$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft File: 98FBC9C110EF2F9B4553D613927F55774E076EA9.mft (raw, json) Hash identifier: dlCGSdlYYc884Ae136CPYNSfbW0jyY6kEFMe2i2RPCg= Subject key identifier: 8B:51:38:1B:04:37:18:C8:91:07:CD:40:EE:28:4E:06:D9:2D:B2:FF Authority key identifier: 98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9 Certificate issuer: /CN=98FBC9C110EF2F9B4553D613927F55774E076EA9 Certificate serial: 4164A7B2C2B2963FD75471E0DEE05A74D31EED95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 11:24:38 +0000 Manifest this update: Fri 25 Sep 2026 11:19:38 +0000 Manifest next update: Sat 26 Sep 2026 14:02:38 +0000 Files and hashes: 1: 98FBC9C110EF2F9B4553D613927F55774E076EA9.crl (hash: 535LnGvqGVaCrotGEV8sjo4ZSvF2GCOQmSCO5LI+GuI=) 2: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: PRQ0wyh257Ie4C2D9c8Ywf6UyKXsn9qs6MWo6/u5E68=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:64:a7:b2:c2:b2:96:3f:d7:54:71:e0:de:e0:5a:74:d3:1e:ed:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FBC9C110EF2F9B4553D613927F55774E076EA9 Validity Not Before: Sep 25 11:19:38 2026 GMT Not After : Sep 26 14:02:38 2026 GMT Subject: CN=8B51381B043718C89107CD40EE284E06D92DB2FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:5a:99:d4:22:51:5c:cf:d6:56:54:6d:3d: 1c:f0:52:fa:08:4a:63:f9:e0:5f:31:b1:bb:aa:20: b0:d9:6d:93:8b:49:dc:7d:35:ab:3f:d9:79:14:47: 8b:c8:6f:bb:b5:bc:c0:3c:86:7a:09:b3:01:1b:10: 61:af:e4:4c:9a:2a:2d:66:2b:4d:f0:28:71:48:22: 9f:fe:e4:e3:0d:af:0e:b1:2e:0a:a1:bd:f9:9f:8d: 9a:50:ef:28:ad:54:e1:d3:16:9a:d0:a4:a2:3c:3a: f4:c9:dd:8a:e3:6f:2b:e6:52:f2:6d:d4:bc:0c:ed: f1:60:6f:b0:63:26:87:2e:80:ac:72:6e:a9:d7:d7: 37:df:d8:cc:18:c8:48:bd:87:37:b0:aa:e7:24:b3: dc:97:c4:4a:35:ba:08:d6:f1:46:9e:1d:46:77:7b: 0c:11:35:b7:c5:8c:78:b1:d4:86:6d:48:fe:96:a1: b5:87:90:8a:dc:34:14:d3:12:d1:6d:9a:73:62:3a: 40:fa:c3:39:2e:29:0d:19:32:76:2f:f4:d6:a4:41: 6a:5f:97:fd:f2:84:34:0a:3d:cf:9a:e6:ea:ef:79: e0:6e:0a:db:52:c5:9c:4a:3c:ea:34:65:ca:fd:44: a3:16:b5:fd:db:f7:40:03:8a:19:a2:f3:f2:80:9d: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:51:38:1B:04:37:18:C8:91:07:CD:40:EE:28:4E:06:D9:2D:B2:FF X509v3 Authority Key Identifier: keyid:98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:23:c1:3d:b2:e2:cb:a1:e2:f9:84:58:74:b0:b7:db:97:06: bb:18:a9:26:37:d2:00:df:20:02:6e:07:a5:c2:72:81:e3:c2: