$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: PfyxImAZHjMygQQiUCEMHfzwCE4a2YH4808hGl4Q/+w= Subject key identifier: 9A:02:39:0F:ED:C4:49:BB:98:57:2B:14:5A:2B:51:61:09:A6:91:6F Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 484497B2201609A7E662D10B67EFE5A365174FF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 055A Signing time: Sun 01 Mar 2026 05:52:44 +0000 Manifest this update: Sun 01 Mar 2026 05:47:44 +0000 Manifest next update: Wed 04 Mar 2026 08:50:44 +0000 Files and hashes: 1: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) 2: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: hXNMGZUwXRc8jHgP0waDmLr9lJ3Mb+BHNzmiw6714WY=) 3: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:44:97:b2:20:16:09:a7:e6:62:d1:0b:67:ef:e5:a3:65:17:4f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Mar 1 05:47:44 2026 GMT Not After : Mar 4 08:50:44 2026 GMT Subject: CN=9A02390FEDC449BB98572B145A2B516109A6916F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:b9:48:ee:fb:a2:b3:ff:25:fd:6c:96:02: 06:e9:ce:d6:47:87:5a:88:b3:aa:3c:02:30:44:db: 87:98:40:df:ee:9d:e5:3b:46:bc:6b:c8:42:a1:ac: 95:b0:9c:c9:a3:f6:cd:e3:84:a6:89:98:09:89:a6: 6d:bc:af:28:65:ec:33:d0:cc:26:83:f9:02:de:df: ef:d1:83:26:7c:77:db:d9:83:ef:48:8e:f8:2f:db: 65:4d:ee:ed:ac:6c:3e:a5:8c:08:9c:e0:26:2a:42: 8c:54:a9:c0:fd:78:fe:71:0c:48:59:37:fb:d0:65: bb:c2:d0:e7:ec:bc:37:16:bb:8b:36:96:57:41:01: ef:21:4b:cf:06:5d:ac:ba:9f:b7:04:97:c9:bf:2a: 05:24:54:c3:cd:c7:13:ca:b3:78:c6:11:8f:38:f9: 15:a2:dd:d5:bb:6f:0f:de:db:c9:d6:17:6d:71:2e: 62:3a:ba:0f:ac:76:42:be:f2:07:d1:61:9e:60:f1: 58:b2:c3:33:b9:5e:39:c8:98:19:c8:06:e1:fe:7e: 69:6c:21:8a:6a:1c:a0:03:8e:b8:e9:93:22:0f:b0: 05:25:3f:fa:0e:35:6b:17:ed:fc:48:6a:f6:a0:38: 26:86:cb:f0:47:6f:e1:8b:ba:ed:9e:26:ea:70:f5: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:02:39:0F:ED:C4:49:BB:98:57:2B:14:5A:2B:51:61:09:A6:91:6F X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:cd:84:ef:d9:62:36:e5:2d:7e:f4:67:34:f1:f1:a5:46:fb: 89:16:ad:5e:8c:d4:43:c9:9e:c0:e1:01:82:ae:a1:18:11:fd: 14:69:c4:44:1d:63:b9:79:82:cb:1e:d6:c5:1e:49:65:44:1b: 00:b2:70:a8:80:eb:88:ee:44:da:39:01:71:2d:24:e8:15:87: 46:34:79:45:c9:3b:05:48:76:bb:9b:10:09:1d:b0:bf:07:97: 8f:9c:23:b6:fa:b1:e5:40:69:24:f5:cd:d7:54:e1:fb:34:f3: f2:d7:1c:fe:ff:09:1b:f2:11:aa:dc:d4:ff:de:1e:72:a9:35: 5a:fa:da:bb:aa:32:4d:eb:4a:d4:3b:62:01:6a:57:19:cb:77: 33:52:88:66:0c:78:bb:67:ee:47:d6:f7:c3:36:72:54:aa:17: 37:7f:2e:b4:6d:bf:3d:4a:fe:f8:ff:3b:f1:fe:a3:c0:c6:b9: 38:92:bc:d3:7a:6a:85:d6:42:1e:5a:13:57:1b:eb:2c:5a:bf: f9:d8:e1:1b:43:dc:05:7d:65:bb:07:99:a1:15:51:ee:a2:81: 99:82:a9:59:0d:92:dc:ad:43:f2:14:01:9c:b2:1c:a7:da:cb: 62:72:88:40:a2:d8:56:72:54:7c:cf:4a:d0:91:d6:be:3d:81: 3d:fe:cf:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSESXsiAWCafmYtELZ+/lo2UXT/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNjAzMDEwNTQ3NDRaFw0yNjAzMDQwODUwNDRaMDMxMTAvBgNV BAMTKDlBMDIzOTBGRURDNDQ5QkI5ODU3MkIxNDVBMkI1MTYxMDlBNjkxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzblI7vuis/8l/WyWAgbpztZH h1qIs6o8AjBE24eYQN/uneU7RrxryEKhrJWwnMmj9s3jhKaJmAmJpm28ryhl7DPQ zCaD+QLe3+/RgyZ8d9vZg+9Ijvgv22VN7u2sbD6ljAic4CYqQoxUqcD9eP5xDEhZ N/vQZbvC0OfsvDcWu4s2lldBAe8hS88GXay6n7cEl8m/KgUkVMPNxxPKs3jGEY84 +RWi3dW7bw/e28nWF21xLmI6ug+sdkK+8gfRYZ5g8ViywzO5XjnImBnIBuH+fmls IYpqHKADjrjpkyIPsAUlP/oONWsX7fxIavagOCaGy/BHb+GLuu2eJupw9dVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgI5D+3ESbuYVysUWitRYQmmkW8wHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnNhO/ZYjblLX70ZzTx8aVG+4kWrV6M1EPJ nsDhAYKuoRgR/RRpxEQdY7l5gsse1sUeSWVEGwCycKiA64juRNo5AXEtJOgVh0Y0 eUXJOwVIdrubEAkdsL8Hl4+cI7b6seVAaST1zddU4fs08/LXHP7/CRvyEarc1P/e HnKpNVr62ruqMk3rStQ7YgFqVxnLdzNSiGYMeLtn7kfW98M2clSqFzd/LrRtvz1K /vj/O/H+o8DGuTiSvNN6aoXWQh5aE1cb6yxav/nY4RtD3AV9ZbsHmaEVUe6igZmC qVkNktytQ/IUAZyyHKfay2JyiECi2FZyVHzPStCR1r49gT3+zzE= -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:43 2026 by rpki-client