$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft File: 98906779AB8F30762B65B3E6AD7F48326A08605E.mft (raw, json) Hash identifier: R7KGk08G4ELp7wLkBu6xsqZALKNkq3NJ3To2IdBSqsA= Subject key identifier: D6:59:71:33:0C:4F:74:40:1C:29:5C:5E:FC:DB:6D:B7:94:6D:20:F3 Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E Certificate issuer: /CN=98906779AB8F30762B65B3E6AD7F48326A08605E Certificate serial: 5626DDC4E3FBC535700028357AEB516916E18DD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft Manifest number: 0137 Signing time: Sun 06 Apr 2025 06:12:19 +0000 Manifest this update: Sun 06 Apr 2025 06:07:19 +0000 Manifest next update: Wed 09 Apr 2025 10:29:19 +0000 Files and hashes: 1: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: eIcKVswkxVzPLsHeuZgtjUH51030AdVpi+kyPLC0pTE=) 2: 98906779AB8F30762B65B3E6AD7F48326A08605E.crl (hash: CASB7uoL1N/siH1KPKFYt/Q4AjmG9A/P9ZwHumrpRS4=) 3: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 7rcqjDK1en4Ve1PM9Wuc4mrM+RdU8sJ+v75czM9rFEY=) 4: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: bdtz3V8NAXQ4FsPLxYoFwHQihtebd8fh/UmhU4gX81I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:26:dd:c4:e3:fb:c5:35:70:00:28:35:7a:eb:51:69:16:e1:8d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E Validity Not Before: Apr 6 06:07:19 2025 GMT Not After : Apr 9 10:29:19 2025 GMT Subject: CN=D65971330C4F74401C295C5EFCDB6DB7946D20F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:d5:da:c8:fe:00:b6:8a:c4:28:ca:a5:c5: 34:9a:15:08:dd:d4:80:ac:00:25:49:62:11:68:6d: 9a:24:b0:23:61:91:97:96:06:ac:7d:f2:a4:53:a0: 1e:e3:01:5b:f3:d3:92:92:25:9b:14:00:88:aa:c6: a3:89:66:13:ea:7a:e9:c4:2e:ae:18:27:6b:bd:8d: 21:5e:7e:b2:d1:00:42:2e:55:23:de:37:31:24:ea: 55:ca:5e:76:54:a2:51:3c:54:93:42:c1:a2:37:77: 2f:45:c1:36:3b:37:a2:82:17:48:4e:73:50:c1:6e: f6:57:88:eb:f4:74:0a:5f:0d:43:59:40:37:7e:a1: 90:2e:93:07:8d:43:ff:30:77:ad:04:d3:f2:db:09: cb:28:b3:28:9c:9f:72:fa:5f:17:62:5a:f3:91:46: a8:89:a7:8c:0d:cc:ec:50:f8:7b:cf:8d:f9:fb:62: df:8c:cf:5b:33:62:08:7e:3d:e2:38:bf:86:1c:3c: c6:40:ab:0e:a9:65:2e:ee:da:bc:f4:09:ec:87:21: 1c:10:ea:cd:b0:d1:cc:72:79:1b:63:14:36:3d:46: 5a:da:97:be:e5:cb:ee:26:ea:34:98:10:2e:ed:ed: 2c:f6:8e:38:70:bd:b4:9f:91:d7:af:39:1f:fa:a9: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:59:71:33:0C:4F:74:40:1C:29:5C:5E:FC:DB:6D:B7:94:6D:20:F3 X509v3 Authority Key Identifier: keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4c:66:e1:35:a3:3b:3e:36:34:54:32:e8:7f:50:fc:34:8f: bc:4a:0a:b8:bd:b9:ed:a8:82:0e:fa:f4:89:1b:15:4d:ac:2d: 36:b7:89:c1:27:3a:65:6c:f0:95:2a:a5:d7:4e:10:21:39:91: c6:6f:4b:bb:2c:f4:df:ab:4c:18:e0:e0:2a:fc:e4:e9:29:44: 68:2b:3d:61:e5:b0:b8:5b:77:c4:8c:52:ec:a1:a8:11:c6:67: 3f:aa:ed:f4:1b:95:8d:af:05:87:f4:8f:c6:45:3b:fb:e5:c1: 44:60:05:b6:c5:c6:0d:6d:85:ac:60:3c:e6:8a:c5:9c:af:ff: 98:9d:e0:f2:b6:81:e0:6b:a2:69:6d:25:f3:66:8b:59:c7:bd: 4e:39:33:92:8a:80:63:7f:0d:da:f4:8b:8d:d3:3c:cd:5e:95: 3b:c7:6a:95:2c:93:20:13:fa:18:d6:87:b9:04:40:26:c8:3e: 2c:13:ab:a5:39:af:b1:c9:46:d7:5e:b5:33:97:89:c7:2f:0b: 9a:5b:c7:28:ea:f9:89:fc:cd:85:03:b2:bf:b1:f8:6a:25:ac: 47:3f:05:27:c3:b3:aa:5b:26:05:89:7f:54:bf:dd:82:b8:7b: f4:66:95:b3:1f:fd:9f:60:f0:2a:14:ec:55:2c:bc:8b:be:99: e3:c6:e5:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVibdxOP7xTVwACg1eutRaRbhjdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2 QTA4NjA1RTAeFw0yNTA0MDYwNjA3MTlaFw0yNTA0MDkxMDI5MTlaMDMxMTAvBgNV BAMTKEQ2NTk3MTMzMEM0Rjc0NDAxQzI5NUM1RUZDREI2REI3OTQ2RDIwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI69XayP4AtorEKMqlxTSaFQjd 1ICsACVJYhFobZoksCNhkZeWBqx98qRToB7jAVvz05KSJZsUAIiqxqOJZhPqeunE Lq4YJ2u9jSFefrLRAEIuVSPeNzEk6lXKXnZUolE8VJNCwaI3dy9FwTY7N6KCF0hO c1DBbvZXiOv0dApfDUNZQDd+oZAukweNQ/8wd60E0/LbCcsosyicn3L6XxdiWvOR RqiJp4wNzOxQ+HvPjfn7Yt+Mz1szYgh+PeI4v4YcPMZAqw6pZS7u2rz0CeyHIRwQ 6s2w0cxyeRtjFDY9Rlral77ly+4m6jSYEC7t7Sz2jjhwvbSfkdevOR/6qbB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1llxMwxPdEAcKVxe/Nttt5RtIPMwHwYDVR0j BBgwFoAUmJBneauPMHYrZbPmrX9IMmoIYF4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE0MDA4OS02MDQxLTQ1ZWQtOGU0NC1hOTk3YzhhY2Y0ODAvMC85ODkwNjc3OUFC OEYzMDc2MkI2NUIzRTZBRDdGNDgzMjZBMDg2MDVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2QTA4 NjA1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4 MzI2QTA4NjA1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9MZuE1ozs+NjRUMuh/UPw0j7xKCri9ue2o gg769IkbFU2sLTa3icEnOmVs8JUqpddOECE5kcZvS7ss9N+rTBjg4Cr85OkpRGgr PWHlsLhbd8SMUuyhqBHGZz+q7fQblY2vBYf0j8ZFO/vlwURgBbbFxg1thaxgPOaK xZyv/5id4PK2geBromltJfNmi1nHvU45M5KKgGN/Ddr0i43TPM1elTvHapUskyAT +hjWh7kEQCbIPiwTq6U5r7HJRtdetTOXiccvC5pbxyjq+Yn8zYUDsr+x+GolrEc/ BSfDs6pbJgWJf1S/3YK4e/RmlbMf/Z9g8CoU7FUsvIu+mePG5dk= -----END CERTIFICATE-----Generated at Sun Apr 6 11:14:31 2025 by rpki-client