$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: c/+cyyfyLT5h3biLTfT/nmO1yP8EFMJY8ru6ocb2Yps= Subject key identifier: 00:56:C3:5C:22:B0:F2:98:6F:3B:A1:34:3D:7D:B3:68:E3:58:59:C0 Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 5745EEB8A35C433B7A1DE7E7CFECA309F87C9106 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 0505 Signing time: Fri 22 Aug 2025 04:52:25 +0000 Manifest this update: Fri 22 Aug 2025 04:47:25 +0000 Manifest next update: Mon 25 Aug 2025 08:19:25 +0000 Files and hashes: 1: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) 2: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: t56yfx2Bgb2mU+kDR0Y/+k46ZCY7RpG/VH3MPu3N96Y=) 3: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:45:ee:b8:a3:5c:43:3b:7a:1d:e7:e7:cf:ec:a3:09:f8:7c:91:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Aug 22 04:47:25 2025 GMT Not After : Aug 25 08:19:25 2025 GMT Subject: CN=0056C35C22B0F2986F3BA1343D7DB368E35859C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:2f:69:0b:81:d7:13:58:ba:95:cf:fc:f3: ae:cc:c0:fb:09:03:a7:72:9f:4d:b8:eb:e5:2e:ea: 48:d7:dc:b2:d3:c9:39:5a:18:a1:60:07:be:c0:d9: 60:8e:67:79:1c:d9:fd:e1:5f:4a:6c:ba:9f:eb:99: bf:a6:03:06:88:2b:71:d3:6a:d1:3f:2b:36:fe:39: 59:36:d4:33:22:03:5f:e6:0d:55:23:3b:7d:e3:52: a8:d0:c8:9c:f7:3f:4b:b0:94:38:ac:3e:53:90:9f: b9:d0:9e:74:67:84:80:96:9f:d2:a8:03:54:24:b4: fc:fe:ae:9f:2d:60:f3:02:c0:cb:9f:e6:ba:d9:a8: 6f:27:91:11:cc:c0:37:a9:33:a5:54:d5:32:32:b2: c7:98:b2:1b:c8:0e:3a:5c:7b:a7:5c:86:65:eb:f7: 9c:d5:7a:f8:7e:fd:36:70:b1:a6:e0:56:f9:e3:5e: 04:ce:75:c2:f5:fd:91:7c:cb:24:f7:b7:dd:4f:92: d2:07:c6:3d:8f:12:03:34:cb:aa:04:73:d7:2f:da: 42:87:b9:d7:1c:31:11:35:7f:9d:52:fe:f2:b9:ab: 3f:43:d5:18:49:f1:4a:9b:bd:82:4e:58:d5:fa:3e: ee:19:1e:17:fb:a9:89:e5:c9:bf:6b:d7:c4:14:02: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:56:C3:5C:22:B0:F2:98:6F:3B:A1:34:3D:7D:B3:68:E3:58:59:C0 X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ec:ff:d3:89:cc:c7:06:80:f8:00:5a:9a:04:f0:b7:8f:58: 3f:49:23:37:20:2f:98:55:c1:5e:1b:84:1a:3d:72:a6:43:91: ae:7e:e6:72:72:a4:d2:a4:ad:ec:77:84:9e:37:3b:ff:f2:5c: 91:37:88:1b:52:33:20:31:4f:7a:88:3d:f6:b6:5a:99:5a:f0: 89:ce:46:35:92:92:75:ea:aa:eb:b1:77:06:9b:f5:32:2d:eb: ae:ef:20:2a:57:e2:fd:05:cb:29:bc:d6:c8:e6:02:54:a2:5b: d8:1c:57:f3:f7:10:dd:4b:52:97:89:14:07:d8:92:f5:6d:a6: ee:01:38:33:5d:5a:e2:f3:d7:c7:3f:62:d9:6d:09:14:ea:8a: 02:21:76:81:8f:51:11:5a:81:e4:ab:d1:a1:7b:c7:63:ad:1d: 8a:30:d7:2e:7f:0c:f8:2b:db:5b:bf:70:4d:d2:98:8c:c4:e4: f1:e0:84:d5:65:41:28:66:c0:5e:5e:c6:4d:b3:4f:8a:48:7e: 2d:a8:66:0d:05:9c:ee:fa:7b:69:57:f0:36:aa:40:e3:60:0e: 67:be:93:2d:a2:32:66:9c:33:59:c7:40:5a:f5:04:0f:18:b9: a6:c1:9b:f6:21:c7:a5:32:f9:06:94:3d:32:10:8f:0a:51:5e: f6:ec:85:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0XuuKNcQzt6Hefnz+yjCfh8kQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA4MjIwNDQ3MjVaFw0yNTA4MjUwODE5MjVaMDMxMTAvBgNV BAMTKDAwNTZDMzVDMjJCMEYyOTg2RjNCQTEzNDNEN0RCMzY4RTM1ODU5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbuy9pC4HXE1i6lc/8867MwPsJ A6dyn0246+Uu6kjX3LLTyTlaGKFgB77A2WCOZ3kc2f3hX0psup/rmb+mAwaIK3HT atE/Kzb+OVk21DMiA1/mDVUjO33jUqjQyJz3P0uwlDisPlOQn7nQnnRnhICWn9Ko A1QktPz+rp8tYPMCwMuf5rrZqG8nkRHMwDepM6VU1TIysseYshvIDjpce6dchmXr 95zVevh+/TZwsabgVvnjXgTOdcL1/ZF8yyT3t91PktIHxj2PEgM0y6oEc9cv2kKH udccMRE1f51S/vK5qz9D1RhJ8UqbvYJOWNX6Pu4ZHhf7qYnlyb9r18QUAgU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAFbDXCKw8phvO6E0PX2zaONYWcAwHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErs/9OJzMcGgPgAWpoE8LePWD9JIzcgL5hV wV4bhBo9cqZDka5+5nJypNKkrex3hJ43O//yXJE3iBtSMyAxT3qIPfa2Wpla8InO RjWSknXqquuxdwab9TIt667vICpX4v0Fyym81sjmAlSiW9gcV/P3EN1LUpeJFAfY kvVtpu4BODNdWuLz18c/YtltCRTqigIhdoGPURFageSr0aF7x2OtHYow1y5/DPgr 21u/cE3SmIzE5PHghNVlQShmwF5exk2zT4pIfi2oZg0FnO76e2lX8DaqQONgDme+ ky2iMmacM1nHQFr1BA8YuabBm/Yhx6Uy+QaUPTIQjwpRXvbshSo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:26 2025 by rpki-client