$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: tzp/9CLzzegAUwnvX+7Uj9dBgbz6s3/UI50kZi0GWNA= Subject key identifier: BD:82:1B:DF:45:92:E5:13:2B:0D:06:C5:22:82:97:83:7C:B1:F9:1B Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 68472667A099395640D8E7D636A57659B539903E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 0525 Signing time: Thu 13 Nov 2025 03:20:02 +0000 Manifest this update: Thu 13 Nov 2025 03:15:02 +0000 Manifest next update: Sun 16 Nov 2025 13:36:02 +0000 Files and hashes: 1: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 2: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: AWM8/rnDNyGvl4GZJAZaqTpTtYBSb1Wfn2kLPGKZHsU=) 3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) 4: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Nov 2025 11:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:47:26:67:a0:99:39:56:40:d8:e7:d6:36:a5:76:59:b5:39:90:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Nov 13 03:15:02 2025 GMT Not After : Nov 16 13:36:02 2025 GMT Subject: CN=BD821BDF4592E5132B0D06C5228297837CB1F91B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:6b:e9:33:67:de:d1:b5:8e:b2:43:5b:49: 5d:f5:36:b0:ae:45:13:2f:c7:6e:42:0a:7e:16:28: ef:9b:f1:df:3f:0d:af:c0:a8:82:04:c9:97:62:b1: 71:a3:b4:25:e3:9e:3f:c7:44:25:42:24:ad:6c:fc: 22:db:f6:9e:93:6b:44:74:3d:57:ee:6d:4c:da:e1: 23:e2:f6:c1:2f:43:2b:1e:39:08:0e:25:bb:2e:f7: db:0e:5b:a5:a2:54:cf:84:60:a6:0a:76:5f:12:18: ce:23:8f:34:14:8f:46:25:10:ba:e2:47:3d:60:99: d4:8d:7b:16:2a:8f:15:af:a1:84:bc:b3:8b:71:7a: 2f:a3:37:2b:17:35:59:54:89:1c:0f:bf:c4:bd:d7: 1c:3f:ac:b5:f4:41:83:12:6e:26:19:4e:f1:c3:d3: 27:fc:be:ce:c1:d2:4a:28:0b:0a:89:54:64:7d:62: 91:0d:2d:12:eb:b3:f0:d3:6b:67:3b:f8:cd:a1:00: ec:53:56:43:5e:9a:fd:dd:b7:9a:c0:53:45:cd:cc: bc:f9:a7:0b:97:53:b6:7f:4d:b7:65:c6:84:58:33: 8e:44:0d:a3:ce:28:6e:90:52:06:f1:44:18:7d:74: d7:af:ed:e0:3a:7b:c2:7b:ad:ea:ac:2f:fc:4b:e2: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:82:1B:DF:45:92:E5:13:2B:0D:06:C5:22:82:97:83:7C:B1:F9:1B X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f5:dd:6e:56:78:4b:cb:4b:e5:42:f2:6b:1a:4f:c2:0e:28: 6c:f4:ab:66:0e:80:61:7a:7a:33:17:44:d7:3c:15:34:3c:d9: ef:9a:ec:4b:91:80:d4:12:b3:af:6b:c7:03:0b:fc:0d:06:02: 98:f1:de:29:93:28:5c:d1:4e:e2:be:61:b7:a9:ae:ba:93:90: b1:85:f9:c5:88:24:d9:db:6a:c4:1d:a4:ca:0b:7d:f6:37:40: 98:93:89:00:0f:71:fb:42:75:4d:79:12:ba:14:d0:32:36:a1: 04:41:fe:b0:9f:d6:ea:d6:81:01:ae:a6:ba:ea:af:48:fb:20: cc:02:b0:f7:b1:5e:b0:09:af:3a:77:b8:94:37:53:2b:3d:86: 15:f1:a1:05:b1:bb:46:0c:fa:b4:58:f2:8d:9d:6f:61:71:30: da:b0:a6:0f:e9:ca:1c:07:5d:bb:0c:4a:f6:51:d6:01:62:07: b9:dc:c1:e1:f4:e3:ae:93:2c:86:00:f2:2d:53:d7:e8:5d:6d: 13:e4:77:43:80:2b:7c:20:6b:b3:e8:ab:82:6f:1e:d7:83:a8: 2b:11:04:a0:9e:36:bf:67:83:77:81:45:bf:b4:5e:f7:c6:91: 2d:23:f2:a4:ff:a1:1c:56:4b:57:7d:4a:5f:c3:35:f5:f8:67: 6a:f6:13:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaEcmZ6CZOVZA2OfWNqV2WbU5kD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTExMTMwMzE1MDJaFw0yNTExMTYxMzM2MDJaMDMxMTAvBgNV BAMTKEJEODIxQkRGNDU5MkU1MTMyQjBEMDZDNTIyODI5NzgzN0NCMUY5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQmvpM2fe0bWOskNbSV31NrCu RRMvx25CCn4WKO+b8d8/Da/AqIIEyZdisXGjtCXjnj/HRCVCJK1s/CLb9p6Ta0R0 PVfubUza4SPi9sEvQyseOQgOJbsu99sOW6WiVM+EYKYKdl8SGM4jjzQUj0YlELri Rz1gmdSNexYqjxWvoYS8s4txei+jNysXNVlUiRwPv8S91xw/rLX0QYMSbiYZTvHD 0yf8vs7B0kooCwqJVGR9YpENLRLrs/DTa2c7+M2hAOxTVkNemv3dt5rAU0XNzLz5 pwuXU7Z/TbdlxoRYM45EDaPOKG6QUgbxRBh9dNev7eA6e8J7reqsL/xL4mWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvYIb30WS5RMrDQbFIoKXg3yx+RswHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKX13W5WeEvLS+VC8msaT8IOKGz0q2YOgGF6 ejMXRNc8FTQ82e+a7EuRgNQSs69rxwML/A0GApjx3imTKFzRTuK+YbeprrqTkLGF +cWIJNnbasQdpMoLffY3QJiTiQAPcftCdU15EroU0DI2oQRB/rCf1urWgQGuprrq r0j7IMwCsPexXrAJrzp3uJQ3Uys9hhXxoQWxu0YM+rRY8o2db2FxMNqwpg/pyhwH XbsMSvZR1gFiB7ncweH0466TLIYA8i1T1+hdbRPkd0OAK3wga7Poq4JvHteDqCsR BKCeNr9ng3eBRb+0XvfGkS0j8qT/oRxWS1d9Sl/DNfX4Z2r2E3A= -----END CERTIFICATE-----Generated at Thu Nov 13 09:29:15 2025 by rpki-client