ef:aa:bc:47:27:28:be:63:55:dd:09:03:58:8f:a5:6a:b2:34: 53:e6:f7:3f:8f:cd:aa:56:32:4a:b3:d6:0d:fd:9a:02:c9:7f: c4:8c:ba:ee:42:b8:08:2d:3b:5d:fb:22:d8:8b:01:9b:c8:80: 11:31:18:aa:d7:40:30:e9:ed:66:22:2d:41:09:06:e5:c4:72: 10:2a:7c:e9:9d:fc:bb:47:73:3f:06:e0:cf:c7:14:13:f1:1d: b9:e1:12:7b:84:60:ee:80:75:05:b9:e0:f9:86:19:e9:b4:ca: 9f:d0:68:b7:6e:f4:44:d0:4f:fa:1d:ad:e3:d9:fb:a4:95:06: 1a:67:51:cd:b5:80:0f:76:76:13:bc:92:99:7a:5b:3f:23:5f: 40:bc:ff:a8:9f:c5:c5:0a:d2:2a:86:84:d0:b4:23:4b:fe:b9: a4:db:1c:ba:c6:da:a2:0d:68:db:a5:d9:fc:24:80:0c:99:f7: 1b:43:27:5e:7f:a7:7d:73:e2:2e:e1:14:21:de:56:37:02:55: be:22:05:c8:90:30:19:a4:20:7d:af:e6:31:eb:df:44:dd:c5: 61:4e:0b:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWSnssKylj/XVHHg3uBadNMe7ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGQkM5QzExMEVGMkY5QjQ1NTNENjEzOTI3RjU1Nzc0 RTA3NkVBOTAeFw0yNjA5MjUxMTE5MzhaFw0yNjA5MjYxNDAyMzhaMDMxMTAvBgNV BAMTKDhCNTEzODFCMDQzNzE4Qzg5MTA3Q0Q0MEVFMjg0RTA2RDkyREIyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aVqZ1CJRXM/WVlRtPRzwUvoI SmP54F8xsbuqILDZbZOLSdx9Nas/2XkUR4vIb7u1vMA8hnoJswEbEGGv5EyaKi1m K03wKHFIIp/+5OMNrw6xLgqhvfmfjZpQ7yitVOHTFprQpKI8OvTJ3YrjbyvmUvJt 1LwM7fFgb7BjJocugKxybqnX1zff2MwYyEi9hzewqucks9yXxEo1ugjW8UaeHUZ3 ewwRNbfFjHix1IZtSP6WobWHkIrcNBTTEtFtmnNiOkD6wzkuKQ0ZMnYv9NakQWpf l/3yhDQKPc+a5urveeBuCttSxZxKPOo0Zcr9RKMWtf3b90ADihmi8/KAnXO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1E4GwQ3GMiRB81A7ihOBtktsv8wHwYDVR0j BBgwFoAUmPvJwRDvL5tFU9YTkn9Vd04HbqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NmMGE3N2MtMzkyOC00MTMwLWEwOTgtYjQzNzU3MmQ3MjJjLzAvOThGQkM5QzEx MEVGMkY5QjQ1NTNENjEzOTI3RjU1Nzc0RTA3NkVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85OEZCQzlDMTEwRUYyRjlCNDU1M0Q2MTM5MjdGNTU3NzRFMDc2 RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw OTgtYjQzNzU3MmQ3MjJjLzAvOThGQkM5QzExMEVGMkY5QjQ1NTNENjEzOTI3RjU1 Nzc0RTA3NkVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABojwT2y4suh4vmEWHSwt9uXBrsYqSY30gDf IAJuB6XCcoHjwu+qvEcnKL5jVd0JA1iPpWqyNFPm9z+PzapWMkqz1g39mgLJf8SM uu5CuAgtO137ItiLAZvIgBExGKrXQDDp7WYiLUEJBuXEchAqfOmd/LtHcz8G4M/H FBPxHbnhEnuEYO6AdQW54PmGGem0yp/QaLdu9ETQT/odrePZ+6SVBhpnUc21gA92 dhO8kpl6Wz8jX0C8/6ifxcUK0iqGhNC0I0v+uaTbHLrG2qINaNul2fwkgAyZ9xtD J15/p31z4i7hFCHeVjcCVb4iBciQMBmkIH2v5jHr30TdxWFOC7w= -----END CERTIFICATE-----Generated at Sat Sep 26 06:43:56 2026 by rpki-client