$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: yE+E1N45GSB5+Ie+1qFzINl3Srm9WOd+y0p7y1HIRXg= Subject key identifier: 33:3B:93:72:BB:62:EF:89:7D:2B:4B:F5:E3:3A:C6:4E:5C:7F:28:07 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 529B8C3102234EAC4CB15BE410CAA71E9C3A3A0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: 0147 Signing time: Thu 26 Mar 2026 03:12:06 +0000 Manifest this update: Thu 26 Mar 2026 03:07:06 +0000 Manifest next update: Sun 29 Mar 2026 09:02:06 +0000 Files and hashes: 1: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: 7oSD/OHXg2vyn0huksTOG5QYbQmDBkUSBCqXjd7vsbk=) 2: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: Xv8kcXDJ6WYMmWOyH4eBz+tykqWc30YT1h8G2TY977E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9b:8c:31:02:23:4e:ac:4c:b1:5b:e4:10:ca:a7:1e:9c:3a:3a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Mar 26 03:07:06 2026 GMT Not After : Mar 29 09:02:06 2026 GMT Subject: CN=333B9372BB62EF897D2B4BF5E33AC64E5C7F2807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:e6:41:50:f9:c4:a6:21:21:a2:0f:0a:5e: f7:4c:1c:13:41:3d:5a:6e:f5:67:95:d3:72:a6:03: 24:b2:1e:6d:af:92:88:f5:36:eb:84:22:c1:39:9d: d6:94:aa:ed:f8:c0:18:8e:a3:e5:6f:d2:bc:fe:ec: 82:d1:6b:87:27:25:8f:ad:ab:31:a8:db:bf:af:0a: d0:9c:63:0a:fb:55:06:8e:48:f4:7f:62:00:66:b7: 1c:9a:c5:88:7e:fc:b8:03:a4:44:e1:41:50:3a:93: ce:ec:5d:3f:d2:12:a9:d8:5e:23:0d:fd:3e:36:db: 91:18:ad:2f:6a:0f:6c:e0:10:ed:37:cc:32:a5:52: 4c:d0:ac:ca:43:b6:bd:94:8c:6a:c6:4b:c5:1b:80: f2:e3:70:12:12:ce:87:b8:92:39:de:d5:e9:c1:4a: 45:05:76:61:43:f2:46:c6:f5:61:02:38:d9:31:82: 0c:79:1c:93:1c:06:53:b6:17:75:ba:e9:2a:59:23: 48:09:ba:2c:8f:61:9f:17:c5:18:68:ae:20:77:a2: 71:1a:cc:75:26:d9:e7:00:3d:4e:f5:ef:0b:80:c5: f2:ee:82:39:04:95:28:6b:d4:8e:47:8d:eb:99:f6: 0c:3f:71:42:d6:75:5e:c7:2b:98:2f:02:f4:be:af: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3B:93:72:BB:62:EF:89:7D:2B:4B:F5:E3:3A:C6:4E:5C:7F:28:07 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:61:80:b8:a7:32:11:05:18:d0:93:0c:19:b0:41:6b:7e:7b: 40:7c:61:d3:0e:6f:31:92:a5:b1:64:0b:4f:33:32:7f:a5:4e: 24:83:11:e2:fe:ac:e6:8b:ad:9f:49:96:d5:36:fe:63:b3:e5: e2:b6:7d:f5:94:ce:84:ff:9c:a0:cf:66:f4:62:c2:8d:2d:cf: a9:be:87:43:0f:d1:6e:ad:e8:f7:2e:71:48:74:52:ae:ca:34: 81:3c:a9:81:1f:e4:e2:1d:6a:ad:18:a6:94:14:be:85:3c:2f: 4b:e7:13:dc:f3:95:48:16:b4:80:65:38:f9:c3:a7:e3:82:bb: 5b:b5:ff:36:56:c3:eb:da:9c:47:45:6c:b9:38:07:32:06:e3: 73:44:cd:45:cc:cc:eb:1e:27:11:5f:c5:b8:79:f5:17:98:cd: d5:d6:c2:e3:38:b7:9f:a1:e6:da:e1:b1:e0:ca:37:af:ec:83: ba:43:75:7d:70:2d:ef:c3:78:c6:4b:2f:e9:47:c4:3f:d3:e5: c6:81:f7:00:17:ce:e9:b2:ac:f7:c7:95:2c:4c:c2:45:0f:9f: 6c:ad:04:0f:a5:54:80:75:a7:3a:97:79:2e:c9:3a:07:2c:73: d2:f6:21:2d:26:13:61:07:30:cb:b7:84:f2:99:8e:9e:e7:42: 0d:a6:c8:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpuMMQIjTqxMsVvkEMqnHpw6OgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNjAzMjYwMzA3MDZaFw0yNjAzMjkwOTAyMDZaMDMxMTAvBgNV BAMTKDMzM0I5MzcyQkI2MkVGODk3RDJCNEJGNUUzM0FDNjRFNUM3RjI4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVOZBUPnEpiEhog8KXvdMHBNB PVpu9WeV03KmAySyHm2vkoj1NuuEIsE5ndaUqu34wBiOo+Vv0rz+7ILRa4cnJY+t qzGo27+vCtCcYwr7VQaOSPR/YgBmtxyaxYh+/LgDpEThQVA6k87sXT/SEqnYXiMN /T4225EYrS9qD2zgEO03zDKlUkzQrMpDtr2UjGrGS8UbgPLjcBISzoe4kjne1enB SkUFdmFD8kbG9WECONkxggx5HJMcBlO2F3W66SpZI0gJuiyPYZ8XxRhoriB3onEa zHUm2ecAPU717wuAxfLugjkElShr1I5HjeuZ9gw/cULWdV7HK5gvAvS+r7O3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMzuTcrti74l9K0v14zrGTlx/KAcwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdhgLinMhEFGNCTDBmwQWt+e0B8YdMObzGS pbFkC08zMn+lTiSDEeL+rOaLrZ9JltU2/mOz5eK2ffWUzoT/nKDPZvRiwo0tz6m+ h0MP0W6t6PcucUh0Uq7KNIE8qYEf5OIdaq0YppQUvoU8L0vnE9zzlUgWtIBlOPnD p+OCu1u1/zZWw+vanEdFbLk4BzIG43NEzUXMzOseJxFfxbh59ReYzdXWwuM4t5+h 5trhseDKN6/sg7pDdX1wLe/DeMZLL+lHxD/T5caB9wAXzumyrPfHlSxMwkUPn2yt BA+lVIB1pzqXeS7JOgcsc9L2IS0mE2EHMMu3hPKZjp7nQg2myP0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:51 2026 by rpki-client