$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: ph7CZZwneESo4nQqUleCagOiV6iWbDY1Tg1HhsiSQNQ= Subject key identifier: D5:B1:88:75:5C:A5:90:21:BC:B8:72:75:99:74:EC:6C:5A:5A:19:FC Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 1677EEC1691B1C6D3F4132E296BE230F4CB2EFD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0225 Signing time: Sat 06 Sep 2025 18:40:51 +0000 Manifest this update: Sat 06 Sep 2025 18:35:51 +0000 Manifest next update: Tue 09 Sep 2025 20:49:51 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: Q4AtmphmF8P4MMFD6nBEDvnEOodux6ANG+qz/IDy/fU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:77:ee:c1:69:1b:1c:6d:3f:41:32:e2:96:be:23:0f:4c:b2:ef:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Sep 6 18:35:51 2025 GMT Not After : Sep 9 20:49:51 2025 GMT Subject: CN=D5B188755CA59021BCB872759974EC6C5A5A19FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:2d:d7:66:c9:5f:6b:e2:01:5d:3b:fd:c5: 34:2c:1f:8a:01:31:ec:f2:fe:9b:c9:f8:c7:ce:f5: 39:6e:0d:ee:31:38:d4:e7:d3:bb:10:9c:0c:61:31: 18:77:1b:f8:2a:09:2c:33:ba:19:ba:83:0b:dc:e2: fe:39:70:06:a3:70:2f:99:b3:9e:f3:62:da:f3:cd: c8:ea:e8:a0:ea:18:5c:36:af:8f:9d:0b:5a:33:9d: 61:2c:51:66:c8:6f:86:f3:8f:35:85:ae:91:cb:3b: 41:54:39:42:63:9b:5d:10:35:92:14:5b:96:26:8b: dc:2f:1d:e9:1d:a5:07:cc:ae:6d:c7:b2:0e:15:bd: 52:89:2a:d5:ae:9c:66:72:2f:9b:ee:c0:9f:49:bb: 7e:1c:15:00:0c:f3:e0:d0:94:12:fc:29:8d:84:31: 1f:6a:d5:4e:a5:59:ba:e5:99:e5:6b:26:05:69:2d: 8a:2f:62:2a:03:f6:85:13:45:dc:2a:b8:55:58:a9: ab:56:c4:e4:7f:02:80:3a:7e:db:2f:89:34:a5:08: 3d:d1:a0:e3:5a:6c:1c:8a:ef:b0:70:70:1f:38:d1: 84:dd:9d:84:b7:23:3f:2a:6f:9e:e9:ad:56:e7:76: 46:30:08:3e:5e:be:b1:66:0d:09:e0:e2:0f:eb:00: ad:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:88:75:5C:A5:90:21:BC:B8:72:75:99:74:EC:6C:5A:5A:19:FC X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9e:8a:13:16:44:52:0d:5b:56:23:63:0e:f0:f6:36:50:30: 34:ac:d8:d7:4e:79:ee:dd:aa:c7:23:32:5c:c2:4f:b8:5a:88: 64:43:eb:0c:ad:c7:f3:af:05:70:e5:0d:0e:9c:01:c1:df:bb: 6e:a8:be:26:9e:11:f7:38:09:8a:63:be:49:b3:ac:72:a2:90: 43:dc:37:f7:d3:a7:7b:86:0b:78:0e:8a:36:95:d3:5b:56:4d: 88:e9:2f:ca:a0:5d:84:f0:7b:6f:d1:5d:bd:e4:29:3d:5f:b2: e8:94:e6:68:bb:1b:fa:53:a9:39:46:25:b7:87:aa:27:e4:42: a4:50:bb:84:9c:9b:56:d5:4f:91:0e:09:8f:5d:28:4b:14:c6: 1f:9e:cb:64:cc:34:0f:ff:42:e3:4e:7b:f1:e4:27:0f:d0:d7: 97:ca:1c:9c:24:59:b2:bc:63:3c:10:ea:49:24:1d:17:8f:5f: a8:bf:4b:35:0a:4d:1d:ef:ac:af:9a:df:6c:da:fb:60:57:3f: aa:31:d7:82:d2:f2:53:95:01:6a:68:5e:ed:3e:ff:b0:3b:7e: a0:a4:f5:66:e2:ce:48:f7:55:ca:bb:03:9e:be:eb:8c:f3:e9: 00:f2:89:f9:3a:3a:5f:6f:de:06:1d:52:90:d5:53:a0:06:ab: 23:ac:a4:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnfuwWkbHG0/QTLilr4jD0yy79EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTA5MDYxODM1NTFaFw0yNTA5MDkyMDQ5NTFaMDMxMTAvBgNV BAMTKEQ1QjE4ODc1NUNBNTkwMjFCQ0I4NzI3NTk5NzRFQzZDNUE1QTE5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukC3XZslfa+IBXTv9xTQsH4oB Mezy/pvJ+MfO9TluDe4xONTn07sQnAxhMRh3G/gqCSwzuhm6gwvc4v45cAajcC+Z s57zYtrzzcjq6KDqGFw2r4+dC1oznWEsUWbIb4bzjzWFrpHLO0FUOUJjm10QNZIU W5Ymi9wvHekdpQfMrm3Hsg4VvVKJKtWunGZyL5vuwJ9Ju34cFQAM8+DQlBL8KY2E MR9q1U6lWbrlmeVrJgVpLYovYioD9oUTRdwquFVYqatWxOR/AoA6ftsviTSlCD3R oONabByK77BwcB840YTdnYS3Iz8qb57prVbndkYwCD5evrFmDQng4g/rAK2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1bGIdVylkCG8uHJ1mXTsbFpaGfwwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESeihMWRFINW1YjYw7w9jZQMDSs2NdOee7d qscjMlzCT7haiGRD6wytx/OvBXDlDQ6cAcHfu26oviaeEfc4CYpjvkmzrHKikEPc N/fTp3uGC3gOijaV01tWTYjpL8qgXYTwe2/RXb3kKT1fsuiU5mi7G/pTqTlGJbeH qifkQqRQu4Scm1bVT5EOCY9dKEsUxh+ey2TMNA//QuNOe/HkJw/Q15fKHJwkWbK8 YzwQ6kkkHRePX6i/SzUKTR3vrK+a32za+2BXP6ox14LS8lOVAWpoXu0+/7A7fqCk 9Wbizkj3Vcq7A56+64zz6QDyifk6Ol9v3gYdUpDVU6AGqyOspCs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:11 2025 by rpki-client