$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: dvxOjWbFNTzfMPX2g74i5dcVNHqHYo0Vj+qgkhj/WYM= Subject key identifier: 9D:D2:51:DE:BA:D8:DB:86:7B:76:63:D8:D2:B4:99:30:DE:5D:92:8B Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 32CA58AEF74C3F3FC875275A770FBCE9B6ED063B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 020F Signing time: Sat 19 Jul 2025 14:30:49 +0000 Manifest this update: Sat 19 Jul 2025 14:25:49 +0000 Manifest next update: Tue 22 Jul 2025 19:14:49 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: icSdiXDA+Pb9gYiECXYbyCf9Y5iRoVMWd1shIRF73z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ca:58:ae:f7:4c:3f:3f:c8:75:27:5a:77:0f:bc:e9:b6:ed:06:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Jul 19 14:25:49 2025 GMT Not After : Jul 22 19:14:49 2025 GMT Subject: CN=9DD251DEBAD8DB867B7663D8D2B49930DE5D928B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:ce:28:5c:af:fc:de:a9:c2:8f:d1:64:24: 6b:13:57:83:fb:80:fa:41:cc:47:bb:40:ad:9a:a7: 1f:d6:37:34:e7:79:50:f4:a6:a0:fb:12:3c:1b:80: 3a:6b:45:95:cc:5d:e9:1c:58:85:d0:6e:dc:55:a6: eb:9a:5d:13:d9:2d:f0:63:0b:d0:c1:eb:56:9e:6c: e0:bd:54:42:7b:d7:13:06:7e:f0:b6:ae:84:46:9c: 9a:b6:27:00:41:a4:65:17:a9:3c:07:bc:42:5d:b1: a3:dd:9d:9b:07:74:fb:f9:c0:fb:04:db:97:f1:18: 65:4b:94:04:2c:02:d3:44:fd:3e:3d:e5:49:f2:9d: 27:5b:2f:d8:d1:d5:77:60:28:5e:f8:07:76:85:7a: d3:71:b3:a6:b5:47:7f:e2:08:26:ce:e0:a1:6a:cd: ec:ef:5d:e7:9c:3c:6d:d7:67:87:cf:c8:6b:59:7a: 84:72:05:c8:e1:54:4d:a2:a2:7d:1b:cd:b9:33:7d: a1:1d:56:53:05:c3:fd:5b:1c:a1:9a:69:e8:c0:7e: 68:a8:2a:37:d2:97:2b:d1:a6:2d:ad:09:20:5e:0b: 97:ca:b4:0c:ff:3d:ce:c2:8d:e5:b3:66:2b:4e:e0: fb:5b:57:cc:8a:d6:b9:8c:37:11:6b:b4:37:23:73: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D2:51:DE:BA:D8:DB:86:7B:76:63:D8:D2:B4:99:30:DE:5D:92:8B X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6e:cc:7c:d9:09:d8:77:78:3f:2d:08:2f:d5:59:3b:b8:2b: fd:24:0c:1d:57:32:7b:15:ec:28:5c:a4:22:46:ab:e5:2a:b3: 67:29:55:81:38:e4:23:20:c2:91:b7:6f:cc:c2:70:5d:a1:c9: 13:b8:5e:87:c3:44:3a:1c:11:d3:60:a3:ca:d5:4c:45:8c:2f: 6f:26:9e:ed:cf:83:c4:71:e4:a0:a6:ee:b0:b5:a2:eb:cb:60: 9b:e2:87:0e:26:07:0a:10:35:19:d2:74:31:13:87:a2:52:92: ce:dc:d4:c8:0e:b2:8d:cc:1c:f3:0a:b3:c2:0a:5f:fe:54:5a: 14:80:ee:4a:e4:32:41:2d:34:72:df:4a:6d:e3:48:45:fd:9d: 3e:10:0f:61:e4:64:bc:92:02:c8:92:c7:10:f0:55:de:87:96: f3:de:ec:9a:26:fb:d6:14:53:15:dd:0d:21:a0:6e:7c:e1:0c: 23:b9:2d:ad:66:91:79:e4:6d:ef:8d:49:9d:de:d6:75:ec:a1: e9:d9:38:90:6f:43:20:7e:e7:be:64:1b:0b:d8:bd:2a:39:f1: b8:e9:c9:b3:de:ea:d9:d7:30:57:b8:62:08:4d:b2:e5:46:93: c9:6b:ab:a7:cc:d0:92:07:51:b9:7d:0d:f6:72:38:b6:b2:43: fd:d4:b0:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMspYrvdMPz/IdSdadw+86bbtBjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTA3MTkxNDI1NDlaFw0yNTA3MjIxOTE0NDlaMDMxMTAvBgNV BAMTKDlERDI1MURFQkFEOERCODY3Qjc2NjNEOEQyQjQ5OTMwREU1RDkyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7284oXK/83qnCj9FkJGsTV4P7 gPpBzEe7QK2apx/WNzTneVD0pqD7EjwbgDprRZXMXekcWIXQbtxVpuuaXRPZLfBj C9DB61aebOC9VEJ71xMGfvC2roRGnJq2JwBBpGUXqTwHvEJdsaPdnZsHdPv5wPsE 25fxGGVLlAQsAtNE/T495UnynSdbL9jR1XdgKF74B3aFetNxs6a1R3/iCCbO4KFq zezvXeecPG3XZ4fPyGtZeoRyBcjhVE2ion0bzbkzfaEdVlMFw/1bHKGaaejAfmio KjfSlyvRpi2tCSBeC5fKtAz/Pc7CjeWzZitO4PtbV8yK1rmMNxFrtDcjcwFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUndJR3rrY24Z7dmPY0rSZMN5dkoswHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxuzHzZCdh3eD8tCC/VWTu4K/0kDB1XMnsV 7ChcpCJGq+Uqs2cpVYE45CMgwpG3b8zCcF2hyRO4XofDRDocEdNgo8rVTEWML28m nu3Pg8Rx5KCm7rC1ouvLYJvihw4mBwoQNRnSdDETh6JSks7c1MgOso3MHPMKs8IK X/5UWhSA7krkMkEtNHLfSm3jSEX9nT4QD2HkZLySAsiSxxDwVd6HlvPe7Jom+9YU UxXdDSGgbnzhDCO5La1mkXnkbe+NSZ3e1nXsoenZOJBvQyB+575kGwvYvSo58bjp ybPe6tnXMFe4YghNsuVGk8lrq6fM0JIHUbl9DfZyOLayQ/3UsPo= -----END CERTIFICATE-----Generated at Sun Jul 20 21:27:22 2025 by rpki-client