$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: /j4Zh/AumjSuDjx4jrpy+bG17fpv2pllo296TAsdZS4= Subject key identifier: 1D:4E:64:FE:F8:27:0A:57:20:46:24:83:40:57:63:0F:97:81:D0:8B Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 4C6A42EB705BAC11F62DBC24B5375CFF67C6E42A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: A3 Signing time: Sat 06 Sep 2025 04:40:40 +0000 Manifest this update: Sat 06 Sep 2025 04:35:40 +0000 Manifest next update: Tue 09 Sep 2025 06:35:40 +0000 Files and hashes: 1: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: o29qhCYxgXp4s0+plmpwQskpYfSLJNIJtOJm1G50yuM=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6a:42:eb:70:5b:ac:11:f6:2d:bc:24:b5:37:5c:ff:67:c6:e4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Sep 6 04:35:40 2025 GMT Not After : Sep 9 06:35:40 2025 GMT Subject: CN=1D4E64FEF8270A57204624834057630F9781D08B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:d8:56:e5:d2:08:a4:b2:76:0a:85:2d:7f: 39:97:5c:c8:f4:d7:fe:37:9f:15:09:e9:a0:e0:0e: 5f:3f:3f:46:61:81:52:fa:6e:d2:f8:62:72:e4:29: 42:9e:7d:fa:56:fa:5d:d9:f2:78:fa:ee:17:ca:19: f7:8d:2b:7f:55:55:03:98:88:24:b4:0c:c1:25:77: 43:7f:03:51:e6:6f:a2:65:14:c9:9a:6a:30:17:f9: 84:d6:35:b6:db:d0:05:af:d7:c7:e7:97:a2:7b:c9: 9d:77:e3:7e:6c:da:21:f7:36:50:b8:28:95:08:1e: 30:ce:cc:23:98:73:a3:98:a1:c5:60:2a:4e:72:cf: 98:44:0b:89:cd:19:8f:80:16:d2:c9:b9:f2:32:28: a9:11:a0:5b:d9:46:59:bf:f5:9a:ca:2b:50:10:08: 05:af:a9:89:f9:cb:99:d6:af:c2:c0:81:a8:2d:68: 40:dc:fe:a7:18:41:ee:96:ea:79:4c:ce:d0:cc:88: b0:c0:01:bf:7b:b0:e8:00:0c:66:74:43:bc:f7:91: 32:37:2c:61:c6:25:34:b8:1c:c2:af:44:cc:89:b0: 1f:c0:64:5e:3f:01:1e:35:d4:6a:f8:1c:ff:0d:58: 83:f1:13:ea:7b:6c:f1:03:ee:b7:72:f1:35:d9:eb: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4E:64:FE:F8:27:0A:57:20:46:24:83:40:57:63:0F:97:81:D0:8B X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:55:76:a7:c3:f2:5e:7d:1e:9e:8f:0f:41:c0:f5:f5:c9:63: b3:cb:71:1c:4f:fa:dc:49:67:89:54:ad:94:32:24:c8:20:87: 57:9e:e8:3e:d9:a4:19:2a:81:8b:3e:cc:0c:44:3d:c2:9c:ad: 99:6b:fe:3f:04:56:4d:59:ad:37:7f:3f:1d:08:1a:ec:12:6c: d4:52:ea:00:dc:22:79:d2:ac:c6:9f:97:2b:bb:31:8b:e8:91: d9:ec:32:49:4b:f0:60:d4:22:cb:85:3a:bd:03:e2:74:80:0c: 13:50:20:39:37:f1:93:1b:84:f3:be:4f:3c:97:8f:5b:ed:f4: 9e:11:e5:99:68:6b:51:6f:ab:50:e5:9b:3b:93:89:8a:ed:58: 78:24:ca:ad:8b:67:03:ef:68:1d:ba:9f:54:aa:97:43:d2:96: 0b:22:5b:b5:1e:9f:b4:d6:b9:1a:8e:a4:ac:91:f4:58:22:a4: e0:23:56:42:9e:bf:4b:6d:06:18:ad:44:cc:71:c6:b3:23:dc: 14:13:49:0f:9a:13:78:d9:39:94:ce:80:94:c9:de:1e:c3:6f: c8:a1:b2:3a:ef:91:d9:4c:73:c8:f7:9d:be:fa:e4:87:5c:e7: f3:21:03:47:2c:9d:86:55:78:f4:48:af:62:aa:97:b7:c0:de: b0:cd:51:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGpC63BbrBH2LbwktTdc/2fG5CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA5MDYwNDM1NDBaFw0yNTA5MDkwNjM1NDBaMDMxMTAvBgNV BAMTKDFENEU2NEZFRjgyNzBBNTcyMDQ2MjQ4MzQwNTc2MzBGOTc4MUQwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQINhW5dIIpLJ2CoUtfzmXXMj0 1/43nxUJ6aDgDl8/P0ZhgVL6btL4YnLkKUKeffpW+l3Z8nj67hfKGfeNK39VVQOY iCS0DMEld0N/A1Hmb6JlFMmaajAX+YTWNbbb0AWv18fnl6J7yZ13435s2iH3NlC4 KJUIHjDOzCOYc6OYocVgKk5yz5hEC4nNGY+AFtLJufIyKKkRoFvZRlm/9ZrKK1AQ CAWvqYn5y5nWr8LAgagtaEDc/qcYQe6W6nlMztDMiLDAAb97sOgADGZ0Q7z3kTI3 LGHGJTS4HMKvRMyJsB/AZF4/AR411Gr4HP8NWIPxE+p7bPED7rdy8TXZ6zuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHU5k/vgnClcgRiSDQFdjD5eB0IswHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApVdqfD8l59Hp6PD0HA9fXJY7PLcRxP+txJ Z4lUrZQyJMggh1ee6D7ZpBkqgYs+zAxEPcKcrZlr/j8EVk1ZrTd/Px0IGuwSbNRS 6gDcInnSrMaflyu7MYvokdnsMklL8GDUIsuFOr0D4nSADBNQIDk38ZMbhPO+TzyX j1vt9J4R5Zloa1Fvq1DlmzuTiYrtWHgkyq2LZwPvaB26n1Sql0PSlgsiW7Uen7TW uRqOpKyR9FgipOAjVkKev0ttBhitRMxxxrMj3BQTSQ+aE3jZOZTOgJTJ3h7Db8ih sjrvkdlMc8j3nb765Idc5/MhA0csnYZVePRIr2Kql7fA3rDNUXQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:29 2025 by rpki-client