$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: LCWEg3wUaFzmnpz/12HDqaU/qFPFyFsVHaa0DSwOikU= Subject key identifier: ED:7C:53:68:0D:38:F2:88:8A:FE:BC:2D:E8:47:A0:8B:FF:AF:DD:CA Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 7E25C18EA2435FBC175F02831A5D74E83B9F8EB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: 94 Signing time: Mon 04 Aug 2025 16:00:40 +0000 Manifest this update: Mon 04 Aug 2025 15:55:40 +0000 Manifest next update: Fri 08 Aug 2025 00:16:40 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: XURwSkN9kdBVM9m7ihYpNQDKgKLU82gCisGIayCryso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:25:c1:8e:a2:43:5f:bc:17:5f:02:83:1a:5d:74:e8:3b:9f:8e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Aug 4 15:55:40 2025 GMT Not After : Aug 8 00:16:40 2025 GMT Subject: CN=ED7C53680D38F2888AFEBC2DE847A08BFFAFDDCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:36:48:d7:46:a0:e3:a3:db:ad:f1:c5:c9: 24:05:be:e1:f4:bf:fd:c7:11:c6:7e:a6:9f:f5:95: 98:65:f0:f7:59:f8:d6:fb:ba:48:1e:72:a3:89:0b: 58:8e:62:a5:90:b1:e9:94:2d:47:98:48:d3:2c:81: 52:6f:be:c5:08:41:ae:ee:72:21:50:37:a9:a8:b6: 5c:11:bb:a0:c1:6a:ac:6d:09:4a:18:b9:7c:5a:db: 5a:ef:f5:d3:57:73:be:b3:c6:68:5b:94:29:24:a9: 79:69:21:35:1f:54:d2:e4:a4:8d:41:3f:b6:06:84: 57:61:e1:25:68:82:9b:21:02:66:00:ac:d5:ae:af: c9:25:13:d2:83:48:0f:32:1a:04:5a:85:e3:cf:c2: 0e:ae:74:e8:7e:f2:0c:76:a9:c2:8e:8f:5d:8d:e2: 81:26:35:9a:b7:90:ef:ac:e5:cd:d8:31:c0:9d:a9: 64:a1:fe:16:28:ee:d3:f6:34:ca:a2:09:be:d4:5a: 9e:a5:8b:0f:b1:eb:0f:3a:12:2a:d8:92:75:20:3b: 40:44:62:ad:0f:c6:86:be:d6:1a:91:a8:c8:54:5f: dd:dd:93:43:cd:b3:75:2b:74:f4:b6:c4:21:9c:ac: 3a:ae:ef:34:81:a8:b9:dc:b7:8d:c8:70:de:19:79: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7C:53:68:0D:38:F2:88:8A:FE:BC:2D:E8:47:A0:8B:FF:AF:DD:CA X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bb:86:15:4c:c6:1a:5e:fd:e7:01:88:bd:8f:5e:ee:e6:04: 5e:35:24:83:46:d0:76:bd:a2:0d:98:a2:3e:a5:26:f5:1f:35: f0:e8:0d:82:7b:88:a4:28:e1:da:2d:5b:6f:71:d0:1f:cc:28: 13:f2:dd:9e:4e:4d:04:51:29:ab:dc:09:0a:1c:7f:b0:3f:91: 2f:e1:06:88:09:e9:51:9a:3b:0d:36:f8:32:a4:41:8e:bf:4b: e2:bc:9a:63:8f:06:71:69:99:be:26:bc:28:f3:d9:3d:d7:b1: a2:33:16:e2:7f:30:ae:7e:c9:11:ba:c3:9f:fa:f9:8c:7f:d6: 2e:a8:52:0b:7e:b8:09:24:a7:c9:a8:50:e7:14:ec:1c:06:74: ab:d3:2f:b6:fa:52:b7:18:e4:4a:77:5b:c3:46:2a:0b:22:ca: 21:17:bd:3c:a5:b1:ba:93:6b:be:ea:28:eb:31:41:95:20:65: bb:9d:89:ca:de:cb:2a:71:36:96:bc:9b:29:5a:f9:b9:c7:fb: 83:84:af:d7:7e:ab:6f:ce:c0:55:89:07:62:21:6e:82:8a:3e: 7a:02:e3:c6:13:4f:86:ee:02:37:05:bb:d2:5a:4d:45:e5:86: 1f:36:b4:e2:38:46:24:e8:4b:5e:68:84:73:09:dd:2c:b7:92: 94:30:47:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfiXBjqJDX7wXXwKDGl106DufjrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA4MDQxNTU1NDBaFw0yNTA4MDgwMDE2NDBaMDMxMTAvBgNV BAMTKEVEN0M1MzY4MEQzOEYyODg4QUZFQkMyREU4NDdBMDhCRkZBRkREQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GzZI10ag46PbrfHFySQFvuH0 v/3HEcZ+pp/1lZhl8PdZ+Nb7ukgecqOJC1iOYqWQsemULUeYSNMsgVJvvsUIQa7u ciFQN6motlwRu6DBaqxtCUoYuXxa21rv9dNXc76zxmhblCkkqXlpITUfVNLkpI1B P7YGhFdh4SVogpshAmYArNWur8klE9KDSA8yGgRahePPwg6udOh+8gx2qcKOj12N 4oEmNZq3kO+s5c3YMcCdqWSh/hYo7tP2NMqiCb7UWp6liw+x6w86EirYknUgO0BE Yq0Pxoa+1hqRqMhUX93dk0PNs3UrdPS2xCGcrDqu7zSBqLnct43IcN4ZeblHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7XxTaA048oiK/rwt6Eegi/+v3cowHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq7hhVMxhpe/ecBiL2PXu7mBF41JING0Ha9 og2Yoj6lJvUfNfDoDYJ7iKQo4dotW29x0B/MKBPy3Z5OTQRRKavcCQocf7A/kS/h BogJ6VGaOw02+DKkQY6/S+K8mmOPBnFpmb4mvCjz2T3XsaIzFuJ/MK5+yRG6w5/6 +Yx/1i6oUgt+uAkkp8moUOcU7BwGdKvTL7b6UrcY5Ep3W8NGKgsiyiEXvTylsbqT a77qKOsxQZUgZbudicreyypxNpa8myla+bnH+4OEr9d+q2/OwFWJB2IhboKKPnoC 48YTT4buAjcFu9JaTUXlhh82tOI4RiToS15ohHMJ3Sy3kpQwRz0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:18 2025 by rpki-client