$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: QQCTTLHq9fBx1mMk5zm8HAJdsZh4dgmbk02Uko4VMJo= Subject key identifier: 0E:9F:67:D2:C2:2D:D4:AB:15:85:1A:4D:01:3E:05:1B:3D:0D:A8:AC Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 52BA8C60EDB1E5C0C9B1535DA5285268401119CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 04C3 Signing time: Tue 08 Apr 2025 05:50:02 +0000 Manifest this update: Tue 08 Apr 2025 05:45:02 +0000 Manifest next update: Fri 11 Apr 2025 15:46:02 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: +ncF+8DsxAehnxNLvv1l20gTEn/1YKWEnl6rFJLIApA=) 2: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: QCoXBx+apV+wfuLXvmz82kGJwRKwtHTONSMi3sgUIWw=) 3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: qLsMIEaKhWpq1bQAf83UJbdJ8NLzwZWxL7cCtTMq2j8=) 4: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: svtAgr7JYBUtzNyfSdE+KV0Sgk1PqrBBCZ7/LnJ3fFw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ba:8c:60:ed:b1:e5:c0:c9:b1:53:5d:a5:28:52:68:40:11:19:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Apr 8 05:45:02 2025 GMT Not After : Apr 11 15:46:02 2025 GMT Subject: CN=0E9F67D2C22DD4AB15851A4D013E051B3D0DA8AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:fd:1b:9b:23:2f:16:62:d7:95:4a:1d:a4: df:36:70:16:55:ae:b5:fa:4d:59:96:b4:44:0b:0f: 0c:34:8c:a9:ac:f0:d8:94:b5:7f:ff:e0:53:63:f7: 5f:55:b6:3c:a2:ec:cb:ce:9f:cf:ee:22:1d:95:28: ce:a5:b9:74:2f:ad:bc:5d:9b:ca:13:82:3b:76:ab: ee:77:6e:e9:a4:9b:fa:d4:81:e8:e0:0e:3e:94:3f: cf:cb:42:d5:cb:4d:db:69:90:01:f6:e7:44:e8:96: 8a:08:45:aa:da:dc:69:60:99:a9:fb:72:a5:59:d5: f8:43:da:6d:03:fe:25:fa:23:d0:c7:10:ca:6f:8f: dd:29:6d:44:9e:1a:ff:f7:ed:16:82:9b:2d:a9:5f: d6:ba:95:bc:78:ab:57:64:af:65:ea:f5:62:26:60: 65:b9:57:6a:80:71:73:d1:b8:9b:37:83:50:23:fc: 56:f9:28:72:5d:3e:05:e7:4b:17:6e:d9:70:e5:f9: a1:54:7e:70:38:0a:80:1c:92:0f:ec:f9:71:5e:60: 1e:3c:10:e7:9a:6c:52:79:4d:4b:d9:b1:1d:3f:10: d4:71:3f:a9:82:7a:ad:36:60:3a:d3:00:25:e5:d6: 2f:06:29:da:17:84:d5:31:62:6f:a6:b5:a8:af:8a: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:67:D2:C2:2D:D4:AB:15:85:1A:4D:01:3E:05:1B:3D:0D:A8:AC X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:51:78:37:5f:aa:5c:72:8c:1f:b4:cd:de:0c:37:bb:8c:0d: 48:4a:58:2b:cb:5b:4f:23:fe:6e:79:ef:c3:02:17:02:d1:65: b0:f3:78:0d:d7:d6:1f:e8:c8:41:96:8d:f1:27:35:61:b7:6d: 78:94:c9:d9:bf:fd:13:cc:92:32:ab:0b:e6:bc:d8:0b:17:b4: fa:e0:58:c1:02:3e:a0:47:43:3d:55:bf:1f:10:20:8c:1a:ed: 6f:c5:ae:87:54:38:eb:f9:24:9d:53:a6:3f:76:bc:97:fb:ab: 53:cf:8c:a8:d7:21:7e:d9:5b:6a:6a:6c:9f:ce:a4:68:58:b3: c7:c5:b8:02:57:62:fe:48:96:56:a2:a1:02:02:a8:0d:04:d1: c7:8f:71:27:d0:28:b6:6c:e3:64:31:41:87:a0:f8:8f:60:a6: bc:ab:aa:fe:84:ba:64:f3:53:51:b6:50:9c:70:d5:55:a0:55: 8e:b3:86:2f:23:4e:9b:1b:5e:32:c7:71:88:db:36:32:6c:62: 79:27:fe:83:a6:fd:a8:5f:a1:d2:e3:81:51:08:36:f7:eb:42: 9c:2d:d9:82:2e:32:fa:a6:de:05:84:82:71:4a:bf:6f:08:89: cc:07:14:46:ad:2c:bb:a9:99:54:bb:91:81:d1:0b:69:cb:e9: b7:a9:42:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrqMYO2x5cDJsVNdpShSaEARGcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTA0MDgwNTQ1MDJaFw0yNTA0MTExNTQ2MDJaMDMxMTAvBgNV BAMTKDBFOUY2N0QyQzIyREQ0QUIxNTg1MUE0RDAxM0UwNTFCM0QwREE4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOP0bmyMvFmLXlUodpN82cBZV rrX6TVmWtEQLDww0jKms8NiUtX//4FNj919Vtjyi7MvOn8/uIh2VKM6luXQvrbxd m8oTgjt2q+53bumkm/rUgejgDj6UP8/LQtXLTdtpkAH250TolooIRara3Glgman7 cqVZ1fhD2m0D/iX6I9DHEMpvj90pbUSeGv/37RaCmy2pX9a6lbx4q1dkr2Xq9WIm YGW5V2qAcXPRuJs3g1Aj/Fb5KHJdPgXnSxdu2XDl+aFUfnA4CoAckg/s+XFeYB48 EOeabFJ5TUvZsR0/ENRxP6mCeq02YDrTACXl1i8GKdoXhNUxYm+mtaivil09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDp9n0sIt1KsVhRpNAT4FGz0NqKwwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElReDdfqlxyjB+0zd4MN7uMDUhKWCvLW08j /m5578MCFwLRZbDzeA3X1h/oyEGWjfEnNWG3bXiUydm//RPMkjKrC+a82AsXtPrg WMECPqBHQz1Vvx8QIIwa7W/FrodUOOv5JJ1Tpj92vJf7q1PPjKjXIX7ZW2pqbJ/O pGhYs8fFuAJXYv5IllaioQICqA0E0cePcSfQKLZs42QxQYeg+I9gpryrqv6EumTz U1G2UJxw1VWgVY6zhi8jTpsbXjLHcYjbNjJsYnkn/oOm/ahfodLjgVEINvfrQpwt 2YIuMvqm3gWEgnFKv28IicwHFEatLLupmVS7kYHRC2nL6bepQjY= -----END CERTIFICATE-----Generated at Thu Apr 10 07:31:08 2025 by rpki-client