$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: PccJIJ+1rqc3gOF2q69xrrjFeKPH9yTWT6gYoPvtgC4= Subject key identifier: 3A:F5:BB:53:E2:4E:FB:01:A0:77:A2:A4:5C:E8:F6:02:F8:87:08:C6 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 22AA213E46F712389D56A7966877E00EDB5082F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 01F3 Signing time: Fri 05 Sep 2025 09:51:37 +0000 Manifest this update: Fri 05 Sep 2025 09:46:37 +0000 Manifest next update: Mon 08 Sep 2025 19:14:37 +0000 Files and hashes: 1: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) 2: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: 1+U1zd3us3aTuQNERFeTAiLhPnxaL1dL1Hc1XpRceag=) 3: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) 4: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:aa:21:3e:46:f7:12:38:9d:56:a7:96:68:77:e0:0e:db:50:82:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Sep 5 09:46:37 2025 GMT Not After : Sep 8 19:14:37 2025 GMT Subject: CN=3AF5BB53E24EFB01A077A2A45CE8F602F88708C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:7d:8c:a8:28:2d:e5:c0:fa:af:7e:a6:d2: 23:30:11:1b:42:bf:97:ff:0a:d1:fd:35:a5:53:34: 9c:69:8c:7d:4f:7a:f1:eb:90:02:23:f6:65:9e:af: 25:5c:8d:a6:bf:df:92:2f:eb:ca:b6:0d:ae:0a:6c: b4:b7:c1:31:bd:e7:b5:49:74:d5:08:ad:2f:3f:3c: 43:e9:1d:23:c5:0e:91:e2:6f:19:c2:50:bd:68:e7: b7:e7:40:38:36:6f:ae:75:b1:8f:c2:cf:1b:0e:0c: a6:61:eb:d0:d8:fd:c8:40:9d:56:80:38:03:03:af: c1:86:5d:8f:fd:0e:e3:a7:cd:2e:44:20:7c:86:ec: ef:24:58:8e:d1:01:37:09:63:b0:c0:55:23:71:61: 71:43:27:14:85:29:c9:ff:7b:40:f8:ac:a2:b6:c1: c2:c3:61:fa:29:f5:01:36:55:40:a8:03:b3:94:8a: d5:fb:a8:79:a5:a9:36:ba:67:8c:1f:34:1f:fe:ae: ff:32:ec:c6:56:82:44:ab:35:9e:8c:38:5c:d3:90: 20:bd:b7:18:2d:a7:66:97:70:fd:a6:86:29:d8:84: 4d:59:1d:57:68:6c:2a:2a:4d:13:dc:62:ae:28:1e: 89:d9:0a:d4:06:b0:bf:1a:22:36:eb:82:6c:2c:be: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F5:BB:53:E2:4E:FB:01:A0:77:A2:A4:5C:E8:F6:02:F8:87:08:C6 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e5:d2:97:e6:9b:ce:e5:4c:ea:00:cf:c7:9c:7a:bb:20:e7: 2e:b5:7d:5b:a2:0d:4c:d0:a4:4f:9b:02:0f:d0:b1:a9:c6:af: 35:40:c4:34:e1:b1:2b:85:69:8b:4a:92:19:d1:51:01:d1:c5: d1:43:75:c0:93:54:c9:3d:c1:f1:df:c7:ee:fe:12:c1:d3:eb: e8:19:d8:63:22:4f:22:2b:4e:a8:5c:05:4b:87:15:21:6f:23: a4:92:64:81:f4:91:f0:c7:2a:d8:de:4d:52:5e:49:8f:e8:48: 13:88:3f:de:5b:af:08:ea:22:a1:11:a9:b5:4e:bf:4a:6f:73: 64:e8:79:53:46:ba:1d:23:e1:ef:d3:8c:a4:ea:f6:4c:95:00: d3:32:54:e7:b9:38:e1:a0:94:6f:cd:16:2a:c2:df:19:a0:e8: b1:39:16:d0:50:23:9b:a2:15:b6:b0:4e:4a:c1:12:80:26:0f: 1e:39:dc:b4:e6:fc:21:c7:d1:6c:be:2d:4f:a3:c0:ce:b6:b2: 08:de:28:05:ad:b2:e1:68:a0:24:a9:68:0a:66:9c:18:52:f3: a7:24:a1:9f:c9:14:c3:5a:e0:60:fe:ff:65:c7:93:34:58:58: 6b:75:e2:35:51:ba:e4:03:f6:6c:f7:52:b4:e6:e1:8a:35:11: 3d:c8:49:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqohPkb3EjidVqeWaHfgDttQgvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA5MDUwOTQ2MzdaFw0yNTA5MDgxOTE0MzdaMDMxMTAvBgNV BAMTKDNBRjVCQjUzRTI0RUZCMDFBMDc3QTJBNDVDRThGNjAyRjg4NzA4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPH2MqCgt5cD6r36m0iMwERtC v5f/CtH9NaVTNJxpjH1PevHrkAIj9mWeryVcjaa/35Iv68q2Da4KbLS3wTG957VJ dNUIrS8/PEPpHSPFDpHibxnCUL1o57fnQDg2b651sY/CzxsODKZh69DY/chAnVaA OAMDr8GGXY/9DuOnzS5EIHyG7O8kWI7RATcJY7DAVSNxYXFDJxSFKcn/e0D4rKK2 wcLDYfop9QE2VUCoA7OUitX7qHmlqTa6Z4wfNB/+rv8y7MZWgkSrNZ6MOFzTkCC9 txgtp2aXcP2mhinYhE1ZHVdobCoqTRPcYq4oHonZCtQGsL8aIjbrgmwsvgXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvW7U+JO+wGgd6KkXOj2AviHCMYwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInl0pfmm87lTOoAz8ecersg5y61fVuiDUzQ pE+bAg/QsanGrzVAxDThsSuFaYtKkhnRUQHRxdFDdcCTVMk9wfHfx+7+EsHT6+gZ 2GMiTyIrTqhcBUuHFSFvI6SSZIH0kfDHKtjeTVJeSY/oSBOIP95brwjqIqERqbVO v0pvc2ToeVNGuh0j4e/TjKTq9kyVANMyVOe5OOGglG/NFirC3xmg6LE5FtBQI5ui FbawTkrBEoAmDx453LTm/CHH0Wy+LU+jwM62sgjeKAWtsuFooCSpaApmnBhS86ck oZ/JFMNa4GD+/2XHkzRYWGt14jVRuuQD9mz3UrTm4Yo1ET3ISXM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:20 2025 by rpki-client