$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: H4Qkl18WjhE5rDP+Go9KANMcqshIdoL9nTAadDMCt9w= Subject key identifier: 09:E8:92:06:7B:24:43:74:C0:6D:D3:36:98:E7:B0:E6:D8:86:E9:E4 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 2A140F67F55D9B6F48377B008C15B2CC3AAA32D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 0185 Signing time: Fri 22 Aug 2025 21:52:14 +0000 Manifest this update: Fri 22 Aug 2025 21:47:14 +0000 Manifest next update: Tue 26 Aug 2025 07:05:14 +0000 Files and hashes: 1: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: eQ5WMRJPy7gKupW5F4m6uPUC6SkCMo1WY0hvFb3YFm0=) 2: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: HiN7YoBVkQHKPRmQcIw7KecJDTn4UB8o7deSNxTmkOk=) 3: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: SFmXn9PezsJj2J+n/KO+JoUR1XmcH1D+ZwQywLjd4NQ=) 4: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 5L7KwFUgvVnXbTdBI9pybBL9RZN1DFSQWqr7TkH60p0=) 5: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: PTq4K7C1NfA7u/hBgxfzHnc927GHuD0+t6G+/br9unw=) 6: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: XrGYu3DQjvpuwfdqStfhDe/gSewHy5qM/vxZMLpKhIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:14:0f:67:f5:5d:9b:6f:48:37:7b:00:8c:15:b2:cc:3a:aa:32:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Aug 22 21:47:14 2025 GMT Not After : Aug 26 07:05:14 2025 GMT Subject: CN=09E892067B244374C06DD33698E7B0E6D886E9E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:1d:c0:ab:0c:ce:4b:9f:34:95:39:06:6a: 57:60:26:45:83:3a:29:19:a3:81:41:b9:26:e9:b4: 72:7c:30:dd:22:d6:17:f4:f5:ab:67:15:35:8d:58: ca:3c:f3:e7:47:b6:c4:55:f2:7d:b1:a4:21:d8:72: 0e:7c:49:e3:b4:59:86:73:45:af:a2:ef:c5:42:cb: 21:23:ea:26:08:78:42:a8:62:91:b9:b1:08:b1:2a: 1b:52:02:6d:6d:f8:2e:29:20:10:4a:9b:61:f9:24: 1b:5d:18:1d:9b:6f:13:a2:f8:f7:a8:22:e2:f5:71: f3:e7:0b:08:51:94:b7:20:09:17:2a:22:71:5f:8f: c5:29:06:8e:6a:08:5a:0f:c4:fe:cb:8c:73:e2:39: 36:8f:e9:a2:bf:77:c9:59:a4:af:62:6c:84:53:ab: 28:7f:de:ca:a8:7d:9e:6d:90:83:67:05:c8:09:d2: dd:cb:f9:d0:db:1d:a2:96:82:54:25:fa:43:73:97: 3a:13:58:f0:00:ac:ce:23:f4:9f:a7:0f:19:dd:df: 6d:e0:21:2f:13:1e:38:18:69:98:7f:4c:36:01:be: 85:72:f6:9c:5f:29:5a:5f:11:d0:4a:1c:af:ac:78: 4b:74:ea:5c:63:a7:53:ec:58:60:c0:8e:3f:27:64: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E8:92:06:7B:24:43:74:C0:6D:D3:36:98:E7:B0:E6:D8:86:E9:E4 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8a:32:a6:85:b1:4b:3b:70:85:81:c8:82:d2:55:c1:79:51: 74:98:6a:d7:e8:69:b6:13:1e:c3:06:e3:64:66:56:6b:2c:64: bd:16:7f:4c:1e:ba:e5:73:3e:66:08:73:a4:74:a9:13:c3:ee: 8b:cd:5a:73:42:ff:b5:2e:6f:b1:51:59:dc:89:13:52:5e:dd: 7b:86:13:ff:25:77:e5:78:6e:a1:0f:76:2d:67:6d:ff:ba:60: 49:52:3a:c7:f9:ad:e1:4d:bc:08:bb:20:cf:05:10:dc:58:f2: af:53:ae:b7:d0:04:23:51:82:c8:ef:86:74:47:cc:27:5b:a3: 6f:4b:d3:08:8b:72:f2:d7:00:2c:63:ec:4b:1c:47:79:4e:22: 96:96:d5:05:59:bd:b7:11:dc:02:5b:85:11:0a:2c:d0:fb:43: 80:44:28:42:62:eb:6e:b4:07:28:c6:58:41:2c:93:23:78:42: 48:b0:4f:84:1b:91:ea:6c:b2:2a:bc:70:ae:cb:29:19:34:be: 35:31:19:ef:45:54:20:c6:85:34:0c:d0:0b:ab:4d:c2:99:a3: 15:63:8f:01:1a:b6:a9:82:ab:c9:f4:23:8e:4e:86:1b:78:4e: de:6f:cd:ba:f8:f0:98:81:ef:5b:29:c6:e8:b2:9f:87:a4:6c: 03:08:7e:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhQPZ/Vdm29IN3sAjBWyzDqqMtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNTA4MjIyMTQ3MTRaFw0yNTA4MjYwNzA1MTRaMDMxMTAvBgNV BAMTKDA5RTg5MjA2N0IyNDQzNzRDMDZERDMzNjk4RTdCMEU2RDg4NkU5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVB3AqwzOS580lTkGaldgJkWD OikZo4FBuSbptHJ8MN0i1hf09atnFTWNWMo88+dHtsRV8n2xpCHYcg58SeO0WYZz Ra+i78VCyyEj6iYIeEKoYpG5sQixKhtSAm1t+C4pIBBKm2H5JBtdGB2bbxOi+Peo IuL1cfPnCwhRlLcgCRcqInFfj8UpBo5qCFoPxP7LjHPiOTaP6aK/d8lZpK9ibIRT qyh/3sqofZ5tkINnBcgJ0t3L+dDbHaKWglQl+kNzlzoTWPAArM4j9J+nDxnd323g IS8THjgYaZh/TDYBvoVy9pxfKVpfEdBKHK+seEt06lxjp1PsWGDAjj8nZHZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCeiSBnskQ3TAbdM2mOew5tiG6eQwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuKMqaFsUs7cIWByILSVcF5UXSYatfoabYT HsMG42RmVmssZL0Wf0weuuVzPmYIc6R0qRPD7ovNWnNC/7Uub7FRWdyJE1Je3XuG E/8ld+V4bqEPdi1nbf+6YElSOsf5reFNvAi7IM8FENxY8q9TrrfQBCNRgsjvhnRH zCdbo29L0wiLcvLXACxj7EscR3lOIpaW1QVZvbcR3AJbhREKLND7Q4BEKEJi6260 ByjGWEEskyN4QkiwT4Qbkepssiq8cK7LKRk0vjUxGe9FVCDGhTQM0AurTcKZoxVj jwEatqmCq8n0I45Ohht4Tt5vzbr48JiB71spxuiyn4ekbAMIfrY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:37 2025 by rpki-client