$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json) Hash identifier: merwDmSTTCrqgB0kjSf4qUXv4CBb7ySYm1EVbSuV7Bg= Subject key identifier: 4A:5A:FC:78:BE:8C:CB:83:83:03:23:DA:A4:C4:1D:B7:C4:7C:05:31 Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 35F285CAEF4FC6ABC65050DB8C0C42012E9C0B2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft Manifest number: 0123 Signing time: Sun 19 Oct 2025 05:20:48 +0000 Manifest this update: Sun 19 Oct 2025 05:15:48 +0000 Manifest next update: Wed 22 Oct 2025 07:11:48 +0000 Files and hashes: 1: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: 0X5xnROcQoMOtKvJXE0YRWttV8VthTg/btubyZJ4AV0=) 2: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: N74dfLFvl7eNsa07RKUrhClkbMWl/o482r/Gpd8s/i0=) 3: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: /KzEuAJHbJBmL5pgo4HQUQfG2vh0jJ3hOFNjN0Pvcz8=) 4: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: 0lAqF2YCCu8hBoO36P3pXTfszCRwlRHUwQyhfZKieRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f2:85:ca:ef:4f:c6:ab:c6:50:50:db:8c:0c:42:01:2e:9c:0b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Oct 19 05:15:48 2025 GMT Not After : Oct 22 07:11:48 2025 GMT Subject: CN=4A5AFC78BE8CCB83830323DAA4C41DB7C47C0531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:72:62:46:5e:13:37:aa:ca:a6:d7:ca:57: 46:49:3e:0e:b8:bb:89:28:37:53:a4:08:7c:da:cd: 8c:c6:18:d8:3f:6a:9e:45:b6:3a:7f:f0:6e:ff:92: 92:c2:09:eb:b9:a7:2c:f2:66:8b:34:16:d2:ee:36: 4c:18:02:03:b6:d8:f5:8a:ed:d8:d9:e6:1a:52:42: f2:55:98:84:ab:76:dd:67:45:09:60:b2:d5:4b:2e: 79:18:52:17:c0:02:9b:76:6a:58:72:76:44:b0:50: 42:fd:59:fa:b8:7b:77:01:85:72:49:ec:69:4f:38: 6d:59:89:ba:ba:1e:eb:b9:c8:64:e0:fd:48:e0:1c: 05:2b:c0:bd:2e:ee:48:f0:85:9e:0c:01:9d:46:83: eb:32:27:a8:b2:cb:8e:d9:8f:74:6c:23:b9:87:45: e2:e8:85:f6:d4:bf:d8:b2:76:40:49:1b:b6:8a:81: 26:56:e2:0a:dd:34:37:02:67:09:29:62:2f:f9:a0: 7f:4b:01:52:d6:d9:36:1e:4d:4a:74:f4:94:66:b0: 9a:62:c6:fc:65:94:db:55:91:60:16:e6:0f:ac:37: 6b:53:e6:a0:c0:89:85:a4:f1:cc:b7:d9:3f:85:96: 60:b5:b4:c1:c9:37:2e:49:db:7c:7c:f7:03:4e:cc: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5A:FC:78:BE:8C:CB:83:83:03:23:DA:A4:C4:1D:B7:C4:7C:05:31 X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:74:f4:e8:cb:15:01:7c:cf:2a:a3:d0:e1:06:be:fc:91:47: 24:5a:92:cf:0c:d4:71:fb:e6:cc:ec:6c:c5:7c:b2:f8:78:36: 7f:f4:39:84:fa:ee:73:95:95:f5:d0:2a:54:94:8d:67:1b:f8: f7:8e:33:f0:80:94:b6:23:c3:07:3d:76:b8:0e:4f:80:7f:a3: 1f:28:7b:fd:10:06:75:41:af:2c:64:3e:f0:83:17:25:2d:4c: e0:b7:e3:32:aa:45:b7:b6:d6:92:6c:4b:38:06:0f:53:bf:51: 7e:69:d4:d9:b9:fa:86:54:6c:1a:ab:4b:34:84:cc:a0:d4:50: 6f:22:4a:b8:61:0e:d1:6a:df:72:6d:0e:f2:9a:18:7e:3b:72: b8:94:f8:80:01:84:1e:82:47:75:80:32:81:52:92:7d:1f:06: 5e:e9:08:62:12:0a:dc:0a:ef:b2:23:19:fc:13:81:87:63:11: e8:13:32:ae:83:1b:cd:9d:59:6f:10:d3:06:dd:b3:8f:73:f9: e2:61:e6:2c:49:5d:71:e1:b3:45:89:f2:e1:ef:6b:ae:d7:4e: 55:30:2a:5b:74:bc:0d:89:bc:31:11:f5:6a:62:2a:d8:60:1f: 83:98:1c:30:6a:4e:25:ce:65:92:56:76:ee:c6:e5:5a:e3:71: 97:01:26:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfKFyu9PxqvGUFDbjAxCAS6cCy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNTEwMTkwNTE1NDhaFw0yNTEwMjIwNzExNDhaMDMxMTAvBgNV BAMTKDRBNUFGQzc4QkU4Q0NCODM4MzAzMjNEQUE0QzQxREI3QzQ3QzA1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuHJiRl4TN6rKptfKV0ZJPg64 u4koN1OkCHzazYzGGNg/ap5Ftjp/8G7/kpLCCeu5pyzyZos0FtLuNkwYAgO22PWK 7djZ5hpSQvJVmISrdt1nRQlgstVLLnkYUhfAApt2alhydkSwUEL9Wfq4e3cBhXJJ 7GlPOG1Zibq6Huu5yGTg/UjgHAUrwL0u7kjwhZ4MAZ1Gg+syJ6iyy47Zj3RsI7mH ReLohfbUv9iydkBJG7aKgSZW4grdNDcCZwkpYi/5oH9LAVLW2TYeTUp09JRmsJpi xvxllNtVkWAW5g+sN2tT5qDAiYWk8cy32T+FlmC1tMHJNy5J23x89wNOzHpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSlr8eL6My4ODAyPapMQdt8R8BTEwHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl09OjLFQF8zyqj0OEGvvyRRyRaks8M1HH7 5szsbMV8svh4Nn/0OYT67nOVlfXQKlSUjWcb+PeOM/CAlLYjwwc9drgOT4B/ox8o e/0QBnVBryxkPvCDFyUtTOC34zKqRbe21pJsSzgGD1O/UX5p1Nm5+oZUbBqrSzSE zKDUUG8iSrhhDtFq33JtDvKaGH47criU+IABhB6CR3WAMoFSkn0fBl7pCGISCtwK 77IjGfwTgYdjEegTMq6DG82dWW8Q0wbds49z+eJh5ixJXXHhs0WJ8uHva67XTlUw Klt0vA2JvDER9WpiKthgH4OYHDBqTiXOZZJWdu7G5VrjcZcBJhs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:36 2025 by rpki-client