$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: q85Xs7FJ6RO5VI9kkcc1XaqGE2jvDYAkoE7IjubCgEk= Subject key identifier: CA:56:7A:F4:9B:2D:F1:82:74:BF:0B:41:BB:E5:D0:6B:6B:B2:AF:E0 Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 5444DFF7259529CE0709D4122C1C8C1B10728845 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 04D4 Signing time: Tue 06 May 2025 16:22:18 +0000 Manifest this update: Tue 06 May 2025 16:17:18 +0000 Manifest next update: Fri 09 May 2025 20:11:18 +0000 Files and hashes: 1: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: DgEQ6ee3O64Dze0oEtWzbinT8eWvsXvpcle3ys39Z9o=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: L655Pa2AKy6YZM0th27qWmB7TfJ9SN35VJAKKFbO9qA=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:44:df:f7:25:95:29:ce:07:09:d4:12:2c:1c:8c:1b:10:72:88:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: May 6 16:17:18 2025 GMT Not After : May 9 20:11:18 2025 GMT Subject: CN=CA567AF49B2DF18274BF0B41BBE5D06B6BB2AFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:b3:66:42:50:b8:7a:3f:ef:f3:04:bb:38: e0:ca:a2:ea:b5:fa:49:0e:70:ff:0a:2a:f1:fb:4d: 97:19:00:4c:65:73:65:fd:ec:e8:fe:8e:d6:21:a7: 59:3d:14:53:bc:a9:da:1f:ce:67:29:68:9e:08:4f: ab:de:66:e7:3a:80:b0:a9:15:69:af:f8:1a:86:d8: 77:43:fe:b3:98:38:89:ea:17:e2:3b:82:19:7a:2c: 2e:77:07:4f:81:20:9b:c5:2f:87:bf:3f:0f:6e:9a: c4:fc:a3:5d:f9:5a:11:37:6e:fc:63:f6:db:21:77: f1:b0:31:70:78:40:e6:f2:ce:68:54:f9:c7:e7:2e: f6:36:19:77:16:15:21:99:6e:20:69:ec:9c:24:88: b8:91:e4:52:f3:5f:9e:d0:4e:e9:95:ef:3f:45:a4: 7b:02:e1:14:30:63:63:25:55:eb:90:33:97:c4:a5: 76:cd:e8:37:c1:cc:08:c6:40:19:07:8d:ad:66:d0: 01:91:25:a7:b8:1e:79:59:df:30:c1:43:7d:ca:51: 3d:3d:ff:26:df:ab:72:a4:be:95:92:6f:7e:33:b5: 7c:be:d1:a3:f1:f0:53:2a:0b:78:b9:4c:89:03:72: 9e:f0:84:31:33:a4:74:2b:8e:8b:78:aa:8e:01:a7: 59:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:56:7A:F4:9B:2D:F1:82:74:BF:0B:41:BB:E5:D0:6B:6B:B2:AF:E0 X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:57:e9:6d:3d:6c:e8:85:bc:61:d6:8a:0f:26:66:c5:5e:eb: 71:0e:11:12:00:d4:e0:df:62:28:94:50:19:59:6e:78:0e:5a: 6e:03:0e:bb:86:52:e2:96:ee:86:0d:56:46:66:85:a4:ec:5c: a7:7d:a6:55:f7:a2:ec:02:1d:c8:b8:16:c0:44:b4:11:5a:7e: 3f:be:d6:ff:58:9e:18:2f:26:30:e8:e8:32:80:63:b1:7a:d1: 99:b8:91:b1:ac:19:aa:2a:fa:8e:63:fe:11:a6:08:b0:c3:d8: f0:6c:cc:c5:42:09:05:ef:d1:74:cc:a5:aa:06:71:be:5a:7f: 46:02:cf:30:41:35:0a:4f:fb:a8:1a:64:9b:b0:36:55:53:67: 0b:09:09:c4:e7:3c:54:0e:83:0c:51:a3:5b:d7:9f:1c:7d:13: b8:e9:59:91:84:f7:87:a3:ca:85:65:6f:12:b8:30:7a:b1:fb: 04:fc:b7:32:a5:2f:8e:1a:8e:08:cb:76:e5:51:44:3c:1f:e2: 29:ba:39:19:1d:dc:ae:91:8c:15:3a:e0:5d:12:8b:6e:42:75: a4:32:34:06:62:34:7b:90:c3:b7:f8:0b:dc:de:a3:31:22:27: cb:b1:78:82:d1:91:76:50:76:a6:6d:54:2b:b7:b4:47:c1:df: e2:df:02:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVETf9yWVKc4HCdQSLByMGxByiEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA1MDYxNjE3MThaFw0yNTA1MDkyMDExMThaMDMxMTAvBgNV BAMTKENBNTY3QUY0OUIyREYxODI3NEJGMEI0MUJCRTVEMDZCNkJCMkFGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVrNmQlC4ej/v8wS7OODKouq1 +kkOcP8KKvH7TZcZAExlc2X97Oj+jtYhp1k9FFO8qdofzmcpaJ4IT6veZuc6gLCp FWmv+BqG2HdD/rOYOInqF+I7ghl6LC53B0+BIJvFL4e/Pw9umsT8o135WhE3bvxj 9tshd/GwMXB4QObyzmhU+cfnLvY2GXcWFSGZbiBp7JwkiLiR5FLzX57QTumV7z9F pHsC4RQwY2MlVeuQM5fEpXbN6DfBzAjGQBkHja1m0AGRJae4HnlZ3zDBQ33KUT09 /ybfq3KkvpWSb34ztXy+0aPx8FMqC3i5TIkDcp7whDEzpHQrjot4qo4Bp1m9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUylZ69Jst8YJ0vwtBu+XQa2uyr+AwHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBX6W09bOiFvGHWig8mZsVe63EOERIA1ODf YiiUUBlZbngOWm4DDruGUuKW7oYNVkZmhaTsXKd9plX3ouwCHci4FsBEtBFafj++ 1v9YnhgvJjDo6DKAY7F60Zm4kbGsGaoq+o5j/hGmCLDD2PBszMVCCQXv0XTMpaoG cb5af0YCzzBBNQpP+6gaZJuwNlVTZwsJCcTnPFQOgwxRo1vXnxx9E7jpWZGE94ej yoVlbxK4MHqx+wT8tzKlL44ajgjLduVRRDwf4im6ORkd3K6RjBU64F0Si25CdaQy NAZiNHuQw7f4C9zeozEiJ8uxeILRkXZQdqZtVCu3tEfB3+LfAqE= -----END CERTIFICATE-----Generated at Wed May 7 17:55:06 2025 by rpki-client