$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: DGDHUnh3fDh2Q46Efn8kekRpFZlC7R54dzjBYwUS8nQ= Subject key identifier: 27:D1:B2:CA:4D:74:DD:E4:F9:99:75:08:7F:12:30:92:7C:F0:ED:38 Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 29CD9A2476BB5D8C1AB60EA06FF90808144A4F56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 01E6 Signing time: Thu 07 Aug 2025 17:21:23 +0000 Manifest this update: Thu 07 Aug 2025 17:16:23 +0000 Manifest next update: Mon 11 Aug 2025 04:07:23 +0000 Files and hashes: 1: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: GK6TjIFHP3OKYpdF9mQ2NlZ0xI3zyr1c1AWcP5mkKcw=) 2: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: x+KGrxbTRwp5IefRddTwURmmaeSp9Was/7YjesdyhT4=) 3: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: jkr10nu1KheD3rFITjZKu8+8qzjxbIrM8OjPSducB+Q=) 4: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: 6gMRYCDTA91uCrSpOJHQwzXcDUzZZQ/fPopmQLU54uQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 04:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cd:9a:24:76:bb:5d:8c:1a:b6:0e:a0:6f:f9:08:08:14:4a:4f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Aug 7 17:16:23 2025 GMT Not After : Aug 11 04:07:23 2025 GMT Subject: CN=27D1B2CA4D74DDE4F99975087F1230927CF0ED38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:56:5d:d3:4a:7b:15:82:28:89:ed:c2:f1: eb:21:57:86:5c:63:bb:87:f6:46:29:d4:e1:ba:c8: 27:02:ef:df:30:04:13:2f:68:46:ba:52:02:90:72: 96:6c:38:4e:66:14:85:5f:7b:a2:12:58:01:79:c4: 56:2a:af:67:47:78:bd:d8:ca:5e:64:3b:7b:a6:76: 12:86:ab:9d:c7:5c:2c:5d:72:b6:c2:76:b8:5e:e5: 22:f2:9f:06:08:88:58:16:4a:89:49:cf:86:b9:4d: c6:0a:00:ce:81:0c:30:fe:34:42:2c:46:f2:57:86: 45:c0:45:a7:d5:58:f4:72:2d:08:33:d4:74:7f:fb: 25:f8:d4:9e:ac:81:cf:e9:0a:33:cd:d5:95:e7:20: 02:16:ed:09:12:f0:57:68:80:55:1b:0c:12:ef:db: 8a:56:fa:41:9a:c5:f3:49:f2:b9:06:ff:31:5e:f8: 9a:e8:2f:8c:d5:6f:92:fd:97:26:ed:e6:82:97:4b: ba:01:de:45:62:5e:38:f8:71:bb:f3:99:7c:ae:2c: eb:ff:a3:da:76:51:dc:bc:80:7e:68:23:30:63:b9: 71:45:29:22:b4:5a:ff:c5:91:48:9d:55:bd:62:48: 5d:b1:60:98:62:6a:32:18:00:6b:08:fd:bd:6b:c3: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D1:B2:CA:4D:74:DD:E4:F9:99:75:08:7F:12:30:92:7C:F0:ED:38 X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d8:75:65:cf:d1:3d:24:5d:8e:39:5c:85:84:e8:61:48:37: dd:a8:b9:19:cd:9b:88:51:cf:2a:28:74:f3:e3:7d:f3:25:97: 1f:d7:a8:89:e3:8e:9d:6f:3b:f7:10:2c:af:dd:d3:05:3e:3d: 7b:3e:3e:1f:37:33:ba:0d:54:9c:80:58:c1:4d:0f:29:79:0e: b1:c7:7b:67:b3:b3:67:53:47:6b:a1:80:a0:a8:9b:6b:18:61: ab:75:7f:c6:7c:90:5a:2f:b9:12:89:e9:6b:c7:a2:b2:6e:8a: f0:1c:af:b9:c7:ee:2a:d2:28:32:95:98:a5:5f:68:16:c0:92: b4:5d:f1:c6:d3:e6:d6:d3:73:59:44:83:4d:d7:e1:21:10:2f: 10:dc:81:b5:43:cf:07:0e:ff:00:61:8e:64:fd:45:78:90:0e: 67:b2:81:d6:6c:b2:44:12:8e:ab:7e:16:fa:38:3f:91:0c:31: 4d:6f:af:cc:5c:a1:03:7c:18:be:9b:c6:dd:6a:10:22:33:aa: f9:6a:d6:e3:e6:fc:a1:92:e8:cc:5b:8f:99:ac:1e:ea:8f:57: 8f:9d:7f:dc:77:72:de:76:53:3c:3e:bb:e3:b3:71:33:b2:00: 66:83:13:b8:07:f1:02:6e:33:0f:86:5c:45:d7:f6:87:70:ed: 25:38:26:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKc2aJHa7XYwatg6gb/kICBRKT1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTA4MDcxNzE2MjNaFw0yNTA4MTEwNDA3MjNaMDMxMTAvBgNV BAMTKDI3RDFCMkNBNEQ3NERERTRGOTk5NzUwODdGMTIzMDkyN0NGMEVEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+lZd00p7FYIoie3C8eshV4Zc Y7uH9kYp1OG6yCcC798wBBMvaEa6UgKQcpZsOE5mFIVfe6ISWAF5xFYqr2dHeL3Y yl5kO3umdhKGq53HXCxdcrbCdrhe5SLynwYIiFgWSolJz4a5TcYKAM6BDDD+NEIs RvJXhkXARafVWPRyLQgz1HR/+yX41J6sgc/pCjPN1ZXnIAIW7QkS8FdogFUbDBLv 24pW+kGaxfNJ8rkG/zFe+JroL4zVb5L9lybt5oKXS7oB3kViXjj4cbvzmXyuLOv/ o9p2Udy8gH5oIzBjuXFFKSK0Wv/FkUidVb1iSF2xYJhiajIYAGsI/b1rw89XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9Gyyk103eT5mXUIfxIwknzw7TgwHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzYdWXP0T0kXY45XIWE6GFIN92ouRnNm4hR zyoodPPjffMllx/XqInjjp1vO/cQLK/d0wU+PXs+Ph83M7oNVJyAWMFNDyl5DrHH e2ezs2dTR2uhgKCom2sYYat1f8Z8kFovuRKJ6WvHorJuivAcr7nH7irSKDKVmKVf aBbAkrRd8cbT5tbTc1lEg03X4SEQLxDcgbVDzwcO/wBhjmT9RXiQDmeygdZsskQS jqt+Fvo4P5EMMU1vr8xcoQN8GL6bxt1qECIzqvlq1uPm/KGS6Mxbj5msHuqPV4+d f9x3ct52Uzw+u+OzcTOyAGaDE7gH8QJuMw+GXEXX9odw7SU4Jtw= -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:10 2025 by rpki-client