$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: oscHv4kbKVkPkmbDlidXHB/UzWHfudYvhC6I3pmj068= Subject key identifier: 69:75:DE:9B:4D:46:64:20:34:27:98:D3:AC:1C:EA:29:01:47:F1:8B Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 516171C2A2D4799C2443602E83A6D662163F4703 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 04F6 Signing time: Sat 19 Jul 2025 00:32:21 +0000 Manifest this update: Sat 19 Jul 2025 00:27:21 +0000 Manifest next update: Tue 22 Jul 2025 11:09:21 +0000 Files and hashes: 1: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: tjDe51+hM4hCUTaaBPACrV/2oYmUAvj1uMlxm4CiI9w=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 11:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:61:71:c2:a2:d4:79:9c:24:43:60:2e:83:a6:d6:62:16:3f:47:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Jul 19 00:27:21 2025 GMT Not After : Jul 22 11:09:21 2025 GMT Subject: CN=6975DE9B4D466420342798D3AC1CEA290147F18B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:0e:d6:ed:45:ad:c9:a8:94:50:8c:89:3c: 8c:31:95:32:e7:3e:6f:ae:42:c8:f5:82:e8:41:4e: 57:98:c1:b8:87:9f:32:1c:1b:94:e7:10:9a:fb:63: 86:3c:5f:f5:23:90:8d:87:1b:3b:89:d3:d9:89:e0: 61:a0:22:54:51:4a:d5:66:b4:f7:8a:8f:a4:92:08: ff:f5:27:6e:29:12:72:9f:a3:d1:70:1a:70:d8:84: 21:dc:8d:cf:f2:18:16:33:3d:47:5a:2a:b8:58:06: 61:63:1b:65:e8:58:21:d2:5b:90:66:3d:af:75:6d: e2:a5:dd:13:fe:b9:d6:bf:2b:8d:66:33:49:f1:1f: 00:ff:bd:ba:c0:9a:6c:48:0d:88:9a:93:bf:8a:7f: 75:b1:8b:d3:28:de:90:4c:9b:76:63:2f:3d:33:2f: 38:44:f8:47:f8:40:2f:f2:a7:78:18:e3:1f:c8:94: f9:64:ee:75:98:88:9d:46:2f:a8:ac:46:61:c5:72: b2:3f:2d:b2:88:c3:c3:78:9d:f3:a6:9e:dd:4c:17: 16:a9:c8:1d:5e:bb:c2:38:93:d4:f1:1a:d8:d9:5f: 45:24:88:b7:fc:98:9e:81:5a:2c:50:a2:ec:89:d6: 60:75:94:31:6d:1b:5f:00:59:68:ec:b1:dc:30:57: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:75:DE:9B:4D:46:64:20:34:27:98:D3:AC:1C:EA:29:01:47:F1:8B X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:92:ba:ed:04:9a:88:ac:ea:87:ef:76:52:1c:04:10:05:90: bf:3a:db:56:50:c3:06:e5:98:05:7e:32:81:ca:04:de:3c:0f: 2d:c6:cb:f3:6b:64:a6:af:44:cc:a9:99:25:46:6f:64:b5:78: 9e:81:cc:b3:95:d6:2e:d1:3f:e6:e7:cd:df:bb:28:5e:bd:65: 6d:56:b1:3e:60:45:e0:b1:73:ff:78:54:08:9d:a5:07:6f:f3: e1:94:09:f9:d3:d4:bb:20:f9:3e:f6:22:2a:bc:d0:81:91:fa: 98:ed:af:9f:ab:24:ff:06:f7:21:49:51:f2:ca:83:bf:73:05: eb:b1:9b:ed:07:fb:f2:09:4f:2c:98:de:05:fa:6b:67:7a:6f: 76:7d:1e:12:c0:c2:48:8f:3b:3c:23:5c:16:ae:17:fd:57:4d: 1c:8b:70:21:3f:be:bf:bc:ee:a5:d7:e9:8b:1d:a2:98:8d:8e: 9e:c6:32:72:51:9b:c4:0b:c0:5a:50:6b:d5:7b:5d:f7:d4:b9: 16:a9:44:d2:95:97:e4:aa:0e:f3:29:3a:3a:b2:67:f8:bc:33: 55:09:96:66:23:81:6a:86:d0:fa:dd:29:3e:e0:df:11:74:ba: 82:13:bb:fe:62:cb:6d:0a:e2:d8:c1:44:83:4c:31:0e:da:4b: 84:de:6f:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWFxwqLUeZwkQ2Aug6bWYhY/RwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA3MTkwMDI3MjFaFw0yNTA3MjIxMTA5MjFaMDMxMTAvBgNV BAMTKDY5NzVERTlCNEQ0NjY0MjAzNDI3OThEM0FDMUNFQTI5MDE0N0YxOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXg7W7UWtyaiUUIyJPIwxlTLn Pm+uQsj1guhBTleYwbiHnzIcG5TnEJr7Y4Y8X/UjkI2HGzuJ09mJ4GGgIlRRStVm tPeKj6SSCP/1J24pEnKfo9FwGnDYhCHcjc/yGBYzPUdaKrhYBmFjG2XoWCHSW5Bm Pa91beKl3RP+uda/K41mM0nxHwD/vbrAmmxIDYiak7+Kf3Wxi9Mo3pBMm3ZjLz0z LzhE+Ef4QC/yp3gY4x/IlPlk7nWYiJ1GL6isRmHFcrI/LbKIw8N4nfOmnt1MFxap yB1eu8I4k9TxGtjZX0UkiLf8mJ6BWixQouyJ1mB1lDFtG18AWWjssdwwV3O1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaXXem01GZCA0J5jTrBzqKQFH8YswHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmSuu0Emois6ofvdlIcBBAFkL8621ZQwwbl mAV+MoHKBN48Dy3Gy/NrZKavRMypmSVGb2S1eJ6BzLOV1i7RP+bnzd+7KF69ZW1W sT5gReCxc/94VAidpQdv8+GUCfnT1Lsg+T72Iiq80IGR+pjtr5+rJP8G9yFJUfLK g79zBeuxm+0H+/IJTyyY3gX6a2d6b3Z9HhLAwkiPOzwjXBauF/1XTRyLcCE/vr+8 7qXX6YsdopiNjp7GMnJRm8QLwFpQa9V7XffUuRapRNKVl+SqDvMpOjqyZ/i8M1UJ lmYjgWqG0PrdKT7g3xF0uoITu/5iy20K4tjBRINMMQ7aS4Tebwg= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:19 2025 by rpki-client