$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: Gu5ALetl7fZ17YLpMJrztnJ7wM0kxQKiLtbbTm1syx4= Subject key identifier: 71:D2:A7:5D:70:C8:81:C1:ED:05:5D:AF:A8:03:35:6E:26:CF:78:C4 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 1A0FD00F00E4DFC97FEDC0517E0BC781E7E9DFEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: 8A Signing time: Fri 08 Aug 2025 05:00:38 +0000 Manifest this update: Fri 08 Aug 2025 04:55:38 +0000 Manifest next update: Mon 11 Aug 2025 12:40:38 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: 5l6hoa08xPi2s0bXEhIaqRWfY7dmJO+pOS/Kxq79FRI=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 12:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0f:d0:0f:00:e4:df:c9:7f:ed:c0:51:7e:0b:c7:81:e7:e9:df:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Aug 8 04:55:38 2025 GMT Not After : Aug 11 12:40:38 2025 GMT Subject: CN=71D2A75D70C881C1ED055DAFA803356E26CF78C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:6f:f2:85:78:83:b3:7b:4e:7d:23:57:4a: c2:c5:eb:1e:8c:dc:e5:09:79:0f:36:54:84:89:09: a0:85:7e:25:dc:ab:b8:11:9f:23:67:78:f6:ba:08: 14:d6:59:44:7b:6e:04:a7:28:23:e6:5f:65:37:ab: 73:7d:ca:cb:0b:ba:d8:06:cf:bc:9c:ea:4e:47:28: 8f:39:54:30:75:9c:b1:6c:c5:64:a6:38:36:13:7d: 8d:88:6a:d6:d8:39:6b:ac:cc:1a:43:30:12:17:6e: bf:3a:a5:65:f2:32:f6:a6:0c:30:bf:af:98:76:63: d1:ff:2b:ab:4e:7a:ee:7e:25:0b:94:13:c6:20:83: 42:02:ad:91:79:63:91:cd:ce:db:42:89:a0:a2:47: 49:54:ad:0e:c3:49:ce:ee:e1:01:8a:28:7e:49:2b: 22:65:7a:af:2f:53:78:c1:33:bb:83:7c:c8:ed:3c: 4a:c6:fa:3a:c9:eb:e3:95:c5:8e:52:46:2e:c3:ee: fb:e1:67:26:2b:bd:5a:b5:91:42:c2:f8:60:6e:d8: b8:47:d7:21:f4:90:96:22:d5:ea:9f:1e:60:e4:b1: 83:df:e1:8e:39:92:8a:88:95:22:5f:2e:ec:1a:dc: bd:67:bf:7b:04:b0:95:df:50:ef:ae:03:c9:6c:06: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D2:A7:5D:70:C8:81:C1:ED:05:5D:AF:A8:03:35:6E:26:CF:78:C4 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:75:9c:ff:2f:16:75:30:7b:e6:b6:9a:30:59:96:99:fd:86: 9d:70:78:c3:b9:a2:ae:eb:60:7f:f1:c0:ab:bc:9a:4c:0b:47: df:dd:f7:77:1f:9e:fa:7d:0f:3a:36:df:a9:af:f1:40:88:42: bc:63:29:ac:c5:16:db:f0:35:43:7a:fd:5f:72:47:59:8e:30: ef:27:be:4b:72:eb:8a:82:14:49:79:ea:ee:fc:5a:54:11:93: 39:be:1e:7a:3f:b0:1b:a2:8b:b2:bd:f2:02:66:af:86:1d:07: 8c:9f:2d:8b:11:a7:c8:89:c6:4a:61:4e:28:94:ce:48:0a:6f: 23:52:c7:87:98:30:02:8c:d1:56:c3:5e:15:b7:ba:ce:af:05: 88:64:f6:c7:58:8c:89:b3:bb:2c:ff:cd:33:b2:f7:1c:ac:13: 8d:83:59:00:20:1a:c6:9b:36:99:a4:b9:ea:ec:92:b2:7a:af: 2b:f1:db:ed:69:19:96:f5:25:49:28:30:90:75:37:58:ec:2a: 42:75:8b:2f:a0:bf:f3:49:55:e4:21:17:26:4c:94:51:57:93: 1d:58:8a:5c:0e:2a:d7:92:8d:8b:90:ce:72:77:a9:19:4c:20: 00:15:3d:8c:d0:20:34:0e:91:2b:0d:97:17:06:db:b2:18:f9: 70:68:8a:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGg/QDwDk38l/7cBRfgvHgefp3+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTA4MDgwNDU1MzhaFw0yNTA4MTExMjQwMzhaMDMxMTAvBgNV BAMTKDcxRDJBNzVENzBDODgxQzFFRDA1NURBRkE4MDMzNTZFMjZDRjc4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXs2/yhXiDs3tOfSNXSsLF6x6M 3OUJeQ82VISJCaCFfiXcq7gRnyNnePa6CBTWWUR7bgSnKCPmX2U3q3N9yssLutgG z7yc6k5HKI85VDB1nLFsxWSmODYTfY2IatbYOWuszBpDMBIXbr86pWXyMvamDDC/ r5h2Y9H/K6tOeu5+JQuUE8Ygg0ICrZF5Y5HNzttCiaCiR0lUrQ7DSc7u4QGKKH5J KyJleq8vU3jBM7uDfMjtPErG+jrJ6+OVxY5SRi7D7vvhZyYrvVq1kULC+GBu2LhH 1yH0kJYi1eqfHmDksYPf4Y45koqIlSJfLuwa3L1nv3sEsJXfUO+uA8lsBgdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdKnXXDIgcHtBV2vqAM1bibPeMQwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ91nP8vFnUwe+a2mjBZlpn9hp1weMO5oq7r YH/xwKu8mkwLR9/d93cfnvp9Dzo236mv8UCIQrxjKazFFtvwNUN6/V9yR1mOMO8n vkty64qCFEl56u78WlQRkzm+Hno/sBuii7K98gJmr4YdB4yfLYsRp8iJxkphTiiU zkgKbyNSx4eYMAKM0VbDXhW3us6vBYhk9sdYjImzuyz/zTOy9xysE42DWQAgGsab NpmkuerskrJ6ryvx2+1pGZb1JUkoMJB1N1jsKkJ1iy+gv/NJVeQhFyZMlFFXkx1Y ilwOKteSjYuQznJ3qRlMIAAVPYzQIDQOkSsNlxcG27IY+XBoijc= -----END CERTIFICATE-----Generated at Sat Aug 9 20:40:35 2025 by rpki-client