$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: Zgt6wzHYeByoxAaQ9OvAxMzmrW9gxYXpH1bYwpmgJPQ= Subject key identifier: 47:11:9F:0F:D1:1B:95:06:8D:90:F8:68:2A:89:8C:DF:BE:8B:4E:3F Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 7FE74DEF977D77ABE97A07B9EE1C46D969F7DBC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 0157 Signing time: Sun 11 May 2025 06:52:13 +0000 Manifest this update: Sun 11 May 2025 06:47:13 +0000 Manifest next update: Wed 14 May 2025 09:42:13 +0000 Files and hashes: 1: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: SFmXn9PezsJj2J+n/KO+JoUR1XmcH1D+ZwQywLjd4NQ=) 2: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: sEJJ7UswoD5ad0oOWAlN8ooXKcnvFiVFv8Hs2dbWEWI=) 3: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: eQ5WMRJPy7gKupW5F4m6uPUC6SkCMo1WY0hvFb3YFm0=) 4: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: PTq4K7C1NfA7u/hBgxfzHnc927GHuD0+t6G+/br9unw=) 5: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 5L7KwFUgvVnXbTdBI9pybBL9RZN1DFSQWqr7TkH60p0=) 6: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: HiN7YoBVkQHKPRmQcIw7KecJDTn4UB8o7deSNxTmkOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 09:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e7:4d:ef:97:7d:77:ab:e9:7a:07:b9:ee:1c:46:d9:69:f7:db:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: May 11 06:47:13 2025 GMT Not After : May 14 09:42:13 2025 GMT Subject: CN=47119F0FD11B95068D90F8682A898CDFBE8B4E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:4e:48:08:39:7b:14:ed:50:8b:d0:1d:a6: ea:c7:3a:b5:4a:21:49:69:9f:a0:50:b2:94:f1:a9: 48:8c:a9:64:2e:75:2b:61:e2:65:0c:ca:71:08:e1: 4f:85:8d:0e:7f:b5:ad:c3:f8:0f:b7:f4:00:55:62: 10:36:1f:13:c4:67:aa:a1:ab:83:19:d9:83:ae:ae: 9d:2a:a3:1d:c1:0f:a8:d7:fd:1e:f7:dc:e1:1c:e1: 38:3b:69:1a:44:7b:19:e5:a9:d5:49:3e:16:9d:55: 06:54:9f:88:3f:6a:47:e6:ea:d8:d3:fe:b9:c2:cb: 16:af:e4:8e:da:48:3a:b4:8b:dd:38:cd:4b:37:67: 21:f6:e5:4c:cf:4c:18:95:6e:4a:04:c0:5a:37:58: 8f:11:df:28:2b:f7:a3:6c:46:13:50:d4:45:fc:f7: 05:b4:f0:c3:be:a4:1e:8e:f3:73:b7:df:8d:54:d3: 9f:fb:34:fa:bf:a8:2e:dd:86:3e:d5:e7:ab:c2:7a: ed:d9:ef:85:46:5e:eb:c6:2f:56:da:94:ec:81:e2: f8:3e:ea:11:d9:12:57:43:24:27:6c:ab:7b:1e:60: 8e:26:1b:3b:fd:35:1d:e4:93:2d:77:38:40:15:c3: c6:56:eb:14:79:b0:77:b9:ab:ff:52:f2:50:c3:b6: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:9F:0F:D1:1B:95:06:8D:90:F8:68:2A:89:8C:DF:BE:8B:4E:3F X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:32:cd:29:1d:05:39:89:71:39:8b:df:7c:dc:d6:50:1a:24: b9:20:21:9b:53:7c:6d:58:58:b7:e8:60:f7:b9:21:f0:1f:f6: a7:70:ef:78:59:72:0c:3e:d8:6c:e1:6d:8a:71:73:e1:6d:5d: 8a:1b:85:ea:ef:a4:74:2e:4b:51:17:53:26:ec:31:a1:50:30: b5:af:77:07:3d:37:d4:6b:8b:01:4b:24:d7:9b:98:c8:3b:24: 8d:cf:78:59:04:08:80:c4:b6:38:df:77:cb:38:8d:7b:5a:75: b6:92:30:dd:9f:4d:ae:c0:3e:d2:aa:f4:3f:6e:b7:42:27:73: 70:81:8b:2c:73:11:3c:7e:4e:b9:c5:48:ef:ea:e2:85:08:57: 76:67:ac:a9:ec:5d:1d:4f:f3:b3:46:a5:82:be:fc:6c:e3:49: 63:3e:5a:83:94:4a:ed:db:c7:81:d3:76:6b:c6:8d:71:e3:15: 0f:cb:39:4e:5c:fb:d0:28:e5:04:ad:1f:7b:0e:77:02:95:79: b1:9c:b0:a2:59:ae:40:c0:bb:fa:90:9e:7c:4c:2f:d3:d5:f1: 3d:37:54:6f:e7:9b:b9:7e:95:23:fd:91:a1:a0:11:67:14:f9: 45:07:bb:7b:f6:07:d2:51:11:94:07:60:a4:0e:8b:ec:9b:09: 31:a1:09:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+dN75d9d6vpege57hxG2Wn328QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNTA1MTEwNjQ3MTNaFw0yNTA1MTQwOTQyMTNaMDMxMTAvBgNV BAMTKDQ3MTE5RjBGRDExQjk1MDY4RDkwRjg2ODJBODk4Q0RGQkU4QjRFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSE5ICDl7FO1Qi9AdpurHOrVK IUlpn6BQspTxqUiMqWQudSth4mUMynEI4U+FjQ5/ta3D+A+39ABVYhA2HxPEZ6qh q4MZ2YOurp0qox3BD6jX/R733OEc4Tg7aRpEexnlqdVJPhadVQZUn4g/akfm6tjT /rnCyxav5I7aSDq0i904zUs3ZyH25UzPTBiVbkoEwFo3WI8R3ygr96NsRhNQ1EX8 9wW08MO+pB6O83O3341U05/7NPq/qC7dhj7V56vCeu3Z74VGXuvGL1balOyB4vg+ 6hHZEldDJCdsq3seYI4mGzv9NR3kky13OEAVw8ZW6xR5sHe5q/9S8lDDtrKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxGfD9EblQaNkPhoKomM376LTj8wHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEyzSkdBTmJcTmL33zc1lAaJLkgIZtTfG1Y WLfoYPe5IfAf9qdw73hZcgw+2GzhbYpxc+FtXYobhervpHQuS1EXUybsMaFQMLWv dwc9N9RriwFLJNebmMg7JI3PeFkECIDEtjjfd8s4jXtadbaSMN2fTa7APtKq9D9u t0Inc3CBiyxzETx+TrnFSO/q4oUIV3ZnrKnsXR1P87NGpYK+/GzjSWM+WoOUSu3b x4HTdmvGjXHjFQ/LOU5c+9Ao5QStH3sOdwKVebGcsKJZrkDAu/qQnnxML9PV8T03 VG/nm7l+lSP9kaGgEWcU+UUHu3v2B9JREZQHYKQOi+ybCTGhCTY= -----END CERTIFICATE-----Generated at Mon May 12 15:58:31 2025 by rpki-client