$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: iNRBEQs9JzxAagOv7bSXE3qW3Z36Atq7SqZm/bbhdT8= Subject key identifier: 22:25:E8:B2:3E:B9:DD:41:2B:BD:2E:A8:75:83:BF:27:6A:92:41:41 Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 1B2E6E4E3C8D72C42982410E6CA770CF22E42247 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 0242 Signing time: Sun 01 Mar 2026 22:51:31 +0000 Manifest this update: Sun 01 Mar 2026 22:46:31 +0000 Manifest next update: Thu 05 Mar 2026 02:17:31 +0000 Files and hashes: 1: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: cqOcJAZKbrP9HYe2ShHrvgf1/zKk7TB83EYec3+QDIo=) 2: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: RK/lRgQFYGeXg6Bzk3ovyOFZdgVFVtKMAYe3R6PnsZs=) 3: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: DxpVnwn+kIOJX7lMp9JmeAbax8jnMQcsO+8gA6HkIPU=) 4: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: uL3SdGViVTN4twtj5fvseawDw7MHu5q6qt8dKfGSkqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2e:6e:4e:3c:8d:72:c4:29:82:41:0e:6c:a7:70:cf:22:e4:22:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Mar 1 22:46:31 2026 GMT Not After : Mar 5 02:17:31 2026 GMT Subject: CN=2225E8B23EB9DD412BBD2EA87583BF276A924141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:58:40:39:79:d7:8e:3a:c3:72:7d:d3:f0:fc: 62:aa:40:20:61:b1:82:be:3d:a8:56:9d:90:54:42: a5:97:8c:e8:99:2a:98:bb:0f:26:ad:45:ac:26:91: 12:6d:24:3a:53:6c:11:a6:05:23:b0:47:f6:62:75: f7:6f:2a:fd:22:2d:6a:63:ec:9e:8d:47:d8:3a:a3: a8:21:58:7d:9d:1d:01:a4:d9:48:04:c1:77:e3:79: 21:ac:f7:f7:b6:f5:d5:8c:b0:85:e3:ba:f1:ce:06: b5:07:01:30:e7:a9:9f:cf:37:06:0d:44:f5:e9:df: 38:e0:d4:4d:0a:26:0c:51:96:bd:97:70:5d:c9:0a: b7:f7:5b:42:94:2b:61:e6:3c:c4:e2:62:d1:0c:33: 5f:9d:99:ab:17:b1:b7:99:99:8e:f3:ce:29:27:21: 1a:fb:62:a2:b7:81:8b:10:fd:85:3d:f8:76:bc:25: 48:ff:58:bb:41:ef:50:c0:22:93:7a:04:0e:dc:17: ca:dd:4e:19:bf:b2:95:3b:3d:25:b7:4f:b2:9b:38: ca:70:d1:ba:45:4c:3f:4d:24:a5:ac:f4:5d:06:e5: 6a:e7:f2:9f:13:a1:76:cb:52:c2:21:07:34:49:33: 8f:cb:57:8a:53:06:85:0c:b2:fc:50:72:f3:df:56: 93:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:25:E8:B2:3E:B9:DD:41:2B:BD:2E:A8:75:83:BF:27:6A:92:41:41 X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b5:40:7c:5f:22:3c:b3:c5:58:fa:de:b1:9c:61:2c:33:10: 52:72:36:7c:57:e1:30:19:81:c0:00:ab:0e:ce:63:76:df:f9: 12:ce:c5:3d:8d:1a:07:d9:15:f0:75:45:9d:6b:56:94:aa:61: 12:3b:e0:db:dc:9a:99:76:72:1d:65:d6:b3:c6:64:ec:48:2d: 92:d7:c8:4e:b5:36:4a:0f:dc:d3:4b:08:72:cb:6e:ed:8f:19: 37:90:3d:fe:af:ae:66:48:18:c8:40:1e:46:73:42:a8:8a:c2: 29:99:d5:1d:52:54:8b:d7:b0:09:ce:dc:80:df:20:64:de:46: e4:30:81:31:bf:0d:e8:6f:65:96:5f:db:87:45:1e:27:e9:2f: 8e:66:28:5a:83:b5:d1:bb:e1:73:c2:14:8f:13:57:ef:45:5e: 37:9c:65:30:17:1c:dd:22:d8:d8:4f:9b:74:0d:4b:38:58:d2: 17:84:01:7e:65:bb:f8:a7:53:0d:58:ad:3a:4b:66:3d:5d:5e: 9c:ff:e6:5d:37:7d:f1:ab:1b:c3:18:15:20:e5:31:90:10:5d: 77:ff:a2:5b:6f:67:8a:b5:b3:46:7b:70:82:a0:f7:4f:82:bb: e6:69:08:0a:14:a4:62:37:ce:7c:d2:6c:5e:f1:1a:bd:dc:c5: 97:b4:fd:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGy5uTjyNcsQpgkEObKdwzyLkIkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNjAzMDEyMjQ2MzFaFw0yNjAzMDUwMjE3MzFaMDMxMTAvBgNV BAMTKDIyMjVFOEIyM0VCOURENDEyQkJEMkVBODc1ODNCRjI3NkE5MjQxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWEA5edeOOsNyfdPw/GKqQCBh sYK+PahWnZBUQqWXjOiZKpi7DyatRawmkRJtJDpTbBGmBSOwR/ZidfdvKv0iLWpj 7J6NR9g6o6ghWH2dHQGk2UgEwXfjeSGs9/e29dWMsIXjuvHOBrUHATDnqZ/PNwYN RPXp3zjg1E0KJgxRlr2XcF3JCrf3W0KUK2HmPMTiYtEMM1+dmasXsbeZmY7zzikn IRr7YqK3gYsQ/YU9+Ha8JUj/WLtB71DAIpN6BA7cF8rdThm/spU7PSW3T7KbOMpw 0bpFTD9NJKWs9F0G5Wrn8p8ToXbLUsIhBzRJM4/LV4pTBoUMsvxQcvPfVpN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIiXosj653UErvS6odYO/J2qSQUEwHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA61QHxfIjyzxVj63rGcYSwzEFJyNnxX4TAZ gcAAqw7OY3bf+RLOxT2NGgfZFfB1RZ1rVpSqYRI74Nvcmpl2ch1l1rPGZOxILZLX yE61NkoP3NNLCHLLbu2PGTeQPf6vrmZIGMhAHkZzQqiKwimZ1R1SVIvXsAnO3IDf IGTeRuQwgTG/DehvZZZf24dFHifpL45mKFqDtdG74XPCFI8TV+9FXjecZTAXHN0i 2NhPm3QNSzhY0heEAX5lu/inUw1YrTpLZj1dXpz/5l03ffGrG8MYFSDlMZAQXXf/ oltvZ4q1s0Z7cIKg90+Cu+ZpCAoUpGI3znzSbF7xGr3cxZe0/Tk= -----END CERTIFICATE-----Generated at Mon Mar 2 17:57:51 2026 by rpki-client