$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: ilGzsszXCgQ+AmbNYN34UN83NH7fk17k41OOECMnxiY= Subject key identifier: EE:0B:C4:D6:89:98:EF:1D:62:41:F3:DF:77:0F:8C:5B:44:88:9A:4F Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 69893524E71596788B82A400BF8A5B894C83C879 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 0143 Signing time: Sat 18 Oct 2025 12:40:52 +0000 Manifest this update: Sat 18 Oct 2025 12:35:52 +0000 Manifest next update: Wed 22 Oct 2025 00:19:52 +0000 Files and hashes: 1: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: kHqir2ohY/DBKDB2EwknASTStfgt9cNwKtqHvC+Trqk=) 2: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=) 3: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: 9JDBXYlD9SqW2BMyADf7uhmLucs+uFWH56a3wjHsOJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:89:35:24:e7:15:96:78:8b:82:a4:00:bf:8a:5b:89:4c:83:c8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Oct 18 12:35:52 2025 GMT Not After : Oct 22 00:19:52 2025 GMT Subject: CN=EE0BC4D68998EF1D6241F3DF770F8C5B44889A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:9d:d9:f8:f3:c8:3e:f0:94:e8:1d:fc:6b: 6e:ac:ad:01:eb:b6:1f:e1:c0:04:06:dd:19:2f:62: 9b:b9:e8:bb:8b:6c:4b:aa:5a:2e:6b:c5:b3:5b:f0: e7:7e:84:ed:82:ac:a7:54:57:c9:21:69:14:fc:af: 60:0d:ae:fa:55:89:df:27:cc:a0:45:21:24:07:89: a3:c7:58:06:dc:53:e4:34:9f:6b:83:a0:83:8a:9c: f2:2b:16:96:f8:53:ae:54:67:48:08:98:94:78:e7: 38:98:5f:a0:d9:4d:ef:a3:ca:53:7d:a5:ac:3b:b1: 59:6c:b8:ef:08:74:36:71:b7:75:e3:96:09:63:37: 31:9c:c1:12:89:db:58:56:e4:e5:7e:74:de:07:23: bf:25:c9:b1:27:17:6a:52:e5:34:52:2d:cf:03:a8: 9a:c6:b9:a3:78:3a:9d:71:03:fc:ea:ac:6b:e9:c0: 91:ab:73:7b:32:31:98:93:51:af:6b:31:83:57:7b: be:35:85:c9:d5:cc:ff:3d:a5:ff:9e:f5:21:97:b6: 4f:ec:90:63:6e:89:e8:3c:eb:8c:a9:af:bf:6a:38: 67:94:43:05:92:82:d4:87:3d:d9:9d:f2:70:60:41: 0e:ba:26:13:62:0d:f8:d6:59:ec:c2:f9:d4:7c:ea: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0B:C4:D6:89:98:EF:1D:62:41:F3:DF:77:0F:8C:5B:44:88:9A:4F X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:55:ce:01:23:fd:d9:e2:1d:59:2f:3a:1b:6f:23:ea:77:99: 13:58:ba:dd:87:08:b9:9b:c9:69:82:56:c4:f6:be:f1:15:fd: b4:c2:03:23:7b:37:78:0b:15:85:08:cd:9c:25:f2:bb:61:1f: b4:59:19:3d:46:7f:d5:03:c3:8c:1a:3a:e8:44:d8:a8:3f:0f: 2b:34:e7:e2:2e:6f:78:14:62:b4:85:7f:88:bd:ed:ea:f4:b6: 3d:6d:13:b5:c8:7f:5c:8b:3f:d3:b2:f2:02:5f:c8:a4:6b:df: c5:03:67:4d:73:3c:41:c2:53:19:c3:46:c5:02:b6:fc:92:37: 26:f0:ab:b2:ed:c6:db:22:a0:bc:41:7f:de:8e:08:c8:cc:ac: 30:54:cf:86:37:ee:0b:bf:8b:aa:87:ed:1a:e4:cb:08:ba:01: 2e:54:9a:44:db:d4:06:56:1d:d3:2c:aa:7e:11:4c:2e:d4:dd: b3:fc:a2:2e:04:ee:09:a8:3f:db:a1:2c:63:5f:9e:8b:97:5e: 12:ee:83:c8:aa:b9:21:dc:ef:63:c5:5b:df:c9:27:26:6c:14: 2d:ff:7e:d4:82:94:d0:38:97:44:9f:24:61:1f:07:fe:30:43: 8b:4f:d4:8a:d6:e2:37:0b:58:ac:2b:25:66:54:9c:66:26:69: eb:53:fa:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYk1JOcVlniLgqQAv4pbiUyDyHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTEwMTgxMjM1NTJaFw0yNTEwMjIwMDE5NTJaMDMxMTAvBgNV BAMTKEVFMEJDNEQ2ODk5OEVGMUQ2MjQxRjNERjc3MEY4QzVCNDQ4ODlBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cJ3Z+PPIPvCU6B38a26srQHr th/hwAQG3RkvYpu56LuLbEuqWi5rxbNb8Od+hO2CrKdUV8khaRT8r2ANrvpVid8n zKBFISQHiaPHWAbcU+Q0n2uDoIOKnPIrFpb4U65UZ0gImJR45ziYX6DZTe+jylN9 paw7sVlsuO8IdDZxt3XjlgljNzGcwRKJ21hW5OV+dN4HI78lybEnF2pS5TRSLc8D qJrGuaN4Op1xA/zqrGvpwJGrc3syMZiTUa9rMYNXe741hcnVzP89pf+e9SGXtk/s kGNuieg864ypr79qOGeUQwWSgtSHPdmd8nBgQQ66JhNiDfjWWezC+dR86m8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7gvE1omY7x1iQfPfdw+MW0SImk8wHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVVzgEj/dniHVkvOhtvI+p3mRNYut2HCLmb yWmCVsT2vvEV/bTCAyN7N3gLFYUIzZwl8rthH7RZGT1Gf9UDw4waOuhE2Kg/Dys0 5+Iub3gUYrSFf4i97er0tj1tE7XIf1yLP9Oy8gJfyKRr38UDZ01zPEHCUxnDRsUC tvySNybwq7LtxtsioLxBf96OCMjMrDBUz4Y37gu/i6qH7Rrkywi6AS5UmkTb1AZW HdMsqn4RTC7U3bP8oi4E7gmoP9uhLGNfnouXXhLug8iquSHc72PFW9/JJyZsFC3/ ftSClNA4l0SfJGEfB/4wQ4tP1IrW4jcLWKwrJWZUnGYmaetT+i4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:25 2025 by rpki-client