$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: qbXpnSsSnoPYBMnskNLDQSldvayi01k6KKzYLnwDHvs= Subject key identifier: 80:B9:31:C3:E6:20:E0:5D:36:68:C5:FC:01:2C:EA:5F:C1:3E:37:25 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 2FE4AABB2C15EE67263039FE2015C80C4C60CA5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: CE Signing time: Sat 28 Jun 2025 09:51:47 +0000 Manifest this update: Sat 28 Jun 2025 09:46:47 +0000 Manifest next update: Tue 01 Jul 2025 18:17:47 +0000 Files and hashes: 1: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) 2: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: 74bqe+WAFMaGjtu3mJS22omQkZT3hcG4IiIMBKzpgMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e4:aa:bb:2c:15:ee:67:26:30:39:fe:20:15:c8:0c:4c:60:ca:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Jun 28 09:46:47 2025 GMT Not After : Jul 1 18:17:47 2025 GMT Subject: CN=80B931C3E620E05D3668C5FC012CEA5FC13E3725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:8c:80:00:07:04:5d:6d:97:5f:c2:46:e0: 70:3f:43:a9:74:c7:e7:66:5b:87:f3:bf:d0:6a:8c: 4c:d1:40:e9:70:74:58:81:f7:b0:68:43:48:bc:43: 14:4a:c5:c1:b8:c2:39:e3:5e:e1:b6:3f:9b:6c:ed: e9:f4:44:dc:34:4e:1c:01:25:70:8c:ce:7e:31:c4: 5d:43:89:8e:56:dd:d3:82:7e:77:c0:f8:96:5d:23: a8:fb:69:59:60:79:70:51:ef:aa:c1:db:16:f0:df: 25:ed:be:4b:29:07:16:b6:b1:c6:e4:f8:ec:0d:7e: 90:61:05:74:02:8d:d1:c2:95:24:ec:b6:49:84:8b: 6b:ae:3f:ce:13:2b:70:95:e4:b2:e6:10:57:9d:47: c1:fe:11:8f:05:86:37:da:05:0f:8a:12:6c:07:8f: 0b:23:a4:74:cd:fa:e4:e1:86:ed:de:56:81:ee:97: a5:da:1f:b8:ba:6b:cd:15:9d:e3:86:53:5f:ca:18: 4f:50:46:4c:8b:2a:c1:4f:fb:85:20:6b:f5:3a:cf: b5:c8:ab:5f:f3:54:ae:89:3f:04:ad:77:32:19:53: 31:cc:f8:c7:ec:e1:26:3d:67:1b:be:3a:fc:ed:19: e2:aa:d7:c5:d4:4b:66:45:33:c7:35:16:d7:a1:d3: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B9:31:C3:E6:20:E0:5D:36:68:C5:FC:01:2C:EA:5F:C1:3E:37:25 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1a:80:99:52:54:d0:a1:c5:1b:e8:23:89:6c:18:45:05:d5: ac:09:3c:fe:ab:8d:a1:30:8a:ec:f1:a8:7e:b1:96:be:e4:e2: 30:0a:8f:89:52:54:b8:7d:93:10:3e:30:50:6c:fb:85:39:84: 29:49:97:a4:5d:03:98:70:4f:ab:b7:cb:94:3c:38:6a:2d:35: 83:bc:69:11:67:15:a7:4e:f3:50:f0:08:21:79:64:6f:30:f6: 75:0c:0e:39:70:20:f4:d1:e7:7a:cb:ae:2b:87:d1:0b:d6:e6: 1d:ec:97:fd:bd:0a:7e:4e:d0:5d:92:52:67:08:2d:76:7a:61: 68:44:de:22:d6:5b:59:37:40:b8:88:1e:a8:82:09:c0:d6:48: 6f:14:30:6c:aa:fa:2e:80:55:da:7e:5c:bc:79:1b:36:27:2f: f0:22:36:32:57:9f:3f:a0:ba:49:e4:7e:e0:d1:41:2c:27:c1: b5:14:e7:e6:81:c6:1e:1f:48:7f:b7:07:a1:a8:0f:0a:04:cb: e2:71:55:8c:4d:44:e2:d0:93:36:93:dc:28:ae:21:2a:5f:bc: 26:91:e6:a0:23:ba:4a:8b:3a:34:0c:43:5e:6c:6a:da:7c:14: fd:97:42:4f:9c:cd:0e:b5:e8:2d:68:ca:7d:b2:8e:49:ab:fe: 57:4c:8a:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+SquywV7mcmMDn+IBXIDExgylswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTA2MjgwOTQ2NDdaFw0yNTA3MDExODE3NDdaMDMxMTAvBgNV BAMTKDgwQjkzMUMzRTYyMEUwNUQzNjY4QzVGQzAxMkNFQTVGQzEzRTM3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbYyAAAcEXW2XX8JG4HA/Q6l0 x+dmW4fzv9BqjEzRQOlwdFiB97BoQ0i8QxRKxcG4wjnjXuG2P5ts7en0RNw0ThwB JXCMzn4xxF1DiY5W3dOCfnfA+JZdI6j7aVlgeXBR76rB2xbw3yXtvkspBxa2scbk +OwNfpBhBXQCjdHClSTstkmEi2uuP84TK3CV5LLmEFedR8H+EY8FhjfaBQ+KEmwH jwsjpHTN+uThhu3eVoHul6XaH7i6a80VneOGU1/KGE9QRkyLKsFP+4Uga/U6z7XI q1/zVK6JPwStdzIZUzHM+Mfs4SY9Zxu+OvztGeKq18XUS2ZFM8c1Fteh04NDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLkxw+Yg4F02aMX8ASzqX8E+NyUwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUagJlSVNChxRvoI4lsGEUF1awJPP6rjaEw iuzxqH6xlr7k4jAKj4lSVLh9kxA+MFBs+4U5hClJl6RdA5hwT6u3y5Q8OGotNYO8 aRFnFadO81DwCCF5ZG8w9nUMDjlwIPTR53rLriuH0QvW5h3sl/29Cn5O0F2SUmcI LXZ6YWhE3iLWW1k3QLiIHqiCCcDWSG8UMGyq+i6AVdp+XLx5GzYnL/AiNjJXnz+g uknkfuDRQSwnwbUU5+aBxh4fSH+3B6GoDwoEy+JxVYxNROLQkzaT3CiuISpfvCaR 5qAjukqLOjQMQ15satp8FP2XQk+czQ616C1oyn2yjkmr/ldMitE= -----END CERTIFICATE-----Generated at Sun Jun 29 19:56:39 2025 by rpki-client