$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: nlCQcfqOihGFhtgNfE46l/2c7cL1MSbvue5ENBXYRec= Subject key identifier: D0:10:5A:7C:D9:CF:AB:BE:46:44:E7:10:6F:68:3A:50:82:EC:B5:B3 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 46549750A4C5343AF08303D61680B912DEC764F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: 79 Signing time: Sun 29 Jun 2025 19:40:40 +0000 Manifest this update: Sun 29 Jun 2025 19:35:40 +0000 Manifest next update: Thu 03 Jul 2025 01:03:40 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=) 2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: XJaJ474fZU7KjQllpEdKeNEw2Ff+nH9XCGiuf372eUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:54:97:50:a4:c5:34:3a:f0:83:03:d6:16:80:b9:12:de:c7:64:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Jun 29 19:35:40 2025 GMT Not After : Jul 3 01:03:40 2025 GMT Subject: CN=D0105A7CD9CFABBE4644E7106F683A5082ECB5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:d8:50:83:a5:52:b5:0a:23:5a:0f:55:70: f3:d0:96:93:03:33:28:67:83:83:43:97:b0:c0:b8: a8:8c:b7:fe:39:b2:7d:44:4c:14:78:4c:92:b3:4b: 8b:28:1f:fc:41:d3:07:89:ae:5f:2a:0d:c8:5d:a2: e8:3c:bb:15:ca:b1:b6:f7:60:78:e7:1a:a6:8f:6b: 91:1d:b8:13:18:e6:88:c9:6d:68:c8:1d:a2:c2:94: 64:af:66:15:f3:0c:46:ac:59:f0:bb:f2:83:dd:9b: 75:d6:db:a3:77:3d:c7:21:49:c4:b9:01:83:eb:82: 59:81:3e:50:04:66:86:7d:2a:0d:92:36:e9:e3:ce: 7f:76:a9:f3:d4:1f:91:a1:b9:31:20:82:17:f9:fa: 45:63:e3:de:3a:ce:7b:1a:98:6f:f0:a8:1a:36:fc: 8d:fb:0e:65:52:8b:ab:0e:b0:c1:ee:93:cc:54:da: 5b:2e:44:08:2d:2c:0f:17:de:4b:a2:da:0b:f2:1a: a3:95:48:6a:33:3b:05:4c:dc:92:b6:f3:69:30:13: 9d:78:c9:4c:c8:71:1c:f2:9b:29:e0:bd:3f:96:59: 52:67:20:23:3b:b3:b7:a6:ea:d0:91:12:98:22:c7: aa:c5:54:b9:62:38:f4:06:5b:b4:8d:39:44:f5:e8: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:10:5A:7C:D9:CF:AB:BE:46:44:E7:10:6F:68:3A:50:82:EC:B5:B3 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b2:52:5c:5a:f8:f3:22:31:7f:ee:c8:cf:2f:1a:93:3d:83: f3:f7:f3:b2:e1:fe:59:66:b1:4f:89:eb:7d:5c:cf:d2:fd:e9: fa:da:f8:1b:c9:cc:0e:45:9c:36:aa:fb:9a:e1:11:59:b8:d8: 60:e8:d7:5d:7d:6a:02:b3:e5:e6:c0:ff:11:a8:64:4a:1c:c0: 8b:b6:7c:59:c2:16:2e:e9:50:18:96:ce:50:dd:8b:dd:e9:e2: 3b:47:c9:8b:3e:c5:54:e0:3c:e8:1d:e8:60:b2:79:7a:fc:b3: a3:ec:d5:e7:f7:22:24:17:a1:47:45:3f:f2:09:a3:c0:9b:5a: b2:f8:26:0f:4d:b7:77:7f:35:ae:5b:5e:e5:a1:91:e5:a0:30: 95:cb:12:c4:7a:44:e0:ed:85:0f:ec:59:2c:c8:79:42:2a:86: 8a:83:5d:dd:2f:34:0a:3a:d2:b9:09:61:da:ea:37:95:91:e3: ba:f7:06:4b:66:39:ea:92:44:d0:26:6e:37:7b:36:22:bf:4f: 4a:3a:0b:d6:5e:21:c5:26:e8:e5:c9:6b:f1:b8:6a:66:90:ac: 0c:cd:d6:f2:ca:12:6e:fb:a1:5f:df:b0:df:a2:a4:34:88:17: 95:be:f0:c2:14:06:1a:56:e6:b6:36:81:a0:0c:eb:30:50:b8: c2:a3:36:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlSXUKTFNDrwgwPWFoC5Et7HZPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTA2MjkxOTM1NDBaFw0yNTA3MDMwMTAzNDBaMDMxMTAvBgNV BAMTKEQwMTA1QTdDRDlDRkFCQkU0NjQ0RTcxMDZGNjgzQTUwODJFQ0I1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcSNhQg6VStQojWg9VcPPQlpMD Myhng4NDl7DAuKiMt/45sn1ETBR4TJKzS4soH/xB0weJrl8qDchdoug8uxXKsbb3 YHjnGqaPa5EduBMY5ojJbWjIHaLClGSvZhXzDEasWfC78oPdm3XW26N3PcchScS5 AYPrglmBPlAEZoZ9Kg2SNunjzn92qfPUH5GhuTEgghf5+kVj4946znsamG/wqBo2 /I37DmVSi6sOsMHuk8xU2lsuRAgtLA8X3kui2gvyGqOVSGozOwVM3JK282kwE514 yUzIcRzymyngvT+WWVJnICM7s7em6tCREpgix6rFVLliOPQGW7SNOUT16NffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BBafNnPq75GROcQb2g6UILstbMwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACayUlxa+PMiMX/uyM8vGpM9g/P387Lh/llm sU+J631cz9L96fra+BvJzA5FnDaq+5rhEVm42GDo1119agKz5ebA/xGoZEocwIu2 fFnCFi7pUBiWzlDdi93p4jtHyYs+xVTgPOgd6GCyeXr8s6Ps1ef3IiQXoUdFP/IJ o8CbWrL4Jg9Nt3d/Na5bXuWhkeWgMJXLEsR6RODthQ/sWSzIeUIqhoqDXd0vNAo6 0rkJYdrqN5WR47r3BktmOeqSRNAmbjd7NiK/T0o6C9ZeIcUm6OXJa/G4amaQrAzN 1vLKEm77oV/fsN+ipDSIF5W+8MIUBhpW5rY2gaAM6zBQuMKjNnM= -----END CERTIFICATE-----Generated at Mon Jun 30 19:18:57 2025 by rpki-client