$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: aNeZuKFYe/O1+f/E9KDKEQ1SRH505VfksMvCX8H7jjY= Subject key identifier: 96:30:79:DC:9F:E8:C4:F3:82:C5:03:93:72:ED:83:36:B6:33:CB:88 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 272E337005D44F6BD02067FB1F751194552BE048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 051A Signing time: Sun 19 Oct 2025 10:10:02 +0000 Manifest this update: Sun 19 Oct 2025 10:05:02 +0000 Manifest next update: Wed 22 Oct 2025 14:37:02 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) 2: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 3: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: tpzIsO87v1EKJrX9YTP4gCSZ8urCBV3b6cIF77TJtB8=) 4: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2e:33:70:05:d4:4f:6b:d0:20:67:fb:1f:75:11:94:55:2b:e0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Oct 19 10:05:02 2025 GMT Not After : Oct 22 14:37:02 2025 GMT Subject: CN=963079DC9FE8C4F382C5039372ED8336B633CB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:cb:1b:fe:aa:c3:b0:1a:41:cd:63:01:f6: 36:ad:46:15:81:1c:70:da:78:a0:b0:a8:20:63:c6: bb:87:6d:03:8a:17:f9:a3:03:6b:e7:34:ee:de:bf: f5:10:c6:f6:7a:be:9b:89:ec:31:06:33:20:6f:36: 5a:ab:1f:ce:91:d3:69:c8:33:b5:0d:56:32:9e:84: 12:c9:b1:ff:2c:9e:b0:a3:5d:48:9a:53:dd:1d:55: c3:cf:72:49:0e:0b:01:1e:1e:f4:4c:0b:1c:5f:44: 5d:4d:8f:62:6d:1f:08:23:54:92:28:f1:8c:6c:1f: a3:9a:57:e8:5c:d9:ed:88:ce:7d:72:e5:08:d7:8b: a3:b4:79:28:2c:4c:49:aa:d8:71:5c:80:4c:64:2b: be:16:a1:a8:b8:0f:81:4c:25:8a:ab:fe:db:31:4c: 18:07:73:cb:b4:96:41:d0:c3:31:1d:40:ba:c2:2d: 9d:f6:ad:4d:b9:3f:08:32:ab:fd:34:de:fa:81:ea: eb:09:1b:18:3e:2b:23:0f:fa:3c:b1:14:f4:fa:09: d4:ae:fb:84:9e:6d:db:02:38:ff:08:c1:2c:78:e2: 90:d5:00:bd:12:ee:6f:e5:a2:e4:8f:b7:39:55:c2: ab:45:46:5b:b0:2d:fb:8a:ad:cc:54:10:14:53:71: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:30:79:DC:9F:E8:C4:F3:82:C5:03:93:72:ED:83:36:B6:33:CB:88 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:53:60:e6:fc:8d:7f:a4:21:96:13:79:b6:36:31:6b:41:cf: 7f:90:ea:05:42:6e:6d:9f:49:49:f4:b3:7b:46:8b:ea:5a:b1: 9c:c4:18:89:da:e1:0a:71:67:ec:29:82:80:0c:d8:e5:1a:99: 62:bd:77:59:41:ba:68:1b:99:97:ea:88:ad:fa:35:ab:5a:0a: 99:e8:0b:1c:f8:d6:ac:84:b6:71:aa:b4:6e:f8:78:5b:ee:e2: 29:cd:b1:cd:92:4f:53:59:8f:c3:04:9c:f8:2c:98:81:a0:1b: 39:8b:ac:aa:9a:43:15:6b:05:9b:22:fb:a5:25:a9:97:68:15: af:ef:1b:a0:5e:f6:e7:0e:02:c4:2c:eb:2c:6b:c0:78:42:76: 70:6e:4d:03:45:bc:8b:25:4c:97:fb:7e:c2:a1:f2:d8:a6:bb: 37:fd:f5:3d:3b:64:f7:b9:4e:94:bd:6a:c9:5e:a4:db:97:51: 65:81:2f:fc:b7:37:db:06:2d:5a:11:bb:d3:e1:e8:ec:86:6c: 52:8f:a6:36:fd:06:a1:f1:8f:78:f6:9f:6d:b6:fa:7f:91:ec: d5:d5:02:b2:eb:a3:f5:7a:f4:47:51:28:21:b2:7a:64:1c:c3: 4d:d8:1d:f6:65:b5:8f:fe:bf:bf:d4:e1:41:49:3a:e8:c3:7b: a3:2d:93:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJy4zcAXUT2vQIGf7H3URlFUr4EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTEwMTkxMDA1MDJaFw0yNTEwMjIxNDM3MDJaMDMxMTAvBgNV BAMTKDk2MzA3OURDOUZFOEM0RjM4MkM1MDM5MzcyRUQ4MzM2QjYzM0NCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQcsb/qrDsBpBzWMB9jatRhWB HHDaeKCwqCBjxruHbQOKF/mjA2vnNO7ev/UQxvZ6vpuJ7DEGMyBvNlqrH86R02nI M7UNVjKehBLJsf8snrCjXUiaU90dVcPPckkOCwEeHvRMCxxfRF1Nj2JtHwgjVJIo 8YxsH6OaV+hc2e2Izn1y5QjXi6O0eSgsTEmq2HFcgExkK74Woai4D4FMJYqr/tsx TBgHc8u0lkHQwzEdQLrCLZ32rU25Pwgyq/003vqB6usJGxg+KyMP+jyxFPT6CdSu +4SebdsCOP8IwSx44pDVAL0S7m/louSPtzlVwqtFRluwLfuKrcxUEBRTcVe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUljB53J/oxPOCxQOTcu2DNrYzy4gwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBTYOb8jX+kIZYTebY2MWtBz3+Q6gVCbm2f SUn0s3tGi+pasZzEGIna4QpxZ+wpgoAM2OUamWK9d1lBumgbmZfqiK36NataCpno Cxz41qyEtnGqtG74eFvu4inNsc2ST1NZj8MEnPgsmIGgGzmLrKqaQxVrBZsi+6Ul qZdoFa/vG6Be9ucOAsQs6yxrwHhCdnBuTQNFvIslTJf7fsKh8timuzf99T07ZPe5 TpS9aslepNuXUWWBL/y3N9sGLVoRu9Ph6OyGbFKPpjb9BqHxj3j2n222+n+R7NXV ArLro/V69EdRKCGyemQcw03YHfZltY/+v7/U4UFJOujDe6Mtk5M= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:24 2025 by rpki-client