$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: yDEbm8O6Stg89ABkCjiN2TFUEWf7yDkwtuznZFRuhnk= Subject key identifier: 95:FA:28:BF:10:35:CE:7F:42:B8:50:3A:52:1F:9E:E8:FD:8C:9C:A9 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 7C9920AA217DFC5696968BD8E3C4DADD7136D2BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: F0 Signing time: Thu 26 Mar 2026 10:50:43 +0000 Manifest this update: Thu 26 Mar 2026 10:45:43 +0000 Manifest next update: Sun 29 Mar 2026 17:23:43 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: qgI/QUCeviFKc2FYL0Qe53exjuhIy1kFagnazor/Qak=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 17:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:99:20:aa:21:7d:fc:56:96:96:8b:d8:e3:c4:da:dd:71:36:d2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Mar 26 10:45:43 2026 GMT Not After : Mar 29 17:23:43 2026 GMT Subject: CN=95FA28BF1035CE7F42B8503A521F9EE8FD8C9CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:9c:b3:a7:9e:66:b1:7c:e5:43:8a:52:f6: 4f:5b:f7:1b:fc:ee:f7:fe:2d:c2:fa:46:da:da:83: 15:ac:70:0f:c6:97:e0:9a:a1:b5:82:f0:52:e8:10: f9:47:7f:8d:ae:53:c8:b2:47:0a:bf:92:dc:1a:fb: c1:6a:c5:6c:3f:4c:34:8e:e9:34:f5:59:34:ee:1f: 1c:1d:b6:98:42:ea:bd:59:64:6e:d3:7c:fb:06:2c: 95:78:e2:90:95:2a:ab:e1:f0:43:c4:fd:1e:36:5c: 8d:7e:d5:66:14:e4:f7:6a:95:a2:18:ea:bb:46:13: 47:89:43:88:3f:e7:d2:04:e6:85:ad:be:bf:0b:3b: f6:14:b2:39:14:05:d0:81:f0:0a:83:20:1d:75:0e: 99:fe:05:88:f1:a3:40:cc:0d:96:d0:be:ae:31:5b: 80:fe:bd:7c:0d:55:40:99:2d:56:f3:c3:98:61:ed: f6:ce:eb:d8:18:cb:7b:0d:4a:78:75:6e:22:ab:97: e9:01:9e:57:a8:7b:c2:d5:c5:fe:98:93:1e:bb:fe: c4:80:52:99:b2:88:30:3d:27:c8:cb:a4:30:dc:70: 03:5d:bb:08:3f:de:0e:63:6a:04:39:a3:98:b3:41: 50:3f:5e:42:68:3b:b2:44:b8:2b:29:9f:eb:0a:c2: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FA:28:BF:10:35:CE:7F:42:B8:50:3A:52:1F:9E:E8:FD:8C:9C:A9 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:76:28:08:dd:9f:ed:2f:df:b0:45:cf:8f:ba:f1:a1:b6:06: 6b:5d:18:46:f0:73:83:01:2d:4f:34:71:5b:a3:cc:25:37:bd: ac:07:8c:7b:f8:ee:3e:ae:df:4b:d9:04:c8:96:d8:3a:97:ea: ba:51:ec:b4:93:2c:05:0a:57:d4:7e:8c:49:49:78:84:23:7b: a5:10:53:46:88:a9:59:ad:62:c9:17:d8:d6:bd:13:c0:eb:a4: a4:d8:80:af:0d:80:f1:7f:0f:be:a1:e8:02:39:c9:cf:73:86: 48:d3:4c:7f:89:85:78:44:72:98:05:02:95:e2:17:c5:c9:1e: 73:61:db:35:f5:c4:84:39:cb:d0:e0:ed:af:10:d2:c8:b7:d6: e7:70:ff:3d:74:6a:c0:f8:19:ad:90:db:61:07:af:23:8d:2d: 25:ba:ed:1b:2d:d7:88:8f:22:3a:62:34:ad:89:16:3a:22:3c: b3:40:e1:47:61:8a:d5:66:31:5f:9d:17:db:03:3a:f4:91:d7: 20:d4:a1:bc:88:d0:0c:c4:5d:8b:11:b6:17:ab:d0:39:a7:71: 61:63:3c:b4:69:cd:f8:57:b9:d7:92:9c:d7:f1:b7:be:3f:47: 19:62:fb:79:aa:67:ba:62:29:2b:a1:c3:14:4a:27:f8:5d:9d: 18:69:66:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJkgqiF9/FaWlovY48Ta3XE20r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNjAzMjYxMDQ1NDNaFw0yNjAzMjkxNzIzNDNaMDMxMTAvBgNV BAMTKDk1RkEyOEJGMTAzNUNFN0Y0MkI4NTAzQTUyMUY5RUU4RkQ4QzlDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVY5yzp55msXzlQ4pS9k9b9xv8 7vf+LcL6RtragxWscA/Gl+CaobWC8FLoEPlHf42uU8iyRwq/ktwa+8FqxWw/TDSO 6TT1WTTuHxwdtphC6r1ZZG7TfPsGLJV44pCVKqvh8EPE/R42XI1+1WYU5PdqlaIY 6rtGE0eJQ4g/59IE5oWtvr8LO/YUsjkUBdCB8AqDIB11Dpn+BYjxo0DMDZbQvq4x W4D+vXwNVUCZLVbzw5hh7fbO69gYy3sNSnh1biKrl+kBnleoe8LVxf6Ykx67/sSA UpmyiDA9J8jLpDDccANduwg/3g5jagQ5o5izQVA/XkJoO7JEuCspn+sKwjyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlfoovxA1zn9CuFA6Uh+e6P2MnKkwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB2KAjdn+0v37BFz4+68aG2BmtdGEbwc4MB LU80cVujzCU3vawHjHv47j6u30vZBMiW2DqX6rpR7LSTLAUKV9R+jElJeIQje6UQ U0aIqVmtYskX2Na9E8DrpKTYgK8NgPF/D76h6AI5yc9zhkjTTH+JhXhEcpgFApXi F8XJHnNh2zX1xIQ5y9Dg7a8Q0si31udw/z10asD4Ga2Q22EHryONLSW67Rst14iP IjpiNK2JFjoiPLNA4UdhitVmMV+dF9sDOvSR1yDUobyI0AzEXYsRther0DmncWFj PLRpzfhXudeSnNfxt74/Rxli+3mqZ7piKSuhwxRKJ/hdnRhpZro= -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:46 2026 by rpki-client