$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: WLuUJG0g/PSw/iHi++igif0w7W/FgMnev6AIK7R87Tg= Subject key identifier: 4B:5F:19:1B:0F:C8:F6:81:91:B5:86:58:6C:8A:A7:46:27:09:89:3A Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 4AE3F92A291BAB32BB6EDC2B3E7DAE151640EEFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 04CC Signing time: Mon 28 Apr 2025 19:00:02 +0000 Manifest this update: Mon 28 Apr 2025 18:55:02 +0000 Manifest next update: Fri 02 May 2025 04:17:02 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: +ncF+8DsxAehnxNLvv1l20gTEn/1YKWEnl6rFJLIApA=) 2: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: lrqhqtOZJkmha6ZGv7bI89mmyj1v5kbbhR3yfdjdeC0=) 3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: qLsMIEaKhWpq1bQAf83UJbdJ8NLzwZWxL7cCtTMq2j8=) 4: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: svtAgr7JYBUtzNyfSdE+KV0Sgk1PqrBBCZ7/LnJ3fFw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e3:f9:2a:29:1b:ab:32:bb:6e:dc:2b:3e:7d:ae:15:16:40:ee:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Apr 28 18:55:02 2025 GMT Not After : May 2 04:17:02 2025 GMT Subject: CN=4B5F191B0FC8F68191B586586C8AA7462709893A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:c8:21:16:79:a7:dd:8a:db:49:e4:3c:63: 75:51:f6:f5:a0:09:a4:f1:2e:8d:fa:7a:17:15:ae: a4:37:7f:dd:8e:06:61:f5:d1:56:d5:e0:82:30:16: b8:aa:0d:c8:19:d3:23:59:0d:d4:49:b9:f9:bb:96: c5:ed:c8:3c:e6:6e:7d:d9:aa:5c:94:a1:72:6f:53: dc:2e:c6:10:4a:a1:31:01:db:f8:b5:4f:37:17:47: fe:a4:6f:f5:fd:81:35:c5:0b:51:dd:32:8d:50:9a: c2:c4:af:36:fb:99:e1:c2:dc:cb:dc:04:c4:77:dd: 60:cb:49:32:f5:4a:3d:50:d4:64:2e:ee:38:66:88: 28:1b:8f:f5:22:1a:3f:82:e6:7e:07:0b:e8:cd:db: 81:93:f1:13:7c:37:54:f1:17:42:15:10:f5:4d:15: 12:43:b8:94:d5:a9:4b:8e:f3:ca:41:8b:a4:c8:59: 06:e8:2a:2f:27:e3:06:6b:e4:16:56:74:5c:b6:ea: 09:e9:65:17:12:3e:a1:96:c3:6b:ca:30:53:0f:64: dc:e9:ab:ab:40:4e:1a:8a:53:61:25:77:2f:89:ca: 30:37:85:b1:95:d2:94:8b:8a:3d:4e:0e:38:0a:7c: 10:54:e8:b4:b2:dd:64:fd:4e:b0:6c:fb:c5:7e:e8: 08:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5F:19:1B:0F:C8:F6:81:91:B5:86:58:6C:8A:A7:46:27:09:89:3A X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:dd:ad:70:c8:05:c1:81:c8:43:54:2d:bf:ff:fc:a2:08:67: 02:96:61:97:20:30:e4:83:c1:c1:3b:ed:96:ea:2c:a2:fe:26: 25:dd:8d:90:30:92:d0:4b:10:fa:53:27:70:90:b9:58:ca:1e: 92:84:e4:09:b1:28:a0:bb:1f:13:4a:fe:3b:95:e2:6e:30:5b: c2:57:d9:09:94:aa:08:9b:41:0d:a4:2b:6e:d5:5d:9b:f9:b1: c6:49:d8:59:76:77:40:d6:b5:f7:b0:77:75:90:f6:f8:7d:68: 60:03:fe:66:cf:43:72:ac:00:91:01:ff:e8:af:b9:03:7e:d9: 76:78:c2:d9:5b:7b:97:6d:b0:78:4a:fc:e2:66:a2:39:9d:00: f0:36:e6:6a:3d:e6:a1:94:2f:8f:ef:bd:6f:8b:29:27:62:c4: 47:28:19:82:1e:6c:c7:c1:f9:33:e1:0f:61:f3:56:5d:65:06: f8:d1:df:a7:56:77:43:1a:2f:1f:eb:de:4c:cb:c4:f4:55:d8: 40:e6:54:9b:fc:7f:35:3c:b4:f6:67:3e:33:89:70:de:cb:6a: 71:34:bd:be:95:95:14:db:91:3f:b9:87:42:71:c2:ea:05:e2: e9:0b:91:f2:9f:a5:dc:d4:d3:17:88:74:09:ba:25:19:93:9f: 47:68:29:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuP5KikbqzK7btwrPn2uFRZA7vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTA0MjgxODU1MDJaFw0yNTA1MDIwNDE3MDJaMDMxMTAvBgNV BAMTKDRCNUYxOTFCMEZDOEY2ODE5MUI1ODY1ODZDOEFBNzQ2MjcwOTg5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OcghFnmn3YrbSeQ8Y3VR9vWg CaTxLo36ehcVrqQ3f92OBmH10VbV4IIwFriqDcgZ0yNZDdRJufm7lsXtyDzmbn3Z qlyUoXJvU9wuxhBKoTEB2/i1TzcXR/6kb/X9gTXFC1HdMo1QmsLErzb7meHC3Mvc BMR33WDLSTL1Sj1Q1GQu7jhmiCgbj/UiGj+C5n4HC+jN24GT8RN8N1TxF0IVEPVN FRJDuJTVqUuO88pBi6TIWQboKi8n4wZr5BZWdFy26gnpZRcSPqGWw2vKMFMPZNzp q6tAThqKU2Eldy+JyjA3hbGV0pSLij1ODjgKfBBU6LSy3WT9TrBs+8V+6AjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS18ZGw/I9oGRtYZYbIqnRicJiTowHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjdrXDIBcGByENULb///KIIZwKWYZcgMOSD wcE77ZbqLKL+JiXdjZAwktBLEPpTJ3CQuVjKHpKE5AmxKKC7HxNK/juV4m4wW8JX 2QmUqgibQQ2kK27VXZv5scZJ2Fl2d0DWtfewd3WQ9vh9aGAD/mbPQ3KsAJEB/+iv uQN+2XZ4wtlbe5dtsHhK/OJmojmdAPA25mo95qGUL4/vvW+LKSdixEcoGYIebMfB +TPhD2HzVl1lBvjR36dWd0MaLx/r3kzLxPRV2EDmVJv8fzU8tPZnPjOJcN7LanE0 vb6VlRTbkT+5h0JxwuoF4ukLkfKfpdzU0xeIdAm6JRmTn0doKeY= -----END CERTIFICATE-----Generated at Wed Apr 30 09:37:41 2025 by rpki-client