFhzoNor/mrftCZZM5nI+NmrS h26cVI0ul9eYBcs4rwqRKVC22iYJPrepDBOgOst9COUa2Gl1lQwIhYRGPkkSx+eF dszhXt+p+2RY0GV7f/W8NUxSDHBbqAb8WflbiiZBo/gaaxfNEiovcomxlpwdlC8W eplPQ5/5r+bI3++wWds8741eK6amkVYKS5WravcRLl1LLS1k4We0S2iM4SZGJlAF X+TnjfY6Z2DwZUOnvFixzQER7j5cX3mmT6yt68aLPax5o+9HXuOli8xlvHba0gGr cCaQeCtbRgUBlg96KjT+JQl7drrUiEebNw78Jo0cTlv2TxS97zE= -----END CERTIFICATE-----Generated at Tue Nov 4 12:48:06 2025 by rpki-client