$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: O3RsYYYGl9N9cm7VuMrc0feRVRX1En9I4l7gh5H6/Xk= Subject key identifier: 93:01:30:B2:30:54:DF:FE:AB:F0:9C:DB:AC:AE:AB:DE:A5:29:F2:EB Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 481ADDB9546340B2A3DEF0FF8E1EFA81E7A72B9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: FC Signing time: Tue 24 Mar 2026 16:20:47 +0000 Manifest this update: Tue 24 Mar 2026 16:15:47 +0000 Manifest next update: Sat 28 Mar 2026 00:39:47 +0000 Files and hashes: 1: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: vKZo6RXzwZCeH5n3XA1mRrQXjPmQ61ZmllGT9yns+p8=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1a:dd:b9:54:63:40:b2:a3:de:f0:ff:8e:1e:fa:81:e7:a7:2b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Mar 24 16:15:47 2026 GMT Not After : Mar 28 00:39:47 2026 GMT Subject: CN=930130B23054DFFEABF09CDBACAEABDEA529F2EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:3d:d7:32:ba:36:1d:1b:ed:b1:7c:43:6f: 5a:52:cd:17:a0:ef:76:06:dc:d9:5a:45:db:d9:77: b5:a2:19:b2:af:18:5d:a6:2b:f6:10:a6:01:e1:69: e0:43:ee:8c:7c:c8:ad:f2:c0:f0:b0:3b:8b:72:4a: b4:c8:0c:d9:06:f3:0c:72:d2:62:42:67:b8:18:db: 49:49:73:2d:d5:ad:dd:7d:28:5d:33:3f:b8:e9:59: c3:61:6a:21:66:9b:d0:ae:52:95:66:0f:8a:34:1f: be:76:42:e9:45:4f:36:b4:c3:f7:5f:87:69:c0:64: 2b:9d:14:aa:d9:1e:13:e0:78:1c:db:5b:84:d1:32: 55:39:4f:31:30:a5:e6:c6:00:55:dc:af:91:34:c7: 15:54:39:b4:99:a2:0a:d0:8b:e1:61:dc:38:94:4b: 9e:58:1d:7b:b3:26:d1:1a:11:d0:24:b4:5f:2e:92: cd:29:a1:72:9f:cd:3e:30:d2:19:b8:4c:39:99:2d: ad:c3:1a:e1:0b:92:19:25:a0:d8:57:36:32:ac:71: fc:2b:7e:27:8f:b2:e7:df:20:59:26:25:76:8f:5e: a7:76:21:ca:ad:54:3a:e1:27:62:79:89:ec:5d:e8: dc:9a:59:20:b5:9b:43:f4:8a:43:34:c2:d2:7c:fe: 63:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:01:30:B2:30:54:DF:FE:AB:F0:9C:DB:AC:AE:AB:DE:A5:29:F2:EB X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ec:e1:35:d5:5b:19:29:c3:ec:b2:c1:3c:86:1c:32:c3:ab: 89:32:d9:3e:19:8d:45:3a:3c:71:9f:f0:6b:ea:c7:a9:3c:68: 1f:b4:87:d7:45:a1:71:b5:28:a8:a2:cb:ba:95:71:a9:36:a6: f1:dd:cb:0d:4c:d8:e3:08:8c:e8:b9:7a:7c:ab:fe:7f:cb:00: 74:9c:eb:55:2b:57:16:fa:f8:42:57:da:6d:e7:3b:e6:dd:fe: 9e:f9:a8:8f:af:51:7b:29:f3:48:38:28:1f:a2:9c:80:e5:3d: 07:02:64:9d:a3:74:24:9f:c1:c1:23:3f:56:62:dd:bb:7b:31: 38:8f:f1:b1:4b:6f:9a:c1:4d:6f:22:a1:4b:33:35:43:72:74: 05:03:25:72:8a:eb:30:58:1b:91:60:ec:5c:7f:d3:aa:2c:a5: 62:4c:96:ca:64:42:0c:5d:1c:67:da:be:64:bd:71:76:d6:e2: 34:0e:f0:f6:f3:ab:21:11:55:83:32:ed:5f:4b:45:38:91:56: 06:06:6a:b4:86:a1:bb:7f:e1:d2:c5:e4:03:7e:22:94:52:5a: ba:f8:cb:dd:7b:95:6e:96:5a:10:7a:71:f5:98:b6:15:65:39: 98:b8:ec:94:fb:ac:a7:6f:ee:7e:62:51:cc:ca:23:12:b7:e5: 61:93:39:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBrduVRjQLKj3vD/jh76geenK54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNjAzMjQxNjE1NDdaFw0yNjAzMjgwMDM5NDdaMDMxMTAvBgNV BAMTKDkzMDEzMEIyMzA1NERGRkVBQkYwOUNEQkFDQUVBQkRFQTUyOUYyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPyD3XMro2HRvtsXxDb1pSzReg 73YG3NlaRdvZd7WiGbKvGF2mK/YQpgHhaeBD7ox8yK3ywPCwO4tySrTIDNkG8wxy 0mJCZ7gY20lJcy3Vrd19KF0zP7jpWcNhaiFmm9CuUpVmD4o0H752QulFTza0w/df h2nAZCudFKrZHhPgeBzbW4TRMlU5TzEwpebGAFXcr5E0xxVUObSZogrQi+Fh3DiU S55YHXuzJtEaEdAktF8uks0poXKfzT4w0hm4TDmZLa3DGuELkhkloNhXNjKscfwr fiePsuffIFkmJXaPXqd2IcqtVDrhJ2J5iexd6NyaWSC1m0P0ikM0wtJ8/mNXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkwEwsjBU3/6r8JzbrK6r3qUp8uswHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvs4TXVWxkpw+yywTyGHDLDq4ky2T4ZjUU6 PHGf8Gvqx6k8aB+0h9dFoXG1KKiiy7qVcak2pvHdyw1M2OMIjOi5enyr/n/LAHSc 61UrVxb6+EJX2m3nO+bd/p75qI+vUXsp80g4KB+inIDlPQcCZJ2jdCSfwcEjP1Zi 3bt7MTiP8bFLb5rBTW8ioUszNUNydAUDJXKK6zBYG5Fg7Fx/06ospWJMlspkQgxd HGfavmS9cXbW4jQO8PbzqyERVYMy7V9LRTiRVgYGarSGobt/4dLF5AN+IpRSWrr4 y917lW6WWhB6cfWYthVlOZi47JT7rKdv7n5iUczKIxK35WGTOcg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:02:20 2026 by rpki-client