$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: 4kccjQx0ROazLW5pW9j11zLs7w8oubhjjVqNZkAhD3k= Subject key identifier: 40:4D:49:CC:DC:FE:24:C2:68:B7:3D:7C:54:E9:B8:54:62:F7:3D:0C Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 6CDCF0B31F6534687E9CEEFD5334309E9A59F683 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 0570 Signing time: Sat 18 Apr 2026 11:42:40 +0000 Manifest this update: Sat 18 Apr 2026 11:37:40 +0000 Manifest next update: Tue 21 Apr 2026 21:12:40 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) 2: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: MSRYn7i1rX73d9U2LJmtSA3qcfr4Ipq2h6IBGH+C68I=) 3: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: EqQmwS0sqYlZ+XCCVwr19eZLIpDBQ9DF1bG94gkUl24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:dc:f0:b3:1f:65:34:68:7e:9c:ee:fd:53:34:30:9e:9a:59:f6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Apr 18 11:37:40 2026 GMT Not After : Apr 21 21:12:40 2026 GMT Subject: CN=404D49CCDCFE24C268B73D7C54E9B85462F73D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:7f:69:fb:8a:4a:25:46:f2:af:c1:87:4e: 9a:11:9f:c1:85:a2:cd:b5:61:42:2c:72:7f:e3:9e: 41:19:41:fb:05:8e:97:59:15:3c:49:03:48:d3:2a: 97:d4:3f:3e:f6:d4:ad:b1:62:dd:4e:68:dc:e8:67: d2:45:69:d0:c8:ca:8e:6a:d2:3b:f9:1e:5a:8d:1c: 97:6a:02:58:3d:da:db:bd:36:cc:66:3f:1f:5b:15: 88:57:ed:19:1e:2b:ce:3f:73:40:e6:f0:e6:48:a8: 6e:17:25:4f:fa:73:88:c6:71:25:9a:a6:3a:13:b8: 54:1c:17:18:3c:e7:10:10:f0:d2:22:0d:b3:33:18: a8:14:c7:5c:31:94:52:3b:6b:dd:2e:b6:ca:b5:60: 05:2b:08:dd:6d:ce:47:10:b3:5b:3f:b4:30:46:17: f1:fe:c6:92:58:e4:16:e6:8a:2b:55:8f:76:f1:b8: 95:69:35:de:55:c0:47:23:36:32:ae:bc:b8:7b:19: 76:69:b2:35:0a:62:d7:85:d7:51:5f:ef:73:94:49: 2b:cd:95:c5:cd:e3:c6:40:42:8a:36:cf:3c:d5:cd: 9c:a3:8b:47:31:b1:75:1a:02:d1:dc:5f:52:23:79: 29:5c:c6:db:57:7c:52:13:4d:3f:04:aa:b7:63:16: 8f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4D:49:CC:DC:FE:24:C2:68:B7:3D:7C:54:E9:B8:54:62:F7:3D:0C X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:dc:ee:e3:6f:0b:39:1d:1d:16:fd:03:87:a5:3e:21:90:b7: c4:cd:9a:2a:47:fb:a4:f3:22:cb:71:49:0d:39:9f:35:93:b8: 42:ca:98:17:c2:e6:70:38:97:63:29:00:bc:e8:e9:f8:33:49: 7f:3c:fa:21:c9:79:72:d8:fd:56:1a:1d:e8:ec:fe:64:24:22: 23:47:49:49:b8:bf:0e:1f:28:37:16:37:42:5e:67:73:1a:3f: 5b:17:3a:b7:7d:df:bd:53:19:db:f0:8a:9d:f3:98:d6:c2:91: e4:82:5c:bb:f7:d7:31:53:70:10:ae:ff:f7:b6:4e:ff:2a:01: a6:d6:3a:3c:cd:1f:12:cc:1b:99:0d:43:84:98:71:6d:af:bf: 0b:5f:c3:08:4a:28:5a:56:e8:fd:7c:07:f8:c2:db:4c:8f:e4: b9:98:93:97:52:c3:35:72:e0:86:fe:36:fc:a4:8b:de:8e:d1: c0:fd:8b:68:d9:bb:b1:8a:f8:60:2a:9e:77:c2:00:da:e4:45: 4a:ee:2e:42:b9:f4:7d:ee:0a:ec:14:1e:59:a5:f3:6b:f6:ae: ca:51:45:c7:09:3c:f7:5e:7e:64:38:b8:a7:44:53:1d:ee:f5: 58:a4:4a:e1:6e:0c:9a:f3:04:e2:f9:db:81:4b:95:6a:10:b1: 49:07:ba:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNzwsx9lNGh+nO79UzQwnppZ9oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNjA0MTgxMTM3NDBaFw0yNjA0MjEyMTEyNDBaMDMxMTAvBgNV BAMTKDQwNEQ0OUNDRENGRTI0QzI2OEI3M0Q3QzU0RTlCODU0NjJGNzNEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCefH9p+4pKJUbyr8GHTpoRn8GF os21YUIscn/jnkEZQfsFjpdZFTxJA0jTKpfUPz721K2xYt1OaNzoZ9JFadDIyo5q 0jv5HlqNHJdqAlg92tu9NsxmPx9bFYhX7RkeK84/c0Dm8OZIqG4XJU/6c4jGcSWa pjoTuFQcFxg85xAQ8NIiDbMzGKgUx1wxlFI7a90utsq1YAUrCN1tzkcQs1s/tDBG F/H+xpJY5BbmiitVj3bxuJVpNd5VwEcjNjKuvLh7GXZpsjUKYteF11Ff73OUSSvN lcXN48ZAQoo2zzzVzZyji0cxsXUaAtHcX1IjeSlcxttXfFITTT8EqrdjFo//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQE1JzNz+JMJotz18VOm4VGL3PQwwHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXc7uNvCzkdHRb9A4elPiGQt8TNmipH+6Tz IstxSQ05nzWTuELKmBfC5nA4l2MpALzo6fgzSX88+iHJeXLY/VYaHejs/mQkIiNH SUm4vw4fKDcWN0JeZ3MaP1sXOrd9371TGdvwip3zmNbCkeSCXLv31zFTcBCu//e2 Tv8qAabWOjzNHxLMG5kNQ4SYcW2vvwtfwwhKKFpW6P18B/jC20yP5LmYk5dSwzVy 4Ib+Nvyki96O0cD9i2jZu7GK+GAqnnfCANrkRUruLkK59H3uCuwUHlml82v2rspR RccJPPdefmQ4uKdEUx3u9VikSuFuDJrzBOL524FLlWoQsUkHuuk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:52 2026 by rpki-client