$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: J7MWYR/J9WWkYyp912pLgTCa4Ak6nzg3ddk1uhYh8iM= Subject key identifier: 0D:EA:5E:D9:AE:DB:4C:4D:13:A7:D5:07:DA:14:12:F9:12:AF:E5:EF Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 5FD41E2C8B6BC2F0AEA1D15463A9ABE8C73DDB72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: 79 Signing time: Wed 04 Jun 2025 05:10:39 +0000 Manifest this update: Wed 04 Jun 2025 05:05:39 +0000 Manifest next update: Sat 07 Jun 2025 06:19:39 +0000 Files and hashes: 1: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: A+3VPVbjGrW0TO6vk302B1+YqUILNuUAV0Ea1cM9It8=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d4:1e:2c:8b:6b:c2:f0:ae:a1:d1:54:63:a9:ab:e8:c7:3d:db:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Jun 4 05:05:39 2025 GMT Not After : Jun 7 06:19:39 2025 GMT Subject: CN=0DEA5ED9AEDB4C4D13A7D507DA1412F912AFE5EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:84:cf:51:68:79:53:c7:fb:69:2b:80:e1: 7d:2f:d7:44:01:09:6c:bf:e6:34:20:25:c2:67:66: 6a:f2:9e:f0:c6:03:2b:36:9e:eb:b2:3b:ee:58:ee: 1b:ef:f9:4c:23:fc:f4:53:a0:d4:ba:2b:63:d5:f0: 92:b3:9d:71:88:61:19:2b:07:89:70:a4:ea:ac:bf: 22:60:f9:ca:b6:37:18:3a:52:8c:3b:31:35:d9:ad: 15:68:a1:9f:7e:63:64:fc:4f:54:bd:44:42:08:bf: 72:4b:83:02:27:3d:a1:60:df:da:14:6e:bc:ae:a3: 8c:d8:07:8a:bc:3b:1e:ed:d1:05:cf:7f:63:a3:ec: 20:b6:b9:d2:2d:98:d7:29:af:4a:a6:34:77:ba:1b: 71:18:b3:26:b9:94:11:bb:bf:9a:47:40:54:90:7b: ea:4c:80:2c:95:85:4f:00:0c:bb:1d:e4:34:2a:eb: fc:95:18:6e:bd:66:24:55:f5:c9:b6:e4:2c:c2:88: 14:e6:31:ea:b5:13:7d:94:db:27:d9:95:36:8d:c3: cf:95:e1:2d:0a:19:3e:f3:be:4e:0e:7e:f6:13:3b: b9:ba:c4:5f:7e:18:bb:8b:16:ee:4c:d5:65:11:10: c1:d4:3f:60:82:51:ac:2f:4f:1d:b1:a1:d7:37:26: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EA:5E:D9:AE:DB:4C:4D:13:A7:D5:07:DA:14:12:F9:12:AF:E5:EF X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3d:fe:53:26:22:d3:ff:0f:d5:5e:21:13:27:4b:c7:5a:eb: 5f:2c:1d:71:f0:71:99:14:f5:19:60:19:cb:9f:55:1e:5e:10: fc:01:e7:da:86:60:0a:da:1f:c9:17:6c:af:d0:1a:d7:5f:4b: 1f:a7:57:81:99:6b:80:31:1a:56:84:b2:97:3f:16:50:72:75: c3:9a:78:9c:dd:bd:8b:28:1b:45:96:e4:9b:71:7a:34:7e:20: 7f:bb:bd:27:e0:f2:d0:86:61:0c:58:92:d0:cb:ae:60:0e:4e: 53:68:f2:0e:72:dc:2e:89:39:a3:38:cd:c2:eb:f4:e3:16:0f: c8:db:25:03:c4:b7:84:9b:a7:54:c1:f5:97:b7:8e:b1:a7:3e: a3:65:51:82:38:63:a0:49:b6:f2:f6:4b:8a:67:34:e4:cb:7a: b7:bd:c3:77:92:e9:8f:99:1c:1a:9d:92:32:29:f3:22:67:86: ce:42:35:a0:12:a1:e8:aa:0d:4b:66:ef:f2:f1:67:23:92:a3: f6:02:75:11:60:30:b3:19:ce:e8:d8:14:4e:ec:8f:11:fa:ff: 3c:7c:e1:9d:e4:30:a4:0f:28:c3:3a:0b:ea:9e:8b:5c:6d:9c: 3d:21:ec:aa:32:c9:de:4f:8d:b4:f1:b9:72:c5:3c:b7:3e:51: 1e:4e:a2:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9QeLItrwvCuodFUY6mr6Mc923IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA2MDQwNTA1MzlaFw0yNTA2MDcwNjE5MzlaMDMxMTAvBgNV BAMTKDBERUE1RUQ5QUVEQjRDNEQxM0E3RDUwN0RBMTQxMkY5MTJBRkU1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPToTPUWh5U8f7aSuA4X0v10QB CWy/5jQgJcJnZmrynvDGAys2nuuyO+5Y7hvv+Uwj/PRToNS6K2PV8JKznXGIYRkr B4lwpOqsvyJg+cq2Nxg6Uow7MTXZrRVooZ9+Y2T8T1S9REIIv3JLgwInPaFg39oU bryuo4zYB4q8Ox7t0QXPf2Oj7CC2udItmNcpr0qmNHe6G3EYsya5lBG7v5pHQFSQ e+pMgCyVhU8ADLsd5DQq6/yVGG69ZiRV9cm25CzCiBTmMeq1E32U2yfZlTaNw8+V 4S0KGT7zvk4OfvYTO7m6xF9+GLuLFu5M1WUREMHUP2CCUawvTx2xodc3JhtbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDepe2a7bTE0Tp9UH2hQS+RKv5e8wHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADw9/lMmItP/D9VeIRMnS8da618sHXHwcZkU 9RlgGcufVR5eEPwB59qGYAraH8kXbK/QGtdfSx+nV4GZa4AxGlaEspc/FlBydcOa eJzdvYsoG0WW5JtxejR+IH+7vSfg8tCGYQxYktDLrmAOTlNo8g5y3C6JOaM4zcLr 9OMWD8jbJQPEt4Sbp1TB9Ze3jrGnPqNlUYI4Y6BJtvL2S4pnNOTLere9w3eS6Y+Z HBqdkjIp8yJnhs5CNaASoeiqDUtm7/LxZyOSo/YCdRFgMLMZzujYFE7sjxH6/zx8 4Z3kMKQPKMM6C+qei1xtnD0h7Koyyd5PjbTxuXLFPLc+UR5OogM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:02 2025 by rpki-client