$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: sKIIvt1PGumPbTOCXKvKTaGYRAWvRSGuSYuAV4izQyM= Subject key identifier: 52:80:42:88:D1:78:E4:8F:B1:3C:4F:DB:F6:B5:7C:40:49:DA:21:38 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 16621A8675BB6C122A7E42849406A92330C74FD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: 5E Signing time: Sun 06 Apr 2025 04:00:39 +0000 Manifest this update: Sun 06 Apr 2025 03:55:39 +0000 Manifest next update: Wed 09 Apr 2025 11:16:39 +0000 Files and hashes: 1: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: C7qIVz/oldBPdN6uA7vMN7bfgN2DG0SAhQh9ZYIx0+E=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 11:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:62:1a:86:75:bb:6c:12:2a:7e:42:84:94:06:a9:23:30:c7:4f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Apr 6 03:55:39 2025 GMT Not After : Apr 9 11:16:39 2025 GMT Subject: CN=52804288D178E48FB13C4FDBF6B57C4049DA2138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:8f:80:8a:40:c8:5c:c0:f5:eb:78:36:9a: 60:b4:63:f2:13:c2:2e:e4:83:77:95:09:ab:0d:62: 6b:4f:b8:20:39:40:0e:c7:0b:92:93:45:95:05:d6: d8:0f:51:7e:fe:85:3a:92:e4:45:64:8f:f5:2c:cc: c6:00:07:af:1a:93:83:83:19:1f:5a:50:d2:10:a9: 19:9e:dd:8e:3a:3d:d9:d2:d1:14:c0:00:d0:23:2b: f0:f4:08:de:02:e7:24:47:20:92:3d:9a:ce:0f:4e: ce:1c:68:e8:c8:97:7b:89:f2:06:cc:0d:dc:4d:47: 54:53:2c:da:4c:41:b7:11:12:45:12:40:f1:81:2f: a4:3e:c2:fb:08:a4:a7:d9:dd:d6:e8:aa:01:40:c4: 83:b2:c0:58:e9:9e:75:bb:e3:05:7a:d4:bc:06:28: 48:2d:b0:96:e3:43:06:39:50:fd:3b:4b:c1:a2:60: eb:96:26:fa:a6:28:ac:58:f3:b9:76:4c:d6:f0:d4: e9:29:7c:5e:5a:d2:9b:cd:c9:db:e3:3b:ef:2c:cf: aa:eb:eb:22:f2:91:f0:70:8f:3d:67:6b:cd:28:99: 50:a7:2e:76:40:0f:f5:64:81:72:17:49:3a:96:2c: 6b:8a:da:c5:78:d6:ec:83:41:f0:3e:6d:43:85:a2: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:80:42:88:D1:78:E4:8F:B1:3C:4F:DB:F6:B5:7C:40:49:DA:21:38 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f0:ae:de:fa:24:f1:9d:31:8d:fd:45:52:f2:41:74:c7:cd: 55:26:c7:0b:c4:92:e0:e5:4a:10:68:69:1d:9a:86:85:3e:f7: bf:61:db:9b:fd:d7:e6:65:a1:73:a3:a5:84:7b:9b:27:54:18: dc:a9:3d:fc:3b:68:64:6c:d7:0f:f0:01:6b:4d:e5:97:1c:fd: 7c:35:01:d9:8e:53:e7:02:ff:16:36:d9:95:b2:7d:9c:9f:c8: ac:02:f0:1b:f6:9f:6e:bc:f9:01:83:b1:42:f6:6e:33:8a:01: e5:e3:f0:ce:23:2b:13:22:ae:18:7d:76:6c:d5:48:9f:23:d2: 18:c6:28:e0:d0:05:54:9a:30:25:0d:9e:d0:47:62:df:d8:9f: e1:01:49:7d:ed:ee:fb:87:c1:a5:17:25:f9:b1:7e:b7:6d:64: 5f:47:a9:49:fe:d4:09:6c:d8:51:ee:85:26:e3:b0:ef:f2:1e: b2:27:2e:53:be:c5:42:c9:47:e0:79:e0:c3:0a:a4:6f:73:fc: eb:f5:03:f6:91:56:2b:c9:b4:9e:9e:ae:a4:6e:7e:25:e9:97: b1:e6:5a:b3:c6:63:8c:c4:64:e0:95:47:b4:9c:85:bf:76:7c: 2a:4b:9f:94:01:71:40:ea:d7:52:9a:28:66:da:55:d7:16:4b: 75:36:dc:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmIahnW7bBIqfkKElAapIzDHT9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA0MDYwMzU1MzlaFw0yNTA0MDkxMTE2MzlaMDMxMTAvBgNV BAMTKDUyODA0Mjg4RDE3OEU0OEZCMTNDNEZEQkY2QjU3QzQwNDlEQTIxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvI+AikDIXMD163g2mmC0Y/IT wi7kg3eVCasNYmtPuCA5QA7HC5KTRZUF1tgPUX7+hTqS5EVkj/UszMYAB68ak4OD GR9aUNIQqRme3Y46PdnS0RTAANAjK/D0CN4C5yRHIJI9ms4PTs4caOjIl3uJ8gbM DdxNR1RTLNpMQbcREkUSQPGBL6Q+wvsIpKfZ3dboqgFAxIOywFjpnnW74wV61LwG KEgtsJbjQwY5UP07S8GiYOuWJvqmKKxY87l2TNbw1OkpfF5a0pvNydvjO+8sz6rr 6yLykfBwjz1na80omVCnLnZAD/VkgXIXSTqWLGuK2sV41uyDQfA+bUOFokNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUoBCiNF45I+xPE/b9rV8QEnaITgwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjwrt76JPGdMY39RVLyQXTHzVUmxwvEkuDl ShBoaR2ahoU+979h25v91+ZloXOjpYR7mydUGNypPfw7aGRs1w/wAWtN5Zcc/Xw1 AdmOU+cC/xY22ZWyfZyfyKwC8Bv2n268+QGDsUL2bjOKAeXj8M4jKxMirhh9dmzV SJ8j0hjGKODQBVSaMCUNntBHYt/Yn+EBSX3t7vuHwaUXJfmxfrdtZF9HqUn+1Als 2FHuhSbjsO/yHrInLlO+xULJR+B54MMKpG9z/Ov1A/aRVivJtJ6erqRufiXpl7Hm WrPGY4zEZOCVR7Schb92fCpLn5QBcUDq11KaKGbaVdcWS3U23AE= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:52 2025 by rpki-client