$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: zXdEMBgohMeEXflNhuixlnAKjs+pfd9eVWO9vX9YRJ0= Subject key identifier: A9:5C:75:1A:18:67:14:8C:0B:20:62:02:5A:B2:2B:55:E8:13:8D:26 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 73B0B4B88A4A23117E115862797BB889326BF79F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: BD Signing time: Mon 03 Nov 2025 00:50:40 +0000 Manifest this update: Mon 03 Nov 2025 00:45:40 +0000 Manifest next update: Thu 06 Nov 2025 08:54:40 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: Jb2AMHvutwP6Tpey3OX+Dhzv5l3h+T9Ay+7DvPXTob4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b0:b4:b8:8a:4a:23:11:7e:11:58:62:79:7b:b8:89:32:6b:f7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Nov 3 00:45:40 2025 GMT Not After : Nov 6 08:54:40 2025 GMT Subject: CN=A95C751A1867148C0B2062025AB22B55E8138D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:b5:8e:66:0b:c5:77:dd:5a:e2:d1:1e:ee: 76:22:7f:91:58:1a:6e:40:7c:fb:95:c6:ab:8c:87: 4f:2e:13:db:db:de:b1:d8:43:b4:1e:93:61:c2:4f: 2d:e9:5e:ac:74:2e:9e:6b:28:43:75:95:e1:bd:2c: 81:ea:90:12:84:3d:f3:f6:41:5a:d3:18:d3:84:cf: ec:3c:ff:1b:15:ad:7c:0e:c5:1a:40:b9:48:57:b2: df:6d:b5:4b:7a:70:ea:80:35:4d:52:70:9e:88:70: e4:49:a9:12:af:b9:e3:e5:6e:f8:9c:6e:f1:5e:a2: 46:3b:ec:50:db:6a:fb:91:ba:cc:b3:68:af:7a:65: bb:12:96:74:92:3a:54:88:d3:99:4c:2b:16:2f:9b: cc:be:e5:af:7d:18:a0:01:4e:02:b0:fb:69:12:8e: 7c:26:53:b7:8a:70:1f:7b:a3:33:07:3c:b5:4a:e8: 8e:c2:d6:10:96:96:16:fa:90:02:40:94:ea:16:48: c7:08:fc:20:3c:b1:1e:9f:23:80:b7:33:75:14:36: 56:ea:d0:1d:2d:45:56:13:66:92:6a:21:74:24:86: 34:7d:19:05:cc:0c:3c:ab:df:c4:d9:7e:dd:46:4c: 42:8a:dc:49:63:6f:51:a3:b8:85:43:7b:e3:d4:00: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5C:75:1A:18:67:14:8C:0B:20:62:02:5A:B2:2B:55:E8:13:8D:26 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:55:07:09:75:cb:25:d6:97:c0:26:49:9b:69:ee:12:8e:85: 2c:20:37:42:7a:50:0c:44:d7:d4:62:ac:03:8d:56:26:be:f8: fb:11:d9:be:30:22:6b:2d:bf:4a:0b:fc:9a:52:ef:06:ef:f7: 6a:94:e8:bf:0d:69:9f:3f:91:2c:81:d0:ea:47:56:a4:04:d8: a1:da:f1:cb:a4:87:d8:5c:e4:57:3f:8d:36:f4:e8:b3:ec:e2: 0d:1e:ce:2c:6a:17:b7:44:3d:ea:18:9f:ba:f4:0d:5b:d8:b8: 74:fd:ce:0c:10:cd:45:65:3a:2e:d7:e7:45:4f:e8:03:ff:9e: 78:3d:d9:6a:cd:e3:2c:b1:62:59:eb:ca:77:53:de:d5:2e:46: 8d:5e:31:86:21:a2:05:2c:36:d4:ef:da:80:55:39:c6:c2:2e: 15:d5:90:65:5e:3a:7c:9f:8a:4c:3b:86:38:81:64:0a:0c:1f: 05:ef:b7:3c:b5:bd:99:31:a8:0d:5a:f1:58:bd:a3:e8:09:a7: d9:ac:23:5b:d5:1a:06:8f:30:a9:dc:ee:ca:fc:1a:d3:10:0f: 32:9e:ef:70:4c:40:21:1c:1f:f5:0a:79:4d:79:6e:5a:c1:4a: 92:2c:5a:2e:cf:62:de:0e:ff:a4:2a:f3:c4:94:23:db:b3:25: af:3a:3a:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7C0uIpKIxF+EVhieXu4iTJr958wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTExMDMwMDQ1NDBaFw0yNTExMDYwODU0NDBaMDMxMTAvBgNV BAMTKEE5NUM3NTFBMTg2NzE0OEMwQjIwNjIwMjVBQjIyQjU1RTgxMzhEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWgrWOZgvFd91a4tEe7nYif5FY Gm5AfPuVxquMh08uE9vb3rHYQ7Qek2HCTy3pXqx0Lp5rKEN1leG9LIHqkBKEPfP2 QVrTGNOEz+w8/xsVrXwOxRpAuUhXst9ttUt6cOqANU1ScJ6IcORJqRKvuePlbvic bvFeokY77FDbavuRusyzaK96ZbsSlnSSOlSI05lMKxYvm8y+5a99GKABTgKw+2kS jnwmU7eKcB97ozMHPLVK6I7C1hCWlhb6kAJAlOoWSMcI/CA8sR6fI4C3M3UUNlbq 0B0tRVYTZpJqIXQkhjR9GQXMDDyr38TZft1GTEKK3Eljb1GjuIVDe+PUACcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqVx1GhhnFIwLIGICWrIrVegTjSYwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFVBwl1yyXWl8AmSZtp7hKOhSwgN0J6UAxE 19RirAONVia++PsR2b4wImstv0oL/JpS7wbv92qU6L8NaZ8/kSyB0OpHVqQE2KHa 8cukh9hc5Fc/jTb06LPs4g0ezixqF7dEPeoYn7r0DVvYuHT9zgwQzUVlOi7X50VP 6AP/nng92WrN4yyxYlnryndT3tUuRo1eMYYhogUsNtTv2oBVOcbCLhXVkGVeOnyf ikw7hjiBZAoMHwXvtzy1vZkxqA1a8Vi9o+gJp9msI1vVGgaPMKnc7sr8GtMQDzKe 73BMQCEcH/UKeU15blrBSpIsWi7PYt4O/6Qq88SUI9uzJa86OgE= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:49 2025 by rpki-client