$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: TTj7C0KJ/sT+UOD7PYTwFAsZyavFero/4Clr/mKikPA= Subject key identifier: C3:E8:F3:50:07:B1:B3:E0:C3:8D:5A:D7:53:CE:62:E5:4D:FC:00:AE Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 5216254B7DF7C9B3988A24678F72BCD0568F800F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 04E9 Signing time: Tue 01 Jul 2025 01:20:02 +0000 Manifest this update: Tue 01 Jul 2025 01:15:02 +0000 Manifest next update: Fri 04 Jul 2025 12:33:02 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 2: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) 4: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: cW+VLE/njmoUK9UChbbX/0nNI9FUrhYrRvmHlZLKgtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:16:25:4b:7d:f7:c9:b3:98:8a:24:67:8f:72:bc:d0:56:8f:80:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Jul 1 01:15:02 2025 GMT Not After : Jul 4 12:33:02 2025 GMT Subject: CN=C3E8F35007B1B3E0C38D5AD753CE62E54DFC00AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:84:40:1a:6f:45:66:37:09:f5:b1:da:13: 00:cb:3d:55:8f:93:e2:52:81:c7:55:c1:a4:f1:f8: a9:ab:e1:d2:cc:c1:45:ce:38:d7:bf:1c:cf:ce:16: 7a:60:64:54:cb:5e:25:62:bc:e2:8c:ae:aa:95:c8: 83:4d:92:1e:4f:ed:90:7b:98:c1:e4:61:ce:ad:85: 4d:4c:8b:82:7c:60:b7:34:da:73:73:6d:77:84:75: e7:bb:ab:9f:a7:74:f2:1e:75:2d:7c:d0:93:83:f9: 72:15:fa:1e:9a:ef:e1:a7:c7:3c:21:16:f0:05:41: af:d9:dc:df:55:60:40:26:90:2e:1d:c9:65:81:63: 0a:48:72:ea:d0:87:2f:ea:39:09:eb:87:79:ae:56: cb:b7:05:18:35:36:71:b1:c6:1a:0e:c3:d2:d5:cc: c0:67:98:22:d9:93:df:fa:99:e7:f4:aa:3a:f6:53: f3:c7:79:11:6c:dc:42:03:50:92:72:bb:6f:59:5b: af:88:3c:6f:79:f5:c0:48:e4:7b:6b:71:74:de:c6: a8:b6:f0:24:2c:2e:d5:cd:12:60:d1:51:ac:9d:b5: 00:df:61:4e:d5:7a:21:36:f0:e7:85:a7:56:d4:76: 3f:bd:ec:df:8d:78:4a:2a:e5:02:10:b5:33:e4:89: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:F3:50:07:B1:B3:E0:C3:8D:5A:D7:53:CE:62:E5:4D:FC:00:AE X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fb:d8:d5:95:59:6a:68:32:1a:f4:9c:7f:e4:f9:29:0e:03: f0:7b:c2:df:40:ff:29:1d:df:02:0e:18:6f:4b:75:05:8b:2a: 49:50:04:87:df:a1:85:2b:6a:5d:ba:48:13:d5:35:9b:42:cb: a0:20:b2:d9:89:f9:85:0e:75:77:17:63:6f:99:f9:4a:8f:da: 7f:da:8a:1b:c6:9a:6d:ea:6d:27:e3:cd:e8:08:be:08:ff:d4: 3d:f5:b4:b3:ed:cf:86:9f:f6:ce:22:9b:4c:35:e8:8a:74:6c: 7c:50:af:6e:e4:50:2e:98:e7:a3:57:ae:5a:40:98:84:9f:25: 94:5e:6e:7b:cb:37:22:de:ab:c4:40:fa:93:79:36:46:7d:69: bd:ec:eb:bc:cc:0f:50:2c:86:8a:ef:10:65:a8:f9:4f:87:da: 5b:d5:e9:64:8a:9a:27:2a:93:fc:01:85:ea:0b:29:06:6c:67: ec:2f:92:35:6b:30:34:c9:68:70:5b:35:99:7c:a4:cd:1f:2e: a8:e7:d2:86:20:5d:c3:fe:99:f6:53:e4:35:4e:f9:4c:8a:9f: 0a:c5:55:ef:67:71:6c:11:fe:76:15:27:c7:9b:33:b0:1e:a1: cf:63:9c:82:99:4e:c6:54:c9:33:07:2a:e0:9b:e3:71:bf:b8: df:c7:4f:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhYlS333ybOYiiRnj3K80FaPgA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTA3MDEwMTE1MDJaFw0yNTA3MDQxMjMzMDJaMDMxMTAvBgNV BAMTKEMzRThGMzUwMDdCMUIzRTBDMzhENUFENzUzQ0U2MkU1NERGQzAwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q4RAGm9FZjcJ9bHaEwDLPVWP k+JSgcdVwaTx+Kmr4dLMwUXOONe/HM/OFnpgZFTLXiVivOKMrqqVyINNkh5P7ZB7 mMHkYc6thU1Mi4J8YLc02nNzbXeEdee7q5+ndPIedS180JOD+XIV+h6a7+Gnxzwh FvAFQa/Z3N9VYEAmkC4dyWWBYwpIcurQhy/qOQnrh3muVsu3BRg1NnGxxhoOw9LV zMBnmCLZk9/6mef0qjr2U/PHeRFs3EIDUJJyu29ZW6+IPG959cBI5HtrcXTexqi2 8CQsLtXNEmDRUaydtQDfYU7VeiE28OeFp1bUdj+97N+NeEoq5QIQtTPkiehBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+jzUAexs+DDjVrXU85i5U38AK4wHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL72NWVWWpoMhr0nH/k+SkOA/B7wt9A/ykd 3wIOGG9LdQWLKklQBIffoYUral26SBPVNZtCy6AgstmJ+YUOdXcXY2+Z+UqP2n/a ihvGmm3qbSfjzegIvgj/1D31tLPtz4af9s4im0w16Ip0bHxQr27kUC6Y56NXrlpA mISfJZRebnvLNyLeq8RA+pN5NkZ9ab3s67zMD1AshorvEGWo+U+H2lvV6WSKmicq k/wBheoLKQZsZ+wvkjVrMDTJaHBbNZl8pM0fLqjn0oYgXcP+mfZT5DVO+UyKnwrF Ve9ncWwR/nYVJ8ebM7Aeoc9jnIKZTsZUyTMHKuCb43G/uN/HT6E= -----END CERTIFICATE-----Generated at Tue Jul 1 04:07:09 2025 by rpki-client