$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: D9DsfRrl7aV9IN+DjoO/P+p0IEuo71hP/Ct2WV8h5Cw= Subject key identifier: DB:F9:D5:3C:16:9B:F1:70:C4:86:11:87:FD:1A:9C:3B:F8:2B:49:EC Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 75D3C6ACB33F8C6909AAC18EEB80834FFD2BA6F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 04F1 Signing time: Sat 19 Jul 2025 12:20:02 +0000 Manifest this update: Sat 19 Jul 2025 12:15:02 +0000 Manifest next update: Tue 22 Jul 2025 18:14:02 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 2: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) 4: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: Nv0IJ2qiOgVpnWDrsrpoDbrdRdLDcGY4wwl55a2imgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d3:c6:ac:b3:3f:8c:69:09:aa:c1:8e:eb:80:83:4f:fd:2b:a6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Jul 19 12:15:02 2025 GMT Not After : Jul 22 18:14:02 2025 GMT Subject: CN=DBF9D53C169BF170C4861187FD1A9C3BF82B49EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:77:ca:20:57:8b:6f:f3:98:01:4a:80:c1: 86:dc:48:35:d1:e9:a0:af:58:3f:a2:fa:d8:bb:54: 12:43:7a:65:a0:08:b9:8a:58:69:aa:58:50:3a:cf: 97:da:18:50:89:6c:27:07:28:7e:e5:e3:02:9d:a8: a2:ff:70:5b:59:d1:19:2a:b3:2a:38:28:2e:f1:04: cb:c4:48:2f:4a:59:65:fd:6c:44:57:c4:67:29:f0: 84:50:96:fd:bb:dc:a6:b4:3d:fd:26:a6:8c:88:ac: cc:1b:ae:97:fd:0b:3e:57:c1:d0:aa:9f:d4:71:a9: b2:03:55:21:35:1d:c7:e5:b3:51:d5:04:df:8b:48: 95:c6:e9:28:d6:f9:54:af:fc:e0:a5:8c:01:06:da: 6e:b7:ad:07:86:a2:02:6b:6f:1d:06:d3:d2:db:69: 67:20:74:73:fc:cd:29:fc:dd:2e:18:09:10:7a:fb: 1c:cd:c0:ad:5e:9b:ea:01:d8:bb:16:e9:04:0b:c7: 38:f5:aa:70:a2:44:69:df:59:ff:24:32:2a:3d:bf: f3:df:a8:6a:1f:5c:1e:41:3c:8d:0f:cb:34:df:7a: a3:e6:1d:15:a1:49:2f:46:ca:4e:3d:3a:7d:35:1a: a0:ca:92:69:2c:24:2b:d0:93:22:ce:5b:b1:89:09: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F9:D5:3C:16:9B:F1:70:C4:86:11:87:FD:1A:9C:3B:F8:2B:49:EC X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8c:ca:c5:0a:26:43:c1:ba:b4:bd:a0:ab:85:3d:b6:3d:7d: 0a:6e:65:21:43:27:14:27:9e:b5:f3:7b:e8:b6:ed:50:3b:64: db:8d:04:3e:53:39:3e:2f:4b:94:a3:5c:5b:cd:6d:a1:2e:65: e7:44:f4:aa:fa:44:8b:76:c0:07:4d:07:1a:43:c2:88:c5:3a: 10:9f:c8:c8:da:f0:86:56:c7:1c:88:5c:ad:a8:04:8a:08:5e: 8e:72:81:5e:5f:e9:bd:5f:33:92:4f:fa:3c:56:34:62:08:cc: 09:6e:49:95:a6:9a:da:88:c6:8b:d8:c8:96:5e:06:81:38:de: cf:93:1f:03:78:a4:85:78:0f:37:0b:0c:f5:5b:aa:95:d2:8d: f3:25:20:08:f5:89:4a:c0:5e:cc:57:76:12:31:bb:0e:c5:65: ce:24:0a:f2:70:87:3c:51:3a:ea:ab:b7:5e:d9:e0:41:36:48: 93:23:57:5d:66:09:4c:bd:a3:e7:3a:03:4f:ef:00:a3:c5:b4: 99:d3:93:a5:f7:ae:83:df:9d:cf:46:81:2b:c3:03:3c:02:3b: bf:19:fe:8f:58:b3:6a:3c:0f:65:ac:28:9e:88:c5:d7:88:34: f6:2d:e8:25:e4:1a:5b:45:b5:df:a8:99:4a:21:01:8a:e1:a9: 2a:3f:38:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddPGrLM/jGkJqsGO64CDT/0rpvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTA3MTkxMjE1MDJaFw0yNTA3MjIxODE0MDJaMDMxMTAvBgNV BAMTKERCRjlENTNDMTY5QkYxNzBDNDg2MTE4N0ZEMUE5QzNCRjgyQjQ5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeXfKIFeLb/OYAUqAwYbcSDXR 6aCvWD+i+ti7VBJDemWgCLmKWGmqWFA6z5faGFCJbCcHKH7l4wKdqKL/cFtZ0Rkq syo4KC7xBMvESC9KWWX9bERXxGcp8IRQlv273Ka0Pf0mpoyIrMwbrpf9Cz5XwdCq n9RxqbIDVSE1Hcfls1HVBN+LSJXG6SjW+VSv/OCljAEG2m63rQeGogJrbx0G09Lb aWcgdHP8zSn83S4YCRB6+xzNwK1em+oB2LsW6QQLxzj1qnCiRGnfWf8kMio9v/Pf qGofXB5BPI0PyzTfeqPmHRWhSS9Gyk49On01GqDKkmksJCvQkyLOW7GJCRYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/nVPBab8XDEhhGH/RqcO/grSewwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2MysUKJkPBurS9oKuFPbY9fQpuZSFDJxQn nrXze+i27VA7ZNuNBD5TOT4vS5SjXFvNbaEuZedE9Kr6RIt2wAdNBxpDwojFOhCf yMja8IZWxxyIXK2oBIoIXo5ygV5f6b1fM5JP+jxWNGIIzAluSZWmmtqIxovYyJZe BoE43s+THwN4pIV4DzcLDPVbqpXSjfMlIAj1iUrAXsxXdhIxuw7FZc4kCvJwhzxR Ouqrt17Z4EE2SJMjV11mCUy9o+c6A0/vAKPFtJnTk6X3roPfnc9GgSvDAzwCO78Z /o9Ys2o8D2WsKJ6IxdeINPYt6CXkGltFtd+omUohAYrhqSo/OJs= -----END CERTIFICATE-----Generated at Mon Jul 21 08:38:00 2025 by rpki-client