$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: 5WQDH6SBgJLptcI+60zmmb4a72Pa9IXjuyVuGpYN2Js= Subject key identifier: 79:5C:B7:5C:AF:3E:54:75:F4:34:32:75:86:B7:44:A7:25:54:AB:0F Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 09F3E197C286A81A450D1500D008BC094190E7DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 0257 Signing time: Sat 18 Apr 2026 01:51:32 +0000 Manifest this update: Sat 18 Apr 2026 01:46:32 +0000 Manifest next update: Tue 21 Apr 2026 09:34:32 +0000 Files and hashes: 1: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: RK/lRgQFYGeXg6Bzk3ovyOFZdgVFVtKMAYe3R6PnsZs=) 2: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: MRy77sf3L7udkZm906+A+Ghvj4UiXzwG4n4yXZHiHcg=) 3: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: cqOcJAZKbrP9HYe2ShHrvgf1/zKk7TB83EYec3+QDIo=) 4: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: uL3SdGViVTN4twtj5fvseawDw7MHu5q6qt8dKfGSkqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f3:e1:97:c2:86:a8:1a:45:0d:15:00:d0:08:bc:09:41:90:e7:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Apr 18 01:46:32 2026 GMT Not After : Apr 21 09:34:32 2026 GMT Subject: CN=795CB75CAF3E5475F434327586B744A72554AB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:cd:e9:15:ef:f1:98:54:da:9b:98:4a:74: ec:40:f1:58:39:d1:40:85:04:bd:4f:a7:38:16:02: 78:16:61:40:35:74:db:5d:10:01:50:10:69:93:2a: b4:6e:c6:f0:87:8b:ac:28:00:51:0a:0c:53:ae:57: 1c:d9:5f:f3:88:40:94:50:df:9a:e7:1f:2b:86:3a: 60:1a:ed:bd:16:d4:ef:03:f4:2c:90:60:05:ca:68: 7b:e2:92:5d:13:fa:e8:95:e9:fa:aa:01:14:4b:8b: 1b:1d:af:c2:64:0c:c5:e3:96:be:77:5c:14:aa:5d: 3e:c1:59:ba:1f:24:29:d2:0d:b0:59:d6:73:4c:48: 89:41:55:99:f5:32:cf:90:c2:a7:01:14:d8:31:ff: 59:46:38:39:fd:b7:65:8f:d5:45:d8:46:71:ad:59: 83:34:46:74:47:25:04:9c:4e:39:db:bc:8c:3b:95: 44:d0:41:a3:3a:7b:25:a0:97:ab:c7:0a:d3:a2:92: f8:67:0d:52:de:db:45:68:a2:cc:9f:a3:d0:86:7d: 02:ce:eb:f2:65:c6:f6:0f:35:ca:53:c0:8f:29:f2: 3a:3a:d7:b4:1a:6a:b0:c6:f7:6c:a0:c6:11:6e:9d: 5d:a1:76:e3:f8:4c:f8:40:4a:5b:55:9a:01:7f:9c: cd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5C:B7:5C:AF:3E:54:75:F4:34:32:75:86:B7:44:A7:25:54:AB:0F X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b3:21:e4:86:10:5e:98:6b:8d:c7:a7:99:8f:69:59:be:99: c5:d3:f6:65:aa:61:b4:ea:a3:41:68:12:7d:93:c7:0b:7d:b7: 1f:09:be:98:e5:a2:46:f0:13:f6:89:83:e5:5a:14:30:54:b6: 9b:e5:db:c7:84:14:d4:7e:b5:e6:b0:a1:d9:43:e8:98:ad:2c: a0:f7:b7:31:72:29:7e:7b:d1:cf:65:4f:a1:d6:1e:a6:ca:a9: 05:fa:d2:b9:ad:0f:02:0e:bf:39:f0:35:25:f5:f6:fb:4e:55: b6:90:e0:bf:aa:d1:14:71:57:29:4e:81:37:50:fe:30:30:d1: d0:29:e3:00:ec:e5:1a:4f:bf:95:f3:ce:94:13:17:6e:92:6c: 7a:f9:89:d0:7d:d4:35:51:ff:e9:cb:08:4f:0a:97:12:3b:f8: a1:03:ea:e6:f3:ba:1f:37:bb:c1:4c:fb:4c:44:31:70:37:8c: 78:84:5b:e8:1c:24:40:0b:56:73:41:08:bd:dd:7e:6f:33:a2: 4c:93:e0:bd:de:01:60:67:ae:8c:9f:64:6f:1f:8a:3a:1f:1c: d6:e3:4c:0f:bb:0d:af:3d:23:7e:98:5d:87:b5:43:6d:23:23: ec:34:cb:f5:8b:f9:a0:13:d2:c0:8f:56:67:25:5a:67:6c:c6: 13:91:17:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfPhl8KGqBpFDRUA0Ai8CUGQ594wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNjA0MTgwMTQ2MzJaFw0yNjA0MjEwOTM0MzJaMDMxMTAvBgNV BAMTKDc5NUNCNzVDQUYzRTU0NzVGNDM0MzI3NTg2Qjc0NEE3MjU1NEFCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8783pFe/xmFTam5hKdOxA8Vg5 0UCFBL1PpzgWAngWYUA1dNtdEAFQEGmTKrRuxvCHi6woAFEKDFOuVxzZX/OIQJRQ 35rnHyuGOmAa7b0W1O8D9CyQYAXKaHvikl0T+uiV6fqqARRLixsdr8JkDMXjlr53 XBSqXT7BWbofJCnSDbBZ1nNMSIlBVZn1Ms+QwqcBFNgx/1lGODn9t2WP1UXYRnGt WYM0RnRHJQScTjnbvIw7lUTQQaM6eyWgl6vHCtOikvhnDVLe20Voosyfo9CGfQLO 6/JlxvYPNcpTwI8p8jo617QaarDG92ygxhFunV2hduP4TPhASltVmgF/nM0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVy3XK8+VHX0NDJ1hrdEpyVUqw8wHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuzIeSGEF6Ya43Hp5mPaVm+mcXT9mWqYbTq o0FoEn2Txwt9tx8JvpjlokbwE/aJg+VaFDBUtpvl28eEFNR+teawodlD6JitLKD3 tzFyKX570c9lT6HWHqbKqQX60rmtDwIOvznwNSX19vtOVbaQ4L+q0RRxVylOgTdQ /jAw0dAp4wDs5RpPv5XzzpQTF26SbHr5idB91DVR/+nLCE8KlxI7+KED6ubzuh83 u8FM+0xEMXA3jHiEW+gcJEALVnNBCL3dfm8zokyT4L3eAWBnroyfZG8fijofHNbj TA+7Da89I36YXYe1Q20jI+w0y/WL+aAT0sCPVmclWmdsxhORF08= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:41 2026 by rpki-client