$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: a+GwurwdJ4Tbe35w3tptlNj8IvnRqJ3/J6ttj8g+z1c= Subject key identifier: EE:3B:5D:2B:6F:7A:40:AB:7F:BD:DE:D9:53:41:2B:A1:80:DD:F8:EE Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 1327CC01ED24AB77381CBD79320D8FE40EAC18CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 01CA Signing time: Thu 05 Jun 2025 20:01:28 +0000 Manifest this update: Thu 05 Jun 2025 19:56:28 +0000 Manifest next update: Mon 09 Jun 2025 03:04:28 +0000 Files and hashes: 1: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: jkr10nu1KheD3rFITjZKu8+8qzjxbIrM8OjPSducB+Q=) 2: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: 6gMRYCDTA91uCrSpOJHQwzXcDUzZZQ/fPopmQLU54uQ=) 3: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: +B/gEJtPQl3cVrcz6gUDEyRqbqtP2plC+yZ8kgMfSHM=) 4: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: GK6TjIFHP3OKYpdF9mQ2NlZ0xI3zyr1c1AWcP5mkKcw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:27:cc:01:ed:24:ab:77:38:1c:bd:79:32:0d:8f:e4:0e:ac:18:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Jun 5 19:56:28 2025 GMT Not After : Jun 9 03:04:28 2025 GMT Subject: CN=EE3B5D2B6F7A40AB7FBDDED953412BA180DDF8EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:20:a1:2a:6e:ad:7b:45:b8:a0:b5:6a:5f: db:20:55:b9:a4:a3:8c:ea:ee:27:ee:92:c6:c7:70: 0a:c9:b4:76:6f:fc:29:d0:35:cc:a9:57:f9:fb:28: 3e:90:cc:28:55:e4:e5:7f:87:df:d6:f0:5d:52:62: 9a:59:bc:53:e0:54:80:3a:63:14:c2:bc:76:0f:da: d4:ae:90:e8:76:75:fc:5b:c0:17:e2:93:ae:5b:69: 8d:46:a3:77:03:22:cf:75:ec:f4:f6:ee:27:6c:0f: ee:86:37:8c:3b:17:8e:1d:e3:c4:25:b2:3a:3c:b8: e9:81:b4:d3:93:a1:46:55:b6:a7:10:61:19:1b:ec: a0:bd:2b:1f:bd:02:e5:e8:da:f4:74:3c:03:f4:25: 0c:60:13:17:79:ac:10:d0:d0:4c:41:6a:92:ee:93: ed:75:45:4b:7b:7b:c7:6a:a2:b8:21:09:d8:04:38: f7:13:17:79:6c:32:2d:65:f3:ba:05:6a:92:e1:79: fc:4d:f1:29:5f:c9:5a:8e:3b:bc:e2:0c:4d:e3:5f: 6e:f5:4b:b2:95:a8:12:65:bc:85:d7:a5:1b:cb:be: 19:2d:e2:38:ad:6a:03:87:dc:86:79:e5:0d:45:3d: d4:17:72:6b:73:31:a7:ad:91:e1:81:db:6e:46:b3: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:5D:2B:6F:7A:40:AB:7F:BD:DE:D9:53:41:2B:A1:80:DD:F8:EE X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:40:d7:d9:12:15:0c:44:bf:62:d5:09:47:57:73:7a:72:1c: e6:f2:21:6e:57:f0:f7:c3:9e:26:8d:90:c9:6b:b5:7e:38:25: b5:70:04:af:6c:4d:8d:80:42:bd:3e:33:27:bf:87:32:13:8b: f4:3f:aa:ca:5d:a8:db:39:c4:e9:c2:59:65:10:f0:6f:6f:44: e0:4d:7a:86:24:46:d4:33:22:c0:43:48:70:58:51:3d:a9:d0: 23:c5:d2:44:f6:cf:28:53:8b:83:32:9f:53:98:7c:02:9f:c2: 19:12:a5:98:84:d0:3e:e6:d7:94:e5:e7:8e:e4:64:c7:33:bd: 72:73:d4:aa:11:1d:2e:ba:e1:f3:21:ef:9d:5d:11:7f:c6:df: 1c:c3:18:7b:50:66:76:af:ac:6a:f7:c6:30:47:ef:af:dd:bc: fa:92:22:6c:ce:df:8d:31:32:e7:cb:90:12:50:a7:97:2a:af: cd:cc:20:0f:6c:70:d9:8f:8f:99:56:a7:6c:92:21:23:85:4c: 91:b2:40:05:9f:27:85:db:cf:17:ae:c0:60:41:c2:54:16:fe: 05:63:28:fb:02:e7:9e:ec:4b:9b:b6:3e:46:da:09:9d:4a:c4: 13:a6:67:09:55:09:25:70:f5:8e:5f:fc:43:e5:53:f1:18:ab: 38:33:65:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEyfMAe0kq3c4HL15Mg2P5A6sGM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTA2MDUxOTU2MjhaFw0yNTA2MDkwMzA0MjhaMDMxMTAvBgNV BAMTKEVFM0I1RDJCNkY3QTQwQUI3RkJEREVEOTUzNDEyQkExODBEREY4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPiChKm6te0W4oLVqX9sgVbmk o4zq7ifuksbHcArJtHZv/CnQNcypV/n7KD6QzChV5OV/h9/W8F1SYppZvFPgVIA6 YxTCvHYP2tSukOh2dfxbwBfik65baY1Go3cDIs917PT27idsD+6GN4w7F44d48Ql sjo8uOmBtNOToUZVtqcQYRkb7KC9Kx+9AuXo2vR0PAP0JQxgExd5rBDQ0ExBapLu k+11RUt7e8dqorghCdgEOPcTF3lsMi1l87oFapLhefxN8SlfyVqOO7ziDE3jX271 S7KVqBJlvIXXpRvLvhkt4jitagOH3IZ55Q1FPdQXcmtzMaetkeGB225Gs7ljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7jtdK296QKt/vd7ZU0EroYDd+O4wHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClA19kSFQxEv2LVCUdXc3pyHObyIW5X8PfD niaNkMlrtX44JbVwBK9sTY2AQr0+Mye/hzITi/Q/qspdqNs5xOnCWWUQ8G9vROBN eoYkRtQzIsBDSHBYUT2p0CPF0kT2zyhTi4Myn1OYfAKfwhkSpZiE0D7m15Tl547k ZMczvXJz1KoRHS664fMh751dEX/G3xzDGHtQZnavrGr3xjBH76/dvPqSImzO340x MufLkBJQp5cqr83MIA9scNmPj5lWp2ySISOFTJGyQAWfJ4XbzxeuwGBBwlQW/gVj KPsC557sS5u2PkbaCZ1KxBOmZwlVCSVw9Y5f/EPlU/EYqzgzZRo= -----END CERTIFICATE-----Generated at Fri Jun 6 17:14:24 2025 by rpki-client