$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: V1W+K35p2ocp7L9c06cnMACzR3IF6m/rp+nyPeYDiRE= Subject key identifier: 68:88:F0:CC:45:C4:7E:EF:D9:DD:E1:F7:B3:C5:1B:BF:E4:2B:CF:E1 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 4293BC93EBDACA4E9FA261F5F0D3241B906E3A6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 0110 Signing time: Fri 27 Jun 2025 16:40:52 +0000 Manifest this update: Fri 27 Jun 2025 16:35:52 +0000 Manifest next update: Tue 01 Jul 2025 04:07:52 +0000 Files and hashes: 1: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: HQmVbfWutZ2fC074/Ux0lY+ph7dZIfvBgd/1Hm1UpCI=) 2: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: 5bKvxQRv35V4CVd094rphQldBMu/UtKT77AHhxhW7Kw=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: EalNqK7fN+uMVwzoEzqTg9FoUorTzcn6dWS2phuXyqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 04:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:93:bc:93:eb:da:ca:4e:9f:a2:61:f5:f0:d3:24:1b:90:6e:3a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Jun 27 16:35:52 2025 GMT Not After : Jul 1 04:07:52 2025 GMT Subject: CN=6888F0CC45C47EEFD9DDE1F7B3C51BBFE42BCFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:9c:37:db:94:b1:79:4c:dc:94:0a:bc:42: 0b:e8:ab:c3:5c:d0:b6:c5:1e:b7:fa:46:5b:e8:c0: b6:80:cf:a1:8d:34:f9:f7:2c:fc:a2:a1:b3:09:18: 43:e6:79:83:bb:65:85:83:b5:bd:f2:04:27:d1:08: 3e:54:a1:b4:03:3c:a2:2c:b5:3c:d0:bc:c2:60:aa: ee:8b:dc:3f:5a:8e:47:9c:29:92:9f:02:41:7e:52: 41:2a:90:5f:cb:4d:64:e2:27:cd:b2:52:36:0c:3b: e9:ef:19:77:2e:3b:42:15:d9:c2:b3:8b:f7:18:77: bd:d0:87:9a:87:bc:d9:10:9a:d7:52:bb:99:1f:8f: ae:27:18:99:db:e8:c1:0d:4d:08:bd:09:d3:84:2f: e1:dd:cc:62:7a:2c:ea:aa:d6:01:35:f2:79:0d:c4: 80:06:36:1d:a2:d9:15:30:5e:90:68:61:b1:98:5d: 52:d9:88:22:f2:3f:f6:0f:76:8d:de:16:16:17:ef: 8a:c4:1a:50:c6:fd:85:9d:d3:57:d9:cf:b8:ee:3d: e6:78:57:3a:da:58:b6:c3:71:d5:2b:56:03:bc:95: 0a:98:55:4e:7d:7d:81:4f:11:7e:b2:6c:1a:9d:5d: 4b:7e:7f:3d:8b:0a:9a:26:c7:d0:13:00:bf:0c:4c: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:88:F0:CC:45:C4:7E:EF:D9:DD:E1:F7:B3:C5:1B:BF:E4:2B:CF:E1 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:42:0b:76:d9:ec:29:2b:2c:b1:30:c3:c8:23:9f:36:c4:b1: 70:e1:b4:e9:33:2a:38:9b:6e:82:91:72:a9:99:74:e7:5a:59: 7f:7a:04:61:0d:de:6e:83:fc:86:b4:d9:bd:ec:70:3e:18:88: aa:17:c3:3d:00:f9:af:df:2f:28:c9:31:21:f3:58:a3:50:2e: 69:af:94:ef:f8:98:8b:58:f1:ce:5f:3d:ca:bc:09:d3:c0:db: 3f:ee:60:4c:7c:10:d1:0c:ce:fc:7f:2f:cc:08:90:5c:2b:2a: b6:03:2d:b8:d1:a3:00:14:9e:fc:4c:9f:31:3c:c9:35:57:52: 7b:98:74:d7:23:f9:1c:bf:6c:74:94:d2:5d:70:23:ca:ee:42: 0e:eb:07:ff:52:98:fd:6f:99:50:13:7e:26:d0:33:79:d0:6d: 36:3a:e3:2b:a3:56:56:03:9e:98:25:28:96:74:12:8c:47:90: d6:68:2b:ee:65:7e:7f:09:2c:b3:34:dc:0e:c8:f3:36:31:70: 04:ce:f9:42:c5:58:05:15:b6:52:b5:db:ba:21:c2:67:70:f0: 28:3c:e0:a3:d7:87:62:dd:62:9c:a1:ec:2f:5c:0f:62:ed:e7: d9:84:8f:26:50:08:3f:24:f6:7d:7a:84:a6:80:93:c8:4c:7e: f8:4e:00:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQpO8k+vayk6fomH18NMkG5BuOmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTA2MjcxNjM1NTJaFw0yNTA3MDEwNDA3NTJaMDMxMTAvBgNV BAMTKDY4ODhGMENDNDVDNDdFRUZEOURERTFGN0IzQzUxQkJGRTQyQkNGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKJw325SxeUzclAq8Qgvoq8Nc 0LbFHrf6RlvowLaAz6GNNPn3LPyiobMJGEPmeYO7ZYWDtb3yBCfRCD5UobQDPKIs tTzQvMJgqu6L3D9ajkecKZKfAkF+UkEqkF/LTWTiJ82yUjYMO+nvGXcuO0IV2cKz i/cYd73Qh5qHvNkQmtdSu5kfj64nGJnb6MENTQi9CdOEL+HdzGJ6LOqq1gE18nkN xIAGNh2i2RUwXpBoYbGYXVLZiCLyP/YPdo3eFhYX74rEGlDG/YWd01fZz7juPeZ4 VzraWLbDcdUrVgO8lQqYVU59fYFPEX6ybBqdXUt+fz2LCpomx9ATAL8MTKd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaIjwzEXEfu/Z3eH3s8Ubv+Qrz+EwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZCC3bZ7CkrLLEww8gjnzbEsXDhtOkzKjib boKRcqmZdOdaWX96BGEN3m6D/Ia02b3scD4YiKoXwz0A+a/fLyjJMSHzWKNQLmmv lO/4mItY8c5fPcq8CdPA2z/uYEx8ENEMzvx/L8wIkFwrKrYDLbjRowAUnvxMnzE8 yTVXUnuYdNcj+Ry/bHSU0l1wI8ruQg7rB/9SmP1vmVATfibQM3nQbTY64yujVlYD npglKJZ0EoxHkNZoK+5lfn8JLLM03A7I8zYxcATO+ULFWAUVtlK127ohwmdw8Cg8 4KPXh2LdYpyh7C9cD2Lt59mEjyZQCD8k9n16hKaAk8hMfvhOAJ4= -----END CERTIFICATE-----Generated at Sun Jun 29 19:53:40 2025 by rpki-client