$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: rDv14/+eh2STfJD5I4n+F8UObCj8m/tu1itxH12BxHI= Subject key identifier: 3E:CA:46:87:9B:F9:B7:B0:DF:BE:9D:4F:D1:FE:C5:1A:8D:5A:8F:01 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 140706053AA2F8F917273EECB7CB766C971C388E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 021E Signing time: Thu 21 Aug 2025 12:30:52 +0000 Manifest this update: Thu 21 Aug 2025 12:25:52 +0000 Manifest next update: Sun 24 Aug 2025 23:56:52 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: NgS73JEGGSdAgA4gEIKg9ojbSG0tJAi14j2rMeuQ8yM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:07:06:05:3a:a2:f8:f9:17:27:3e:ec:b7:cb:76:6c:97:1c:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Aug 21 12:25:52 2025 GMT Not After : Aug 24 23:56:52 2025 GMT Subject: CN=3ECA46879BF9B7B0DFBE9D4FD1FEC51A8D5A8F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:5d:76:b3:ec:29:b6:43:77:13:e7:e6:2a: a2:a6:85:c7:6a:32:e1:18:41:ea:eb:30:51:dc:76: 1c:8e:79:07:49:e7:42:a4:ac:0b:87:e3:17:6d:57: 94:24:a5:e6:b1:d7:ea:bb:ca:78:f6:e3:63:a5:29: f5:32:b8:6c:fd:c4:e7:e5:68:00:32:be:55:79:63: 5d:41:d0:89:cf:e0:8c:f1:e7:f9:27:a5:66:d5:c3: e1:bf:ee:6d:65:d3:7f:0e:01:12:69:98:e7:34:7f: 6a:b6:87:11:96:fe:99:17:07:71:a0:bb:1c:24:0d: b8:d9:a3:42:84:c8:d6:1d:89:bf:f4:73:9d:55:e8: 8e:2b:48:7c:80:43:18:7b:7a:d4:44:38:bc:9e:87: e7:fa:39:d6:af:8d:f4:89:1b:34:eb:a8:b8:4d:63: 50:74:79:6e:67:27:6d:30:ef:94:9f:51:96:7a:0f: 08:2e:dc:e6:8c:19:32:f0:e3:63:fb:24:e0:ca:95: 5d:7b:c3:ef:64:cd:a0:64:00:e0:03:9f:39:80:38: 64:ce:20:0c:bb:d5:c2:92:29:e9:d5:85:4d:fe:2d: f3:47:5a:10:67:27:cb:87:62:7a:92:74:97:40:d2: 1d:ab:0c:52:27:78:98:2d:3f:01:4d:74:c8:8f:20: 45:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CA:46:87:9B:F9:B7:B0:DF:BE:9D:4F:D1:FE:C5:1A:8D:5A:8F:01 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:dc:94:d2:f1:d4:81:f6:68:6b:05:df:bc:e9:8b:f7:9b:67: 85:7f:13:34:2e:a1:51:b5:23:be:5b:b9:da:35:48:44:8f:21: ba:eb:f9:bf:c5:b4:d0:f0:fa:cb:33:69:39:81:7e:a0:9b:a9: 32:6a:90:14:3d:d3:92:9a:db:ce:e0:59:1e:42:0b:07:aa:9c: d7:89:f2:b9:06:90:ac:83:02:4c:66:0f:b2:2a:ef:69:e9:92: f2:63:9c:87:77:41:4d:e9:1a:42:4a:cd:ed:39:d0:e3:6a:a3: 71:cc:99:76:39:e0:90:20:ca:fa:8c:59:77:8e:ff:65:de:e2: 49:b1:66:04:b9:33:1b:c1:8f:6d:48:7d:de:ae:39:58:9c:11: 27:ed:60:4e:a6:2a:b5:ef:e1:63:33:a0:21:0d:0a:bc:90:22: e6:9d:bf:2a:0f:44:f7:06:97:28:ae:86:36:e4:27:b9:87:2f: f1:aa:c9:70:94:46:a1:e6:11:f0:3f:57:62:b4:9e:f9:3c:fe: 1d:cf:df:05:ab:f4:67:0c:02:fe:ec:85:8c:dd:23:ee:05:b3: e8:6c:14:fe:5c:e9:18:65:2d:d3:f4:be:41:15:67:3e:d2:9b: a9:fe:52:e1:10:51:f0:b6:6d:ca:4f:0e:2e:db:6f:61:8d:a0: f9:7c:81:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAcGBTqi+PkXJz7st8t2bJccOI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTA4MjExMjI1NTJaFw0yNTA4MjQyMzU2NTJaMDMxMTAvBgNV BAMTKDNFQ0E0Njg3OUJGOUI3QjBERkJFOUQ0RkQxRkVDNTFBOEQ1QThGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwF12s+wptkN3E+fmKqKmhcdq MuEYQerrMFHcdhyOeQdJ50KkrAuH4xdtV5Qkpeax1+q7ynj242OlKfUyuGz9xOfl aAAyvlV5Y11B0InP4Izx5/knpWbVw+G/7m1l038OARJpmOc0f2q2hxGW/pkXB3Gg uxwkDbjZo0KEyNYdib/0c51V6I4rSHyAQxh7etREOLyeh+f6OdavjfSJGzTrqLhN Y1B0eW5nJ20w75SfUZZ6Dwgu3OaMGTLw42P7JODKlV17w+9kzaBkAOADnzmAOGTO IAy71cKSKenVhU3+LfNHWhBnJ8uHYnqSdJdA0h2rDFIneJgtPwFNdMiPIEWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPspGh5v5t7Dfvp1P0f7FGo1ajwEwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTclNLx1IH2aGsF37zpi/ebZ4V/EzQuoVG1 I75budo1SESPIbrr+b/FtNDw+sszaTmBfqCbqTJqkBQ905Ka287gWR5CCweqnNeJ 8rkGkKyDAkxmD7Iq72npkvJjnId3QU3pGkJKze050ONqo3HMmXY54JAgyvqMWXeO /2Xe4kmxZgS5MxvBj21Ifd6uOVicESftYE6mKrXv4WMzoCENCryQIuadvyoPRPcG lyiuhjbkJ7mHL/GqyXCURqHmEfA/V2K0nvk8/h3P3wWr9GcMAv7shYzdI+4Fs+hs FP5c6RhlLdP0vkEVZz7Sm6n+UuEQUfC2bcpPDi7bb2GNoPl8gc8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:14 2025 by rpki-client