$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: AN7qielbRPzQ12xy9BP6N8fNG9scYxz6xLpwHuySXDo= Subject key identifier: 14:E2:78:78:15:26:28:CC:68:66:68:DE:54:25:FE:30:C4:72:94:D9 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 2D1AEBC08AD04562D42E00118B23B81C61D28DC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: 84 Signing time: Sun 29 Jun 2025 04:30:38 +0000 Manifest this update: Sun 29 Jun 2025 04:25:38 +0000 Manifest next update: Wed 02 Jul 2025 11:58:38 +0000 Files and hashes: 1: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: QGienj3cwwSJiN9VGFkK92bGqq2Hu3O1fm0/okYa+Fc=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1a:eb:c0:8a:d0:45:62:d4:2e:00:11:8b:23:b8:1c:61:d2:8d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Jun 29 04:25:38 2025 GMT Not After : Jul 2 11:58:38 2025 GMT Subject: CN=14E27878152628CC686668DE5425FE30C47294D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:a3:df:a0:a8:79:df:d1:88:c0:0d:a2:6d: ff:e2:1b:2a:4b:06:8e:29:77:fa:72:d8:53:b3:a0: a2:f3:9a:33:ac:c6:1b:4f:b7:aa:b1:83:4c:ce:bb: 98:9e:cb:4f:ca:29:2a:a1:22:52:6d:d4:0f:9a:86: a5:ca:a5:7d:18:25:28:19:50:11:07:36:57:45:4f: ea:9d:4a:53:09:ef:2b:c7:14:db:8b:15:9d:d2:a2: d3:55:3e:fc:da:ce:38:69:44:85:9c:6f:3f:e9:fa: 7c:15:a0:b9:9c:8c:55:98:39:38:e4:54:e5:b8:d7: 35:87:58:87:8e:57:45:78:18:0b:ce:ad:20:5f:d2: 3d:52:19:fb:05:21:63:3b:e8:1b:9b:0a:66:78:f3: 97:d0:47:46:fe:12:d8:d6:9f:7a:14:bc:7a:f6:52: 74:7d:55:b2:43:b1:33:07:d4:ea:40:3d:b6:1d:dc: 1c:31:56:ad:16:68:96:e2:27:0c:ba:c8:13:2b:db: 2d:a6:ad:5e:7e:8e:ed:11:fe:82:83:62:ef:9e:e3: 8f:08:78:8e:8c:d7:92:e7:5a:16:2c:40:cf:ff:20: 11:2e:8f:ea:d8:15:41:d3:13:f8:18:58:54:fc:3f: ba:b9:ac:f1:6c:98:01:60:7a:af:63:3d:87:6f:9e: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E2:78:78:15:26:28:CC:68:66:68:DE:54:25:FE:30:C4:72:94:D9 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:aa:ca:8b:dd:04:f0:a2:34:c4:a8:15:a9:76:7f:b8:a8:05: 5b:8b:fc:d4:2e:7a:a3:bc:ee:5a:99:e9:6d:80:36:02:6d:b9: 7c:94:11:5d:94:31:97:f0:d3:08:47:1e:97:3e:28:d6:5e:e8: 80:e6:09:b1:9c:dd:54:ac:a2:cc:84:62:72:a8:04:7f:5e:ca: 4d:af:c3:60:aa:79:50:85:ea:5d:a3:02:ea:d4:90:ce:25:2f: 87:1a:c5:de:dc:91:77:5d:00:9c:35:3e:04:81:52:be:1e:e6: e5:d2:06:0a:1a:38:e5:f3:76:99:8f:92:39:01:97:5f:36:9f: fa:6c:46:71:a4:e2:39:4d:7a:25:38:a9:08:63:83:8b:05:08: b8:a3:2b:4d:13:b6:9b:7a:0a:ae:6e:2a:15:1b:f9:5e:d5:6b: 4b:a8:97:f0:24:ba:66:16:8f:69:3b:fe:03:be:e1:04:9a:da: b0:e4:64:af:4d:eb:c6:b8:f8:34:08:d9:19:dd:72:76:f8:2b: a6:32:b9:38:66:f9:ac:ba:f6:5a:1a:80:e7:d2:14:95:fd:ce: 0f:98:10:b5:f3:e5:f4:f3:fe:bd:37:dc:8e:0d:17:da:77:ce: 12:03:a1:13:db:2d:96:63:8f:c9:a1:11:33:64:2c:3b:cb:96: 6a:32:04:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRrrwIrQRWLULgARiyO4HGHSjcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA2MjkwNDI1MzhaFw0yNTA3MDIxMTU4MzhaMDMxMTAvBgNV BAMTKDE0RTI3ODc4MTUyNjI4Q0M2ODY2NjhERTU0MjVGRTMwQzQ3Mjk0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMlKPfoKh539GIwA2ibf/iGypL Bo4pd/py2FOzoKLzmjOsxhtPt6qxg0zOu5iey0/KKSqhIlJt1A+ahqXKpX0YJSgZ UBEHNldFT+qdSlMJ7yvHFNuLFZ3SotNVPvzazjhpRIWcbz/p+nwVoLmcjFWYOTjk VOW41zWHWIeOV0V4GAvOrSBf0j1SGfsFIWM76BubCmZ485fQR0b+EtjWn3oUvHr2 UnR9VbJDsTMH1OpAPbYd3BwxVq0WaJbiJwy6yBMr2y2mrV5+ju0R/oKDYu+e448I eI6M15LnWhYsQM//IBEuj+rYFUHTE/gYWFT8P7q5rPFsmAFgeq9jPYdvnkxfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOJ4eBUmKMxoZmjeVCX+MMRylNkwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqqyovdBPCiNMSoFal2f7ioBVuL/NQueqO8 7lqZ6W2ANgJtuXyUEV2UMZfw0whHHpc+KNZe6IDmCbGc3VSsosyEYnKoBH9eyk2v w2CqeVCF6l2jAurUkM4lL4caxd7ckXddAJw1PgSBUr4e5uXSBgoaOOXzdpmPkjkB l182n/psRnGk4jlNeiU4qQhjg4sFCLijK00Ttpt6Cq5uKhUb+V7Va0uol/AkumYW j2k7/gO+4QSa2rDkZK9N68a4+DQI2Rndcnb4K6YyuThm+ay69loagOfSFJX9zg+Y ELXz5fTz/r033I4NF9p3zhIDoRPbLZZjj8mhETNkLDvLlmoyBJs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:30:41 2025 by rpki-client