$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: oE5OLxQkrSXYDbGLSNBUll6cAYzJcvYviLuNhvPwwfw= Subject key identifier: 7C:40:BA:B7:B7:7F:26:29:72:14:29:F4:DB:3A:47:CE:47:B0:C5:FB Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 19C8294144D6D62DE7E3B3DE235AE8F5B70B13EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 04E2 Signing time: Wed 04 Jun 2025 09:52:21 +0000 Manifest this update: Wed 04 Jun 2025 09:47:21 +0000 Manifest next update: Sat 07 Jun 2025 10:33:21 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) 2: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) 3: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: VJtCPuPjDJQVKyblS/f2q9rruaPHfTzbc/oH4+Mp0Wk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c8:29:41:44:d6:d6:2d:e7:e3:b3:de:23:5a:e8:f5:b7:0b:13:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Jun 4 09:47:21 2025 GMT Not After : Jun 7 10:33:21 2025 GMT Subject: CN=7C40BAB7B77F2629721429F4DB3A47CE47B0C5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:5b:60:e7:62:8a:98:fd:69:f2:f4:12:34: 37:55:ed:6c:5c:4a:af:1f:f0:0c:32:ee:f5:d5:c4: a8:9d:ee:74:c5:f8:a7:ee:90:1c:36:dd:49:69:bb: 63:3e:5a:34:5e:46:99:7a:c3:5a:34:18:7e:42:b5: b0:70:8f:c8:05:8b:79:33:c9:83:44:43:c0:c3:40: ae:91:49:40:0d:a9:cb:6f:6d:d3:c5:3b:92:5b:9d: 8c:4d:a5:11:e6:ec:85:22:61:33:6f:a8:d3:52:a1: 63:16:65:0a:99:53:01:ba:e1:cc:60:11:4f:59:6e: f1:0b:25:27:26:f2:df:94:64:f4:50:6e:66:80:00: 05:15:d8:47:41:ce:41:0b:8c:59:4c:fa:04:5b:4d: d5:2e:50:a1:3e:53:cc:4d:bd:ad:72:e8:13:1a:75: 9d:a1:d1:85:75:11:b4:35:43:2a:ac:0e:f9:c7:9a: a9:f3:5d:5f:45:27:1c:9e:05:27:1f:a4:c8:2a:72: e9:59:d5:47:70:cc:c7:66:7d:e5:43:0c:50:a9:87: 64:b5:1f:5f:e3:ec:de:a1:f9:b1:5d:eb:16:22:81: 99:f2:dc:8e:28:77:0b:cb:58:3c:27:3a:1f:2b:b2: 70:5d:3a:40:59:26:13:d8:09:33:e3:26:4f:07:8b: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:40:BA:B7:B7:7F:26:29:72:14:29:F4:DB:3A:47:CE:47:B0:C5:FB X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a5:b9:b7:28:56:1b:9c:e2:be:52:aa:e5:9a:7e:81:c8:9f: 00:b3:8d:c5:7b:5f:36:48:55:d8:4e:c5:86:08:13:f9:63:ac: b5:a5:4d:6d:e7:1d:4f:71:c5:fd:42:be:b3:12:a1:e6:d1:d3: 52:c6:09:c5:96:eb:5f:09:25:03:90:58:a9:02:44:ca:25:8d: c5:0d:f9:2b:40:e3:10:a2:2e:c5:69:db:b1:7f:56:ac:ca:58: c4:b9:9b:65:c3:e8:e4:b8:07:ad:c2:3c:5e:ac:bc:c8:2e:9e: d1:15:2a:fa:9e:25:e1:5c:44:47:1f:58:72:ae:c1:e6:cc:1e: 11:1e:0a:af:c9:46:56:39:66:fa:c7:75:64:51:54:d3:ed:e0: c6:bd:7a:26:51:d7:4d:9a:67:ba:ed:26:2a:70:44:a4:b6:91: a5:5b:39:ce:59:11:6f:22:bf:fa:bb:27:e6:22:2d:c7:dd:da: ec:2d:bc:b9:ef:13:04:e8:1d:07:ee:89:64:39:14:ef:55:45: ef:70:3b:d7:3f:ac:50:ac:1b:80:45:8c:e2:3d:00:95:9b:94: d6:8c:83:c2:b9:58:6d:fd:74:78:d1:50:00:46:34:e7:d2:f3: f9:d4:03:6a:b6:4d:59:6c:99:81:d4:e3:4f:f9:d9:21:5f:f9: 29:c8:b5:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcgpQUTW1i3n47PeI1ro9bcLE+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA2MDQwOTQ3MjFaFw0yNTA2MDcxMDMzMjFaMDMxMTAvBgNV BAMTKDdDNDBCQUI3Qjc3RjI2Mjk3MjE0MjlGNERCM0E0N0NFNDdCMEM1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq91tg52KKmP1p8vQSNDdV7Wxc Sq8f8Awy7vXVxKid7nTF+KfukBw23Ulpu2M+WjReRpl6w1o0GH5CtbBwj8gFi3kz yYNEQ8DDQK6RSUANqctvbdPFO5JbnYxNpRHm7IUiYTNvqNNSoWMWZQqZUwG64cxg EU9ZbvELJScm8t+UZPRQbmaAAAUV2EdBzkELjFlM+gRbTdUuUKE+U8xNva1y6BMa dZ2h0YV1EbQ1QyqsDvnHmqnzXV9FJxyeBScfpMgqculZ1UdwzMdmfeVDDFCph2S1 H1/j7N6h+bFd6xYigZny3I4odwvLWDwnOh8rsnBdOkBZJhPYCTPjJk8Hi4CxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfEC6t7d/JilyFCn02zpHzkewxfswHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWlubcoVhuc4r5SquWafoHInwCzjcV7XzZI VdhOxYYIE/ljrLWlTW3nHU9xxf1CvrMSoebR01LGCcWW618JJQOQWKkCRMoljcUN +StA4xCiLsVp27F/VqzKWMS5m2XD6OS4B63CPF6svMguntEVKvqeJeFcREcfWHKu webMHhEeCq/JRlY5ZvrHdWRRVNPt4Ma9eiZR102aZ7rtJipwRKS2kaVbOc5ZEW8i v/q7J+YiLcfd2uwtvLnvEwToHQfuiWQ5FO9VRe9wO9c/rFCsG4BFjOI9AJWblNaM g8K5WG39dHjRUABGNOfS8/nUA2q2TVlsmYHU40/52SFf+SnItU0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:04 2025 by rpki-client