$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: LbcIF7OTja2QRZVuEufQa7tXOpTJx7gdKITzQJgIOVY= Subject key identifier: BA:D0:B3:1B:3A:F0:1D:D0:7A:95:30:11:94:54:B0:D1:05:8A:E1:13 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 185411955153DDED42F3E3DA21F917318D269447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 0561 Signing time: Thu 26 Mar 2026 04:50:02 +0000 Manifest this update: Thu 26 Mar 2026 04:45:02 +0000 Manifest next update: Sun 29 Mar 2026 07:03:02 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) 2: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 3: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: Zpq0sdmv1+fmHfS1iu1+7RWunRgcWQiQxGzuxkcBFi4=) 4: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:54:11:95:51:53:dd:ed:42:f3:e3:da:21:f9:17:31:8d:26:94:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Mar 26 04:45:02 2026 GMT Not After : Mar 29 07:03:02 2026 GMT Subject: CN=BAD0B31B3AF01DD07A9530119454B0D1058AE113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:f1:d3:a1:b6:84:a6:c3:4a:17:f6:ca:1f: 23:87:96:d0:06:28:b6:66:56:ba:0e:ce:d4:af:51: 83:f3:5a:d5:ad:70:a2:87:45:ce:d7:41:4d:4d:6e: ce:03:2c:61:3a:03:0d:68:1a:49:51:37:f3:40:8d: 63:af:dc:32:b7:c8:49:45:72:7a:88:a4:44:5e:da: a2:a5:d0:c8:70:03:34:17:55:de:20:e8:82:e6:77: 4e:c7:53:70:f5:d0:a6:c7:a1:c3:10:fe:93:b5:f0: 4e:75:c1:84:2b:52:c5:28:7f:7e:d6:09:19:8d:70: bd:6d:de:78:33:16:d8:51:b0:d3:d2:b7:91:44:8a: 0f:e5:3a:92:81:de:b1:7d:b9:f3:90:76:fa:0b:b2: 0f:f2:5a:d0:8c:e2:fd:e0:1a:15:02:85:c6:b3:2c: 93:13:c4:48:c5:45:60:10:60:58:30:90:c8:0f:38: 0e:4b:73:3e:5f:14:d2:69:fa:ab:b8:ee:ee:53:78: c3:17:90:ab:1d:c5:95:4d:8b:cd:f6:dc:39:49:0a: aa:61:31:1a:ae:ec:d6:fd:e1:78:c6:77:e3:43:a7: 1b:48:27:ad:f7:09:9a:fc:41:a5:82:e8:6a:49:d6: cc:c3:a8:0e:e8:7a:a4:17:d0:3c:4f:e5:e5:d6:49: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D0:B3:1B:3A:F0:1D:D0:7A:95:30:11:94:54:B0:D1:05:8A:E1:13 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9b:ec:1b:26:77:15:9e:44:bf:61:1c:5e:f9:8e:1e:91:03: 1c:47:f2:7b:50:16:1b:93:ae:4e:f5:60:d1:4e:32:70:fc:ac: 33:05:9c:91:9d:0c:8a:ab:e1:bd:d7:0c:c1:24:b5:cf:3e:25: 4e:70:11:b1:28:a3:8e:dd:4e:5b:da:53:de:f3:b5:05:df:2b: a4:e2:b7:67:fc:e7:80:5e:4a:29:38:50:c3:04:05:49:d6:02: c6:ae:6d:f4:dd:4a:86:64:68:c3:35:74:f2:57:4c:e9:13:17: bc:82:68:08:ad:c0:26:77:6f:07:49:cf:b1:96:68:bf:aa:c7: 4d:5a:69:25:fa:a1:b0:24:a5:fd:ba:63:e8:65:bd:03:b9:60: df:da:8f:c3:82:b8:f9:b5:74:f6:ed:de:5a:a4:14:fb:42:f2: 8d:ab:8f:1b:d9:ac:8b:4b:b8:f8:91:b5:31:19:59:45:93:ac: 36:cd:6d:66:ed:c1:fc:e6:a2:e9:a8:c0:ff:03:22:6e:ab:ff: 49:b3:d3:e6:31:58:85:c8:6d:65:e6:4e:d5:27:fb:da:f1:02: 8d:a8:67:2c:a2:99:4d:8b:56:f3:5b:fb:d2:32:8c:cd:73:e3: 6b:19:85:f8:3b:4c:03:27:0d:16:42:62:3c:4d:f3:c5:82:50: ac:75:56:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFQRlVFT3e1C8+PaIfkXMY0mlEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNjAzMjYwNDQ1MDJaFw0yNjAzMjkwNzAzMDJaMDMxMTAvBgNV BAMTKEJBRDBCMzFCM0FGMDFERDA3QTk1MzAxMTk0NTRCMEQxMDU4QUUxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqcPHTobaEpsNKF/bKHyOHltAG KLZmVroOztSvUYPzWtWtcKKHRc7XQU1Nbs4DLGE6Aw1oGklRN/NAjWOv3DK3yElF cnqIpERe2qKl0MhwAzQXVd4g6ILmd07HU3D10KbHocMQ/pO18E51wYQrUsUof37W CRmNcL1t3ngzFthRsNPSt5FEig/lOpKB3rF9ufOQdvoLsg/yWtCM4v3gGhUChcaz LJMTxEjFRWAQYFgwkMgPOA5Lcz5fFNJp+qu47u5TeMMXkKsdxZVNi8323DlJCqph MRqu7Nb94XjGd+NDpxtIJ633CZr8QaWC6GpJ1szDqA7oeqQX0DxP5eXWSeJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutCzGzrwHdB6lTARlFSw0QWK4RMwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGib7BsmdxWeRL9hHF75jh6RAxxH8ntQFhuT rk71YNFOMnD8rDMFnJGdDIqr4b3XDMEktc8+JU5wEbEoo47dTlvaU97ztQXfK6Ti t2f854BeSik4UMMEBUnWAsaubfTdSoZkaMM1dPJXTOkTF7yCaAitwCZ3bwdJz7GW aL+qx01aaSX6obAkpf26Y+hlvQO5YN/aj8OCuPm1dPbt3lqkFPtC8o2rjxvZrItL uPiRtTEZWUWTrDbNbWbtwfzmoumowP8DIm6r/0mz0+YxWIXIbWXmTtUn+9rxAo2o ZyyimU2LVvNb+9IyjM1z42sZhfg7TAMnDRZCYjxN88WCUKx1VpA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:15 2026 by rpki-client