$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: t1xGpTBlM+yXC14Hr+6ortSdoFSDQawL67F4PaX6StA= Subject key identifier: 6C:46:27:D9:9D:3A:FB:FF:43:64:E0:49:F3:CD:D8:0A:96:94:9D:59 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 643155680FF75B867E5A2E178EB063EAC0A11508 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 027D Signing time: Wed 25 Mar 2026 00:40:58 +0000 Manifest this update: Wed 25 Mar 2026 00:35:58 +0000 Manifest next update: Sat 28 Mar 2026 00:44:58 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: WBbv4c5B7OqNp9v9gwES7KTe+mF3KdbfAkKvssH2cGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:31:55:68:0f:f7:5b:86:7e:5a:2e:17:8e:b0:63:ea:c0:a1:15:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Mar 25 00:35:58 2026 GMT Not After : Mar 28 00:44:58 2026 GMT Subject: CN=6C4627D99D3AFBFF4364E049F3CDD80A96949D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0a:4f:42:4e:34:51:a0:e3:74:f4:e7:b1:ac: 76:dc:9b:2f:b1:1d:94:78:e9:20:fd:45:c1:32:a9: 1b:ae:22:a4:65:c2:2f:9c:15:36:fa:e6:99:66:39: d5:50:70:84:54:18:2d:2c:bf:b5:6b:2a:e6:b9:d6: 2c:9c:e8:6d:fd:de:d9:43:ab:e1:63:21:f5:d2:d6: de:2d:89:35:72:21:57:c9:8c:c5:83:25:e4:65:58: 08:21:f1:74:aa:26:e6:d4:e0:ce:ba:25:3e:fe:e3: 8e:3b:93:7b:2f:6f:da:30:40:27:d4:89:21:d8:43: aa:49:9c:71:37:04:30:58:f5:3c:a6:fb:7f:fa:51: 2c:c7:f1:fd:eb:01:bf:45:bd:c8:ee:43:bb:46:57: af:7d:99:ec:32:e7:f0:3f:9b:58:69:92:53:1f:8e: 35:57:22:14:18:e7:37:17:ea:71:89:a0:64:e2:53: 86:b0:1b:e6:eb:d7:64:d5:e5:9e:cc:d7:c6:e7:ad: 10:38:c2:6a:57:93:16:ef:8b:09:d6:4f:11:03:31: c0:e3:b4:b2:e8:de:35:41:f6:25:3c:15:5e:a0:bf: f1:31:67:2a:da:0e:fa:de:ae:b3:58:d8:a8:2e:61: d0:f9:c6:81:1e:73:fc:8e:49:32:74:c2:a0:58:84: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:46:27:D9:9D:3A:FB:FF:43:64:E0:49:F3:CD:D8:0A:96:94:9D:59 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6f:d1:78:01:eb:04:3c:80:b7:0e:21:1f:62:9d:85:91:63: 41:6c:cb:e6:ae:06:06:60:1d:a8:60:25:9f:a7:70:0f:98:51: 73:f6:8f:6b:df:55:88:5e:ad:d4:07:03:8d:08:38:91:56:68: 11:50:43:ce:0f:06:a1:45:df:fc:26:4b:c3:f8:18:37:4f:50: 03:95:7c:fb:d5:15:78:4a:05:56:83:fc:85:9c:e1:a3:c8:f0: 15:03:96:ea:d5:5e:4e:d6:36:7d:10:83:11:78:03:4e:7a:f6: 75:52:28:c7:d2:b7:a7:4b:32:87:99:99:14:33:8f:3a:ad:8f: 02:4c:93:1f:d0:b0:19:3f:1e:7a:7d:90:4e:e9:25:30:b7:c2: af:c5:fa:70:1b:2c:04:17:24:b8:43:45:62:0c:be:22:8d:b1: a9:fc:62:d9:3e:8b:96:98:fe:dd:06:30:69:7a:e2:42:18:43: 8d:a9:72:5e:ca:28:b1:18:89:30:39:7e:62:5c:68:d3:a4:b7: 1b:e9:0d:3e:e9:4a:0d:54:1a:a7:8f:c2:25:a6:e2:55:39:a2: fb:95:04:61:c6:da:ec:b9:ca:c5:83:ca:bc:33:37:43:fd:5a: 81:b1:fd:db:e6:ba:ed:ba:fb:49:9b:5c:36:8d:b6:41:2b:52: 3b:c4:52:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDFVaA/3W4Z+Wi4XjrBj6sChFQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNjAzMjUwMDM1NThaFw0yNjAzMjgwMDQ0NThaMDMxMTAvBgNV BAMTKDZDNDYyN0Q5OUQzQUZCRkY0MzY0RTA0OUYzQ0REODBBOTY5NDlENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Ck9CTjRRoON09OexrHbcmy+x HZR46SD9RcEyqRuuIqRlwi+cFTb65plmOdVQcIRUGC0sv7VrKua51iyc6G393tlD q+FjIfXS1t4tiTVyIVfJjMWDJeRlWAgh8XSqJubU4M66JT7+4447k3svb9owQCfU iSHYQ6pJnHE3BDBY9Tym+3/6USzH8f3rAb9FvcjuQ7tGV699mewy5/A/m1hpklMf jjVXIhQY5zcX6nGJoGTiU4awG+br12TV5Z7M18bnrRA4wmpXkxbviwnWTxEDMcDj tLLo3jVB9iU8FV6gv/ExZyraDvrerrNY2KguYdD5xoEec/yOSTJ0wqBYhJzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbEYn2Z06+/9DZOBJ883YCpaUnVkwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxv0XgB6wQ8gLcOIR9inYWRY0Fsy+auBgZg HahgJZ+ncA+YUXP2j2vfVYherdQHA40IOJFWaBFQQ84PBqFF3/wmS8P4GDdPUAOV fPvVFXhKBVaD/IWc4aPI8BUDlurVXk7WNn0QgxF4A0569nVSKMfSt6dLMoeZmRQz jzqtjwJMkx/QsBk/Hnp9kE7pJTC3wq/F+nAbLAQXJLhDRWIMviKNsan8Ytk+i5aY /t0GMGl64kIYQ42pcl7KKLEYiTA5fmJcaNOktxvpDT7pSg1UGqePwiWm4lU5ovuV BGHG2uy5ysWDyrwzN0P9WoGx/dvmuu26+0mbXDaNtkErUjvEUqc= -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:41 2026 by rpki-client