$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: MEWPG1PyTCIFREEJXWlBQgO6tYUfw2KPGx0L69iujSI= Subject key identifier: 8F:C8:B6:EB:87:A8:11:C9:74:4F:6B:91:CC:02:44:40:42:DB:55:38 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 480956DD4E88AA7DAB9BD8E7090EC6E924C438CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 017F Signing time: Sat 09 Aug 2025 07:52:14 +0000 Manifest this update: Sat 09 Aug 2025 07:47:14 +0000 Manifest next update: Tue 12 Aug 2025 18:40:14 +0000 Files and hashes: 1: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: ZWN/qcMhFh+BC9o/6WMz4wnBquR3FnJ9nj5VLb1Gd0E=) 2: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: HiN7YoBVkQHKPRmQcIw7KecJDTn4UB8o7deSNxTmkOk=) 3: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: SFmXn9PezsJj2J+n/KO+JoUR1XmcH1D+ZwQywLjd4NQ=) 4: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: PTq4K7C1NfA7u/hBgxfzHnc927GHuD0+t6G+/br9unw=) 5: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 5L7KwFUgvVnXbTdBI9pybBL9RZN1DFSQWqr7TkH60p0=) 6: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: eQ5WMRJPy7gKupW5F4m6uPUC6SkCMo1WY0hvFb3YFm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:09:56:dd:4e:88:aa:7d:ab:9b:d8:e7:09:0e:c6:e9:24:c4:38:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Aug 9 07:47:14 2025 GMT Not After : Aug 12 18:40:14 2025 GMT Subject: CN=8FC8B6EB87A811C9744F6B91CC02444042DB5538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:68:9b:45:c9:d0:50:25:d1:4c:8e:22:45:db: 2a:80:54:b7:c1:0e:5d:aa:29:4b:72:41:ac:1e:74: 0f:f9:3f:3c:63:ae:75:b2:3e:21:93:62:bb:4e:38: 58:f1:82:a9:21:c0:49:30:3e:2e:c4:a2:76:ac:bf: cd:d4:c2:0d:91:47:01:33:a1:fa:57:4d:e1:f7:c6: a2:a8:31:86:11:72:06:c8:7f:52:d9:0e:b7:3b:1a: 6d:19:b7:9b:20:b0:5d:c1:25:95:d9:c8:38:88:e5: d9:97:b4:9f:eb:86:fc:ed:52:8f:4d:5b:ae:ec:46: 63:ff:13:a1:2a:9e:d8:36:e8:b5:44:06:82:e1:4a: 8f:9f:a0:e0:01:75:65:b9:2a:2d:cf:c4:b5:da:ff: d3:aa:e9:e2:a4:11:6f:97:91:f7:5b:f3:4e:1a:81: 7f:e1:30:90:58:d6:43:72:9a:26:dc:e6:d4:92:4b: 4a:b1:be:f0:50:7c:0a:cc:b9:82:a1:f7:44:b4:35: 44:cf:d9:b5:f1:df:58:41:4f:61:64:a0:aa:fa:36: 4a:6b:5b:dd:2d:f9:15:8b:e5:8f:dc:16:de:80:92: e8:e0:ac:32:b3:df:a0:4c:db:67:ef:d0:84:86:81: 89:6f:bf:d2:7f:6e:94:fc:dc:b1:37:4b:a6:f5:e2: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C8:B6:EB:87:A8:11:C9:74:4F:6B:91:CC:02:44:40:42:DB:55:38 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:63:df:50:06:21:35:58:df:9f:73:51:d8:81:5d:d1:ba:b1: df:fa:9e:ae:a7:fa:a5:ff:b1:d6:db:5a:97:d9:2c:75:9f:e6: ef:c2:f4:27:70:99:6f:76:1d:38:91:61:cc:79:73:e8:9c:2a: d1:d8:a5:ae:4b:f0:2c:8d:da:31:94:7c:8d:82:4a:a7:de:40: 28:1d:cb:82:c1:93:b3:57:52:b8:b8:85:32:58:84:64:e1:40: ab:f0:61:de:21:a3:36:25:04:99:08:5c:72:5f:c9:c0:51:12: 1d:38:0f:d4:a9:dd:97:7e:b9:69:9d:71:3e:59:e9:e9:c8:33: 2a:0a:76:19:0b:e0:20:24:41:87:6d:cd:78:ae:30:8c:f0:66: 27:62:b0:e3:85:38:58:49:2a:75:07:66:20:85:cb:e8:cb:ef: 1f:cc:a4:da:cf:a5:64:92:e7:5e:5b:b5:15:df:d2:2e:64:a4: f9:27:73:2e:dc:16:75:af:cf:ba:bd:14:4f:45:a0:51:ce:ec: 3d:9c:7f:85:f0:58:03:40:ef:16:2d:54:fe:7d:98:72:b6:26: 4e:c3:72:4c:ef:e2:ce:7f:ca:d9:3f:dc:55:65:9b:7a:6f:2f: ca:5f:14:d8:82:17:9d:81:99:12:dd:83:9b:7f:34:a2:01:90: 2a:c8:b1:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSAlW3U6Iqn2rm9jnCQ7G6STEOMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNTA4MDkwNzQ3MTRaFw0yNTA4MTIxODQwMTRaMDMxMTAvBgNV BAMTKDhGQzhCNkVCODdBODExQzk3NDRGNkI5MUNDMDI0NDQwNDJEQjU1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaJtFydBQJdFMjiJF2yqAVLfB Dl2qKUtyQawedA/5PzxjrnWyPiGTYrtOOFjxgqkhwEkwPi7Eonasv83Uwg2RRwEz ofpXTeH3xqKoMYYRcgbIf1LZDrc7Gm0Zt5sgsF3BJZXZyDiI5dmXtJ/rhvztUo9N W67sRmP/E6Eqntg26LVEBoLhSo+foOABdWW5Ki3PxLXa/9Oq6eKkEW+Xkfdb804a gX/hMJBY1kNymibc5tSSS0qxvvBQfArMuYKh90S0NUTP2bXx31hBT2FkoKr6Nkpr W90t+RWL5Y/cFt6AkujgrDKz36BM22fv0ISGgYlvv9J/bpT83LE3S6b14iOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8i264eoEcl0T2uRzAJEQELbVTgwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxj31AGITVY359zUdiBXdG6sd/6nq6n+qX/ sdbbWpfZLHWf5u/C9CdwmW92HTiRYcx5c+icKtHYpa5L8CyN2jGUfI2CSqfeQCgd y4LBk7NXUri4hTJYhGThQKvwYd4hozYlBJkIXHJfycBREh04D9Sp3Zd+uWmdcT5Z 6enIMyoKdhkL4CAkQYdtzXiuMIzwZidisOOFOFhJKnUHZiCFy+jL7x/MpNrPpWSS 515btRXf0i5kpPkncy7cFnWvz7q9FE9FoFHO7D2cf4XwWANA7xYtVP59mHK2Jk7D ckzv4s5/ytk/3FVlm3pvL8pfFNiCF52BmRLdg5t/NKIBkCrIsYM= -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:27 2025 by rpki-client