$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: bMz4BLeQvY8qavTLfL2EtR03PMvDZmbERyu5ylB9eEY= Subject key identifier: F1:B0:1E:6F:E5:0D:32:07:B1:51:EB:29:14:EE:6B:56:36:DE:00:00 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 0C21D689D680B4D17B35EFE20A95771749057B79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: AA Signing time: Sat 18 Oct 2025 12:10:38 +0000 Manifest this update: Sat 18 Oct 2025 12:05:38 +0000 Manifest next update: Tue 21 Oct 2025 15:25:38 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: gdZ6pYerS30oMOS4icVSfBjgnnUJdxC3GlADTIwjBsY=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:21:d6:89:d6:80:b4:d1:7b:35:ef:e2:0a:95:77:17:49:05:7b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Oct 18 12:05:38 2025 GMT Not After : Oct 21 15:25:38 2025 GMT Subject: CN=F1B01E6FE50D3207B151EB2914EE6B5636DE0000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:c6:d2:43:17:0d:4b:98:fc:8f:34:ca:e1: 19:44:ae:78:7b:f9:4a:17:c6:ba:41:04:d4:79:4f: 4c:c4:e0:5a:03:0a:5f:88:a9:69:39:8f:88:7c:cf: 60:39:da:d5:75:e9:ee:b5:74:4d:ca:e3:81:a6:10: 14:fc:33:06:26:a9:e7:0f:0e:c6:ab:10:5e:7e:79: cc:52:64:e3:a3:50:9f:96:c1:f5:c5:99:af:7a:fd: ed:06:40:5e:47:b7:cb:a2:21:ea:dd:66:10:cb:48: 47:a9:5e:e4:23:cc:89:c3:d7:3e:fe:72:93:67:65: 82:97:a4:1e:55:4c:d7:af:dc:9f:7d:13:f1:c4:7d: 15:af:8d:cc:2d:5a:91:85:bb:c4:47:dc:45:34:3c: 2a:67:a4:26:df:cd:77:20:3c:df:33:37:28:a2:fb: ce:a5:4e:10:6e:b2:96:ab:10:fd:05:a9:d7:33:76: 73:18:05:fd:57:ea:68:c8:c6:7e:29:a1:bb:c8:dc: a3:4d:39:a4:11:15:64:05:65:cd:54:5c:af:17:e5: 75:20:d5:4a:d6:f2:15:3a:d6:a7:52:c4:21:54:65: b1:7f:bc:ff:d6:72:f7:13:a3:8c:14:57:61:01:5b: a5:e1:44:9b:a1:8f:2d:54:1c:b2:da:13:8a:09:84: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B0:1E:6F:E5:0D:32:07:B1:51:EB:29:14:EE:6B:56:36:DE:00:00 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:51:e6:26:bc:39:00:de:49:0e:26:bc:1a:94:fd:86:59:49: d2:0d:d7:6e:e3:b0:45:ac:75:ff:b7:2e:43:1e:d4:24:93:85: 05:d0:fd:05:8b:88:73:8a:22:0b:1d:1c:8e:d9:da:35:9a:dd: 01:6d:00:5e:f9:89:97:80:ad:d8:01:4c:75:e0:46:0f:df:5e: 92:49:d2:2e:09:e3:8b:33:e6:1a:a5:76:9e:ab:c9:c9:7b:5d: 8b:69:fb:cd:49:91:95:9d:fd:b7:29:20:5b:4d:6e:e1:85:d5: 22:6b:dd:60:d2:02:58:f8:15:1b:18:99:be:97:5b:c1:8a:2b: 2e:0b:59:47:a1:a9:69:c5:8a:fb:b0:af:6b:26:12:44:c8:36: 06:5e:99:c0:c0:f9:d6:b1:dd:bb:04:75:1a:72:08:80:53:5c: bd:76:db:22:34:22:ef:be:57:35:b6:0b:a7:a1:99:7d:c1:2f: 50:3f:f5:3e:4b:2c:ed:02:c2:bd:4c:9c:32:d4:a7:6f:f9:ef: 29:a8:1c:11:39:ee:88:d4:95:61:b9:a4:e9:1e:4e:a7:9b:14: e8:f1:0d:97:5f:6d:cb:e0:55:44:dc:9e:33:d7:fb:c2:58:2b: d5:e8:eb:3a:4f:0d:4c:7b:8f:48:45:db:c5:5e:49:bb:a7:4c: 70:cc:c2:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCHWidaAtNF7Ne/iCpV3F0kFe3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTEwMTgxMjA1MzhaFw0yNTEwMjExNTI1MzhaMDMxMTAvBgNV BAMTKEYxQjAxRTZGRTUwRDMyMDdCMTUxRUIyOTE0RUU2QjU2MzZERTAwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99sbSQxcNS5j8jzTK4RlErnh7 +UoXxrpBBNR5T0zE4FoDCl+IqWk5j4h8z2A52tV16e61dE3K44GmEBT8MwYmqecP DsarEF5+ecxSZOOjUJ+WwfXFma96/e0GQF5Ht8uiIerdZhDLSEepXuQjzInD1z7+ cpNnZYKXpB5VTNev3J99E/HEfRWvjcwtWpGFu8RH3EU0PCpnpCbfzXcgPN8zNyii +86lThBusparEP0FqdczdnMYBf1X6mjIxn4pobvI3KNNOaQRFWQFZc1UXK8X5XUg 1UrW8hU61qdSxCFUZbF/vP/WcvcTo4wUV2EBW6XhRJuhjy1UHLLaE4oJhO6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8bAeb+UNMgexUespFO5rVjbeAAAwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1R5ia8OQDeSQ4mvBqU/YZZSdIN127jsEWs df+3LkMe1CSThQXQ/QWLiHOKIgsdHI7Z2jWa3QFtAF75iZeArdgBTHXgRg/fXpJJ 0i4J44sz5hqldp6rycl7XYtp+81JkZWd/bcpIFtNbuGF1SJr3WDSAlj4FRsYmb6X W8GKKy4LWUehqWnFivuwr2smEkTINgZemcDA+dax3bsEdRpyCIBTXL122yI0Iu++ VzW2C6ehmX3BL1A/9T5LLO0Cwr1MnDLUp2/57ymoHBE57ojUlWG5pOkeTqebFOjx DZdfbcvgVUTcnjPX+8JYK9Xo6zpPDUx7j0hF28VeSbunTHDMwt0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:07:33 2025 by rpki-client