$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: RPxGu99rmD71VX9wI9HM32s52feQ76kSOOgN34+BwvU= Subject key identifier: 72:5F:50:7D:B5:FE:8A:78:7E:6B:3C:75:30:1B:A0:29:47:34:AE:16 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 6C048CAEC226CD81D64ABCFCC9B0BB98A07143F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 04D1 Signing time: Fri 09 May 2025 23:50:02 +0000 Manifest this update: Fri 09 May 2025 23:45:02 +0000 Manifest next update: Tue 13 May 2025 04:27:02 +0000 Files and hashes: 1: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: svtAgr7JYBUtzNyfSdE+KV0Sgk1PqrBBCZ7/LnJ3fFw=) 2: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: XMI0+FoB5mYBqowX2bXZTgf1opw4TRCuuP7TULX92SU=) 3: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: +ncF+8DsxAehnxNLvv1l20gTEn/1YKWEnl6rFJLIApA=) 4: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: qLsMIEaKhWpq1bQAf83UJbdJ8NLzwZWxL7cCtTMq2j8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 04:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:04:8c:ae:c2:26:cd:81:d6:4a:bc:fc:c9:b0:bb:98:a0:71:43:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: May 9 23:45:02 2025 GMT Not After : May 13 04:27:02 2025 GMT Subject: CN=725F507DB5FE8A787E6B3C75301BA0294734AE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:0e:6b:7d:63:05:fc:4d:d9:64:39:20:55: be:4d:66:6a:24:e0:53:1f:ee:b9:11:4b:a8:9c:2e: 5d:d0:17:3b:77:86:c8:70:76:8a:8e:34:b1:47:a6: cc:e3:e8:ce:83:65:1a:4c:c6:d8:c1:4d:88:b2:8c: c1:26:7a:22:0b:bf:c3:f8:a8:43:5d:6b:c3:69:9c: 2d:a5:79:f9:27:a9:0b:50:8a:71:c4:ef:ff:3e:93: 5d:50:7e:7d:3a:ae:13:8c:3e:51:7d:a3:8e:a4:db: 79:10:d4:af:e1:d6:03:c0:ac:e0:ca:bd:4d:de:0f: 0b:11:97:b5:fa:97:a5:8e:2d:ff:ae:03:ac:d1:2e: 2f:52:83:f7:d6:c4:08:78:98:fe:a5:ee:c4:6e:b2: 5b:07:74:9a:9b:c9:4a:d0:d3:5a:c8:1c:e3:ee:d1: 58:54:30:0c:c0:92:5d:05:5f:7c:74:71:3c:e0:b4: 11:67:5c:2c:b7:c9:f2:e2:75:bb:e2:75:11:5c:91: 84:a7:9e:23:67:2b:20:32:eb:50:ce:e7:c8:08:8c: 7d:72:da:71:0a:c7:27:ef:80:6c:1e:f3:b7:18:e3: 9b:a3:f5:89:b6:0e:e2:5d:ee:10:9b:3a:2f:3f:bd: 3d:ab:7c:03:c1:19:b1:b0:72:99:dd:0a:ae:47:e9: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5F:50:7D:B5:FE:8A:78:7E:6B:3C:75:30:1B:A0:29:47:34:AE:16 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:0d:20:5d:41:0e:7f:a0:11:6b:f7:9c:97:f5:df:67:c0:ab: f8:da:8a:b3:9d:d2:65:75:bc:43:13:8a:9b:75:c5:f9:88:9e: 10:01:cb:a4:2e:07:a0:2a:64:8c:db:c3:ab:44:a8:fe:0b:e3: 80:2a:8f:a2:33:5b:cc:eb:d7:99:a9:fd:e5:49:af:fe:d0:fc: f2:0b:61:1d:4a:66:1d:d1:35:43:40:27:89:2c:aa:d2:15:b9: e7:19:c8:51:0c:93:2a:68:e9:c3:ea:2e:b6:d0:27:99:13:cd: 8b:f6:17:f6:28:31:de:a6:03:6d:2a:91:13:04:27:29:e4:02: ee:80:de:f7:17:82:8f:fe:07:2c:22:bf:c4:e9:a8:2f:9c:22: 34:42:e7:17:cd:5d:1a:35:2b:e2:78:a5:74:32:30:77:aa:e1: fb:07:8b:4d:40:73:4a:8e:bc:77:0a:80:39:29:70:97:2f:f0: 2d:be:52:65:42:63:ec:11:13:84:28:db:37:6d:df:ce:77:75: 44:d8:6d:29:ce:46:49:62:cb:35:7c:bf:3f:28:6f:b8:75:a4: dc:42:09:de:b4:1e:cf:97:7e:16:70:a6:f7:1f:1b:25:4b:96: e3:b3:dd:a6:6e:53:85:ef:ff:77:67:c0:13:63:2e:31:e5:08: 8b:4f:8c:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbASMrsImzYHWSrz8ybC7mKBxQ/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTA1MDkyMzQ1MDJaFw0yNTA1MTMwNDI3MDJaMDMxMTAvBgNV BAMTKDcyNUY1MDdEQjVGRThBNzg3RTZCM0M3NTMwMUJBMDI5NDczNEFFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoQ5rfWMF/E3ZZDkgVb5NZmok 4FMf7rkRS6icLl3QFzt3hshwdoqONLFHpszj6M6DZRpMxtjBTYiyjMEmeiILv8P4 qENda8NpnC2lefknqQtQinHE7/8+k11Qfn06rhOMPlF9o46k23kQ1K/h1gPArODK vU3eDwsRl7X6l6WOLf+uA6zRLi9Sg/fWxAh4mP6l7sRuslsHdJqbyUrQ01rIHOPu 0VhUMAzAkl0FX3x0cTzgtBFnXCy3yfLidbvidRFckYSnniNnKyAy61DO58gIjH1y 2nEKxyfvgGwe87cY45uj9Ym2DuJd7hCbOi8/vT2rfAPBGbGwcpndCq5H6SeRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcl9QfbX+inh+azx1MBugKUc0rhYwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMNIF1BDn+gEWv3nJf132fAq/jairOd0mV1 vEMTipt1xfmInhABy6QuB6AqZIzbw6tEqP4L44Aqj6IzW8zr15mp/eVJr/7Q/PIL YR1KZh3RNUNAJ4ksqtIVuecZyFEMkypo6cPqLrbQJ5kTzYv2F/YoMd6mA20qkRME JynkAu6A3vcXgo/+Bywiv8TpqC+cIjRC5xfNXRo1K+J4pXQyMHeq4fsHi01Ac0qO vHcKgDkpcJcv8C2+UmVCY+wRE4Qo2zdt3853dUTYbSnORkliyzV8vz8ob7h1pNxC Cd60Hs+XfhZwpvcfGyVLluOz3aZuU4Xv/3dnwBNjLjHlCItPjCw= -----END CERTIFICATE-----Generated at Sat May 10 19:31:45 2025 by rpki-client