$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: /OjrDvGGBUkUl7Sva9zpB3mfEnnfViE4NKFuF4uJGNs= Subject key identifier: 07:84:3B:AE:6E:9C:2E:D0:EA:85:FE:EC:CB:28:98:89:C6:CE:54:90 Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 23D07BFE805CE8C55CD4175DAA7E19E3C706BB0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 0565 Signing time: Tue 24 Mar 2026 23:02:41 +0000 Manifest this update: Tue 24 Mar 2026 22:57:41 +0000 Manifest next update: Sat 28 Mar 2026 05:53:41 +0000 Files and hashes: 1: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: HAXC4IEL0SfUveCG16p3ZuiGDmD/lM3yCXCWIqZQEOI=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: MSRYn7i1rX73d9U2LJmtSA3qcfr4Ipq2h6IBGH+C68I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d0:7b:fe:80:5c:e8:c5:5c:d4:17:5d:aa:7e:19:e3:c7:06:bb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Mar 24 22:57:41 2026 GMT Not After : Mar 28 05:53:41 2026 GMT Subject: CN=07843BAE6E9C2ED0EA85FEECCB289889C6CE5490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:3e:4b:70:3f:ee:7a:33:6c:82:2f:d5:e6: f0:99:11:15:3a:91:55:d7:33:46:fc:5b:7e:c5:ab: 06:07:dc:2e:60:10:67:94:6f:eb:a4:56:78:60:75: 96:4a:50:16:48:74:57:23:74:1a:f7:ce:fc:91:22: e2:27:49:5a:75:73:f9:89:f2:4c:4c:6c:64:e8:29: b2:76:0c:dd:90:c2:4f:71:c4:48:fd:0e:29:05:75: d7:ea:01:76:78:b9:4f:f0:75:b1:de:1f:3c:09:04: 6e:6b:08:e3:cb:1c:05:ce:a0:d1:b3:61:7e:3a:db: fc:8f:a9:d0:ff:9e:47:84:c3:48:68:2c:d6:e4:49: 94:a9:97:e5:0f:b0:24:9a:23:82:58:62:f7:4a:f3: fc:f8:a0:ba:53:4b:5c:d0:5f:e6:4b:90:8e:6e:0b: 46:96:90:04:db:63:6f:6a:6f:ad:7d:ca:d2:91:36: 46:d0:44:c4:c5:92:8f:64:df:f6:65:f4:41:54:5d: 76:4b:89:53:3f:42:b8:d0:0a:fc:8d:07:38:d5:3d: 4d:5f:3e:99:73:37:43:ca:aa:00:44:b1:fe:d5:1d: fc:dc:a0:19:b4:7e:08:7d:a7:08:1d:20:3c:67:d6: 42:fa:ea:81:2f:be:53:e0:b9:39:f5:84:a2:9b:c9: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:84:3B:AE:6E:9C:2E:D0:EA:85:FE:EC:CB:28:98:89:C6:CE:54:90 X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:44:d3:15:39:ef:2f:b4:98:09:5e:16:56:ef:27:9c:23:58: 63:3e:51:e5:4d:9f:11:76:a1:ec:41:56:f0:92:19:d5:04:96: 8e:e6:e0:51:82:ea:b9:d7:e6:c4:82:08:0f:30:3c:8b:88:70: 3b:f5:16:05:52:21:ea:85:77:80:93:82:46:34:33:08:b5:da: b2:2c:52:0c:b4:53:51:89:ac:99:e7:31:9a:a8:03:32:5b:38: fa:c5:6f:34:75:d5:38:ab:d5:12:43:a1:90:01:d0:65:fc:99: e5:5f:08:4f:81:15:f5:23:67:95:e7:9a:64:43:0e:f9:1f:38: 0c:ea:4e:92:26:7f:b7:ab:d0:41:22:c1:86:1e:07:6b:2b:3e: 84:f4:c0:59:f3:97:39:4c:58:73:83:63:3c:99:5f:0b:a6:8d: b3:99:c3:6b:e3:37:21:ff:48:bf:f1:8e:60:9c:39:55:ad:fb: c0:d7:da:92:4e:73:05:79:17:53:99:49:75:45:86:b4:40:ad: 58:7b:65:8a:16:a7:dc:aa:2a:89:ca:69:d1:3c:9d:25:4a:61: fc:8f:11:cc:bd:9a:b4:50:85:3a:60:ac:4e:9f:8b:06:a1:c7: 92:82:93:13:e1:30:91:21:e7:40:20:09:bc:7d:6c:d2:f1:41: 1a:cb:eb:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9B7/oBc6MVc1Bddqn4Z48cGuwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNjAzMjQyMjU3NDFaFw0yNjAzMjgwNTUzNDFaMDMxMTAvBgNV BAMTKDA3ODQzQkFFNkU5QzJFRDBFQTg1RkVFQ0NCMjg5ODg5QzZDRTU0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7D5LcD/uejNsgi/V5vCZERU6 kVXXM0b8W37FqwYH3C5gEGeUb+ukVnhgdZZKUBZIdFcjdBr3zvyRIuInSVp1c/mJ 8kxMbGToKbJ2DN2Qwk9xxEj9DikFddfqAXZ4uU/wdbHeHzwJBG5rCOPLHAXOoNGz YX462/yPqdD/nkeEw0hoLNbkSZSpl+UPsCSaI4JYYvdK8/z4oLpTS1zQX+ZLkI5u C0aWkATbY29qb619ytKRNkbQRMTFko9k3/Zl9EFUXXZLiVM/QrjQCvyNBzjVPU1f PplzN0PKqgBEsf7VHfzcoBm0fgh9pwgdIDxn1kL66oEvvlPguTn1hKKbyYnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB4Q7rm6cLtDqhf7syyiYicbOVJAwHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBE0xU57y+0mAleFlbvJ5wjWGM+UeVNnxF2 oexBVvCSGdUElo7m4FGC6rnX5sSCCA8wPIuIcDv1FgVSIeqFd4CTgkY0Mwi12rIs Ugy0U1GJrJnnMZqoAzJbOPrFbzR11Tir1RJDoZAB0GX8meVfCE+BFfUjZ5XnmmRD DvkfOAzqTpImf7er0EEiwYYeB2srPoT0wFnzlzlMWHODYzyZXwumjbOZw2vjNyH/ SL/xjmCcOVWt+8DX2pJOcwV5F1OZSXVFhrRArVh7ZYoWp9yqKonKadE8nSVKYfyP Ecy9mrRQhTpgrE6fiwahx5KCkxPhMJEh50AgCbx9bNLxQRrL674= -----END CERTIFICATE-----Generated at Thu Mar 26 09:05:00 2026 by rpki-client