$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: VUcM+cvfNatHucw0HbeOgyRrfJtJhG+Q8/vAws+/qbs= Subject key identifier: 86:81:A9:F3:65:DB:11:9A:80:5B:54:D3:50:07:D8:22:20:EE:26:0E Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 4A5E6231B307ADE18C464DE8F742356F39C21729 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 050C Signing time: Sun 07 Sep 2025 00:13:52 +0000 Manifest this update: Sun 07 Sep 2025 00:08:52 +0000 Manifest next update: Wed 10 Sep 2025 01:37:52 +0000 Files and hashes: 1: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: rRvyBj8PcIQFt3ElyQElnt+G/WxHSYfUnqm0jqPv+CY=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5e:62:31:b3:07:ad:e1:8c:46:4d:e8:f7:42:35:6f:39:c2:17:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Sep 7 00:08:52 2025 GMT Not After : Sep 10 01:37:52 2025 GMT Subject: CN=8681A9F365DB119A805B54D35007D82220EE260E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:67:86:cb:b2:30:17:d4:02:a9:da:37:81: 68:ec:41:d1:ea:09:05:b9:1e:d7:41:37:40:13:f9: 9b:23:59:7b:78:7b:78:6d:87:8f:e1:86:87:ab:5e: 15:32:28:34:89:7e:18:89:b9:bd:7f:3f:d0:1b:6b: 89:6d:a9:50:47:07:8b:ac:ef:45:1b:56:f2:7b:e6: a8:dc:c5:44:f5:bf:36:d7:d4:fd:e6:08:ab:5c:69: 06:00:bb:e4:2f:83:ee:a9:af:1e:22:6a:be:c0:c6: d0:50:ba:f8:e1:cc:65:5d:29:1d:d1:93:87:a2:39: c4:98:b7:d3:0d:1b:06:94:5d:9b:ce:c6:e5:f6:e3: 56:04:12:4f:cb:bd:5d:af:a4:e8:d7:8b:aa:05:bb: 94:82:be:82:fd:38:c4:02:72:99:a3:09:44:2b:51: 8f:29:6a:3b:97:dc:31:ad:30:e6:77:62:c1:34:38: cc:f1:0f:1b:a6:2a:d3:82:f8:22:ef:2f:84:0b:0a: 89:ae:1f:0c:df:34:07:85:2c:70:81:5e:66:bd:f7: 28:cb:d4:d5:58:3f:b4:d8:39:31:f3:5c:48:6c:05: 3a:68:4d:ce:63:81:90:dc:26:c7:ec:7e:b4:bf:1f: e8:e2:a9:8f:4b:37:0c:c5:13:f2:15:e2:b7:0d:64: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:81:A9:F3:65:DB:11:9A:80:5B:54:D3:50:07:D8:22:20:EE:26:0E X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:55:4e:fa:4b:81:31:23:50:b0:90:15:af:4c:c0:fd:05:38: c8:bc:c5:dd:5b:f8:ab:59:d0:04:36:13:a7:fb:56:bb:02:21: c0:3c:3c:d2:a8:dd:17:ea:6d:aa:66:12:83:6b:e8:33:30:22: da:73:20:8e:aa:bd:2b:c6:4d:86:20:ed:ad:12:db:e6:f2:a7: 53:fe:51:0d:e9:0f:96:c9:15:6e:10:b7:2c:92:bb:6a:e8:8e: ad:02:7c:cc:9e:7a:b1:93:59:cc:5a:2f:8a:5d:41:0c:68:67: 98:17:70:fb:06:32:34:5f:fa:93:89:fc:ac:0d:3d:c8:87:43: 9f:07:f8:df:03:45:e4:87:d3:87:0b:13:0a:97:ae:a9:41:c2: 15:ef:05:3f:a8:ef:fe:b6:4a:e8:a6:a7:e4:a7:02:0d:76:58: 35:8b:7f:23:57:d5:3f:66:b9:13:c9:47:22:41:82:62:0a:f3: 10:a2:13:3c:ef:6c:60:3f:ed:55:7d:83:5e:c3:b7:8a:4f:ac: e0:cb:4e:74:df:83:7c:8d:20:c8:64:2f:b9:cf:0c:4c:97:b7: 87:a0:83:06:a2:67:b0:d2:81:93:4a:8d:6c:e6:61:f3:ce:06: 3e:58:b6:db:4e:cf:01:e5:bc:66:55:51:b1:77:27:2c:9d:cc: 1f:3d:97:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSl5iMbMHreGMRk3o90I1bznCFykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA5MDcwMDA4NTJaFw0yNTA5MTAwMTM3NTJaMDMxMTAvBgNV BAMTKDg2ODFBOUYzNjVEQjExOUE4MDVCNTREMzUwMDdEODIyMjBFRTI2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGmeGy7IwF9QCqdo3gWjsQdHq CQW5HtdBN0AT+ZsjWXt4e3hth4/hhoerXhUyKDSJfhiJub1/P9Aba4ltqVBHB4us 70UbVvJ75qjcxUT1vzbX1P3mCKtcaQYAu+Qvg+6prx4iar7AxtBQuvjhzGVdKR3R k4eiOcSYt9MNGwaUXZvOxuX241YEEk/LvV2vpOjXi6oFu5SCvoL9OMQCcpmjCUQr UY8pajuX3DGtMOZ3YsE0OMzxDxumKtOC+CLvL4QLComuHwzfNAeFLHCBXma99yjL 1NVYP7TYOTHzXEhsBTpoTc5jgZDcJsfsfrS/H+jiqY9LNwzFE/IV4rcNZIFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhoGp82XbEZqAW1TTUAfYIiDuJg4wHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdVTvpLgTEjULCQFa9MwP0FOMi8xd1b+KtZ 0AQ2E6f7VrsCIcA8PNKo3RfqbapmEoNr6DMwItpzII6qvSvGTYYg7a0S2+byp1P+ UQ3pD5bJFW4QtyySu2rojq0CfMyeerGTWcxaL4pdQQxoZ5gXcPsGMjRf+pOJ/KwN PciHQ58H+N8DReSH04cLEwqXrqlBwhXvBT+o7/62Suimp+SnAg12WDWLfyNX1T9m uRPJRyJBgmIK8xCiEzzvbGA/7VV9g17Dt4pPrODLTnTfg3yNIMhkL7nPDEyXt4eg gwaiZ7DSgZNKjWzmYfPOBj5YtttOzwHlvGZVUbF3JyydzB89l+4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:14 2025 by rpki-client