$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: Rkooz9ir/LFTTga9Clcg6AwjTDe4UqJc86L8W6uazPw= Subject key identifier: A7:F8:B0:6A:D5:1D:91:EB:B7:4E:8E:8D:86:1F:82:90:AD:70:FC:2B Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 16151F804F7F0D73B6006E6448E56C8278E38A7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 039E Signing time: Wed 25 Mar 2026 06:11:07 +0000 Manifest this update: Wed 25 Mar 2026 06:06:07 +0000 Manifest next update: Sat 28 Mar 2026 06:18:07 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: Zjd6AWMSK0Fr7pzuwYNxxka4d9Pf/pZ9oaKxah4aCKo=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:15:1f:80:4f:7f:0d:73:b6:00:6e:64:48:e5:6c:82:78:e3:8a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Mar 25 06:06:07 2026 GMT Not After : Mar 28 06:18:07 2026 GMT Subject: CN=A7F8B06AD51D91EBB74E8E8D861F8290AD70FC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:65:fc:2b:85:01:e7:5e:f8:96:7e:ac:0f: 40:6c:f5:04:2e:32:2f:41:16:ce:6b:4a:ad:06:ff: 0a:41:99:47:13:17:23:86:7b:57:91:e2:2c:12:99: 90:ed:f3:65:1b:da:ef:0f:1c:52:73:23:c4:10:6c: 2a:5f:1e:78:6e:8a:aa:bd:0f:bb:37:73:24:fe:47: 04:ba:30:9f:f9:db:6b:92:cf:ed:65:45:ef:6f:a2: ee:93:61:58:2d:b3:61:91:f0:42:86:df:37:df:1e: 96:ae:2b:57:9c:28:0a:1c:3d:d6:d0:23:eb:19:fb: c4:4c:82:42:4d:9d:16:2d:1e:01:c4:f0:52:9a:2e: cf:51:d1:47:5f:9e:e8:0c:e9:45:a3:47:ab:53:db: 82:fc:37:e3:81:ae:2f:d8:c1:96:7f:b1:b5:38:5a: 10:33:d6:f5:83:58:6a:ff:31:89:c3:81:a8:f7:9a: ad:72:c7:b6:dc:a7:82:83:67:64:35:53:27:35:47: 77:e1:e0:a3:37:72:f2:12:4d:2a:20:ee:f7:47:2f: 5c:b6:37:5d:46:a0:07:34:aa:0b:72:f1:92:88:23: 41:06:d5:01:9c:4a:14:a3:b7:03:a8:50:a2:e7:9c: c0:93:bf:ae:5b:21:96:1f:7f:a8:e0:21:59:1f:04: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F8:B0:6A:D5:1D:91:EB:B7:4E:8E:8D:86:1F:82:90:AD:70:FC:2B X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ad:9d:a3:b6:01:38:aa:fb:d4:c5:4b:92:ae:74:ac:95:5e: 8b:d0:80:ad:b2:91:c3:66:86:28:f7:2a:8b:fb:e8:61:67:49: 3d:c2:6c:9d:31:cd:ec:56:09:51:f2:7b:28:0d:98:6f:0e:24: 3f:81:f5:b7:43:ab:cd:e6:46:fd:5e:da:35:2f:42:bb:5d:2b: d8:7c:e2:f6:90:a7:e1:a7:e9:e1:36:cd:23:71:33:cb:c7:0b: 8d:db:53:bd:3e:57:9d:6d:1f:71:ec:a5:2d:ad:bc:3a:a5:b4: 0d:c4:32:1c:53:5f:3a:02:c2:f1:2e:3c:fc:aa:a2:14:23:67: fb:4c:46:c4:63:8f:28:35:7f:63:ea:cf:05:ca:f2:cf:3a:47: 53:06:6e:26:60:fa:ee:08:f4:9d:85:7a:d0:bf:94:82:88:0e: f0:11:95:04:bf:35:1b:36:9d:e7:35:a8:a5:8b:a7:d4:be:3a: a9:e1:96:0e:ad:ae:87:6e:ff:ba:f9:43:fa:02:08:ab:14:70: d0:26:90:4b:fa:00:0d:f6:85:e9:a6:dd:35:2a:ce:fa:89:b4: 69:30:2f:20:cc:8f:e7:c2:32:86:ad:11:15:56:a4:a6:92:a4: f9:02:09:00:6b:c3:ad:56:92:68:18:d3:01:a6:a0:7f:e5:1d: 2f:c4:e2:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhUfgE9/DXO2AG5kSOVsgnjjinowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNjAzMjUwNjA2MDdaFw0yNjAzMjgwNjE4MDdaMDMxMTAvBgNV BAMTKEE3RjhCMDZBRDUxRDkxRUJCNzRFOEU4RDg2MUY4MjkwQUQ3MEZDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/mX8K4UB5174ln6sD0Bs9QQu Mi9BFs5rSq0G/wpBmUcTFyOGe1eR4iwSmZDt82Ub2u8PHFJzI8QQbCpfHnhuiqq9 D7s3cyT+RwS6MJ/522uSz+1lRe9vou6TYVgts2GR8EKG3zffHpauK1ecKAocPdbQ I+sZ+8RMgkJNnRYtHgHE8FKaLs9R0UdfnugM6UWjR6tT24L8N+OBri/YwZZ/sbU4 WhAz1vWDWGr/MYnDgaj3mq1yx7bcp4KDZ2Q1Uyc1R3fh4KM3cvISTSog7vdHL1y2 N11GoAc0qgty8ZKII0EG1QGcShSjtwOoUKLnnMCTv65bIZYff6jgIVkfBOcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/iwatUdkeu3To6Nhh+CkK1w/CswHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6tnaO2ATiq+9TFS5KudKyVXovQgK2ykcNm hij3Kov76GFnST3CbJ0xzexWCVHyeygNmG8OJD+B9bdDq83mRv1e2jUvQrtdK9h8 4vaQp+Gn6eE2zSNxM8vHC43bU70+V51tH3HspS2tvDqltA3EMhxTXzoCwvEuPPyq ohQjZ/tMRsRjjyg1f2PqzwXK8s86R1MGbiZg+u4I9J2FetC/lIKIDvARlQS/NRs2 nec1qKWLp9S+Oqnhlg6trodu/7r5Q/oCCKsUcNAmkEv6AA32hemm3TUqzvqJtGkw LyDMj+fCMoatERVWpKaSpPkCCQBrw61WkmgY0wGmoH/lHS/E4k4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:13 2026 by rpki-client