$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: asP0DC1zdjp1MfYii2mV9EouZ8ao859J7qohw1pmpSM= Subject key identifier: 71:A0:15:8E:A6:A8:F1:05:D7:0B:46:20:C6:B2:DD:18:D2:BA:E5:C9 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 30F60CA0068A9145AADF3949FAA45BBC511FEC5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: 9C Signing time: Fri 22 Aug 2025 18:10:40 +0000 Manifest this update: Fri 22 Aug 2025 18:05:40 +0000 Manifest next update: Tue 26 Aug 2025 05:20:40 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: e8nmEeB0+HmoFPJz7VzawJ/Qwzc+XOYNS5k/GcxnP1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f6:0c:a0:06:8a:91:45:aa:df:39:49:fa:a4:5b:bc:51:1f:ec:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Aug 22 18:05:40 2025 GMT Not After : Aug 26 05:20:40 2025 GMT Subject: CN=71A0158EA6A8F105D70B4620C6B2DD18D2BAE5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:55:aa:ee:a4:0e:eb:77:a7:9f:ea:4f:4d: a4:12:47:3b:a4:0f:e5:11:ae:e6:4f:fb:e5:a5:a9: 50:de:9d:9f:9e:5d:92:fa:a6:da:a5:b5:ea:28:d4: 5a:c6:e4:a6:b8:1d:81:82:0d:2d:52:59:b3:89:b9: e4:0f:58:04:c1:20:59:05:98:d1:a9:c9:79:f2:e7: 61:9f:61:de:a4:96:b9:81:39:17:82:56:2b:ca:98: 4f:d9:07:ad:72:df:a7:84:9c:f9:c5:17:09:6a:29: 48:d0:90:b4:06:2c:7a:70:6c:e5:eb:1a:b2:49:a1: f7:17:77:1d:8b:30:b5:26:7a:7f:ea:3b:4d:77:5b: 4b:3d:2e:15:f1:60:58:19:42:8f:3d:ca:2f:ff:b5: 5a:b4:57:0e:db:d8:10:72:bf:7b:58:8f:6c:bb:f7: 6a:11:4a:87:bb:f7:34:68:53:4d:45:ec:09:c0:fb: 7f:cf:35:e3:8d:8d:5e:1d:3a:33:a9:5e:ce:eb:b4: ed:85:bc:28:75:3b:7b:fa:1b:69:0c:45:74:63:ef: b0:a6:05:71:1a:43:f9:c2:f2:b7:60:29:1b:63:67: cd:f0:3f:ac:b2:f9:64:d9:89:21:72:0a:56:40:41: 35:bf:62:9e:af:c8:f8:54:4c:80:e4:6d:e1:83:31: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A0:15:8E:A6:A8:F1:05:D7:0B:46:20:C6:B2:DD:18:D2:BA:E5:C9 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:99:9e:0a:69:3f:15:9c:cf:64:86:df:f8:e1:1e:51:d3:e1: 9a:bd:a2:83:e9:7b:5a:8b:0f:6c:87:5f:9d:1e:95:8a:9a:03: 4b:61:05:09:4b:ac:7e:2b:60:4f:2e:03:be:ca:d8:68:0d:ed: d6:0c:f3:07:a5:39:eb:7d:87:bd:28:e1:75:3b:c1:e0:10:53: 08:75:8b:22:9e:73:69:e2:7a:d4:33:c6:bd:eb:2f:9e:7d:49: 4e:7e:15:df:24:00:30:d8:00:ee:06:54:7c:06:c2:29:dd:38: 15:21:67:d5:fd:a5:50:a1:e3:4b:13:a9:16:42:91:29:6e:6f: c4:df:d4:15:41:b0:fb:ca:de:14:7d:8a:2c:b8:b6:71:8b:86: e7:df:46:c2:c0:ad:17:00:32:be:09:6d:6c:4e:55:45:68:b5: e2:51:f1:11:6f:18:fd:4a:9f:4f:7d:29:e4:e2:4d:db:4d:09: d6:ef:c3:80:07:07:1a:5e:c7:12:64:07:14:38:22:9c:ad:db: 75:ae:fc:84:72:f4:69:05:c8:98:3f:26:b4:77:16:da:98:e3: 14:7e:2c:a9:7b:43:ff:a9:77:3b:5b:8f:7c:04:df:62:d3:df: 05:40:88:5a:bf:66:5b:f9:4a:1e:28:0b:50:7f:6f:ce:f4:71: 09:a6:72:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPYMoAaKkUWq3zlJ+qRbvFEf7FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA4MjIxODA1NDBaFw0yNTA4MjYwNTIwNDBaMDMxMTAvBgNV BAMTKDcxQTAxNThFQTZBOEYxMDVENzBCNDYyMEM2QjJERDE4RDJCQUU1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhFWq7qQO63enn+pPTaQSRzuk D+URruZP++WlqVDenZ+eXZL6ptqlteoo1FrG5Ka4HYGCDS1SWbOJueQPWATBIFkF mNGpyXny52GfYd6klrmBOReCVivKmE/ZB61y36eEnPnFFwlqKUjQkLQGLHpwbOXr GrJJofcXdx2LMLUmen/qO013W0s9LhXxYFgZQo89yi//tVq0Vw7b2BByv3tYj2y7 92oRSoe79zRoU01F7AnA+3/PNeONjV4dOjOpXs7rtO2FvCh1O3v6G2kMRXRj77Cm BXEaQ/nC8rdgKRtjZ83wP6yy+WTZiSFyClZAQTW/Yp6vyPhUTIDkbeGDMagfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcaAVjqao8QXXC0YgxrLdGNK65ckwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaZngppPxWcz2SG3/jhHlHT4Zq9ooPpe1qL D2yHX50elYqaA0thBQlLrH4rYE8uA77K2GgN7dYM8welOet9h70o4XU7weAQUwh1 iyKec2nietQzxr3rL559SU5+Fd8kADDYAO4GVHwGwindOBUhZ9X9pVCh40sTqRZC kSlub8Tf1BVBsPvK3hR9iiy4tnGLhuffRsLArRcAMr4JbWxOVUVoteJR8RFvGP1K n099KeTiTdtNCdbvw4AHBxpexxJkBxQ4Ipyt23Wu/IRy9GkFyJg/JrR3FtqY4xR+ LKl7Q/+pdztbj3wE32LT3wVAiFq/Zlv5Sh4oC1B/b870cQmmcrE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:42 2025 by rpki-client