$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: Kbo7/OqloayX2M081ahRlQ4BiGw8y7nN+iVUOIbZWgI= Subject key identifier: 43:A0:8B:17:EF:91:4B:43:5A:84:AF:49:EE:C0:12:39:CA:47:0D:CC Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 61031856C0CE06DCA6F8588C793616E526BB5830 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: 6E Signing time: Wed 04 Jun 2025 16:00:36 +0000 Manifest this update: Wed 04 Jun 2025 15:55:36 +0000 Manifest next update: Sun 08 Jun 2025 01:42:36 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: rgQk8e7eiL6ntGMPqV+XxKsFc/RaAxqIW8nB5jmqjpw=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:03:18:56:c0:ce:06:dc:a6:f8:58:8c:79:36:16:e5:26:bb:58:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Jun 4 15:55:36 2025 GMT Not After : Jun 8 01:42:36 2025 GMT Subject: CN=43A08B17EF914B435A84AF49EEC01239CA470DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ee:63:75:64:db:48:de:92:ee:0b:4f:bf:8c: 6d:cf:bd:7a:13:fe:4c:71:8b:08:0b:56:49:42:d2: 5d:78:8a:25:43:f7:b5:cc:8a:f6:b3:37:9b:c9:24: c8:e5:10:d0:b0:c6:8e:2e:48:8c:c8:71:15:8b:2b: a2:5e:00:06:8a:a2:ba:9d:c1:09:17:49:6f:94:1e: d3:1b:ea:a2:98:e6:e3:ad:59:8b:e6:d4:76:fa:f8: d5:53:b3:42:b5:20:5d:49:b3:b0:ec:f4:8a:45:1e: af:cf:28:4c:fc:21:6c:4a:f6:b6:3c:ce:22:79:6f: 6b:f4:0b:8c:2b:43:76:7e:1e:09:82:57:fe:f9:d7: a4:85:1b:26:c1:8a:78:0e:60:a1:17:86:5d:1a:f0: 9d:6e:f3:e6:f1:6c:2f:cd:f3:29:2c:e8:7e:9e:5b: e7:93:33:8d:a4:c4:42:fc:8f:ca:f5:c6:51:aa:8f: c9:1e:41:7f:3a:43:e3:fc:9b:47:c5:36:e2:5e:c5: 25:b1:5e:20:4f:9f:fb:be:de:a9:bc:bd:05:8a:f6: f9:bd:4f:fc:b8:e9:ab:30:22:62:2e:5b:76:54:6f: cd:ae:32:54:fe:b4:a2:4d:cb:61:85:9b:b3:44:2a: 0d:0d:dd:37:08:ee:00:81:fa:85:2d:7e:d0:6a:e3: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:8B:17:EF:91:4B:43:5A:84:AF:49:EE:C0:12:39:CA:47:0D:CC X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c2:cf:ac:90:21:06:2a:dd:72:04:e4:f4:10:04:b4:b2:cf: 3e:c7:bf:ee:1d:0e:0b:70:77:93:0b:98:b3:94:f4:96:7c:e7: 65:b3:81:82:54:ab:27:ba:21:4a:fc:d1:8a:f2:17:3f:d5:26: 6d:64:50:91:0d:a3:b5:2a:79:36:db:72:57:8f:20:36:9c:d8: 3f:e2:be:03:d3:ba:1a:6e:a0:4d:a5:ba:ae:86:77:b0:f2:33: b1:3a:81:21:e9:87:05:e3:26:03:73:56:89:c1:cb:fb:1d:dd: 30:1d:f6:e3:ed:3e:24:62:45:cc:ba:fc:c8:6a:75:58:a5:a6: 98:ba:e9:a6:90:60:f3:36:93:88:3d:77:d0:87:32:bc:df:56: 40:94:23:cf:0f:f4:00:d8:e4:d3:14:0b:f0:93:46:ee:82:23: 70:ee:5c:3c:d3:4d:89:5b:ce:b7:ae:af:05:28:6a:7d:eb:00: 91:ac:fb:1d:cb:c0:0d:25:05:61:cb:46:a4:2e:e8:d6:8f:5a: 54:88:fc:91:25:78:4f:a4:e3:5d:67:6c:9f:67:9c:b8:e0:a3: 9d:cc:9f:40:7f:95:31:be:5a:d3:4a:22:d6:9d:c3:6c:c1:78: 82:77:08:56:3b:a2:e4:67:62:c3:62:66:49:f9:5e:78:5b:dd: 23:b2:4c:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQMYVsDOBtym+FiMeTYW5Sa7WDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTA2MDQxNTU1MzZaFw0yNTA2MDgwMTQyMzZaMDMxMTAvBgNV BAMTKDQzQTA4QjE3RUY5MTRCNDM1QTg0QUY0OUVFQzAxMjM5Q0E0NzBEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7mN1ZNtI3pLuC0+/jG3PvXoT /kxxiwgLVklC0l14iiVD97XMivazN5vJJMjlENCwxo4uSIzIcRWLK6JeAAaKorqd wQkXSW+UHtMb6qKY5uOtWYvm1Hb6+NVTs0K1IF1Js7Ds9IpFHq/PKEz8IWxK9rY8 ziJ5b2v0C4wrQ3Z+HgmCV/7516SFGybBingOYKEXhl0a8J1u8+bxbC/N8yks6H6e W+eTM42kxEL8j8r1xlGqj8keQX86Q+P8m0fFNuJexSWxXiBPn/u+3qm8vQWK9vm9 T/y46aswImIuW3ZUb82uMlT+tKJNy2GFm7NEKg0N3TcI7gCB+oUtftBq4/PlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ6CLF++RS0NahK9J7sASOcpHDcwwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLCz6yQIQYq3XIE5PQQBLSyzz7Hv+4dDgtw d5MLmLOU9JZ852WzgYJUqye6IUr80YryFz/VJm1kUJENo7UqeTbbclePIDac2D/i vgPTuhpuoE2luq6Gd7DyM7E6gSHphwXjJgNzVonBy/sd3TAd9uPtPiRiRcy6/Mhq dVilppi66aaQYPM2k4g9d9CHMrzfVkCUI88P9ADY5NMUC/CTRu6CI3DuXDzTTYlb zreurwUoan3rAJGs+x3LwA0lBWHLRqQu6NaPWlSI/JEleE+k411nbJ9nnLjgo53M n0B/lTG+WtNKItadw2zBeIJ3CFY7ouRnYsNiZkn5Xnhb3SOyTDM= -----END CERTIFICATE-----Generated at Fri Jun 6 18:40:31 2025 by rpki-client