$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: GubipXavegmrhnjAP4lf1ucWOfyZ4083n44nV3W0SEs= Subject key identifier: 5E:96:2E:51:59:FC:1E:15:42:55:31:BF:08:A8:A0:2E:6E:39:A2:65 Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 5FA85D40B471A8F42A8962FEFD3E538126D2A72C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 04D1 Signing time: Tue 29 Apr 2025 12:52:19 +0000 Manifest this update: Tue 29 Apr 2025 12:47:19 +0000 Manifest next update: Fri 02 May 2025 23:31:19 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: L655Pa2AKy6YZM0th27qWmB7TfJ9SN35VJAKKFbO9qA=) 2: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: BVVXgBG6/A7ILGElSHCmQFh3aFf1WU64fLkl2Ia0qXo=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a8:5d:40:b4:71:a8:f4:2a:89:62:fe:fd:3e:53:81:26:d2:a7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Apr 29 12:47:19 2025 GMT Not After : May 2 23:31:19 2025 GMT Subject: CN=5E962E5159FC1E15425531BF08A8A02E6E39A265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:05:fb:fe:01:91:7d:6a:81:86:a0:e0:e7:cc: 0d:81:f3:9f:65:b8:34:bc:54:37:b8:58:0a:fd:52: 71:29:01:1c:6d:6c:9e:ff:25:44:b4:2b:31:b3:95: cc:2b:e4:2d:e5:db:57:a9:c4:d1:4f:7f:73:01:54: c6:02:11:98:92:63:fb:af:c0:d9:01:e0:98:58:a2: 0c:82:7c:08:87:0b:9d:ba:2b:a6:6b:1a:6b:68:ee: 77:31:11:f5:10:15:c9:e6:8e:86:ec:47:09:07:54: 21:6c:06:fa:27:5d:a3:7f:12:96:95:88:d2:e7:bb: 7f:7f:4e:6e:27:e5:1a:f5:a2:fb:c9:10:1a:ff:fc: 71:0a:4c:35:23:47:5d:79:22:ae:18:04:8b:cd:0c: ef:e1:01:5e:71:97:23:b4:b0:e5:03:70:c5:ba:10: 60:ee:40:be:73:16:6e:74:76:9d:f8:00:7c:51:14: 75:b9:70:10:0b:80:6f:03:9b:0f:c5:d2:dd:59:52: 05:fa:e4:c6:76:e7:d8:3d:ea:9d:82:34:1a:6e:db: 17:75:a1:1d:b8:2a:b2:be:fe:06:bf:f7:9c:8c:10: 1b:ef:c7:d1:33:96:06:aa:f8:f9:05:a8:11:ea:d4: 4a:d0:2b:a0:e0:08:e6:2a:d2:fc:ee:d2:a6:5c:f5: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:96:2E:51:59:FC:1E:15:42:55:31:BF:08:A8:A0:2E:6E:39:A2:65 X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d3:00:56:40:63:56:88:28:fd:f8:31:b4:28:a7:bf:3a:89: 54:c5:87:87:0a:2e:8c:dc:b8:01:84:d1:ee:cd:93:23:7d:07: 0e:a0:f2:c2:3c:d6:66:b5:72:a7:5d:db:e6:36:98:da:a2:08: ab:ba:5a:95:65:79:a8:79:c2:a7:31:0e:81:d8:a6:31:2b:f1: eb:d4:5b:26:12:85:15:ae:71:36:cb:b8:9c:c5:99:39:9c:f8: 13:1a:ed:af:4a:49:43:f5:11:c0:00:ff:cb:35:e3:f7:37:3b: 62:69:59:8c:54:2d:7e:ed:ad:8a:ff:90:23:34:63:d6:39:1a: 12:1d:ea:31:d6:77:40:9c:36:61:47:0d:81:55:19:cc:9b:5c: 29:55:58:0f:70:5b:9d:96:89:14:69:8a:9e:30:6c:d6:35:32: 23:85:1a:e4:4a:f5:21:cc:88:67:f1:fc:2f:a6:77:e6:8e:56: 58:b0:39:37:94:b6:b8:b4:e9:a1:e5:36:84:30:92:41:e4:f6: 8d:94:27:71:eb:19:89:bb:e3:23:ce:b5:58:48:50:08:8c:b3: 5a:81:89:e3:fa:4d:a8:47:9c:87:8b:de:eb:c7:a4:e2:6b:37: bb:bd:4e:cb:c7:fe:e9:35:a3:a3:09:27:39:91:91:39:6e:0c: 16:68:6b:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6hdQLRxqPQqiWL+/T5TgSbSpywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA0MjkxMjQ3MTlaFw0yNTA1MDIyMzMxMTlaMDMxMTAvBgNV BAMTKDVFOTYyRTUxNTlGQzFFMTU0MjU1MzFCRjA4QThBMDJFNkUzOUEyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBfv+AZF9aoGGoODnzA2B859l uDS8VDe4WAr9UnEpARxtbJ7/JUS0KzGzlcwr5C3l21epxNFPf3MBVMYCEZiSY/uv wNkB4JhYogyCfAiHC526K6ZrGmto7ncxEfUQFcnmjobsRwkHVCFsBvonXaN/EpaV iNLnu39/Tm4n5Rr1ovvJEBr//HEKTDUjR115Iq4YBIvNDO/hAV5xlyO0sOUDcMW6 EGDuQL5zFm50dp34AHxRFHW5cBALgG8Dmw/F0t1ZUgX65MZ259g96p2CNBpu2xd1 oR24KrK+/ga/95yMEBvvx9Ezlgaq+PkFqBHq1ErQK6DgCOYq0vzu0qZc9bm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXpYuUVn8HhVCVTG/CKigLm45omUwHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnTAFZAY1aIKP34MbQop786iVTFh4cKLozc uAGE0e7NkyN9Bw6g8sI81ma1cqdd2+Y2mNqiCKu6WpVleah5wqcxDoHYpjEr8evU WyYShRWucTbLuJzFmTmc+BMa7a9KSUP1EcAA/8s14/c3O2JpWYxULX7trYr/kCM0 Y9Y5GhId6jHWd0CcNmFHDYFVGcybXClVWA9wW52WiRRpip4wbNY1MiOFGuRK9SHM iGfx/C+md+aOVliwOTeUtri06aHlNoQwkkHk9o2UJ3HrGYm74yPOtVhIUAiMs1qB ieP6TahHnIeL3uvHpOJrN7u9TsvH/uk1o6MJJzmRkTluDBZoayU= -----END CERTIFICATE-----Generated at Wed Apr 30 02:25:08 2025 by rpki-client