$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: VwRaI3rAvfG/olTSbbG5HJCg1s4n5Z8sb7dzb8yCBys= Subject key identifier: 1D:31:9E:03:B3:2A:64:74:20:4C:7C:A1:95:C8:46:74:46:2C:FF:03 Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 2DE3C7CE2CA26D02897DFE6ECA4DBC6C78577CC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 04CB Signing time: Wed 16 Apr 2025 13:42:16 +0000 Manifest this update: Wed 16 Apr 2025 13:37:16 +0000 Manifest next update: Sat 19 Apr 2025 18:13:16 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: L655Pa2AKy6YZM0th27qWmB7TfJ9SN35VJAKKFbO9qA=) 2: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: KvPDIAPRpORzBkTpudxXxBLXr2X7fxDWQqvi5FJ/dYQ=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 18:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e3:c7:ce:2c:a2:6d:02:89:7d:fe:6e:ca:4d:bc:6c:78:57:7c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Apr 16 13:37:16 2025 GMT Not After : Apr 19 18:13:16 2025 GMT Subject: CN=1D319E03B32A6474204C7CA195C84674462CFF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:88:b1:94:b7:29:55:9d:d6:0b:60:36:e0: 65:4d:9d:f9:fb:25:94:b4:73:08:4e:19:9f:9a:23: 48:a9:62:4c:1f:fc:44:aa:6f:b6:72:4f:45:a4:c5: db:72:04:00:ae:cd:6b:af:9b:0c:31:cc:eb:a5:e7: d1:3b:5c:2b:bd:e1:f7:d8:e2:91:f3:1f:38:6d:42: 51:30:ad:de:5d:ce:af:60:66:6a:26:bb:b3:32:d8: 0c:99:72:a4:91:7a:9f:d0:3f:5c:ef:84:74:f5:5f: 73:0f:88:61:ac:5d:e3:99:a9:40:46:54:20:bc:58: f6:18:95:b8:4b:12:fd:c2:91:19:88:e2:ad:31:82: 59:9a:df:07:be:1f:f4:75:49:56:2b:08:5d:8d:ba: 82:4d:e7:14:48:2c:3e:5d:e1:57:96:aa:29:38:5a: 63:d2:25:2f:de:cc:76:12:77:f4:86:fa:7f:3c:45: 75:9d:77:0e:d7:37:81:a7:26:18:37:c9:0e:e6:ea: 1c:66:fd:e1:3d:c1:b6:d7:86:2e:4c:5f:65:d9:43: 7c:00:f8:73:46:90:6c:df:28:4e:e3:03:82:b6:b6: 07:f9:1e:c5:67:e4:08:8f:5c:16:db:19:a6:98:31: 9b:51:8a:2b:44:22:b2:9d:53:6c:b6:7b:43:26:ba: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:9E:03:B3:2A:64:74:20:4C:7C:A1:95:C8:46:74:46:2C:FF:03 X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e8:5f:57:5e:fb:8a:9a:59:34:00:3a:0f:09:77:1f:30:61: 57:77:55:d7:d9:0d:50:a3:76:88:5b:a4:a6:3a:a3:ee:ee:04: c5:e5:66:68:46:8d:66:ee:7d:74:7a:e5:1a:1b:55:7b:9d:97: ea:c0:d6:2f:39:9e:a0:89:57:96:4d:d3:8f:b1:82:96:3d:99: b7:b1:32:33:01:01:f0:4a:fa:e0:4b:96:5d:50:80:89:93:4d: 78:25:30:68:80:de:31:20:58:d4:87:b9:b3:ec:a4:1e:3e:64: 8b:92:36:bf:d5:af:d0:ab:aa:f6:84:ec:98:63:fd:23:18:71: 17:58:f2:c2:29:c2:a5:fd:a0:1a:f2:d1:d5:9e:1d:9d:cb:f2: ff:cd:ee:87:28:95:d8:09:3b:a3:2e:5a:c3:60:98:76:a6:d8: fc:1f:32:af:e5:64:9c:52:95:62:17:72:77:eb:fa:da:52:7f: 59:7b:88:e0:e8:53:79:72:f3:47:91:a8:d7:40:b8:5b:72:56: e2:36:e4:8e:3e:76:7e:82:b5:03:e5:e1:5d:31:c3:a1:dc:d7: 4c:42:2e:23:1a:ed:3e:ed:bd:88:89:b6:60:9b:54:9b:1d:7c: f8:63:b6:50:14:23:01:bd:57:75:c9:b0:d7:44:a3:b7:b4:b3: 36:27:e7:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULePHziyibQKJff5uyk28bHhXfMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA0MTYxMzM3MTZaFw0yNTA0MTkxODEzMTZaMDMxMTAvBgNV BAMTKDFEMzE5RTAzQjMyQTY0NzQyMDRDN0NBMTk1Qzg0Njc0NDYyQ0ZGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42oixlLcpVZ3WC2A24GVNnfn7 JZS0cwhOGZ+aI0ipYkwf/ESqb7ZyT0WkxdtyBACuzWuvmwwxzOul59E7XCu94ffY 4pHzHzhtQlEwrd5dzq9gZmomu7My2AyZcqSRep/QP1zvhHT1X3MPiGGsXeOZqUBG VCC8WPYYlbhLEv3CkRmI4q0xglma3we+H/R1SVYrCF2NuoJN5xRILD5d4VeWqik4 WmPSJS/ezHYSd/SG+n88RXWddw7XN4GnJhg3yQ7m6hxm/eE9wbbXhi5MX2XZQ3wA +HNGkGzfKE7jA4K2tgf5HsVn5AiPXBbbGaaYMZtRiitEIrKdU2y2e0Mmun/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTGeA7MqZHQgTHyhlchGdEYs/wMwHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3oX1de+4qaWTQAOg8Jdx8wYVd3VdfZDVCj dohbpKY6o+7uBMXlZmhGjWbufXR65RobVXudl+rA1i85nqCJV5ZN04+xgpY9mbex MjMBAfBK+uBLll1QgImTTXglMGiA3jEgWNSHubPspB4+ZIuSNr/Vr9CrqvaE7Jhj /SMYcRdY8sIpwqX9oBry0dWeHZ3L8v/N7ocoldgJO6MuWsNgmHam2PwfMq/lZJxS lWIXcnfr+tpSf1l7iODoU3ly80eRqNdAuFtyVuI25I4+dn6CtQPl4V0xw6Hc10xC LiMa7T7tvYiJtmCbVJsdfPhjtlAUIwG9V3XJsNdEo7e0szYn55c= -----END CERTIFICATE-----Generated at Thu Apr 17 15:19:18 2025 by rpki-client