$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: kn9lcK3cLd/aZfquuaBxyDEygtLYDkTvgvnf9EgCIss= Subject key identifier: 3A:36:16:E1:80:42:80:D9:E5:2C:8A:54:4C:BF:D4:E5:D2:8B:67:72 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 651FF54C72AB5891A97D8F04BD5B07855FEB9FE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: B1 Signing time: Mon 03 Nov 2025 18:10:37 +0000 Manifest this update: Mon 03 Nov 2025 18:05:37 +0000 Manifest next update: Fri 07 Nov 2025 03:10:37 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) 2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: OCvuN+cNQ7SJ6+4+TLQubKLDNcPJSAS0sif0Yafv1dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1f:f5:4c:72:ab:58:91:a9:7d:8f:04:bd:5b:07:85:5f:eb:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Nov 3 18:05:37 2025 GMT Not After : Nov 7 03:10:37 2025 GMT Subject: CN=3A3616E1804280D9E52C8A544CBFD4E5D28B6772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:c9:3d:76:1a:a5:cc:9b:78:df:e3:22:c1: 6a:9d:38:ab:51:c4:72:92:de:ac:9e:82:9c:f7:63: 61:3a:38:46:a0:f4:c8:a3:da:ae:a2:c8:0a:75:ea: 8f:de:f7:fc:b3:ef:0c:97:8f:01:cf:b4:2b:12:b1: 62:47:2d:30:eb:5d:f7:33:25:10:e1:b8:fd:59:8a: 3a:0f:cb:03:6b:61:08:79:ac:fe:d8:6b:e1:8b:88: d7:b7:a9:2c:c8:12:d7:8b:20:51:fb:11:b9:5c:e8: 89:73:be:6e:b2:a3:23:60:50:aa:b8:0b:d1:26:59: 7c:65:d6:12:6e:cc:eb:05:a1:94:55:1d:58:07:2e: 96:08:95:a7:0c:2e:35:90:53:6b:11:98:cf:c3:55: 76:4f:a6:49:d6:53:c5:39:d6:a7:90:fd:86:e1:a3: 38:ba:43:4b:77:df:78:fa:d2:61:53:3a:05:e1:00: 3e:0a:4d:61:3b:fa:59:93:0e:92:0b:bd:ac:37:67: 27:a4:dc:0a:26:f6:5a:06:5f:88:10:f2:62:98:08: 9e:e2:c6:6d:3a:6f:54:68:97:ca:08:d4:54:58:92: 18:9f:7c:30:0b:73:d2:7d:c5:12:d4:0b:32:5d:b8: 85:11:0e:6e:b6:7a:25:3d:e8:59:0e:9b:a8:19:3d: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:36:16:E1:80:42:80:D9:E5:2C:8A:54:4C:BF:D4:E5:D2:8B:67:72 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:15:83:79:68:20:80:99:55:18:e4:e4:6e:f4:d3:f4:46:8f: b1:42:bc:33:d1:a5:5a:f8:f8:e5:15:81:80:f7:bf:46:a6:3d: 88:fd:ae:3c:99:f7:ee:51:69:07:98:c4:ef:f8:5f:6a:62:dd: 71:c8:81:49:6b:d8:84:96:b1:e5:48:ec:ef:a6:72:83:aa:6c: 88:00:ac:c3:41:19:0d:2d:dc:3c:e2:ab:fc:a7:15:67:75:fa: 93:26:29:66:27:cc:e7:ef:c9:44:08:5e:55:3f:c7:e6:00:b0: 10:b7:e0:a9:0d:4d:86:cd:9e:b3:8e:02:51:88:db:67:3f:e6: e8:d8:0b:3b:e3:1d:8c:54:1d:db:80:51:4b:b8:63:aa:10:1e: 13:f8:10:7d:b5:db:04:f6:da:1c:d1:ad:2a:a9:25:8e:0c:8d: 5d:5b:9e:8e:f7:3e:bd:df:bf:6e:f0:96:00:02:73:ec:3b:59: b7:4f:5c:30:58:3f:14:72:57:a7:93:66:90:d4:60:3e:08:98: 87:9f:2e:7a:79:12:6b:53:b3:d9:34:4c:92:06:cd:55:b7:9d: e9:eb:36:bf:24:b1:98:f6:2a:81:d1:16:16:74:18:93:bd:1a: f0:18:5b:dd:77:ad:45:2e:15:7c:ca:d3:e7:67:b5:ff:e3:5a: 6e:cc:30:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZR/1THKrWJGpfY8EvVsHhV/rn+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTExMDMxODA1MzdaFw0yNTExMDcwMzEwMzdaMDMxMTAvBgNV BAMTKDNBMzYxNkUxODA0MjgwRDlFNTJDOEE1NDRDQkZENEU1RDI4QjY3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDf8k9dhqlzJt43+MiwWqdOKtR xHKS3qyegpz3Y2E6OEag9Mij2q6iyAp16o/e9/yz7wyXjwHPtCsSsWJHLTDrXfcz JRDhuP1ZijoPywNrYQh5rP7Ya+GLiNe3qSzIEteLIFH7Eblc6Ilzvm6yoyNgUKq4 C9EmWXxl1hJuzOsFoZRVHVgHLpYIlacMLjWQU2sRmM/DVXZPpknWU8U51qeQ/Ybh ozi6Q0t333j60mFTOgXhAD4KTWE7+lmTDpILvaw3Zyek3Aom9loGX4gQ8mKYCJ7i xm06b1Rol8oI1FRYkhiffDALc9J9xRLUCzJduIURDm62eiU96FkOm6gZPU+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjYW4YBCgNnlLIpUTL/U5dKLZ3IwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYVg3loIICZVRjk5G700/RGj7FCvDPRpVr4 +OUVgYD3v0amPYj9rjyZ9+5RaQeYxO/4X2pi3XHIgUlr2ISWseVI7O+mcoOqbIgA rMNBGQ0t3Dziq/ynFWd1+pMmKWYnzOfvyUQIXlU/x+YAsBC34KkNTYbNnrOOAlGI 22c/5ujYCzvjHYxUHduAUUu4Y6oQHhP4EH212wT22hzRrSqpJY4MjV1bno73Pr3f v27wlgACc+w7WbdPXDBYPxRyV6eTZpDUYD4ImIefLnp5EmtTs9k0TJIGzVW3nenr Nr8ksZj2KoHRFhZ0GJO9GvAYW913rUUuFXzK0+dntf/jWm7MMIA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:24 2025 by rpki-client