$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: GKN8C298qCKl0t6vFa0QTIht6kk6Ozsk57zsBuybdQI= Subject key identifier: 6C:69:7B:DA:95:CC:19:56:D8:44:07:9F:DB:ED:8F:D3:1A:88:1D:B3 Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 2518272A5C39863BD1819E9095ECCAEF35295745 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 01CF Signing time: Mon 16 Jun 2025 17:51:22 +0000 Manifest this update: Mon 16 Jun 2025 17:46:22 +0000 Manifest next update: Thu 19 Jun 2025 18:35:22 +0000 Files and hashes: 1: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: GK6TjIFHP3OKYpdF9mQ2NlZ0xI3zyr1c1AWcP5mkKcw=) 2: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: dCMXljcpKgDCZ9D8jpIF4HhmnLBKmO7czVk+7cGgx18=) 3: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: 6gMRYCDTA91uCrSpOJHQwzXcDUzZZQ/fPopmQLU54uQ=) 4: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: jkr10nu1KheD3rFITjZKu8+8qzjxbIrM8OjPSducB+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:18:27:2a:5c:39:86:3b:d1:81:9e:90:95:ec:ca:ef:35:29:57:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Jun 16 17:46:22 2025 GMT Not After : Jun 19 18:35:22 2025 GMT Subject: CN=6C697BDA95CC1956D844079FDBED8FD31A881DB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b8:cc:cf:47:35:e0:3d:d3:b0:4c:e8:dd:13: 65:ec:5d:d9:de:21:0b:00:5b:b7:2c:df:4a:a3:d8: e9:31:0e:c4:ee:22:11:0a:6d:ea:14:98:ef:2b:7a: 17:17:ed:20:b7:3b:e7:13:11:e9:d6:c9:1a:3c:0c: ec:58:ad:94:b3:dd:1d:a5:c3:5b:81:2a:ae:37:f8: ee:16:9d:34:80:c0:12:71:73:df:4d:c9:b9:9d:59: 6d:e7:27:9d:da:da:e2:51:02:d3:10:11:0a:29:e1: 1d:0b:cc:cf:23:08:1c:63:25:74:ef:88:1f:6f:fc: 71:24:e8:f0:91:df:d0:b4:4d:e5:e6:e5:8d:0b:99: 5a:e9:50:9e:95:99:0b:d5:f3:5d:19:a3:3a:ef:81: ac:b1:9b:9b:ce:3c:01:01:59:9e:cd:0a:92:30:b7: 84:44:ad:da:59:2a:0b:f7:50:54:0d:47:3b:38:7a: b1:b2:87:c9:cc:c1:e3:b0:ca:64:b8:0b:85:97:9d: 26:49:c3:35:72:5c:35:26:39:6e:11:b0:27:ed:f3: d6:32:8c:33:18:4b:ef:38:bc:03:d6:00:15:47:ba: 92:99:84:d4:2d:49:41:b1:9d:61:a8:50:5c:65:f4: 62:23:23:61:45:f3:3d:87:9a:c2:b8:72:4f:eb:05: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:69:7B:DA:95:CC:19:56:D8:44:07:9F:DB:ED:8F:D3:1A:88:1D:B3 X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6f:3f:c0:d4:49:e3:40:55:fa:82:9f:3c:b8:5b:f0:86:83: db:a9:e1:f2:d4:70:31:4b:b4:e4:9f:b3:ed:9d:de:bf:08:d8: 77:9a:76:16:aa:43:cf:fe:99:91:85:b1:3d:5d:a9:94:e8:14: 1c:a8:27:43:7d:ec:08:29:9d:ed:d4:97:77:d8:aa:a7:d6:ad: 80:5f:3e:e2:5b:0f:f7:4b:66:16:6b:b8:2c:ad:bb:2a:5f:fe: a5:4c:79:5b:cc:9b:59:2d:ca:80:18:3a:70:02:dd:3c:b2:8d: 66:3f:e5:fd:95:1b:21:8e:db:f1:d8:c1:21:d2:a1:3c:14:b7: 91:65:43:4c:c8:dc:f8:ea:86:7a:6a:ac:56:d3:98:7e:b0:76: f8:c5:68:49:a2:4f:89:61:c4:85:cb:95:93:c1:c4:6e:ec:d7: b2:42:39:ee:94:23:6b:0e:e9:25:b0:d0:71:9a:21:1d:dc:e7: ca:f2:7c:51:a7:7d:3f:e9:da:aa:67:fb:a8:45:85:3d:58:47: 5e:90:a6:a6:a3:50:4e:d5:bf:e1:0c:6b:9d:98:2c:b5:1e:12: d2:9b:1a:f0:dd:47:1b:ca:b5:8d:b0:2f:e2:49:6a:c6:da:8a: 2e:13:eb:d6:ca:e3:cb:c1:c8:88:4d:40:98:f4:98:f7:12:76: 50:3c:e8:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRgnKlw5hjvRgZ6QlezK7zUpV0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTA2MTYxNzQ2MjJaFw0yNTA2MTkxODM1MjJaMDMxMTAvBgNV BAMTKDZDNjk3QkRBOTVDQzE5NTZEODQ0MDc5RkRCRUQ4RkQzMUE4ODFEQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDluMzPRzXgPdOwTOjdE2XsXdne IQsAW7cs30qj2OkxDsTuIhEKbeoUmO8rehcX7SC3O+cTEenWyRo8DOxYrZSz3R2l w1uBKq43+O4WnTSAwBJxc99NybmdWW3nJ53a2uJRAtMQEQop4R0LzM8jCBxjJXTv iB9v/HEk6PCR39C0TeXm5Y0LmVrpUJ6VmQvV810Zozrvgayxm5vOPAEBWZ7NCpIw t4RErdpZKgv3UFQNRzs4erGyh8nMweOwymS4C4WXnSZJwzVyXDUmOW4RsCft89Yy jDMYS+84vAPWABVHupKZhNQtSUGxnWGoUFxl9GIjI2FF8z2HmsK4ck/rBYuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGl72pXMGVbYRAef2+2P0xqIHbMwHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpvP8DUSeNAVfqCnzy4W/CGg9up4fLUcDFL tOSfs+2d3r8I2HeadhaqQ8/+mZGFsT1dqZToFByoJ0N97Agpne3Ul3fYqqfWrYBf PuJbD/dLZhZruCytuypf/qVMeVvMm1ktyoAYOnAC3TyyjWY/5f2VGyGO2/HYwSHS oTwUt5FlQ0zI3PjqhnpqrFbTmH6wdvjFaEmiT4lhxIXLlZPBxG7s17JCOe6UI2sO 6SWw0HGaIR3c58ryfFGnfT/p2qpn+6hFhT1YR16QpqajUE7Vv+EMa52YLLUeEtKb GvDdRxvKtY2wL+JJasbaii4T69bK48vByIhNQJj0mPcSdlA86J4= -----END CERTIFICATE-----Generated at Wed Jun 18 06:08:47 2025 by rpki-client