$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: cuAdT3l4lHOjqSa0nMoywas2b9/V4X4BD0jHG+GpggY= Subject key identifier: 4E:3A:34:D7:55:18:50:21:D8:A2:F2:5E:0C:44:53:27:25:6D:FC:D2 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 291B5DC91E61F3D61D365E0AD5C1C43A48988E9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: 90 Signing time: Thu 21 Aug 2025 18:10:37 +0000 Manifest this update: Thu 21 Aug 2025 18:05:37 +0000 Manifest next update: Sun 24 Aug 2025 23:30:37 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: Mji1UjIt+pMxCM6fUaZgRDiiuD2R4J80satuvsRobPo=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1b:5d:c9:1e:61:f3:d6:1d:36:5e:0a:d5:c1:c4:3a:48:98:8e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Aug 21 18:05:37 2025 GMT Not After : Aug 24 23:30:37 2025 GMT Subject: CN=4E3A34D755185021D8A2F25E0C445327256DFCD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:9c:ba:87:41:f9:9f:ad:a3:a3:d0:88:c7: 32:25:51:51:87:5d:de:cd:f4:96:4b:76:d5:c9:22: 5d:1f:9e:10:59:92:0f:43:75:d2:08:ad:b8:84:45: 5b:e3:1a:2f:26:31:e0:64:ba:35:ed:a0:0e:03:4a: 79:a6:08:66:dc:00:42:0f:de:99:38:61:e5:c3:eb: fb:29:88:1c:f7:84:19:09:66:43:7b:f4:7b:4a:0f: 04:ec:91:06:fa:c6:4d:91:c7:a7:4d:33:88:95:a8: a4:3c:f5:31:c8:ee:52:4c:bf:16:63:f2:b8:a2:5d: cb:b2:53:12:94:b0:25:6f:37:b4:cb:7d:33:a9:36: 33:3f:51:bf:33:d8:51:ac:d3:29:e0:d9:a5:9a:86: a2:cc:78:e0:ee:0b:27:8f:76:f9:00:a1:b6:d9:1d: 29:56:b1:83:29:bd:09:42:93:5c:58:fa:d8:aa:28: aa:ec:62:5e:5d:cd:63:1c:61:ed:83:e5:cf:73:ae: 73:5e:ad:58:10:59:f7:a0:ab:d4:63:55:73:21:48: dc:95:0e:9e:52:f3:63:6c:cb:0c:84:f8:f5:88:c7: a5:de:0a:d6:ca:76:17:3a:82:6c:b0:d5:ae:78:f8: 84:91:2d:ca:ce:16:97:87:bc:85:13:5e:33:51:33: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:34:D7:55:18:50:21:D8:A2:F2:5E:0C:44:53:27:25:6D:FC:D2 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:92:5b:5f:e5:10:9d:08:01:98:1e:22:2f:c2:bc:3c:e9:91: 12:80:4a:e7:e4:af:c5:f3:37:d1:4f:22:f8:b7:67:ce:18:d1: 34:10:d3:f3:c2:ed:76:ab:29:8c:5d:c7:29:4c:f9:94:f8:71: 1f:79:f2:e1:bc:84:f7:af:16:72:4c:96:dd:cd:4c:ab:e3:1e: 6a:a8:b5:6e:5f:91:32:46:d6:4e:7c:ac:0b:9e:68:27:07:a9: 41:71:ae:c0:21:56:e1:aa:9a:af:d6:28:27:2e:73:a1:06:6b: 2d:cf:21:a8:3b:a7:c2:33:3c:e8:94:87:ab:ba:cc:82:54:2c: cd:fa:32:af:0c:ac:04:f0:12:2f:d5:e4:3b:39:3c:6f:2b:97: 8c:02:c6:36:07:c1:f4:ac:e1:27:80:ab:df:c0:0f:c0:cf:e7: f1:c3:33:dc:bf:30:c6:20:79:2a:91:62:6e:07:75:a7:dd:24: 4f:85:55:15:af:3b:09:45:a1:e4:21:4b:8f:14:65:db:94:b5: c7:22:e2:1a:f2:c3:34:d9:f4:61:2f:c2:4c:96:c2:c1:3e:e8: d2:f8:d1:7e:41:77:3a:6f:61:6c:96:2c:2e:8b:90:41:49:a1: d0:4c:e7:33:0e:cc:42:a2:06:4d:54:a1:2c:22:ed:cc:7d:b5: 10:33:55:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRtdyR5h89YdNl4K1cHEOkiYjp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTA4MjExODA1MzdaFw0yNTA4MjQyMzMwMzdaMDMxMTAvBgNV BAMTKDRFM0EzNEQ3NTUxODUwMjFEOEEyRjI1RTBDNDQ1MzI3MjU2REZDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUpy6h0H5n62jo9CIxzIlUVGH Xd7N9JZLdtXJIl0fnhBZkg9DddIIrbiERVvjGi8mMeBkujXtoA4DSnmmCGbcAEIP 3pk4YeXD6/spiBz3hBkJZkN79HtKDwTskQb6xk2Rx6dNM4iVqKQ89THI7lJMvxZj 8riiXcuyUxKUsCVvN7TLfTOpNjM/Ub8z2FGs0yng2aWahqLMeODuCyePdvkAobbZ HSlWsYMpvQlCk1xY+tiqKKrsYl5dzWMcYe2D5c9zrnNerVgQWfegq9RjVXMhSNyV Dp5S82NsywyE+PWIx6XeCtbKdhc6gmyw1a54+ISRLcrOFpeHvIUTXjNRM7MTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTjo011UYUCHYovJeDERTJyVt/NIwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeSW1/lEJ0IAZgeIi/CvDzpkRKASufkr8Xz N9FPIvi3Z84Y0TQQ0/PC7XarKYxdxylM+ZT4cR958uG8hPevFnJMlt3NTKvjHmqo tW5fkTJG1k58rAueaCcHqUFxrsAhVuGqmq/WKCcuc6EGay3PIag7p8IzPOiUh6u6 zIJULM36Mq8MrATwEi/V5Ds5PG8rl4wCxjYHwfSs4SeAq9/AD8DP5/HDM9y/MMYg eSqRYm4HdafdJE+FVRWvOwlFoeQhS48UZduUtcci4hrywzTZ9GEvwkyWwsE+6NL4 0X5BdzpvYWyWLC6LkEFJodBM5zMOzEKiBk1UoSwi7cx9tRAzVXE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:20:01 2025 by rpki-client