$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: KKSqbUvKJe/sgi4yTRp/2B7lHi4dlRH2N6PaDyevny0= Subject key identifier: BC:CD:82:3A:10:76:3E:24:53:AD:64:4B:64:27:30:5A:3D:47:36:92 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 2C7BECC1D6041F1E31A1EABB97CEEB8BDC781EB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: 8D Signing time: Sat 19 Jul 2025 03:30:39 +0000 Manifest this update: Sat 19 Jul 2025 03:25:39 +0000 Manifest next update: Tue 22 Jul 2025 14:47:39 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: wrS39gyOXFjAkE+O6Fo9Q1v6QmUtxMIV8VrJ/CYou1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7b:ec:c1:d6:04:1f:1e:31:a1:ea:bb:97:ce:eb:8b:dc:78:1e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Jul 19 03:25:39 2025 GMT Not After : Jul 22 14:47:39 2025 GMT Subject: CN=BCCD823A10763E2453AD644B6427305A3D473692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:b7:4a:67:41:f1:d8:5c:07:4f:c6:7a:08: cf:a0:71:b6:6d:03:e2:45:2e:f0:2d:66:c9:c1:87: 63:cc:2a:58:9f:5b:fa:0e:23:42:e5:4d:0d:17:3d: 3b:4a:14:4f:18:7e:75:56:c5:13:86:d0:a9:02:8a: 76:05:06:35:df:d6:dd:ae:07:1a:86:08:af:74:b3: 39:29:0c:b7:14:96:53:a9:b4:1c:2b:9c:3a:a6:ac: c1:2c:97:10:a3:21:29:96:1f:18:92:75:d0:b7:f2: e0:bc:33:0e:a0:f8:23:f9:4d:09:df:6f:e0:87:6a: c5:9c:24:0a:f6:11:e1:81:46:7b:0c:fc:8e:1a:57: 83:d5:16:22:f7:16:a1:c7:e7:7f:c2:d6:c7:14:2c: 9f:1c:bc:f7:65:6d:4d:4a:4f:54:95:b3:1d:6a:bd: ca:20:45:7b:d3:96:19:9c:3c:7b:69:7f:db:fc:8f: 3a:a3:89:0a:27:c8:08:72:41:02:1e:92:74:55:c5: 96:1f:af:95:f1:c7:87:78:d0:a9:91:54:6f:e7:42: 3b:21:41:2d:38:2b:2f:65:29:3b:a9:21:48:8c:51: 52:0a:68:e7:c4:de:fa:1b:2d:e8:87:51:1a:c6:15: 5e:79:5a:0e:68:ca:1d:03:f2:0b:e1:74:f5:5e:56: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:82:3A:10:76:3E:24:53:AD:64:4B:64:27:30:5A:3D:47:36:92 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:2a:a7:fe:48:18:80:da:13:85:cd:18:50:8f:86:b5:b7:c9: 37:e4:4f:cf:57:5b:ad:76:44:7a:26:04:7a:ce:21:80:93:07: e0:52:c5:79:8b:b5:13:bd:72:5f:24:ff:29:99:f7:92:8a:dd: ca:70:c7:58:47:44:4e:f8:6a:40:1b:b7:d1:00:35:87:80:6a: 64:89:76:50:2a:46:88:1f:9b:e5:c9:40:08:21:a9:08:51:2d: 6d:b6:f5:84:b8:0e:43:e4:ae:d0:6c:7c:60:14:b6:31:d7:fd: 97:1c:bd:d0:cd:ec:f5:0d:0b:79:4c:fd:7a:71:21:ce:31:74: b8:72:53:b1:33:8a:a8:06:36:8c:37:87:cc:f6:1d:7f:cc:55: 8a:78:e4:1b:de:02:45:82:10:1a:00:37:95:1a:61:47:5f:3c: 63:f2:13:29:c6:95:1d:12:5e:5e:32:0e:bf:17:50:50:b6:50: 78:5b:05:11:39:58:58:79:08:c1:79:3d:2e:ba:56:cf:65:41: 66:26:5f:5c:19:69:7f:38:48:57:e1:62:fe:42:b9:0e:94:90: 1e:66:a6:8f:34:00:83:74:71:91:f9:29:40:db:aa:39:16:06: f7:8d:3f:2d:b0:e1:ec:00:19:7d:12:e6:b2:28:90:4f:1e:4d: 15:b2:7e:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHvswdYEHx4xoeq7l87ri9x4HrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA3MTkwMzI1MzlaFw0yNTA3MjIxNDQ3MzlaMDMxMTAvBgNV BAMTKEJDQ0Q4MjNBMTA3NjNFMjQ1M0FENjQ0QjY0MjczMDVBM0Q0NzM2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLdLdKZ0Hx2FwHT8Z6CM+gcbZt A+JFLvAtZsnBh2PMKlifW/oOI0LlTQ0XPTtKFE8YfnVWxROG0KkCinYFBjXf1t2u BxqGCK90szkpDLcUllOptBwrnDqmrMEslxCjISmWHxiSddC38uC8Mw6g+CP5TQnf b+CHasWcJAr2EeGBRnsM/I4aV4PVFiL3FqHH53/C1scULJ8cvPdlbU1KT1SVsx1q vcogRXvTlhmcPHtpf9v8jzqjiQonyAhyQQIeknRVxZYfr5Xxx4d40KmRVG/nQjsh QS04Ky9lKTupIUiMUVIKaOfE3vobLeiHURrGFV55Wg5oyh0D8gvhdPVeVkJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvM2COhB2PiRTrWRLZCcwWj1HNpIwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQqp/5IGIDaE4XNGFCPhrW3yTfkT89XW612 RHomBHrOIYCTB+BSxXmLtRO9cl8k/ymZ95KK3cpwx1hHRE74akAbt9EANYeAamSJ dlAqRogfm+XJQAghqQhRLW229YS4DkPkrtBsfGAUtjHX/ZccvdDN7PUNC3lM/Xpx Ic4xdLhyU7EziqgGNow3h8z2HX/MVYp45BveAkWCEBoAN5UaYUdfPGPyEynGlR0S Xl4yDr8XUFC2UHhbBRE5WFh5CMF5PS66Vs9lQWYmX1wZaX84SFfhYv5CuQ6UkB5m po80AIN0cZH5KUDbqjkWBveNPy2w4ewAGX0S5rIokE8eTRWyft0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:24 2025 by rpki-client