$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json) Hash identifier: w3lBCH8iWwI6MtOoGdMujvdIUk5ALCVF7KZOAManycQ= Subject key identifier: 08:A1:37:86:80:96:F1:32:9F:F0:9C:7C:08:30:28:2F:AB:4B:CB:27 Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 1A1A7E9712912D0C3AA4A8FCBEC6B189E2CA8388 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft Manifest number: 0102 Signing time: Tue 05 Aug 2025 22:20:49 +0000 Manifest this update: Tue 05 Aug 2025 22:15:49 +0000 Manifest next update: Sat 09 Aug 2025 04:19:49 +0000 Files and hashes: 1: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: N74dfLFvl7eNsa07RKUrhClkbMWl/o482r/Gpd8s/i0=) 2: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: OPL9bQk/NseypQ6kckPnHWoyTC0k6qbgYm78nkZM2xk=) 3: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: /KzEuAJHbJBmL5pgo4HQUQfG2vh0jJ3hOFNjN0Pvcz8=) 4: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: 0lAqF2YCCu8hBoO36P3pXTfszCRwlRHUwQyhfZKieRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1a:7e:97:12:91:2d:0c:3a:a4:a8:fc:be:c6:b1:89:e2:ca:83:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Aug 5 22:15:49 2025 GMT Not After : Aug 9 04:19:49 2025 GMT Subject: CN=08A137868096F1329FF09C7C0830282FAB4BCB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:3e:72:d7:49:dc:59:f3:45:a9:3a:68:7b: b3:df:30:f3:e3:32:e0:08:8c:03:09:15:e7:69:89: c2:ed:15:64:2f:39:31:ec:8a:0b:e7:96:a0:29:ad: 96:b9:0d:e6:7e:80:4e:79:a6:e4:c8:63:bd:69:cb: ec:7f:5a:6d:2a:c2:87:08:2d:18:92:78:a3:e3:1c: 22:fe:55:c8:c2:45:42:73:94:c1:e2:6e:2e:77:2a: 9b:69:90:c0:3e:af:8f:d0:e0:73:e1:96:f6:db:01: f2:27:3f:40:6b:1f:fc:af:24:88:08:d8:d1:46:08: 95:e9:60:45:96:44:72:0c:5d:69:1a:33:f9:65:4e: f4:51:6f:20:9a:54:93:63:5e:3a:aa:0c:fd:1f:fd: ed:0e:bd:55:9f:80:83:97:0a:b5:99:ab:2f:de:cd: eb:99:f5:1c:be:74:cd:9a:29:eb:b9:ac:1d:79:ee: 13:f6:6d:fb:b7:9d:a7:f6:40:2c:04:75:d8:9c:49: b4:24:a7:9a:0e:10:69:d2:d6:5f:ec:b6:c1:c1:7c: 6b:36:e5:b7:64:ce:92:f4:c9:ea:74:42:95:67:21: 7e:d3:5f:5a:2d:d1:ea:df:80:ad:24:b7:7f:9a:14: da:8f:80:a8:45:d4:5f:61:88:06:17:f2:1a:86:f5: 19:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A1:37:86:80:96:F1:32:9F:F0:9C:7C:08:30:28:2F:AB:4B:CB:27 X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cc:21:fd:63:8b:99:de:03:f5:e4:83:99:fa:49:2c:93:23: 90:a6:99:8b:04:a9:b3:21:4b:a3:02:0c:4a:94:9b:1a:b9:7c: 72:ca:22:51:b9:81:a3:87:79:80:c7:d2:74:95:24:30:ae:f4: 05:23:ef:17:2b:e7:99:da:e2:70:4f:43:cd:1a:64:cc:02:cb: fb:d7:94:f0:66:74:1e:07:11:67:4f:2c:1b:d8:e3:3e:92:dd: ac:16:57:73:26:64:f2:75:1a:ef:74:84:2d:1d:97:af:74:8c: cc:a8:34:da:5d:e0:3d:5e:42:b8:aa:c7:d0:ae:ba:c2:b2:c8: 77:48:ee:9c:68:fe:69:47:65:0a:a7:39:6d:75:2d:b0:9b:1b: 17:5e:70:96:bf:4e:f6:f0:f3:06:fb:c6:ab:43:79:1c:2b:0a: 58:e4:e3:f4:fc:77:b7:b2:9d:2d:ad:dc:3c:39:8b:78:81:0b: 12:7e:48:93:ed:22:13:28:b9:fb:6a:ea:fb:74:1c:8b:9d:cc: 86:9a:8a:82:20:77:5a:10:51:b6:17:9c:3a:a2:4d:6b:08:52: cf:d2:d8:6b:24:bb:f1:a8:4f:e3:fc:4c:e8:c1:ec:b3:3b:93: d0:9a:f7:12:ee:83:eb:b3:cd:b6:94:58:03:de:1c:db:fe:9a: 03:cf:48:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhp+lxKRLQw6pKj8vsaxieLKg4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNTA4MDUyMjE1NDlaFw0yNTA4MDkwNDE5NDlaMDMxMTAvBgNV BAMTKDA4QTEzNzg2ODA5NkYxMzI5RkYwOUM3QzA4MzAyODJGQUI0QkNCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZD5y10ncWfNFqTpoe7PfMPPj MuAIjAMJFedpicLtFWQvOTHsigvnlqAprZa5DeZ+gE55puTIY71py+x/Wm0qwocI LRiSeKPjHCL+VcjCRUJzlMHibi53KptpkMA+r4/Q4HPhlvbbAfInP0BrH/yvJIgI 2NFGCJXpYEWWRHIMXWkaM/llTvRRbyCaVJNjXjqqDP0f/e0OvVWfgIOXCrWZqy/e zeuZ9Ry+dM2aKeu5rB157hP2bfu3naf2QCwEddicSbQkp5oOEGnS1l/stsHBfGs2 5bdkzpL0yep0QpVnIX7TX1ot0erfgK0kt3+aFNqPgKhF1F9hiAYX8hqG9RkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCKE3hoCW8TKf8Jx8CDAoL6tLyycwHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzMIf1ji5neA/Xkg5n6SSyTI5CmmYsEqbMh S6MCDEqUmxq5fHLKIlG5gaOHeYDH0nSVJDCu9AUj7xcr55na4nBPQ80aZMwCy/vX lPBmdB4HEWdPLBvY4z6S3awWV3MmZPJ1Gu90hC0dl690jMyoNNpd4D1eQriqx9Cu usKyyHdI7pxo/mlHZQqnOW11LbCbGxdecJa/Tvbw8wb7xqtDeRwrCljk4/T8d7ey nS2t3Dw5i3iBCxJ+SJPtIhMouftq6vt0HIudzIaaioIgd1oQUbYXnDqiTWsIUs/S 2Gsku/GoT+P8TOjB7LM7k9Ca9xLug+uzzbaUWAPeHNv+mgPPSMw= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:11 2025 by rpki-client