$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: yGsWH7JzwcBc/YAE5c0I8bKUvmnBdHuEtl7xuguRWbY= Subject key identifier: E5:1C:F2:4B:F5:CF:D8:8C:A4:29:98:78:28:C7:4C:21:85:C2:2D:B6 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 1C913493BBFEEEF8DA133C3AE4CDBA11D848EEC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: 7E Signing time: Sun 15 Jun 2025 08:30:39 +0000 Manifest this update: Sun 15 Jun 2025 08:25:39 +0000 Manifest next update: Wed 18 Jun 2025 16:46:39 +0000 Files and hashes: 1: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: Sy4Zv56/h+h2tr9u6pr36Qsrg0JxEWc+CCvFkCuIuBM=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:91:34:93:bb:fe:ee:f8:da:13:3c:3a:e4:cd:ba:11:d8:48:ee:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Jun 15 08:25:39 2025 GMT Not After : Jun 18 16:46:39 2025 GMT Subject: CN=E51CF24BF5CFD88CA429987828C74C2185C22DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:24:02:54:8d:e7:74:fa:0e:35:a1:99:33: 80:65:c2:3d:ff:59:05:6c:b0:44:3e:3b:77:e3:42: a4:d1:83:82:98:34:5f:13:cd:79:8b:c7:b0:2f:3c: fd:f4:99:fe:a3:78:a6:b3:2a:fd:bb:5c:b9:29:a1: d2:db:36:4e:cc:32:34:ed:9b:1b:4e:a6:85:9a:19: ce:97:69:e6:82:46:e8:97:f1:33:3c:74:f4:cd:7d: c1:99:21:df:3e:b3:f9:c6:91:96:77:01:33:63:d6: 3b:51:cc:fd:6b:10:dc:e0:f8:04:47:46:e5:8c:5a: 31:47:cf:f7:12:e8:82:b9:02:72:19:64:8d:6b:46: 00:c7:6c:81:6b:00:5a:a6:32:e7:24:33:94:bf:a3: 02:aa:08:3a:19:02:cb:64:b6:b7:95:2b:3b:11:78: 8a:4f:40:75:7f:96:67:22:d7:75:fe:ec:7b:50:88: 00:7a:e0:a0:56:85:1a:32:2a:ed:a9:b2:62:08:1b: d7:e3:8b:e6:4a:2c:52:4e:30:e2:86:1a:cd:90:37: f9:e4:22:de:d8:c1:85:4e:fe:08:e9:83:ab:73:ea: 0a:a2:6c:01:f0:51:e8:fa:7c:8a:6a:0f:cc:1f:7d: 4e:90:88:dd:5d:56:b6:ce:49:16:f8:a4:ae:61:5a: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1C:F2:4B:F5:CF:D8:8C:A4:29:98:78:28:C7:4C:21:85:C2:2D:B6 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:90:23:18:7f:f4:5f:21:01:aa:9d:ba:bf:21:6e:8f:b3:f8: fe:79:a2:f9:f5:65:be:09:5b:e3:c5:a3:86:93:f8:cc:30:85: fb:1a:15:08:38:49:79:ea:7f:b4:c0:0b:1a:f0:f9:df:e5:00: 6f:43:80:37:e1:01:33:94:65:be:51:2b:a6:43:56:73:19:fc: 28:bb:8d:74:d4:46:a8:e3:08:06:25:46:22:87:7a:76:b8:19: 0e:de:cb:e6:f3:7e:c7:ee:47:0e:8a:97:91:92:cf:b0:3d:03: 35:11:03:f1:f1:99:fc:0e:c3:cd:a5:f1:bc:da:59:81:34:2d: aa:ae:92:0b:3d:6d:1f:ae:d6:3f:31:8c:53:cf:9b:72:35:d1: 35:4a:a9:6e:17:a4:85:04:c8:9f:2f:a8:7f:0e:06:e9:b1:fc: 37:32:9f:72:f7:00:55:d6:5d:a7:e1:61:3a:70:a6:b8:d5:4e: 32:03:90:f7:b5:85:c9:9f:cd:70:d4:93:c8:fc:16:60:9d:bd: 8e:2d:a4:33:51:cd:2e:4a:c0:19:56:68:ba:b0:21:58:56:ed: 89:00:b3:c3:c1:24:01:6d:b7:fd:41:76:f3:6b:f7:79:e9:5e: 91:66:a7:de:45:e2:b4:2d:b1:2f:9a:fb:16:32:9f:b6:3a:77: c0:be:74:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJE0k7v+7vjaEzw65M26EdhI7skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA2MTUwODI1MzlaFw0yNTA2MTgxNjQ2MzlaMDMxMTAvBgNV BAMTKEU1MUNGMjRCRjVDRkQ4OENBNDI5OTg3ODI4Qzc0QzIxODVDMjJEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+yQCVI3ndPoONaGZM4Blwj3/ WQVssEQ+O3fjQqTRg4KYNF8TzXmLx7AvPP30mf6jeKazKv27XLkpodLbNk7MMjTt mxtOpoWaGc6XaeaCRuiX8TM8dPTNfcGZId8+s/nGkZZ3ATNj1jtRzP1rENzg+ARH RuWMWjFHz/cS6IK5AnIZZI1rRgDHbIFrAFqmMuckM5S/owKqCDoZAstktreVKzsR eIpPQHV/lmci13X+7HtQiAB64KBWhRoyKu2psmIIG9fji+ZKLFJOMOKGGs2QN/nk It7YwYVO/gjpg6tz6gqibAHwUej6fIpqD8wffU6QiN1dVrbOSRb4pK5hWh/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5RzyS/XP2IykKZh4KMdMIYXCLbYwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCQIxh/9F8hAaqdur8hbo+z+P55ovn1Zb4J W+PFo4aT+MwwhfsaFQg4SXnqf7TACxrw+d/lAG9DgDfhATOUZb5RK6ZDVnMZ/Ci7 jXTURqjjCAYlRiKHena4GQ7ey+bzfsfuRw6Kl5GSz7A9AzURA/HxmfwOw82l8bza WYE0Laqukgs9bR+u1j8xjFPPm3I10TVKqW4XpIUEyJ8vqH8OBumx/Dcyn3L3AFXW XafhYTpwprjVTjIDkPe1hcmfzXDUk8j8FmCdvY4tpDNRzS5KwBlWaLqwIVhW7YkA s8PBJAFtt/1BdvNr93npXpFmp95F4rQtsS+a+xYyn7Y6d8C+dBI= -----END CERTIFICATE-----Generated at Mon Jun 16 04:31:47 2025 by rpki-client