$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: jDnCAQPJOXSUVdXRZXQjdLsl8cRkhNIowzplzFBig/8= Subject key identifier: 8A:F6:55:9B:5E:21:F2:D7:D0:E0:7C:26:FB:5F:09:0B:43:91:92:D5 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 66E6F17C747A0D09537BA827F46FADEB401BF1A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 019F Signing time: Sun 19 Oct 2025 20:42:18 +0000 Manifest this update: Sun 19 Oct 2025 20:37:18 +0000 Manifest next update: Thu 23 Oct 2025 04:39:18 +0000 Files and hashes: 1: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: KKXrQDl7JIfjFcb86Ut8ICakF/y4sXbgfg8hzhNgZOI=) 2: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: PTq4K7C1NfA7u/hBgxfzHnc927GHuD0+t6G+/br9unw=) 3: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 5L7KwFUgvVnXbTdBI9pybBL9RZN1DFSQWqr7TkH60p0=) 4: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: HiN7YoBVkQHKPRmQcIw7KecJDTn4UB8o7deSNxTmkOk=) 5: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: SFmXn9PezsJj2J+n/KO+JoUR1XmcH1D+ZwQywLjd4NQ=) 6: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: eQ5WMRJPy7gKupW5F4m6uPUC6SkCMo1WY0hvFb3YFm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e6:f1:7c:74:7a:0d:09:53:7b:a8:27:f4:6f:ad:eb:40:1b:f1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Oct 19 20:37:18 2025 GMT Not After : Oct 23 04:39:18 2025 GMT Subject: CN=8AF6559B5E21F2D7D0E07C26FB5F090B439192D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:00:54:8a:14:48:b7:9f:51:b7:67:88:7b: aa:77:57:79:b8:2b:e4:45:ad:8d:59:0f:f2:60:85: 8a:b7:19:46:e6:6a:17:30:22:22:53:2f:0b:f5:2e: 7c:35:e2:f1:3e:ef:8e:08:19:70:14:c3:5b:7b:15: b5:8c:5d:50:c5:f5:bb:5d:cd:dc:1a:50:79:7d:db: 31:e6:bb:8e:e9:a9:53:8a:e2:6b:74:18:2d:e4:6e: 2f:ad:83:15:9a:af:1a:72:25:df:94:28:03:a5:a5: cf:63:22:6e:15:da:46:03:b5:fc:c9:84:d3:2c:e1: 3d:14:6b:ce:04:fc:8d:22:c0:56:c2:8b:a1:02:63: 09:7b:81:2e:18:8e:03:32:9d:11:db:55:d1:b8:ca: 0e:c5:7b:44:08:ae:77:0d:e7:1d:ec:41:33:ab:8c: c8:30:30:e7:5e:63:f7:6d:ce:55:f2:24:a3:d5:ea: 98:76:27:65:0f:04:fc:0d:a0:f4:b0:1e:26:5c:6d: c8:e8:39:c4:d7:1f:d2:c9:b1:9f:f6:4a:7e:71:37: 61:0e:5c:2f:ec:37:1b:53:14:8e:35:28:65:94:9c: bb:a8:dd:ab:22:ac:58:3a:df:32:46:4a:8d:91:8d: b3:73:3e:9f:19:b8:7f:8b:de:8e:64:d1:02:15:de: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F6:55:9B:5E:21:F2:D7:D0:E0:7C:26:FB:5F:09:0B:43:91:92:D5 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d6:fc:24:7c:b5:fe:bd:02:8a:c5:3f:02:f8:09:76:e9:1f: 52:87:bd:82:5e:57:13:4d:48:49:b1:68:dd:3a:52:e1:c7:78: c0:0c:8c:bc:70:8c:6d:3c:74:1e:eb:98:1e:4c:d0:1c:0a:4e: b0:6a:02:57:6b:f6:b2:f8:36:29:16:1d:07:e5:9f:89:77:54: 65:76:30:d2:57:23:f5:a1:47:96:59:b3:c4:4c:bb:99:1b:39: 52:b0:4e:ad:b3:d1:6c:38:82:7d:38:fd:e8:a4:8a:07:5b:4d: ef:9d:6c:57:65:b3:66:a7:d6:ac:12:f2:c8:34:84:ee:cb:87: 5f:5d:35:88:08:e3:84:64:ac:88:cb:4a:3a:f3:32:e8:f5:45: 0b:32:48:be:e4:a9:66:eb:c7:48:21:a8:97:af:98:be:e1:6a: 13:57:b2:2c:ae:a6:df:a9:cc:ca:99:ef:29:80:c9:c5:eb:67: a8:4f:62:77:e0:0b:2d:28:6e:a8:24:73:08:b5:be:8f:81:b5: d4:39:b2:a9:d6:a4:a6:dc:ec:8c:f8:e4:c8:fa:6d:9f:90:af: b6:6d:0a:f8:f0:b4:ef:5c:39:a1:5d:54:f6:fa:23:88:67:79: 84:07:02:26:a7:dc:76:91:5d:e5:9b:6a:95:6d:a3:29:af:ac: ef:9d:01:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZubxfHR6DQlTe6gn9G+t60Ab8akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNTEwMTkyMDM3MThaFw0yNTEwMjMwNDM5MThaMDMxMTAvBgNV BAMTKDhBRjY1NTlCNUUyMUYyRDdEMEUwN0MyNkZCNUYwOTBCNDM5MTkyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0QBUihRIt59Rt2eIe6p3V3m4 K+RFrY1ZD/JghYq3GUbmahcwIiJTLwv1Lnw14vE+744IGXAUw1t7FbWMXVDF9btd zdwaUHl92zHmu47pqVOK4mt0GC3kbi+tgxWarxpyJd+UKAOlpc9jIm4V2kYDtfzJ hNMs4T0Ua84E/I0iwFbCi6ECYwl7gS4YjgMynRHbVdG4yg7Fe0QIrncN5x3sQTOr jMgwMOdeY/dtzlXyJKPV6ph2J2UPBPwNoPSwHiZcbcjoOcTXH9LJsZ/2Sn5xN2EO XC/sNxtTFI41KGWUnLuo3asirFg63zJGSo2RjbNzPp8ZuH+L3o5k0QIV3u87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivZVm14h8tfQ4Hwm+18JC0ORktUwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfW/CR8tf69AorFPwL4CXbpH1KHvYJeVxNN SEmxaN06UuHHeMAMjLxwjG08dB7rmB5M0BwKTrBqAldr9rL4NikWHQfln4l3VGV2 MNJXI/WhR5ZZs8RMu5kbOVKwTq2z0Ww4gn04/eikigdbTe+dbFdls2an1qwS8sg0 hO7Lh19dNYgI44RkrIjLSjrzMuj1RQsySL7kqWbrx0ghqJevmL7hahNXsiyupt+p zMqZ7ymAycXrZ6hPYnfgCy0obqgkcwi1vo+BtdQ5sqnWpKbc7Iz45Mj6bZ+Qr7Zt CvjwtO9cOaFdVPb6I4hneYQHAian3HaRXeWbapVtoymvrO+dAbg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:19 2025 by rpki-client