$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: iJsWKAiho+N8ntGl19WvsD1hoCNJYfdXd8UXCU2w/9c= Subject key identifier: FC:94:55:4B:D8:1D:32:05:36:0C:6E:AE:06:1E:60:66:F8:FC:85:F8 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 0E2A89CBC269854C6E9661F9F3EDDBE37A6B29D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: B6 Signing time: Sat 18 Oct 2025 13:20:41 +0000 Manifest this update: Sat 18 Oct 2025 13:15:41 +0000 Manifest next update: Tue 21 Oct 2025 20:25:41 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: kHD1YHlR1hQn9DbEapxF/thGEcM49Xv1rt1MgqWrhSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2a:89:cb:c2:69:85:4c:6e:96:61:f9:f3:ed:db:e3:7a:6b:29:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Oct 18 13:15:41 2025 GMT Not After : Oct 21 20:25:41 2025 GMT Subject: CN=FC94554BD81D3205360C6EAE061E6066F8FC85F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:12:bf:e7:af:89:1a:e1:aa:05:80:37:23: e8:1b:3d:75:5d:ac:46:95:3f:6d:52:38:83:dd:12: e2:ed:b9:f2:52:26:17:15:fe:a9:06:21:63:a7:05: 59:d4:eb:8d:aa:d5:d6:f1:ca:1d:52:6f:7e:68:f1: 02:cb:66:60:bd:bd:c2:02:0b:0c:df:e0:dc:41:f4: 23:bc:2e:ea:16:d6:a9:a8:b2:5e:52:1e:52:44:f7: 23:06:4e:43:97:2e:c0:70:4d:63:a7:10:54:28:64: 44:a8:4b:70:64:2b:8a:b8:6e:22:c3:be:63:08:56: 88:40:ca:2b:d6:17:bd:ad:2e:01:49:50:8e:bc:f7: 09:34:70:eb:9e:5d:ed:ae:87:ea:f0:f5:be:f9:91: 90:63:de:4d:0d:6d:11:db:9b:44:8a:61:ca:96:05: 2d:94:95:59:74:c3:bb:aa:2b:22:64:d9:85:7b:9d: ce:43:22:19:da:d6:0a:bd:3d:e2:e9:fb:7b:13:fa: 9b:28:62:a6:34:1f:39:85:26:d3:dc:0e:42:94:e2: c6:e3:71:1e:02:ed:c3:55:4b:17:17:26:5d:7b:0d: 97:6e:3a:db:6f:92:9f:4c:83:f1:43:54:6e:26:e2: 0a:e4:2e:ef:93:35:73:88:1e:82:57:3a:35:b9:f1: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:55:4B:D8:1D:32:05:36:0C:6E:AE:06:1E:60:66:F8:FC:85:F8 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:31:2d:6a:c2:9b:3d:e3:38:67:83:0d:99:59:88:b2:a2:cd: c9:ef:e5:48:ae:de:6e:25:74:17:ae:0c:16:47:7a:90:21:cf: 75:bf:28:ff:98:79:bd:cf:3b:95:29:5e:0d:80:14:9a:e3:7b: b6:11:30:fd:96:c8:ff:00:bf:86:ab:ba:88:43:03:8e:55:48: 64:5c:b7:83:c2:cf:2f:ed:95:31:86:53:20:c7:78:e5:56:49: 65:f2:b5:15:56:53:d2:ba:73:85:df:9f:a0:e7:d3:b8:dc:de: f7:75:d3:93:92:cc:6e:a5:5b:31:e3:96:7c:bc:3f:25:b8:2f: ae:97:77:d6:69:31:07:af:9b:00:fd:b5:fc:c1:e0:47:3b:8f: 4a:1f:40:4f:2c:a6:d4:05:dc:96:a5:ca:04:1b:3f:2f:cc:69: c2:d4:10:d7:02:4a:ba:a6:37:0d:4b:b0:ed:a2:c0:ce:61:59: 93:3b:1e:42:4f:cb:b9:17:49:9c:46:86:5d:43:63:dc:46:bb: da:5d:c2:94:4c:70:2b:c0:fd:79:4a:11:24:db:30:21:68:80: b3:b4:40:9b:8a:df:5a:d7:2c:82:90:1f:d8:ad:bb:9f:66:88: 6b:ad:03:4b:01:04:a5:58:5c:69:9a:82:29:9f:2a:de:0e:ae: 84:44:e6:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDiqJy8JphUxulmH58+3b43prKdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTEwMTgxMzE1NDFaFw0yNTEwMjEyMDI1NDFaMDMxMTAvBgNV BAMTKEZDOTQ1NTRCRDgxRDMyMDUzNjBDNkVBRTA2MUU2MDY2RjhGQzg1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqRK/56+JGuGqBYA3I+gbPXVd rEaVP21SOIPdEuLtufJSJhcV/qkGIWOnBVnU642q1dbxyh1Sb35o8QLLZmC9vcIC Cwzf4NxB9CO8LuoW1qmosl5SHlJE9yMGTkOXLsBwTWOnEFQoZESoS3BkK4q4biLD vmMIVohAyivWF72tLgFJUI689wk0cOueXe2uh+rw9b75kZBj3k0NbRHbm0SKYcqW BS2UlVl0w7uqKyJk2YV7nc5DIhna1gq9PeLp+3sT+psoYqY0HzmFJtPcDkKU4sbj cR4C7cNVSxcXJl17DZduOttvkp9Mg/FDVG4m4grkLu+TNXOIHoJXOjW58bWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/JRVS9gdMgU2DG6uBh5gZvj8hfgwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAxLWrCmz3jOGeDDZlZiLKizcnv5Uiu3m4l dBeuDBZHepAhz3W/KP+Yeb3PO5UpXg2AFJrje7YRMP2WyP8Av4aruohDA45VSGRc t4PCzy/tlTGGUyDHeOVWSWXytRVWU9K6c4Xfn6Dn07jc3vd105OSzG6lWzHjlny8 PyW4L66Xd9ZpMQevmwD9tfzB4Ec7j0ofQE8sptQF3JalygQbPy/MacLUENcCSrqm Nw1LsO2iwM5hWZM7HkJPy7kXSZxGhl1DY9xGu9pdwpRMcCvA/XlKESTbMCFogLO0 QJuK31rXLIKQH9itu59miGutA0sBBKVYXGmagimfKt4OroRE5qY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:29 2025 by rpki-client