$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: d+ZruEdpmmsq+kt317N9lp6TU/NJ4iyffgFEZ/dMDXI= Subject key identifier: 39:6C:53:86:D2:DC:7D:5B:BD:39:1B:5F:24:F1:9E:64:12:CE:32:1D Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 0DCC754137CA9E317D1373B1D71897D2A7E9B9DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 04ED Signing time: Sat 28 Jun 2025 22:12:19 +0000 Manifest this update: Sat 28 Jun 2025 22:07:19 +0000 Manifest next update: Wed 02 Jul 2025 01:51:19 +0000 Files and hashes: 1: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: /bzMd7wsgMzG9dgQoYbccszpejYJPnKZq1zQw0wT5xQ=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cc:75:41:37:ca:9e:31:7d:13:73:b1:d7:18:97:d2:a7:e9:b9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Jun 28 22:07:19 2025 GMT Not After : Jul 2 01:51:19 2025 GMT Subject: CN=396C5386D2DC7D5BBD391B5F24F19E6412CE321D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:25:7a:46:be:1e:23:60:71:d6:07:29:40: 05:5f:e3:cb:7e:54:ff:91:ce:fa:39:74:38:64:15: dc:e9:8a:52:46:e6:67:eb:5b:77:52:ed:48:81:28: 0e:20:a0:cc:a0:2b:37:95:05:2f:08:c9:ff:ea:53: ad:87:2f:7d:f4:3d:3b:e2:10:dc:ae:ae:b8:32:29: d2:72:a7:0f:55:1f:ec:31:48:36:ba:69:e9:57:33: 55:36:7b:de:27:9e:db:86:7a:b6:3f:79:28:98:6f: 16:83:1f:87:ce:87:6d:97:36:d2:4d:9c:82:f8:cc: a6:19:a0:0b:56:d6:ba:32:4a:d2:26:a8:26:73:d3: 00:5a:74:67:fe:c1:11:0b:23:93:97:ce:68:e7:c6: 30:d9:d7:2c:da:6e:35:1c:4b:47:b8:22:98:76:c6: 19:9c:41:d2:10:f4:1e:e9:92:08:ab:d7:04:7c:ba: e6:a8:8d:9b:0f:b4:e6:fc:81:a9:ee:29:1e:1c:bf: 3d:ff:fe:7e:1b:ad:7d:ad:37:87:d4:71:45:06:b1: 4d:35:d0:b3:1a:7e:c5:5d:8c:5d:58:f5:dd:d1:63: 2f:be:02:0a:4c:f9:04:1b:31:8b:9c:02:4b:58:5d: 36:02:81:71:37:59:c0:4a:a2:6a:24:d2:7b:8a:55: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6C:53:86:D2:DC:7D:5B:BD:39:1B:5F:24:F1:9E:64:12:CE:32:1D X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a6:b2:5f:8e:0e:b1:59:10:9d:15:a7:b6:b4:5f:f9:d3:28: 47:a5:a5:5a:65:21:04:19:fb:69:15:8a:d6:64:2c:96:55:76: 06:c0:c2:e1:ea:dd:9d:9d:4e:0d:fb:e7:36:d4:b4:2a:72:b0: c4:39:d8:cf:a3:17:ec:11:c3:85:c4:dc:b5:88:25:34:e4:e1: 5a:79:2a:e1:48:f8:f9:14:50:22:1d:79:f4:0f:08:15:71:f8: ee:e9:4a:5e:74:e7:95:e9:7b:b5:a0:72:ca:71:7d:ac:39:27: bc:56:06:a0:75:35:8a:bc:13:fe:ee:3c:99:fa:53:b2:58:71: 94:fb:5f:a2:10:1d:bc:43:9b:3d:5f:a0:05:af:87:7b:0f:83: 32:6e:48:ad:0a:b2:7d:25:ff:ea:40:17:64:69:b4:81:5e:d2: ee:07:fd:b3:a7:e9:f5:e6:fe:ae:a2:3f:3c:9d:44:ac:4d:4d: bd:dd:57:00:7c:b2:54:c3:af:b6:67:4b:3e:d9:46:87:58:91: 0a:ef:1f:42:ca:0a:5d:31:06:e5:9f:97:07:1b:27:c7:01:8b: 7c:ae:1b:52:5b:94:9d:21:0f:20:6f:4d:03:3c:b1:da:45:d0: ce:eb:78:3e:b1:e9:ca:d2:de:07:9b:98:d5:46:50:31:cd:ad: ad:20:d3:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDcx1QTfKnjF9E3Ox1xiX0qfpud0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA2MjgyMjA3MTlaFw0yNTA3MDIwMTUxMTlaMDMxMTAvBgNV BAMTKDM5NkM1Mzg2RDJEQzdENUJCRDM5MUI1RjI0RjE5RTY0MTJDRTMyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSCV6Rr4eI2Bx1gcpQAVf48t+ VP+Rzvo5dDhkFdzpilJG5mfrW3dS7UiBKA4goMygKzeVBS8Iyf/qU62HL330PTvi ENyurrgyKdJypw9VH+wxSDa6aelXM1U2e94nntuGerY/eSiYbxaDH4fOh22XNtJN nIL4zKYZoAtW1royStImqCZz0wBadGf+wRELI5OXzmjnxjDZ1yzabjUcS0e4Iph2 xhmcQdIQ9B7pkgir1wR8uuaojZsPtOb8ganuKR4cvz3//n4brX2tN4fUcUUGsU01 0LMafsVdjF1Y9d3RYy++AgpM+QQbMYucAktYXTYCgXE3WcBKomok0nuKVdFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOWxThtLcfVu9ORtfJPGeZBLOMh0wHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGmsl+ODrFZEJ0Vp7a0X/nTKEelpVplIQQZ +2kVitZkLJZVdgbAwuHq3Z2dTg375zbUtCpysMQ52M+jF+wRw4XE3LWIJTTk4Vp5 KuFI+PkUUCIdefQPCBVx+O7pSl5055Xpe7Wgcspxfaw5J7xWBqB1NYq8E/7uPJn6 U7JYcZT7X6IQHbxDmz1foAWvh3sPgzJuSK0Ksn0l/+pAF2RptIFe0u4H/bOn6fXm /q6iPzydRKxNTb3dVwB8slTDr7ZnSz7ZRodYkQrvH0LKCl0xBuWflwcbJ8cBi3yu G1JblJ0hDyBvTQM8sdpF0M7reD6x6crS3gebmNVGUDHNra0g03I= -----END CERTIFICATE-----Generated at Sun Jun 29 18:44:45 2025 by rpki-client