$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: k3I0bE/3vaBvgJ+MxrzQGfwypeJbcbYVDETj2be/Bhk= Subject key identifier: D2:BA:D0:D4:8E:88:27:51:3C:80:E0:C3:F5:7E:88:92:B9:34:7F:ED Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 08862EE0D1D91A19565EFAD31A397E6C386D5185 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 051F Signing time: Mon 20 Oct 2025 10:02:23 +0000 Manifest this update: Mon 20 Oct 2025 09:57:23 +0000 Manifest next update: Thu 23 Oct 2025 19:09:23 +0000 Files and hashes: 1: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) 2: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: lTCMsRxR1weVYcwmQwZ8DMgr82LFcY7wbyTsaXLFNeA=) 3: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:86:2e:e0:d1:d9:1a:19:56:5e:fa:d3:1a:39:7e:6c:38:6d:51:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Oct 20 09:57:23 2025 GMT Not After : Oct 23 19:09:23 2025 GMT Subject: CN=D2BAD0D48E8827513C80E0C3F57E8892B9347FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:d8:51:5c:da:02:78:a3:dc:72:0f:50:cb: ff:6c:76:42:0b:b4:55:7b:c1:fb:44:ec:06:16:72: 7f:60:88:8d:7a:c8:c7:f3:d2:5f:cd:da:d0:2d:ce: 97:b7:78:78:7e:06:45:5e:8a:6d:c6:27:a9:45:c4: 79:06:1d:1f:62:a0:49:10:de:4c:41:f0:6b:d3:4e: ac:b1:4e:29:eb:cf:99:1a:2a:87:33:ca:2f:ee:e6: 9d:ef:aa:6b:8b:f0:1e:e3:6d:e1:09:e1:ed:74:48: f5:bc:a2:79:54:8c:9a:52:f0:15:da:45:46:d2:6d: 6c:8d:6c:76:af:10:fb:dd:00:cc:7a:f0:a6:37:33: 15:cc:ff:fc:f3:0c:a7:d3:9b:55:3d:32:67:83:97: c3:95:2d:55:b4:ba:e7:dc:b6:8b:6d:0e:05:d7:c8: 6e:6d:56:f7:98:10:4b:5b:b2:56:0b:4e:96:b2:14: 97:0e:eb:43:9a:49:cb:6c:de:b0:8d:70:62:0e:56: 8e:e1:c6:b4:f7:60:d2:ad:1a:06:7f:3d:98:54:f4: 16:d9:66:7a:60:c3:8b:4f:8a:5d:be:ef:00:f0:1e: ff:c7:eb:e8:ba:01:2d:65:2e:e6:00:61:80:e3:93: 6e:48:68:99:08:a8:f2:c2:2c:be:9a:b9:8a:f2:98: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BA:D0:D4:8E:88:27:51:3C:80:E0:C3:F5:7E:88:92:B9:34:7F:ED X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0a:cc:7d:33:4e:c4:39:74:fe:81:d0:8f:95:84:4b:50:04: 87:64:79:00:43:8f:0c:2d:fc:d5:16:b6:3b:61:c5:03:87:df: d5:27:d2:94:2d:f3:56:a6:c7:56:dd:81:76:ef:10:dc:90:d9: ea:a5:48:3a:1d:c2:4e:7c:b9:04:a4:d4:a4:6a:81:c2:fb:a5: b0:5d:3a:49:b2:b5:b9:72:46:46:f2:96:b0:68:af:22:33:94: 8c:ac:84:4c:fe:1d:15:82:60:d1:75:d1:4f:16:65:9e:62:2b: 33:5a:cb:65:4e:50:88:6d:42:1e:f4:52:0b:a1:a1:94:0d:d5: f7:e5:68:cb:41:24:7e:6c:90:c0:9c:17:3b:34:6e:7e:dc:cd: 0b:c7:61:50:11:74:65:9b:90:08:82:20:f4:77:d2:a7:9a:59: 2b:ad:f8:31:8e:b2:9d:40:a3:aa:6d:73:8b:5f:2c:be:e8:db: dd:17:70:5a:89:10:88:d6:f4:df:c3:06:ef:c3:f2:34:ba:29: 8a:c8:16:a3:1e:74:4f:12:e8:b2:4a:65:ef:87:96:11:33:8d: 35:61:ac:b8:25:5a:d7:09:ae:ed:a8:92:c6:f4:6e:1d:79:75: 02:0b:02:80:69:92:9d:b2:f6:50:ed:a9:69:06:b0:53:2a:1e: 1f:88:57:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIYu4NHZGhlWXvrTGjl+bDhtUYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTEwMjAwOTU3MjNaFw0yNTEwMjMxOTA5MjNaMDMxMTAvBgNV BAMTKEQyQkFEMEQ0OEU4ODI3NTEzQzgwRTBDM0Y1N0U4ODkyQjkzNDdGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtothRXNoCeKPccg9Qy/9sdkIL tFV7wftE7AYWcn9giI16yMfz0l/N2tAtzpe3eHh+BkVeim3GJ6lFxHkGHR9ioEkQ 3kxB8GvTTqyxTinrz5kaKoczyi/u5p3vqmuL8B7jbeEJ4e10SPW8onlUjJpS8BXa RUbSbWyNbHavEPvdAMx68KY3MxXM//zzDKfTm1U9MmeDl8OVLVW0uufctottDgXX yG5tVveYEEtbslYLTpayFJcO60OaScts3rCNcGIOVo7hxrT3YNKtGgZ/PZhU9BbZ Znpgw4tPil2+7wDwHv/H6+i6AS1lLuYAYYDjk25IaJkIqPLCLL6auYrymIYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0rrQ1I6IJ1E8gODD9X6Ikrk0f+0wHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIKzH0zTsQ5dP6B0I+VhEtQBIdkeQBDjwwt /NUWtjthxQOH39Un0pQt81amx1bdgXbvENyQ2eqlSDodwk58uQSk1KRqgcL7pbBd OkmytblyRkbylrBoryIzlIyshEz+HRWCYNF10U8WZZ5iKzNay2VOUIhtQh70Uguh oZQN1fflaMtBJH5skMCcFzs0bn7czQvHYVARdGWbkAiCIPR30qeaWSut+DGOsp1A o6ptc4tfLL7o290XcFqJEIjW9N/DBu/D8jS6KYrIFqMedE8S6LJKZe+HlhEzjTVh rLglWtcJru2oksb0bh15dQILAoBpkp2y9lDtqWkGsFMqHh+IVx4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:50 2025 by rpki-client