$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: oPPm8YvmoqpahN7QVJ4B2L49VfX071tgsgW820smtcc= Subject key identifier: 76:63:C6:EA:64:4F:0B:CB:F4:0C:ED:3E:1B:7A:34:9B:B9:EC:50:9B Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 31610CC89BDD875FE23F87060F6440067B1DF2ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 0358 Signing time: Sat 18 Oct 2025 10:40:58 +0000 Manifest this update: Sat 18 Oct 2025 10:35:58 +0000 Manifest next update: Tue 21 Oct 2025 19:06:58 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: Sc9Ob8SwbDvfJqcVac62GoRYxGdJtakQYlMOYRVtNR0=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:61:0c:c8:9b:dd:87:5f:e2:3f:87:06:0f:64:40:06:7b:1d:f2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Oct 18 10:35:58 2025 GMT Not After : Oct 21 19:06:58 2025 GMT Subject: CN=7663C6EA644F0BCBF40CED3E1B7A349BB9EC509B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:fb:73:97:79:0a:92:f7:94:da:cb:18:73: 72:cd:1d:bf:44:eb:40:d4:31:ba:9c:68:96:fd:ca: 41:f3:b4:b1:65:a2:57:cd:b5:b6:73:35:49:2d:b7: 52:08:1d:f1:0b:9c:da:ec:3e:c5:5d:ae:de:ad:16: da:ab:bb:ea:43:af:9f:7b:8c:cc:d4:d0:9e:56:3d: d0:c8:bb:81:06:c6:8a:87:60:c5:3c:9b:85:c5:b4: b5:dd:ef:02:0a:82:43:4f:dd:17:b5:a1:24:fc:ca: 32:25:ec:70:6d:33:28:17:93:bc:0f:41:b1:40:1f: 32:4e:ba:73:1f:89:ae:9d:f7:02:bd:14:96:72:6e: 69:2e:67:a1:a1:e9:14:4e:9c:88:71:a7:90:fc:1b: e7:6d:b0:7e:5a:5b:fd:33:c0:c5:ed:c4:dc:fc:5f: 84:b4:1b:75:ff:fe:d1:63:2c:9c:4b:9a:e2:0c:00: 46:07:de:aa:3a:d7:ed:90:e5:eb:28:97:18:18:b7: a6:98:fd:44:62:b2:64:67:56:e8:d0:b7:30:a8:40: d1:8b:43:e4:05:0b:4f:b2:00:d8:4c:89:9f:ee:7b: 76:c9:c9:ef:d4:92:78:5b:ca:4a:85:27:67:eb:a5: 00:87:15:ba:aa:18:2a:c3:bf:44:79:aa:02:ad:d4: 38:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:63:C6:EA:64:4F:0B:CB:F4:0C:ED:3E:1B:7A:34:9B:B9:EC:50:9B X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:c8:dc:aa:72:65:5e:ab:5c:a8:cc:53:04:d2:63:5d:b4:9b: 80:ab:ec:8e:35:0c:02:a1:de:bb:80:de:57:a7:c0:64:f1:f8: 4f:e7:cf:f9:87:28:ab:f6:57:3d:49:aa:dc:f8:f5:2b:c4:f6: 66:27:95:c5:20:31:a0:25:ca:88:3a:a5:8e:66:0c:55:4e:3a: de:98:b8:7e:e1:00:46:13:ce:9c:9e:6f:39:3a:82:76:cc:e5: 66:68:8a:ed:26:20:c4:6e:7f:ac:83:59:4d:a3:94:ed:23:fc: 71:f7:45:64:ce:95:48:8b:b0:5c:a5:b3:63:9d:4e:f6:1e:63: 4e:96:6b:fe:f4:dd:b5:db:09:e2:9a:53:ef:8b:c5:05:b5:ac: 91:60:e1:67:89:54:a5:f2:33:09:2e:ac:e2:3b:1c:66:31:78: 2c:54:1e:64:da:c4:a1:79:29:5e:02:b1:d4:af:72:2e:6e:63: 1d:ef:c2:41:ca:ed:0f:0a:70:e8:61:33:3e:cf:16:02:c8:0e: eb:90:2a:08:16:19:4b:7e:c3:43:ff:a7:17:c3:69:d7:22:38: b7:44:55:71:70:ec:85:a0:46:8e:60:2f:68:51:e4:6d:d9:66: 0e:c1:b0:55:c7:9c:54:bc:bf:94:55:50:70:d2:c2:60:33:12: 37:2f:fe:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWEMyJvdh1/iP4cGD2RABnsd8u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTEwMTgxMDM1NThaFw0yNTEwMjExOTA2NThaMDMxMTAvBgNV BAMTKDc2NjNDNkVBNjQ0RjBCQ0JGNDBDRUQzRTFCN0EzNDlCQjlFQzUwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvftzl3kKkveU2ssYc3LNHb9E 60DUMbqcaJb9ykHztLFlolfNtbZzNUktt1IIHfELnNrsPsVdrt6tFtqru+pDr597 jMzU0J5WPdDIu4EGxoqHYMU8m4XFtLXd7wIKgkNP3Re1oST8yjIl7HBtMygXk7wP QbFAHzJOunMfia6d9wK9FJZybmkuZ6Gh6RROnIhxp5D8G+dtsH5aW/0zwMXtxNz8 X4S0G3X//tFjLJxLmuIMAEYH3qo61+2Q5esolxgYt6aY/URismRnVujQtzCoQNGL Q+QFC0+yANhMiZ/ue3bJye/UknhbykqFJ2frpQCHFbqqGCrDv0R5qgKt1DgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmPG6mRPC8v0DO0+G3o0m7nsUJswHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLI3KpyZV6rXKjMUwTSY120m4Cr7I41DAKh 3ruA3lenwGTx+E/nz/mHKKv2Vz1Jqtz49SvE9mYnlcUgMaAlyog6pY5mDFVOOt6Y uH7hAEYTzpyebzk6gnbM5WZoiu0mIMRuf6yDWU2jlO0j/HH3RWTOlUiLsFyls2Od TvYeY06Wa/703bXbCeKaU++LxQW1rJFg4WeJVKXyMwkurOI7HGYxeCxUHmTaxKF5 KV4CsdSvci5uYx3vwkHK7Q8KcOhhMz7PFgLIDuuQKggWGUt+w0P/pxfDadciOLdE VXFw7IWgRo5gL2hR5G3ZZg7BsFXHnFS8v5RVUHDSwmAzEjcv/tE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:07:27 2025 by rpki-client