$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: iXpRkkxH/bbA/Ob35lUpBKeGc5EIlmXq7l8sEJULNig= Subject key identifier: D5:1A:40:1A:6D:B5:6A:2A:73:6C:27:C4:DE:7E:B9:B8:D6:5F:86:09 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 62DF36EBABF56D2D9EA6A4FCC429D8D4DF99B337 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 01D5 Signing time: Sat 28 Jun 2025 07:51:35 +0000 Manifest this update: Sat 28 Jun 2025 07:46:35 +0000 Manifest next update: Tue 01 Jul 2025 12:58:35 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) 2: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: q3L1pevl4fRhBVQsuXz5OYWgE8hn0tMRla+FG+nWFb0=) 3: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 4: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:df:36:eb:ab:f5:6d:2d:9e:a6:a4:fc:c4:29:d8:d4:df:99:b3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Jun 28 07:46:35 2025 GMT Not After : Jul 1 12:58:35 2025 GMT Subject: CN=D51A401A6DB56A2A736C27C4DE7EB9B8D65F8609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:8a:11:d5:18:89:cf:9b:59:c0:4b:79:60: d9:a5:1c:c3:98:81:21:79:3b:8f:b6:57:40:db:cf: d3:41:69:3d:7a:f1:df:24:d9:c7:89:fa:35:27:3a: ed:ba:76:a2:5a:0b:12:14:f9:f0:0c:7d:b5:e6:6d: 06:c6:ec:d1:72:a0:0c:eb:a7:47:0c:80:c5:89:a5: 3f:49:c8:5e:3a:20:db:1f:f1:1d:0f:f3:86:30:02: c3:88:79:05:75:c2:d4:64:9a:96:ee:70:a2:d1:9c: 1d:f8:5f:9e:04:b6:2e:e1:e6:0b:5b:16:cd:cf:01: 65:2e:6a:20:8b:72:45:c5:9a:f5:f5:97:e2:ea:f9: 51:7c:b3:ed:ea:8c:6e:06:a7:da:76:c9:0f:7e:2c: 2d:d5:58:ee:6b:4f:a4:eb:19:47:d5:0f:d6:fe:52: 21:3f:13:c7:44:34:af:29:d4:02:f5:d1:02:04:1b: 38:57:d2:39:f2:56:dc:62:5c:84:7e:44:c4:83:67: e0:83:bd:97:d3:ce:3b:d9:31:0d:c8:f5:a2:9c:aa: f7:db:31:12:08:a5:37:aa:59:3b:dd:c4:5c:b1:d8: 0e:0a:46:88:6d:68:1f:d1:3c:98:bf:21:7b:e7:13: a5:28:78:3a:ec:a8:f1:13:e4:77:b6:10:85:58:0d: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1A:40:1A:6D:B5:6A:2A:73:6C:27:C4:DE:7E:B9:B8:D6:5F:86:09 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:21:cb:05:38:b9:6f:a4:9f:9b:8f:1a:44:f8:30:b0:31:3b: b6:ab:f4:13:ec:aa:98:53:61:da:b1:f9:f4:18:ee:fd:8b:84: 2f:3a:71:8b:17:1d:95:0d:dd:45:93:e9:18:d9:0b:82:41:7d: a4:c8:c7:74:44:f7:3a:e8:1d:22:fc:74:ee:b1:a3:e9:29:78: f7:a7:6b:ff:44:b4:d3:73:19:95:75:e3:ce:ec:b2:e6:53:04: 5a:4e:25:a5:55:f0:d1:d2:b8:ea:2a:0e:ee:87:b5:86:61:1d: dd:fa:3e:d3:b4:f4:29:f4:f4:98:3f:72:df:9c:58:a3:e6:c3: 73:bc:72:31:c1:ad:38:e8:6d:c6:70:d1:19:00:ba:95:5d:a0: ee:4e:8b:04:bb:4f:3c:3e:08:ab:89:71:01:f2:9f:e3:96:95: cc:f7:6d:b4:37:97:78:a3:a3:86:f8:f1:cc:a9:ee:8d:5e:97: a1:f9:2f:89:8f:ae:bc:84:dd:b4:70:b2:cf:26:86:e5:d9:01: 9d:39:26:19:5c:8d:fd:23:32:54:cc:76:b3:bc:24:fa:40:35: 10:ba:5f:a7:22:ab:53:64:91:14:04:f3:28:ae:f0:d5:25:19: 1d:ab:c1:f3:2f:8a:7c:a7:4b:61:0b:cc:81:70:ee:99:c4:49: 3f:55:c0:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYt8266v1bS2epqT8xCnY1N+ZszcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA2MjgwNzQ2MzVaFw0yNTA3MDExMjU4MzVaMDMxMTAvBgNV BAMTKEQ1MUE0MDFBNkRCNTZBMkE3MzZDMjdDNERFN0VCOUI4RDY1Rjg2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5YoR1RiJz5tZwEt5YNmlHMOY gSF5O4+2V0Dbz9NBaT168d8k2ceJ+jUnOu26dqJaCxIU+fAMfbXmbQbG7NFyoAzr p0cMgMWJpT9JyF46INsf8R0P84YwAsOIeQV1wtRkmpbucKLRnB34X54Eti7h5gtb Fs3PAWUuaiCLckXFmvX1l+Lq+VF8s+3qjG4Gp9p2yQ9+LC3VWO5rT6TrGUfVD9b+ UiE/E8dENK8p1AL10QIEGzhX0jnyVtxiXIR+RMSDZ+CDvZfTzjvZMQ3I9aKcqvfb MRIIpTeqWTvdxFyx2A4KRohtaB/RPJi/IXvnE6UoeDrsqPET5He2EIVYDWUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1RpAGm21aipzbCfE3n65uNZfhgkwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFghywU4uW+kn5uPGkT4MLAxO7ar9BPsqphT Ydqx+fQY7v2LhC86cYsXHZUN3UWT6RjZC4JBfaTIx3RE9zroHSL8dO6xo+kpePen a/9EtNNzGZV1487ssuZTBFpOJaVV8NHSuOoqDu6HtYZhHd36PtO09Cn09Jg/ct+c WKPmw3O8cjHBrTjobcZw0RkAupVdoO5OiwS7Tzw+CKuJcQHyn+OWlcz3bbQ3l3ij o4b48cyp7o1el6H5L4mPrryE3bRwss8mhuXZAZ05Jhlcjf0jMlTMdrO8JPpANRC6 X6ciq1NkkRQE8yiu8NUlGR2rwfMvinynS2ELzIFw7pnEST9VwAk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:18:35 2025 by rpki-client