$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json) Hash identifier: hMhY55nmuHnJ4EtNeHEtoi2krWC3a9qWWmKMl6P/ZPE= Subject key identifier: 9D:94:AB:28:40:29:C4:53:BC:37:1E:1B:BB:74:4A:59:04:8B:94:D0 Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 0A0DBD05D0AE5AFE85017F720ED8ADBDDD6950EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft Manifest number: FB Signing time: Sun 20 Jul 2025 20:50:47 +0000 Manifest this update: Sun 20 Jul 2025 20:45:47 +0000 Manifest next update: Thu 24 Jul 2025 05:05:47 +0000 Files and hashes: 1: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: 0lAqF2YCCu8hBoO36P3pXTfszCRwlRHUwQyhfZKieRU=) 2: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: KcXrCsINoGqwDZy8oVgq/7RzqcfurJPdnVY/rF9H3tw=) 3: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: N74dfLFvl7eNsa07RKUrhClkbMWl/o482r/Gpd8s/i0=) 4: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: /KzEuAJHbJBmL5pgo4HQUQfG2vh0jJ3hOFNjN0Pvcz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0d:bd:05:d0:ae:5a:fe:85:01:7f:72:0e:d8:ad:bd:dd:69:50:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Jul 20 20:45:47 2025 GMT Not After : Jul 24 05:05:47 2025 GMT Subject: CN=9D94AB284029C453BC371E1BBB744A59048B94D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:f2:45:92:10:ef:42:66:26:12:9d:58:89: c9:4b:35:e6:c7:53:c7:06:2d:a5:c2:2f:a9:2f:54: 54:7a:31:a7:5b:ac:b9:3a:92:90:2c:ad:7c:29:69: 7c:50:99:15:be:a7:76:83:f8:fd:3b:6e:c0:fb:50: fc:a5:c7:d8:65:18:b3:38:c9:27:ec:ef:2a:2c:3d: eb:43:0c:e2:27:2b:cd:a8:b2:ec:0d:a0:2c:5e:95: 44:7d:f9:11:06:08:81:c7:54:0d:82:8a:13:93:2d: e4:b0:45:d6:bb:67:e8:2f:06:63:23:52:b6:03:8a: 9e:eb:13:2c:a0:35:95:13:bc:ee:b0:c8:ce:b9:bd: 00:29:fb:e8:03:d4:34:23:db:45:31:98:09:41:c2: 4d:88:0f:31:69:3e:d2:f1:42:55:f0:76:de:89:ec: fe:ed:30:39:2d:22:03:bf:f7:40:6d:b7:3f:d3:d0: 0f:ae:4c:31:a7:34:f2:18:88:dd:5b:68:28:dd:6f: a7:bb:45:4d:8b:00:8b:0e:9c:91:99:b6:eb:4d:01: fd:d3:95:c9:4f:b2:c3:00:df:6c:b6:22:2f:fb:e6: 80:0b:17:c3:c3:65:d1:24:1a:84:18:bd:f6:01:bc: 65:15:94:cd:05:28:3e:33:63:c4:3e:36:64:78:22: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:AB:28:40:29:C4:53:BC:37:1E:1B:BB:74:4A:59:04:8B:94:D0 X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f7:15:63:fb:07:a1:40:dc:ae:70:48:59:0c:d0:0b:8c:d3: 2d:0e:36:bc:33:a6:77:23:b8:c6:50:f1:b3:74:a1:03:3a:04: 2f:4f:cc:32:80:32:ff:1d:9a:b4:f8:7c:b9:44:59:02:c6:f7: ed:30:59:da:99:90:a9:a6:40:08:d9:da:5e:69:b0:eb:ec:fe: 5f:9c:c5:87:37:f1:e6:29:ad:c9:06:82:b9:bf:9b:79:59:d7: bb:f0:2e:26:f2:fe:9b:9f:15:c2:83:63:09:a9:00:2b:24:c4: 66:0c:5f:e3:b2:39:ce:b9:47:56:fb:8e:a5:0c:7a:2d:5e:0e: b1:e2:0c:73:e3:19:3e:86:3a:36:9c:5d:3a:c5:c5:46:5b:a1: 9e:4f:08:0b:30:ef:79:34:06:43:d4:e9:81:a3:ea:08:f3:6e: 25:ae:d1:dc:36:3c:3a:4f:7e:5f:b4:03:15:8e:c9:1a:86:71: 8b:b5:b1:3b:14:96:82:f5:04:10:5c:df:1c:80:1b:07:af:f2: ab:36:94:cf:58:b2:13:eb:93:36:36:21:67:63:25:ca:9a:fb: 3c:88:1d:e4:e6:e2:dc:04:4f:4b:08:03:16:17:b9:46:de:2b: e7:a7:4c:23:60:68:95:d5:6a:e2:22:1f:14:85:cd:53:bb:ff: 9e:82:b7:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCg29BdCuWv6FAX9yDtitvd1pUO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNTA3MjAyMDQ1NDdaFw0yNTA3MjQwNTA1NDdaMDMxMTAvBgNV BAMTKDlEOTRBQjI4NDAyOUM0NTNCQzM3MUUxQkJCNzQ0QTU5MDQ4Qjk0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjfJFkhDvQmYmEp1YiclLNebH U8cGLaXCL6kvVFR6MadbrLk6kpAsrXwpaXxQmRW+p3aD+P07bsD7UPylx9hlGLM4 ySfs7yosPetDDOInK82osuwNoCxelUR9+REGCIHHVA2CihOTLeSwRda7Z+gvBmMj UrYDip7rEyygNZUTvO6wyM65vQAp++gD1DQj20UxmAlBwk2IDzFpPtLxQlXwdt6J 7P7tMDktIgO/90Bttz/T0A+uTDGnNPIYiN1baCjdb6e7RU2LAIsOnJGZtutNAf3T lclPssMA32y2Ii/75oALF8PDZdEkGoQYvfYBvGUVlM0FKD4zY8Q+NmR4IgN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZSrKEApxFO8Nx4bu3RKWQSLlNAwHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/3FWP7B6FA3K5wSFkM0AuM0y0ONrwzpncj uMZQ8bN0oQM6BC9PzDKAMv8dmrT4fLlEWQLG9+0wWdqZkKmmQAjZ2l5psOvs/l+c xYc38eYprckGgrm/m3lZ17vwLiby/pufFcKDYwmpACskxGYMX+OyOc65R1b7jqUM ei1eDrHiDHPjGT6GOjacXTrFxUZboZ5PCAsw73k0BkPU6YGj6gjzbiWu0dw2PDpP fl+0AxWOyRqGcYu1sTsUloL1BBBc3xyAGwev8qs2lM9YshPrkzY2IWdjJcqa+zyI HeTm4twET0sIAxYXuUbeK+enTCNgaJXVauIiHxSFzVO7/56Ct8o= -----END CERTIFICATE-----Generated at Mon Jul 21 08:35:54 2025 by rpki-client