$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: FyNDEiONjSym31Nr4dsqvFQytBDn5JDLB1ZxiFZJf5o= Subject key identifier: F3:1F:E1:FC:8A:4F:83:2F:19:54:C6:4D:51:EE:BC:4E:8B:7F:B4:89 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 1789D9D0C7493346ECAF004A01EFE52A624D65CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: FB Signing time: Sun 11 May 2025 09:10:51 +0000 Manifest this update: Sun 11 May 2025 09:05:51 +0000 Manifest next update: Wed 14 May 2025 19:38:51 +0000 Files and hashes: 1: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: syUBcqhYjgUdfimhkVw0UfJsBdHxF5XWjoil6RtGkaE=) 2: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: EalNqK7fN+uMVwzoEzqTg9FoUorTzcn6dWS2phuXyqc=) 3: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: HQmVbfWutZ2fC074/Ux0lY+ph7dZIfvBgd/1Hm1UpCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 19:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:89:d9:d0:c7:49:33:46:ec:af:00:4a:01:ef:e5:2a:62:4d:65:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: May 11 09:05:51 2025 GMT Not After : May 14 19:38:51 2025 GMT Subject: CN=F31FE1FC8A4F832F1954C64D51EEBC4E8B7FB489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:21:dd:5f:4d:f2:79:92:81:68:4d:45:79:26: e8:05:b8:7d:ec:fb:f0:7a:27:fe:a1:4e:0d:de:fd: e2:e0:42:55:db:2e:b8:a7:93:45:c0:a8:5e:85:20: ca:fd:40:4c:ea:72:14:b2:a9:43:48:05:80:cc:db: 21:fd:5c:35:50:11:05:26:f2:03:e0:15:0f:95:4b: ed:65:19:f7:77:25:1d:bb:2d:2b:83:60:8c:c3:0c: b7:35:d1:c9:db:79:0f:b8:b3:32:d3:75:21:ec:c5: 0d:cc:23:03:fd:26:8d:b4:e2:c1:2d:98:dc:5b:5d: f0:54:23:b4:75:95:ff:9f:9c:eb:d3:ff:65:d5:ba: 8b:d2:02:ad:55:38:90:63:27:f4:58:35:ba:7c:8f: be:75:ec:f1:e9:cc:f7:bf:c9:73:62:fa:c2:a5:a4: c2:b4:f1:51:b2:f5:7a:3d:0e:53:be:d7:b2:74:68: 6f:75:2f:60:58:94:9a:c2:34:4f:9c:d2:ec:04:c7: e6:7c:2a:da:f5:28:77:6a:68:65:d5:b8:af:bc:af: da:17:11:6e:eb:99:92:ef:e1:16:2e:45:8d:a8:11: 0e:af:85:6c:a7:fc:1b:57:18:26:4d:b0:ed:10:7f: 0c:b5:15:1e:9e:f0:da:24:62:f9:1f:c8:04:2c:4c: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1F:E1:FC:8A:4F:83:2F:19:54:C6:4D:51:EE:BC:4E:8B:7F:B4:89 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:01:a0:55:af:fe:ed:df:ba:fb:9e:08:3d:d1:03:a8:60:eb: 72:20:95:eb:e7:9c:01:43:52:73:05:5c:05:1c:40:12:c4:20: 00:93:36:ed:15:83:df:b1:51:2d:c7:a1:b1:e2:cd:d2:3b:07: 2c:45:da:bf:2d:e4:ab:d4:1f:39:13:35:8a:87:d1:00:e8:a1: 4b:42:e5:8d:1e:83:11:f5:a2:d7:f7:a2:de:4b:32:16:8f:b4: 7b:dc:6f:20:10:80:47:bb:6d:7a:9f:68:03:97:00:81:97:8e: 1a:7c:39:18:60:91:ce:ff:7a:43:ac:68:a3:85:8c:06:1a:1f: 29:53:ab:e5:30:cd:cf:57:50:e1:eb:cb:49:6c:c5:70:c9:82: 8b:34:43:e3:97:6e:b4:84:ff:e2:19:5c:a9:e8:16:d8:85:02: 78:58:9c:fa:65:33:9f:12:2c:d4:cb:9e:ff:64:49:fe:04:56: f5:26:fe:67:a1:4c:8b:6d:fc:7a:7d:b0:90:d5:d0:11:13:ec: 0d:a3:fa:81:09:88:61:ec:73:37:a8:ea:5f:dd:4c:57:23:5a: 9a:9f:a0:71:f8:71:9a:39:d8:01:28:3c:a2:ba:1b:b0:4a:83: 9e:8c:0a:e4:5c:d5:11:ef:c1:50:8f:5e:69:39:c6:09:0a:48: 4e:f6:e0:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4nZ0MdJM0bsrwBKAe/lKmJNZcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTA1MTEwOTA1NTFaFw0yNTA1MTQxOTM4NTFaMDMxMTAvBgNV BAMTKEYzMUZFMUZDOEE0RjgzMkYxOTU0QzY0RDUxRUVCQzRFOEI3RkI0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgId1fTfJ5koFoTUV5JugFuH3s +/B6J/6hTg3e/eLgQlXbLrink0XAqF6FIMr9QEzqchSyqUNIBYDM2yH9XDVQEQUm 8gPgFQ+VS+1lGfd3JR27LSuDYIzDDLc10cnbeQ+4szLTdSHsxQ3MIwP9Jo204sEt mNxbXfBUI7R1lf+fnOvT/2XVuovSAq1VOJBjJ/RYNbp8j7517PHpzPe/yXNi+sKl pMK08VGy9Xo9DlO+17J0aG91L2BYlJrCNE+c0uwEx+Z8Ktr1KHdqaGXVuK+8r9oX EW7rmZLv4RYuRY2oEQ6vhWyn/BtXGCZNsO0Qfwy1FR6e8NokYvkfyAQsTA/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8x/h/IpPgy8ZVMZNUe68Tot/tIkwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsBoFWv/u3fuvueCD3RA6hg63IglevnnAFD UnMFXAUcQBLEIACTNu0Vg9+xUS3HobHizdI7ByxF2r8t5KvUHzkTNYqH0QDooUtC 5Y0egxH1otf3ot5LMhaPtHvcbyAQgEe7bXqfaAOXAIGXjhp8ORhgkc7/ekOsaKOF jAYaHylTq+Uwzc9XUOHry0lsxXDJgos0Q+OXbrSE/+IZXKnoFtiFAnhYnPplM58S LNTLnv9kSf4EVvUm/mehTItt/Hp9sJDV0BET7A2j+oEJiGHsczeo6l/dTFcjWpqf oHH4cZo52AEoPKK6G7BKg56MCuRc1RHvwVCPXmk5xgkKSE724Ck= -----END CERTIFICATE-----Generated at Mon May 12 02:19:39 2025 by rpki-client