$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: vWMUKst11dG+6GZXbB/hnPIWZYRpgbGPZa+6OQ0GzrQ= Subject key identifier: 00:2C:40:10:FB:4D:75:19:05:06:95:A1:29:70:27:4D:61:3C:32:41 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 3E14573AA4293D4C8278AA549F57C61B7633A6CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 0500 Signing time: Thu 21 Aug 2025 17:30:02 +0000 Manifest this update: Thu 21 Aug 2025 17:25:02 +0000 Manifest next update: Mon 25 Aug 2025 01:19:02 +0000 Files and hashes: 1: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: +1WojmH5nbSMiGQvhGMYV5tGQmxYRqM9f5I4BUkXzjs=) 2: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) 3: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 4: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:14:57:3a:a4:29:3d:4c:82:78:aa:54:9f:57:c6:1b:76:33:a6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Aug 21 17:25:02 2025 GMT Not After : Aug 25 01:19:02 2025 GMT Subject: CN=002C4010FB4D7519050695A12970274D613C3241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:ed:da:d6:bf:3c:6d:de:eb:b4:f1:53:ee: 9e:7a:43:ea:e8:78:a9:4c:91:2d:db:0f:87:0c:b4: 76:60:dd:d0:6f:40:10:d0:f9:07:6f:25:00:05:90: f5:e1:a6:8c:14:07:48:90:41:b0:2e:3b:5e:2d:14: c5:82:f8:92:85:7d:c8:85:93:d0:ac:c9:eb:02:08: e6:7d:3f:0d:82:74:41:93:e7:7d:6d:2a:ea:36:de: 10:4f:73:2e:9b:b9:c0:9e:9b:fe:4e:3b:d0:19:1b: 43:cf:75:d6:d3:5b:de:72:31:a7:cd:d2:46:29:e1: 46:7e:ff:e4:73:96:d7:c7:65:16:89:0c:88:e4:eb: 86:58:b7:ce:d3:c3:1c:09:46:4d:a9:9e:5e:47:0b: 1f:57:5a:e6:03:1b:f3:70:c6:44:92:47:26:00:0c: 81:4b:d2:66:82:3c:52:73:0b:93:f0:24:ae:49:15: 09:09:88:bb:38:02:cb:64:d9:66:96:ad:be:52:4a: f9:c9:03:4d:44:20:9e:be:3a:16:1f:d4:7f:69:8f: a2:d7:a7:fd:cf:58:61:fd:b2:47:4e:1b:46:bc:2b: 05:a6:8b:13:7c:1b:d6:d8:3a:4d:2d:c2:89:b2:e6: 11:8e:50:06:f5:6c:66:ce:aa:cb:01:4e:bf:3c:9c: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2C:40:10:FB:4D:75:19:05:06:95:A1:29:70:27:4D:61:3C:32:41 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:46:30:8c:63:1f:b3:1f:9d:31:2c:f4:18:bd:fb:72:a2:53: cd:0d:8e:03:88:1d:ec:40:14:1d:44:74:73:52:5a:8f:b9:79: e5:63:a3:71:df:ab:40:e8:b7:fe:c5:e1:6d:fc:ba:11:cd:a6: f3:92:fa:98:31:f0:a7:6a:26:dd:11:68:ef:39:5a:ce:cc:6e: 98:43:3a:85:aa:d7:e6:02:03:69:be:35:74:08:e9:2d:bc:b0: 50:49:5a:35:f6:cb:e1:c7:9e:0f:65:ea:81:ff:d8:29:19:d3: d9:ff:af:9f:c2:34:99:27:34:84:8e:bc:b2:a9:4d:0f:4a:d1: f4:12:ab:fe:09:4d:60:d3:06:d6:a0:1b:12:76:17:2a:b9:91: 99:78:a4:0d:c1:4c:dc:5e:2d:d1:93:5d:1c:70:70:f3:83:d0: b9:a1:d8:af:62:36:ab:21:50:24:4e:ab:44:58:c8:02:4b:ea: 68:03:61:64:3b:76:5a:e3:88:a1:44:7c:66:99:f3:fa:40:0d: 56:9e:3c:09:65:84:6a:59:fe:26:bf:85:fb:6d:12:d6:0d:0b: 68:af:2f:e4:68:cd:bc:49:a8:3b:f9:38:2d:63:5d:af:81:a9: 19:b4:62:ff:06:2c:0a:a4:dc:47:39:2a:76:37:cd:91:92:b1: bc:2d:d9:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhRXOqQpPUyCeKpUn1fGG3Yzps4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTA4MjExNzI1MDJaFw0yNTA4MjUwMTE5MDJaMDMxMTAvBgNV BAMTKDAwMkM0MDEwRkI0RDc1MTkwNTA2OTVBMTI5NzAyNzRENjEzQzMyNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxO3a1r88bd7rtPFT7p56Q+ro eKlMkS3bD4cMtHZg3dBvQBDQ+QdvJQAFkPXhpowUB0iQQbAuO14tFMWC+JKFfciF k9CsyesCCOZ9Pw2CdEGT531tKuo23hBPcy6bucCem/5OO9AZG0PPddbTW95yMafN 0kYp4UZ+/+RzltfHZRaJDIjk64ZYt87TwxwJRk2pnl5HCx9XWuYDG/NwxkSSRyYA DIFL0maCPFJzC5PwJK5JFQkJiLs4Astk2WaWrb5SSvnJA01EIJ6+OhYf1H9pj6LX p/3PWGH9skdOG0a8KwWmixN8G9bYOk0twomy5hGOUAb1bGbOqssBTr88nBi5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUACxAEPtNdRkFBpWhKXAnTWE8MkEwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNGMIxjH7MfnTEs9Bi9+3KiU80NjgOIHexA FB1EdHNSWo+5eeVjo3Hfq0Dot/7F4W38uhHNpvOS+pgx8KdqJt0RaO85Ws7MbphD OoWq1+YCA2m+NXQI6S28sFBJWjX2y+HHng9l6oH/2CkZ09n/r5/CNJknNISOvLKp TQ9K0fQSq/4JTWDTBtagGxJ2Fyq5kZl4pA3BTNxeLdGTXRxwcPOD0Lmh2K9iNqsh UCROq0RYyAJL6mgDYWQ7dlrjiKFEfGaZ8/pADVaePAllhGpZ/ia/hfttEtYNC2iv L+RozbxJqDv5OC1jXa+BqRm0Yv8GLAqk3Ec5KnY3zZGSsbwt2fA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:08 2025 by rpki-client