$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json) Hash identifier: IwC6imqj9NtjO8xRgwZWWLFrjZg/b0JYukNbn9eYIvI= Subject key identifier: 13:6C:24:0C:F4:45:0D:CB:AA:5C:A6:98:76:F9:B6:33:CA:86:3F:8B Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 0A1B870E95D6E0F1965B61D5C0268C632FB426C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft Manifest number: 0169 Signing time: Wed 25 Mar 2026 22:30:55 +0000 Manifest this update: Wed 25 Mar 2026 22:25:55 +0000 Manifest next update: Sun 29 Mar 2026 08:26:55 +0000 Files and hashes: 1: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: hSqv2eoQTO7JNJFj3qq3n7+1XfpnN6lz7ioOJ9M/TEg=) 2: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: z0AijCCK1naTP5YmFbSs1RtXYY5T/kLC9Gc+ZK8h2kA=) 3: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: Lpc33YMBjJ9T7VbHHDqwImeBd6L01sxZlRa+x954AOo=) 4: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: HDBw0qIoZgeRbmsvjDwclpMIOFOazbo3qKSDwS0XcvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1b:87:0e:95:d6:e0:f1:96:5b:61:d5:c0:26:8c:63:2f:b4:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Mar 25 22:25:55 2026 GMT Not After : Mar 29 08:26:55 2026 GMT Subject: CN=136C240CF4450DCBAA5CA69876F9B633CA863F8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:ba:de:1a:da:30:7a:08:d8:ac:8b:3b:c0: c5:c5:9d:85:c1:ed:33:d9:eb:18:ce:ae:f2:ad:f7: 58:ae:f1:13:0e:84:f8:f6:82:1f:18:81:20:17:61: 3c:a2:10:6c:6b:dd:e9:9d:53:7e:65:57:e2:89:cb: ab:98:2f:6c:6c:f8:85:b9:3e:86:94:8d:5a:ac:9c: 72:93:41:fd:d6:c4:22:8f:21:5c:be:f1:7f:6e:51: 9a:d7:47:e3:44:6a:a4:f5:34:a8:10:87:8c:51:db: 8a:55:bd:54:84:41:d0:9f:49:85:1f:1e:cf:18:29: aa:0f:c2:2b:bc:92:4b:bd:bb:3c:8c:8c:c9:1f:2b: 68:2c:8c:91:0e:60:d4:74:dd:99:6b:95:7c:17:0c: 96:6a:c2:1c:78:c6:fa:04:7d:d5:5a:db:e7:64:65: 49:ce:3c:0e:d5:2f:04:b6:8c:99:9b:3d:9b:e6:9c: 17:ec:20:e9:ab:bb:91:32:d9:a8:7d:4c:03:11:9d: cf:5f:fb:63:c0:b5:f1:4a:a3:00:21:51:7c:6a:1c: 9b:54:9f:2f:bf:c0:9a:70:cb:aa:d4:88:7f:c7:61: da:7b:7d:e6:59:4c:16:e5:16:ac:a7:25:a9:26:7e: f5:cd:2f:54:2b:cd:37:55:b4:c8:57:1a:6b:30:b4: d3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6C:24:0C:F4:45:0D:CB:AA:5C:A6:98:76:F9:B6:33:CA:86:3F:8B X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:5f:c4:c8:77:76:fd:6b:b9:d4:33:7e:18:17:a2:33:63:c4: 98:72:38:2c:5f:76:bc:87:9d:50:1f:c6:a6:53:7b:90:23:72: 7f:1a:6f:f1:56:1e:c0:ae:39:9d:d0:d3:a7:f2:ea:83:4f:b6: e5:79:36:aa:b0:52:6c:e3:6b:ae:7e:e4:23:f0:9c:34:ec:6a: 41:4d:f1:1a:1a:31:00:72:e2:fe:dd:8b:12:bd:e7:0e:94:ce: 0d:e2:7e:ae:07:9e:ea:ad:13:9e:6f:ce:ad:7b:c6:94:d5:6d: 59:ed:85:92:ac:ce:5c:3c:ce:2a:1f:f7:ad:05:53:8e:50:2e: 90:10:b5:b4:cc:28:e3:51:94:1d:71:8d:32:a1:2a:f3:6d:be: 2c:b2:bf:b8:89:f7:9f:4d:4f:43:87:92:53:e5:1e:a0:67:d6: f4:df:af:13:ed:75:47:5c:e7:25:1d:4f:05:6d:f7:ac:2d:e5: ca:ca:6d:f4:e1:16:bc:08:3b:b6:9f:ea:fc:92:ff:bd:83:5e: 8e:f0:ef:7a:a3:65:de:7f:2e:bc:88:33:38:c0:31:4a:01:da: 97:4b:21:2b:25:bc:65:b3:78:20:2d:97:ff:ea:4b:77:24:be: 19:a1:06:6c:47:23:15:d5:9b:5c:93:cc:aa:05:fc:56:14:d7: 21:f1:f3:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChuHDpXW4PGWW2HVwCaMYy+0JsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNjAzMjUyMjI1NTVaFw0yNjAzMjkwODI2NTVaMDMxMTAvBgNV BAMTKDEzNkMyNDBDRjQ0NTBEQ0JBQTVDQTY5ODc2RjlCNjMzQ0E4NjNGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZqrreGtowegjYrIs7wMXFnYXB 7TPZ6xjOrvKt91iu8RMOhPj2gh8YgSAXYTyiEGxr3emdU35lV+KJy6uYL2xs+IW5 PoaUjVqsnHKTQf3WxCKPIVy+8X9uUZrXR+NEaqT1NKgQh4xR24pVvVSEQdCfSYUf Hs8YKaoPwiu8kku9uzyMjMkfK2gsjJEOYNR03ZlrlXwXDJZqwhx4xvoEfdVa2+dk ZUnOPA7VLwS2jJmbPZvmnBfsIOmru5Ey2ah9TAMRnc9f+2PAtfFKowAhUXxqHJtU ny+/wJpwy6rUiH/HYdp7feZZTBblFqynJakmfvXNL1QrzTdVtMhXGmswtNMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2wkDPRFDcuqXKaYdvm2M8qGP4swHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVfxMh3dv1rudQzfhgXojNjxJhyOCxfdryH nVAfxqZTe5Ajcn8ab/FWHsCuOZ3Q06fy6oNPtuV5NqqwUmzja65+5CPwnDTsakFN 8RoaMQBy4v7dixK95w6Uzg3ifq4HnuqtE55vzq17xpTVbVnthZKszlw8ziof960F U45QLpAQtbTMKONRlB1xjTKhKvNtviyyv7iJ959NT0OHklPlHqBn1vTfrxPtdUdc 5yUdTwVt96wt5crKbfThFrwIO7af6vyS/72DXo7w73qjZd5/LryIMzjAMUoB2pdL ISslvGWzeCAtl//qS3ckvhmhBmxHIxXVm1yTzKoF/FYU1yHx8z4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:14 2026 by rpki-client