$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: MfbzWPxPKeLppPXDpU8C/wBA/V6TZYMaMqZDBlTknNw= Subject key identifier: 29:64:02:FF:27:66:E5:A3:DC:2B:4B:BB:A3:2D:3C:DB:56:8F:66:4C Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 6F5377FCDF49EE65C3613B8EC0D80A02A27E4FE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 01ED Signing time: Fri 22 Aug 2025 09:21:38 +0000 Manifest this update: Fri 22 Aug 2025 09:16:38 +0000 Manifest next update: Mon 25 Aug 2025 17:42:38 +0000 Files and hashes: 1: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) 2: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: qxskW9KhuRe/rB8St+gBKqv/QnLfdLR5SmgwlfK+P68=) 3: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 4: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:53:77:fc:df:49:ee:65:c3:61:3b:8e:c0:d8:0a:02:a2:7e:4f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Aug 22 09:16:38 2025 GMT Not After : Aug 25 17:42:38 2025 GMT Subject: CN=296402FF2766E5A3DC2B4BBBA32D3CDB568F664C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:c8:b6:b3:b3:7a:4d:96:1d:c7:72:94:91: 41:a6:40:fa:74:d9:33:3e:7b:e8:41:b0:3d:7f:59: fa:60:9f:8a:54:43:b5:90:68:83:4a:59:bf:3c:9b: 8c:91:a9:ed:3e:17:9e:27:25:25:cf:8f:ff:f8:85: 70:e3:49:86:4e:7a:45:83:d6:db:16:cf:64:7d:24: cd:44:14:9c:ff:d8:31:3d:44:d6:26:8f:cd:d2:3b: 43:01:8d:bc:af:8d:9f:b1:3b:f1:09:d7:7a:08:3d: 1d:b2:fc:95:7c:a9:1f:ec:9a:e4:da:dc:f2:89:bc: 8c:54:c2:1b:93:e5:48:71:e4:13:17:7b:25:de:15: fa:65:a3:29:19:7f:7d:19:d6:77:e1:7e:89:62:c9: 0e:6f:38:06:9d:3d:ea:de:14:bf:5b:4f:f6:2d:70: d4:66:21:d0:5f:56:77:cf:72:e1:ac:4b:0f:67:68: 90:12:3d:32:02:5e:da:82:ba:d3:6d:82:d8:e5:e8: 5d:5f:e4:a5:0d:28:26:47:4b:49:0e:17:51:13:3e: f6:60:94:51:b1:e1:2e:6d:ae:5f:cc:bc:b1:37:fc: ca:4c:69:53:87:aa:33:49:af:4d:ef:94:47:54:fc: 46:5e:23:f0:d5:d4:e1:0a:08:4e:37:c1:12:23:85: 70:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:64:02:FF:27:66:E5:A3:DC:2B:4B:BB:A3:2D:3C:DB:56:8F:66:4C X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:49:8f:51:5c:30:6a:ae:e6:77:41:30:a5:3a:b3:2b:f4:c6: f9:08:4b:8e:50:fd:68:03:fb:d5:bc:8b:14:7e:22:7a:2b:89: 04:a5:2e:72:88:bd:69:f7:85:32:9f:39:16:0e:28:c2:38:ba: a1:f7:55:f8:b3:a6:6a:f4:70:e1:48:5c:b9:dc:67:b2:00:ec: 15:d9:06:b5:f1:c1:52:d4:17:4b:36:7e:b7:a2:0f:ca:9d:8c: 6f:a3:19:e9:f5:3d:7e:6e:03:58:3b:55:51:eb:b3:69:fe:a3: 15:ed:59:a3:fc:8c:9a:25:b5:9d:53:cd:1a:b8:2e:a0:67:45: 88:ee:75:60:0e:92:12:82:6f:f3:9a:63:4c:cb:97:a7:93:93: 75:c4:61:0d:3b:e4:2b:77:a1:73:3e:f8:4f:6e:01:c7:f9:30: f2:ed:9d:69:32:53:05:f9:98:97:5d:5f:88:07:8c:01:f3:ba: c3:f1:7a:d0:b8:74:7d:a3:ff:bd:69:d5:ab:59:fd:46:84:22: ca:d1:1a:53:38:d0:2e:ab:25:df:1a:09:ba:a7:4b:ad:72:4d: ba:fd:89:e3:69:f6:19:c4:04:ba:2b:3c:4f:4b:d0:db:08:9f: 5b:60:37:43:3f:b2:bb:b3:f7:89:36:7f:79:ad:79:fa:6b:2b: 39:16:08:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1N3/N9J7mXDYTuOwNgKAqJ+T+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA4MjIwOTE2MzhaFw0yNTA4MjUxNzQyMzhaMDMxMTAvBgNV BAMTKDI5NjQwMkZGMjc2NkU1QTNEQzJCNEJCQkEzMkQzQ0RCNTY4RjY2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkmsi2s7N6TZYdx3KUkUGmQPp0 2TM+e+hBsD1/Wfpgn4pUQ7WQaINKWb88m4yRqe0+F54nJSXPj//4hXDjSYZOekWD 1tsWz2R9JM1EFJz/2DE9RNYmj83SO0MBjbyvjZ+xO/EJ13oIPR2y/JV8qR/smuTa 3PKJvIxUwhuT5Uhx5BMXeyXeFfploykZf30Z1nfhfoliyQ5vOAadPereFL9bT/Yt cNRmIdBfVnfPcuGsSw9naJASPTICXtqCutNtgtjl6F1f5KUNKCZHS0kOF1ETPvZg lFGx4S5trl/MvLE3/MpMaVOHqjNJr03vlEdU/EZeI/DV1OEKCE43wRIjhXCNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKWQC/ydm5aPcK0u7oy0821aPZkwwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpJj1FcMGqu5ndBMKU6syv0xvkIS45Q/WgD +9W8ixR+InoriQSlLnKIvWn3hTKfORYOKMI4uqH3Vfizpmr0cOFIXLncZ7IA7BXZ BrXxwVLUF0s2freiD8qdjG+jGen1PX5uA1g7VVHrs2n+oxXtWaP8jJoltZ1TzRq4 LqBnRYjudWAOkhKCb/OaY0zLl6eTk3XEYQ075Ct3oXM++E9uAcf5MPLtnWkyUwX5 mJddX4gHjAHzusPxetC4dH2j/71p1atZ/UaEIsrRGlM40C6rJd8aCbqnS61yTbr9 ieNp9hnEBLorPE9L0NsIn1tgN0M/sruz94k2f3mtefprKzkWCM4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:31:42 2025 by rpki-client