$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: 8i5ch2dkJMe5z6yaFEmIC3COax6WykQW/BC59J3q3Ho= Subject key identifier: E5:96:64:04:73:43:47:8A:1A:11:40:37:64:AD:57:04:2D:28:E0:5D Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 6C6A15FED587269364838B5CAF172B80136924B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0217 Signing time: Wed 06 Aug 2025 07:30:53 +0000 Manifest this update: Wed 06 Aug 2025 07:25:53 +0000 Manifest next update: Sat 09 Aug 2025 11:47:53 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: clUFQPzuN4xoW6lh1t1tiu9NOFiR0wO/GQqciMtYzPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6a:15:fe:d5:87:26:93:64:83:8b:5c:af:17:2b:80:13:69:24:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Aug 6 07:25:53 2025 GMT Not After : Aug 9 11:47:53 2025 GMT Subject: CN=E59664047343478A1A11403764AD57042D28E05D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:20:27:0e:a4:bd:a7:cf:ef:70:c3:2a:db: b5:1d:0d:d3:df:5e:c6:85:ff:75:09:c2:50:c2:19: c2:46:8d:2d:61:c1:90:75:38:4d:00:e9:4d:21:cf: 03:c0:f9:6f:c1:0b:dc:9d:c9:5b:f9:20:30:e7:5a: db:e8:4f:7d:f2:95:f7:bf:d3:46:ad:da:b5:5e:b4: 08:13:de:9d:22:d0:f9:28:33:a6:cf:12:5e:7e:bd: cd:95:86:1e:7b:f5:07:57:58:c2:4e:59:3e:e4:9e: b0:28:cf:34:a7:ca:56:3f:53:54:80:b2:80:28:f1: 38:03:f9:f4:11:27:f0:a9:d7:c1:cb:4a:d9:05:80: 34:9b:56:f2:35:c7:72:82:5d:6d:0f:86:77:37:9c: d4:e3:3f:a4:df:58:84:62:ff:0e:49:15:a7:6e:c0: c4:57:33:ce:88:22:df:2d:6d:f4:f0:16:32:6e:e5: af:dc:1c:f9:89:f8:dd:b4:f3:b7:a7:39:d0:8b:1c: 27:24:cc:c3:a2:95:f7:21:d3:21:26:39:14:ca:c7: a1:83:b8:e6:d7:81:0f:ef:e3:f5:7b:93:48:12:ca: a9:fa:6a:a2:e7:e1:05:94:ce:95:c9:3d:f6:bc:e2: 75:3d:27:f1:a8:8e:76:f8:4f:d5:b6:d8:bf:31:bb: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:96:64:04:73:43:47:8A:1A:11:40:37:64:AD:57:04:2D:28:E0:5D X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:03:d3:9f:cb:5c:02:0e:70:0b:86:d0:09:10:e3:bb:60:0e: f5:f9:85:06:f9:3a:fc:01:96:37:a1:fc:43:b5:77:f4:78:c6: 96:08:5e:89:7a:19:ae:27:3a:b1:d8:6d:c8:13:c8:b1:76:12: bc:6b:65:6e:e0:52:fb:b3:c3:06:7f:c5:1e:7f:b2:bd:ab:c7: 73:7e:f4:2c:94:43:cb:ee:d6:6f:2e:a6:e7:d9:54:e7:ff:79: 5b:92:b7:6d:33:0c:d4:6a:a8:37:b7:2c:ab:e1:52:7d:e7:ce: ce:ef:67:9d:40:d0:7a:41:dc:c7:a9:e4:80:90:c9:b3:22:14: 1c:a3:a1:a1:d9:14:d9:05:c3:17:27:55:86:a5:c5:ca:ce:64: fd:eb:92:46:47:8a:9a:df:18:0d:aa:48:78:d1:03:88:7e:26: f4:30:73:4b:8c:99:a5:05:f7:31:4b:40:1b:1a:36:15:c8:ca: 09:23:38:1b:97:64:f9:41:f9:06:ba:d5:6d:49:b2:c3:b6:1a: 61:c0:8f:ee:de:43:c0:b5:5b:fb:51:53:d8:ba:2c:49:be:e4: 93:df:01:c8:84:8b:44:d6:76:6a:e1:ca:7a:8a:16:f6:78:76: 31:97:c9:22:2a:fc:d0:78:a9:fe:3a:32:d5:23:43:34:a2:fe: 15:e8:c0:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGoV/tWHJpNkg4tcrxcrgBNpJLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTA4MDYwNzI1NTNaFw0yNTA4MDkxMTQ3NTNaMDMxMTAvBgNV BAMTKEU1OTY2NDA0NzM0MzQ3OEExQTExNDAzNzY0QUQ1NzA0MkQyOEUwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZSAnDqS9p8/vcMMq27UdDdPf XsaF/3UJwlDCGcJGjS1hwZB1OE0A6U0hzwPA+W/BC9ydyVv5IDDnWtvoT33ylfe/ 00at2rVetAgT3p0i0PkoM6bPEl5+vc2Vhh579QdXWMJOWT7knrAozzSnylY/U1SA soAo8TgD+fQRJ/Cp18HLStkFgDSbVvI1x3KCXW0Phnc3nNTjP6TfWIRi/w5JFadu wMRXM86IIt8tbfTwFjJu5a/cHPmJ+N2087enOdCLHCckzMOilfch0yEmORTKx6GD uObXgQ/v4/V7k0gSyqn6aqLn4QWUzpXJPfa84nU9J/Gojnb4T9W22L8xu1HxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZZkBHNDR4oaEUA3ZK1XBC0o4F0wHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAD05/LXAIOcAuG0AkQ47tgDvX5hQb5OvwB ljeh/EO1d/R4xpYIXol6Ga4nOrHYbcgTyLF2ErxrZW7gUvuzwwZ/xR5/sr2rx3N+ 9CyUQ8vu1m8upufZVOf/eVuSt20zDNRqqDe3LKvhUn3nzs7vZ51A0HpB3Mep5ICQ ybMiFByjoaHZFNkFwxcnVYalxcrOZP3rkkZHiprfGA2qSHjRA4h+JvQwc0uMmaUF 9zFLQBsaNhXIygkjOBuXZPlB+Qa61W1JssO2GmHAj+7eQ8C1W/tRU9i6LEm+5JPf AciEi0TWdmrhynqKFvZ4djGXySIq/NB4qf46MtUjQzSi/hXowLo= -----END CERTIFICATE-----Generated at Thu Aug 7 07:21:39 2025 by rpki-client