$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: XwbpgTrxreeKonWZoaxAgW9qQWD6/8AtxhYPagkTpD0= Subject key identifier: 63:C3:B7:C3:18:72:E1:5C:7A:FF:C4:C4:56:C5:E7:87:84:DD:9E:8C Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 1D5FFBEB8A9496DCC408AF6F43027C4D1082D845 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0237 Signing time: Sat 18 Oct 2025 06:20:51 +0000 Manifest this update: Sat 18 Oct 2025 06:15:51 +0000 Manifest next update: Tue 21 Oct 2025 18:01:51 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: KYutCCAcgUulk6/cFyGeoaKBv9Bvghw3gyWMSSkfgds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5f:fb:eb:8a:94:96:dc:c4:08:af:6f:43:02:7c:4d:10:82:d8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Oct 18 06:15:51 2025 GMT Not After : Oct 21 18:01:51 2025 GMT Subject: CN=63C3B7C31872E15C7AFFC4C456C5E78784DD9E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:e5:11:a7:ed:3a:68:82:6d:aa:80:bf:a3: b8:54:64:bd:0d:bd:ed:24:a0:0c:2f:5d:1a:49:b6: 0d:77:75:19:5e:2a:77:0a:6e:3b:f8:9b:2c:fe:3a: 6a:91:32:e0:a1:12:ae:29:66:2f:9e:bc:b5:8b:5b: 51:fc:45:de:5a:8e:97:6d:4d:e8:b2:1e:4e:82:56: d9:c0:11:9a:73:2d:f5:32:bc:dd:0b:09:2c:1f:46: b0:f8:43:41:4d:70:bb:d5:84:c8:ae:79:cb:1e:8c: f6:f9:ee:d5:ea:4e:03:cb:17:2e:c8:c1:84:aa:2e: 99:c2:f9:48:2f:60:43:81:05:f3:e3:28:a6:7b:45: b1:8e:8d:d2:12:3f:c5:0f:4c:33:a3:11:e5:47:da: f6:57:66:e5:59:3a:c5:a6:88:d6:26:40:fe:a8:0a: 3c:39:a7:77:bc:33:8e:cb:59:15:6f:b1:7c:27:31: ad:54:05:a4:74:9e:0c:70:1e:1b:10:e2:1d:ab:63: ae:3e:f0:a2:7a:af:1c:2b:93:bb:b7:f5:2e:dd:b9: 8f:0d:a0:cc:e2:d6:80:73:fd:43:36:41:61:e8:3a: b7:63:f7:cf:bc:de:19:cd:69:79:ed:15:e8:40:45: ff:2c:9e:85:3a:79:0e:ad:ca:d9:7c:06:17:2f:b1: cb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C3:B7:C3:18:72:E1:5C:7A:FF:C4:C4:56:C5:E7:87:84:DD:9E:8C X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:77:ba:f6:a9:8e:1d:28:3f:0b:7d:14:70:16:26:ea:08:63: 27:a5:3f:30:f0:1b:33:a8:6b:cb:3e:01:36:2d:82:f8:0a:11: 9d:7c:c7:c2:f1:b2:4e:ab:e3:41:08:53:07:e0:24:6f:f3:bd: cc:f2:43:d5:ce:c0:a8:47:03:31:2f:e7:32:10:5d:94:45:ae: 17:d7:23:e8:0f:e6:3d:07:70:40:0d:6b:41:92:57:a4:0c:a6: 48:3f:60:63:35:8b:e5:b7:ae:c9:0b:f8:8c:63:3e:96:17:44: 30:38:88:db:10:36:70:3e:19:92:d9:c0:d9:59:d3:c9:e3:1b: c7:ec:77:2f:83:57:51:80:89:ab:db:bb:47:43:9e:8a:aa:ad: 9f:90:e8:40:12:aa:41:1e:3c:a7:b2:48:e9:a9:a0:07:cb:24: 3b:1a:91:f0:6b:97:0d:07:90:05:34:65:1d:94:ad:66:b6:57: 57:61:28:32:30:89:22:ae:92:cd:8c:c2:d6:ba:80:ac:dd:7e: 41:52:4b:f6:39:c8:df:a4:08:7a:3b:cd:19:2c:27:d7:cb:16: 4a:54:ca:49:b1:db:14:a3:4b:39:99:81:52:6a:c8:24:e8:66: f3:1d:5d:d4:15:d8:25:96:b3:21:fd:ae:ec:15:de:7c:17:d9: e2:bd:7d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHV/764qUltzECK9vQwJ8TRCC2EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTEwMTgwNjE1NTFaFw0yNTEwMjExODAxNTFaMDMxMTAvBgNV BAMTKDYzQzNCN0MzMTg3MkUxNUM3QUZGQzRDNDU2QzVFNzg3ODRERDlFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCww+URp+06aIJtqoC/o7hUZL0N ve0koAwvXRpJtg13dRleKncKbjv4myz+OmqRMuChEq4pZi+evLWLW1H8Rd5ajpdt TeiyHk6CVtnAEZpzLfUyvN0LCSwfRrD4Q0FNcLvVhMiuecsejPb57tXqTgPLFy7I wYSqLpnC+UgvYEOBBfPjKKZ7RbGOjdISP8UPTDOjEeVH2vZXZuVZOsWmiNYmQP6o Cjw5p3e8M47LWRVvsXwnMa1UBaR0ngxwHhsQ4h2rY64+8KJ6rxwrk7u39S7duY8N oMzi1oBz/UM2QWHoOrdj98+83hnNaXntFehARf8snoU6eQ6tytl8BhcvscvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8O3wxhy4Vx6/8TEVsXnh4TdnowwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ3uvapjh0oPwt9FHAWJuoIYyelPzDwGzOo a8s+ATYtgvgKEZ18x8Lxsk6r40EIUwfgJG/zvczyQ9XOwKhHAzEv5zIQXZRFrhfX I+gP5j0HcEANa0GSV6QMpkg/YGM1i+W3rskL+IxjPpYXRDA4iNsQNnA+GZLZwNlZ 08njG8fsdy+DV1GAiavbu0dDnoqqrZ+Q6EASqkEePKeySOmpoAfLJDsakfBrlw0H kAU0ZR2UrWa2V1dhKDIwiSKuks2Mwta6gKzdfkFSS/Y5yN+kCHo7zRksJ9fLFkpU ykmx2xSjSzmZgVJqyCToZvMdXdQV2CWWsyH9ruwV3nwX2eK9fR4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:23 2025 by rpki-client