$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: M92Mci26fLPfNK6VSnKyQ6FYdeVM4ygYIxyuNSc/UPg= Subject key identifier: 3C:77:58:6A:DE:F1:93:79:B3:4C:87:8C:3B:92:20:92:E2:EA:A1:27 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 199B1B1D6BB9A5B17D68C3585FBC8C00A3DDEA1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 0506 Signing time: Thu 04 Sep 2025 07:00:02 +0000 Manifest this update: Thu 04 Sep 2025 06:55:02 +0000 Manifest next update: Sun 07 Sep 2025 07:11:02 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) 2: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 3: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 4: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: 2O1CKg/2ksGFhKX1jlfGG/HB51gFNIxekX3th04iOgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 07:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9b:1b:1d:6b:b9:a5:b1:7d:68:c3:58:5f:bc:8c:00:a3:dd:ea:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Sep 4 06:55:02 2025 GMT Not After : Sep 7 07:11:02 2025 GMT Subject: CN=3C77586ADEF19379B34C878C3B922092E2EAA127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:fe:93:2a:d3:a0:dc:63:46:96:7a:16:10: f2:88:5a:46:6e:65:fc:19:97:0a:3c:fb:3f:82:36: ea:d7:99:71:e1:b8:ba:28:bd:b3:a1:ef:3d:46:18: 19:bc:75:b7:35:ba:b9:f4:ba:f4:84:e4:99:a0:ae: b4:c3:4e:74:53:41:44:d9:b4:ba:44:03:e2:49:79: 2b:ab:ef:f2:28:7a:1d:55:40:44:ae:c5:7e:47:a5: 1d:2f:2e:0e:b7:30:53:88:fb:10:c9:12:08:8e:f7: 33:68:3f:c4:28:04:ab:4b:54:92:53:18:74:30:5b: 8f:23:b3:e2:60:0c:27:48:58:42:3a:8d:f7:d7:cd: 6e:69:cb:0c:bc:84:23:80:a6:46:37:bc:e0:6b:cc: 3e:51:e7:06:ed:2e:16:cc:0c:2f:42:89:ff:31:84: a1:0a:80:01:fc:db:97:0d:a3:6b:cf:e2:a8:4a:ee: 25:b7:63:06:12:62:36:77:4a:87:6b:ae:58:9a:32: ec:1b:26:47:43:8a:ea:ba:4f:86:d9:00:a1:da:21: d1:6f:c2:f2:ca:b2:cb:c4:90:f6:24:90:c6:3b:e4: b9:70:01:c6:c0:3b:8d:b9:dd:90:e3:9f:9f:d9:28: fe:b0:19:8d:49:a8:1e:08:d4:05:10:be:b2:19:11: 5c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:58:6A:DE:F1:93:79:B3:4C:87:8C:3B:92:20:92:E2:EA:A1:27 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:92:14:f8:55:69:e6:5c:91:22:85:bd:a1:16:16:38:ec:81: e3:c4:f7:12:b2:bb:d1:14:87:57:47:d4:79:94:b0:52:be:24: 8b:8b:0b:37:0c:f0:9c:f7:3b:95:51:13:2f:5a:59:4e:1c:c6: 72:2a:38:36:eb:b8:58:78:d3:29:35:82:61:88:97:ab:b5:55: ff:dc:a3:c4:75:8e:40:93:d5:ee:d1:32:19:d8:8f:81:a9:7e: ce:45:00:70:4f:ae:fe:cc:29:97:89:9d:4f:6b:6b:04:b5:7a: 3b:56:4e:66:aa:84:70:ce:7d:9e:c9:49:3d:7b:ed:8e:76:c5: 2e:02:44:56:63:7e:ee:2f:04:d5:cc:08:58:94:f7:9f:34:20: d8:e6:4b:fa:fd:e1:f6:4c:8e:36:98:09:0e:c7:4e:57:fd:e2: d8:c7:fd:bf:4b:bd:04:3c:c1:ab:0b:63:0e:a5:6e:82:b5:c2: 0d:48:9f:f5:de:f5:2c:b0:8f:2e:c5:0c:1e:9f:8a:d7:d6:40: 14:61:1c:9f:5f:e6:1b:b1:8c:27:68:29:6b:60:89:c2:84:40: e7:87:da:ef:1f:f0:91:13:24:2e:b8:c3:ed:81:6e:ea:60:5c: e9:45:55:65:76:02:aa:ce:e3:7d:45:7b:55:30:13:d4:ce:fb: 48:18:f0:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZsbHWu5pbF9aMNYX7yMAKPd6hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTA5MDQwNjU1MDJaFw0yNTA5MDcwNzExMDJaMDMxMTAvBgNV BAMTKDNDNzc1ODZBREVGMTkzNzlCMzRDODc4QzNCOTIyMDkyRTJFQUExMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19f6TKtOg3GNGlnoWEPKIWkZu ZfwZlwo8+z+CNurXmXHhuLoovbOh7z1GGBm8dbc1urn0uvSE5JmgrrTDTnRTQUTZ tLpEA+JJeSur7/Ioeh1VQESuxX5HpR0vLg63MFOI+xDJEgiO9zNoP8QoBKtLVJJT GHQwW48js+JgDCdIWEI6jffXzW5pywy8hCOApkY3vOBrzD5R5wbtLhbMDC9Cif8x hKEKgAH825cNo2vP4qhK7iW3YwYSYjZ3SodrrliaMuwbJkdDiuq6T4bZAKHaIdFv wvLKssvEkPYkkMY75LlwAcbAO4253ZDjn5/ZKP6wGY1JqB4I1AUQvrIZEVw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPHdYat7xk3mzTIeMO5IgkuLqoScwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOSFPhVaeZckSKFvaEWFjjsgePE9xKyu9EU h1dH1HmUsFK+JIuLCzcM8Jz3O5VREy9aWU4cxnIqODbruFh40yk1gmGIl6u1Vf/c o8R1jkCT1e7RMhnYj4Gpfs5FAHBPrv7MKZeJnU9rawS1ejtWTmaqhHDOfZ7JST17 7Y52xS4CRFZjfu4vBNXMCFiU9580INjmS/r94fZMjjaYCQ7HTlf94tjH/b9LvQQ8 wasLYw6lboK1wg1In/Xe9Sywjy7FDB6fitfWQBRhHJ9f5huxjCdoKWtgicKEQOeH 2u8f8JETJC64w+2BbupgXOlFVWV2AqrO431Fe1UwE9TO+0gY8NI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:23 2025 by rpki-client