$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: K0DRHpTBvmgcpQuR7PFd4oOt77oBJgMW860DGxTCggU= Subject key identifier: 1D:A7:CE:CD:7F:8F:95:1F:C8:C9:CE:40:57:F6:A8:BE:FD:59:0B:B5 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 2AECBF585C3AF542F47F857DBC96D95ADC6AA6E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0206 Signing time: Sun 29 Jun 2025 05:00:49 +0000 Manifest this update: Sun 29 Jun 2025 04:55:49 +0000 Manifest next update: Wed 02 Jul 2025 05:06:49 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: RVPjgXE3qhIuYr66t8Bn0xWrMriqv9PiA3xbluMttO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ec:bf:58:5c:3a:f5:42:f4:7f:85:7d:bc:96:d9:5a:dc:6a:a6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Jun 29 04:55:49 2025 GMT Not After : Jul 2 05:06:49 2025 GMT Subject: CN=1DA7CECD7F8F951FC8C9CE4057F6A8BEFD590BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:ac:c4:4c:67:02:f9:3b:80:c5:0e:c0:08: 6b:39:7f:9b:c6:1e:bd:4b:bd:7a:28:fd:05:30:00: 32:a7:7f:44:ec:5b:d2:27:8a:fc:fe:26:8c:fd:59: ae:8f:1b:e5:20:ff:de:74:81:6e:e9:5e:e4:02:0a: 8c:5c:dc:a4:a1:b1:f2:92:f5:c1:41:a6:f4:00:d4: 6e:5c:58:83:8b:cd:e1:f3:4a:ed:42:93:43:46:f4: 46:22:11:69:3a:30:ba:60:c9:6b:60:73:7c:28:a1: 2a:31:5a:df:a6:6a:50:e9:2d:53:9f:e2:b1:20:e9: 2f:2d:fc:7a:36:38:5f:c7:ca:c9:28:af:93:ff:92: 58:bc:68:03:1a:47:34:1b:66:30:53:28:4d:92:44: d8:c1:a3:0d:c7:a1:95:6f:01:c2:b5:9e:42:1e:8c: 85:07:37:8d:55:57:7c:2f:6b:56:b5:25:d7:11:43: e2:0b:d4:d8:25:be:9d:3d:0e:a6:bb:f1:f6:1f:02: 74:46:8b:03:93:b8:cd:aa:8a:3d:2b:60:74:4b:46: 2c:ff:ef:ad:32:81:ab:65:9e:e4:3a:02:5e:0e:ec: 57:93:72:bf:47:ca:63:a7:bf:aa:22:07:ee:c9:55: 02:18:94:c1:33:77:36:1e:26:f3:4a:e0:df:17:42: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A7:CE:CD:7F:8F:95:1F:C8:C9:CE:40:57:F6:A8:BE:FD:59:0B:B5 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d7:91:f1:a4:45:5b:a4:4b:3b:74:2b:ee:8b:6d:42:bd:97: 1e:18:ee:af:6c:16:c4:be:85:c9:74:81:76:cb:61:26:a5:4c: e2:d2:fd:4d:59:02:99:83:89:d8:28:24:35:06:9b:eb:fb:0a: 05:cb:f2:bc:ca:71:77:6d:20:fb:37:3b:4b:63:94:b1:d4:0a: 5e:64:61:d7:3a:21:e8:e4:0b:53:80:bb:70:61:f1:0f:3b:62: 0d:e7:fe:e9:d4:08:2e:ae:24:95:3e:e3:76:21:b4:e0:c2:6e: 87:df:2c:ff:af:9d:b4:b2:82:e2:71:b2:db:d5:b6:d0:29:56: 49:19:8c:27:e7:3f:2d:6c:cc:09:65:30:07:a2:7e:15:6d:28: 32:05:bf:39:76:23:a7:f4:24:b9:49:ad:a8:b7:31:ed:1d:52: a6:fa:d2:31:d4:ee:05:43:af:54:d3:9e:ba:01:58:6e:67:10: a6:fc:27:de:60:75:fe:d1:2c:71:f9:61:cf:75:91:75:42:cd: 48:d5:11:99:a3:90:67:75:14:ba:10:3d:3d:63:75:5b:00:0a: 26:09:2d:27:54:e5:6c:02:65:eb:95:8d:ff:2d:d0:8d:31:11: e2:d4:c6:8f:8f:11:b9:72:11:32:36:32:e2:a5:c1:dc:3c:1a: 81:5a:fc:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuy/WFw69UL0f4V9vJbZWtxqpuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTA2MjkwNDU1NDlaFw0yNTA3MDIwNTA2NDlaMDMxMTAvBgNV BAMTKDFEQTdDRUNEN0Y4Rjk1MUZDOEM5Q0U0MDU3RjZBOEJFRkQ1OTBCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+azETGcC+TuAxQ7ACGs5f5vG Hr1LvXoo/QUwADKnf0TsW9Inivz+Joz9Wa6PG+Ug/950gW7pXuQCCoxc3KShsfKS 9cFBpvQA1G5cWIOLzeHzSu1Ck0NG9EYiEWk6MLpgyWtgc3wooSoxWt+malDpLVOf 4rEg6S8t/Ho2OF/Hyskor5P/kli8aAMaRzQbZjBTKE2SRNjBow3HoZVvAcK1nkIe jIUHN41VV3wva1a1JdcRQ+IL1Nglvp09Dqa78fYfAnRGiwOTuM2qij0rYHRLRiz/ 760ygatlnuQ6Al4O7FeTcr9HymOnv6oiB+7JVQIYlMEzdzYeJvNK4N8XQug7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHafOzX+PlR/Iyc5AV/aovv1ZC7UwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrXkfGkRVukSzt0K+6LbUK9lx4Y7q9sFsS+ hcl0gXbLYSalTOLS/U1ZApmDidgoJDUGm+v7CgXL8rzKcXdtIPs3O0tjlLHUCl5k Ydc6IejkC1OAu3Bh8Q87Yg3n/unUCC6uJJU+43YhtODCboffLP+vnbSyguJxstvV ttApVkkZjCfnPy1szAllMAeifhVtKDIFvzl2I6f0JLlJrai3Me0dUqb60jHU7gVD r1TTnroBWG5nEKb8J95gdf7RLHH5Yc91kXVCzUjVEZmjkGd1FLoQPT1jdVsACiYJ LSdU5WwCZeuVjf8t0I0xEeLUxo+PEblyETI2MuKlwdw8GoFa/Ic= -----END CERTIFICATE-----Generated at Mon Jun 30 13:25:30 2025 by rpki-client