$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: faeiIgFOBh6XA1VPLMSK207ZJTis2Jp69WKT46dzrs0= Subject key identifier: 93:99:74:74:F7:24:71:07:3A:15:8B:E3:5E:33:19:55:DD:0A:6E:22 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 62656396D78A58447C0DDD0E0ED84AF033EDB33E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 01E7 Signing time: Thu 26 Mar 2026 09:02:33 +0000 Manifest this update: Thu 26 Mar 2026 08:57:33 +0000 Manifest next update: Sun 29 Mar 2026 19:47:33 +0000 Files and hashes: 1: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: pBJdYJ8asfUnEsHbPR9HW0sZ8Aakk4K058GUyj3kAiQ=) 2: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: U2uHFuY0ueXRyx1PK0qnkjTGDXdNIfhLcqCourqb064=) 3: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: 7pjFoEqpwiXopkcvlXdHmAMnkhazHCcUS4M07HWAyuY=) 4: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: fTLUAZbiCY/Ww+CA8ekFwysStY8qimv1O0WpbE/EpHs=) 5: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: OhCikhmCmpxJ179Dz3jD3MYaX472XabuwFiYuL+ycvU=) 6: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: O4mdP6+qvT22Q0LDvrlBANjJOpMoByBbkRtr0y7gJtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:65:63:96:d7:8a:58:44:7c:0d:dd:0e:0e:d8:4a:f0:33:ed:b3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Mar 26 08:57:33 2026 GMT Not After : Mar 29 19:47:33 2026 GMT Subject: CN=93997474F72471073A158BE35E331955DD0A6E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:fb:4c:22:4b:c4:02:e3:43:17:6e:fa:56: 5c:ee:9a:5c:b9:b9:5b:40:01:a0:db:91:b4:2f:23: e7:b8:9d:9f:14:e4:a4:4b:d8:cb:e8:5f:8a:1d:21: 8c:76:ae:fa:e5:56:be:36:d7:ea:4d:3d:4a:5f:76: d8:5f:d4:08:3b:76:67:5d:70:17:f1:e3:6d:f8:bd: e8:33:6b:64:b5:13:c2:43:a0:3a:1e:eb:50:0b:8a: d5:47:eb:ac:d4:34:53:4f:8e:be:4c:3e:75:1a:e2: 49:60:96:29:f6:fa:d8:52:3c:0b:c1:68:30:02:d7: 12:3d:01:9c:6b:22:1b:62:b6:6f:65:77:e1:28:ec: c7:ed:e7:62:b3:38:d6:b7:a8:31:66:60:64:d0:7e: 67:8f:6b:ca:f3:50:85:22:c3:ea:99:9c:58:00:76: 1b:b6:38:f2:1a:29:22:cf:18:8e:f6:6c:85:50:96: 68:eb:3d:86:6b:ec:7f:76:80:82:6d:a3:87:ae:c0: ea:97:ea:b8:4f:ed:5d:4e:0c:35:af:ee:70:44:03: 67:84:f5:a4:75:0c:e1:b5:f3:e3:3d:87:74:4f:59: f4:3e:7f:12:62:ab:77:fa:98:67:ef:62:7c:d9:11: 00:78:fa:60:2d:09:08:56:a4:84:34:9d:9c:a6:ba: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:99:74:74:F7:24:71:07:3A:15:8B:E3:5E:33:19:55:DD:0A:6E:22 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:04:ae:0f:84:36:0a:8e:f3:68:8b:8d:eb:c7:38:0a:d9:0a: 7e:97:77:a5:fe:a6:e7:62:85:8c:c3:00:4e:4a:bc:8a:56:c6: 14:cb:bd:3a:b3:63:c4:f7:89:f5:ee:3e:70:cf:46:37:cb:09: dd:2d:71:3d:2a:c7:41:8d:88:8f:e4:ec:1d:7c:ee:1a:52:d5: 0f:82:ff:67:1f:cc:e2:1f:bb:5f:42:7b:95:3f:c2:e7:ef:56: 19:2b:b6:73:2c:01:45:52:3a:77:e1:52:7c:12:29:a6:97:0f: fa:24:47:49:8e:ab:d4:21:05:ac:7a:45:4c:e6:62:20:ba:fe: 96:79:7e:a1:61:35:cc:f9:13:a8:d4:08:83:94:87:98:e8:43: 72:03:99:66:88:1e:4f:8d:a1:ee:b1:b5:41:c9:0a:ef:78:38: 69:22:16:93:f5:46:80:d5:33:cf:15:14:b3:ce:7b:07:ec:94: ae:f1:8d:6c:12:39:43:0d:b2:6b:a3:93:f9:fd:bf:64:6c:0f: 66:6e:84:96:30:77:0a:2b:33:44:bf:72:67:e5:2b:00:77:19: ae:bb:eb:84:f7:53:25:ea:ae:a9:a1:5f:3c:13:00:17:28:88: 67:3f:30:da:7f:70:7a:52:65:56:98:2e:6e:d6:d1:23:0c:0f: 8c:8f:cc:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmVjlteKWER8Dd0ODthK8DPtsz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNjAzMjYwODU3MzNaFw0yNjAzMjkxOTQ3MzNaMDMxMTAvBgNV BAMTKDkzOTk3NDc0RjcyNDcxMDczQTE1OEJFMzVFMzMxOTU1REQwQTZFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EPtMIkvEAuNDF276Vlzumly5 uVtAAaDbkbQvI+e4nZ8U5KRL2MvoX4odIYx2rvrlVr421+pNPUpfdthf1Ag7dmdd cBfx4234vegza2S1E8JDoDoe61ALitVH66zUNFNPjr5MPnUa4klglin2+thSPAvB aDAC1xI9AZxrIhtitm9ld+Eo7Mft52KzONa3qDFmYGTQfmePa8rzUIUiw+qZnFgA dhu2OPIaKSLPGI72bIVQlmjrPYZr7H92gIJto4euwOqX6rhP7V1ODDWv7nBEA2eE 9aR1DOG18+M9h3RPWfQ+fxJiq3f6mGfvYnzZEQB4+mAtCQhWpIQ0nZymuqSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5l0dPckcQc6FYvjXjMZVd0KbiIwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoErg+ENgqO82iLjevHOArZCn6Xd6X+pudi hYzDAE5KvIpWxhTLvTqzY8T3ifXuPnDPRjfLCd0tcT0qx0GNiI/k7B187hpS1Q+C /2cfzOIfu19Ce5U/wufvVhkrtnMsAUVSOnfhUnwSKaaXD/okR0mOq9QhBax6RUzm YiC6/pZ5fqFhNcz5E6jUCIOUh5joQ3IDmWaIHk+Noe6xtUHJCu94OGkiFpP1RoDV M88VFLPOewfslK7xjWwSOUMNsmujk/n9v2RsD2ZuhJYwdworM0S/cmflKwB3Ga67 64T3UyXqrqmhXzwTABcoiGc/MNp/cHpSZVaYLm7W0SMMD4yPzGg= -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:25 2026 by rpki-client