
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
File: 98FBC9C110EF2F9B4553D613927F55774E076EA9.mft (raw, json)
Hash identifier: YQ1mzDYXH6S0qZp2RyzRcqbWyYK+jPZGWWxcJXT7tHk=
Subject key identifier: 76:97:64:80:CC:D9:87:EF:D5:F4:21:3C:A9:6B:6D:4A:F1:C3:73:E9
Authority key identifier: 98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9
Certificate issuer: /CN=98FBC9C110EF2F9B4553D613927F55774E076EA9
Certificate serial: 209BE98E29A9A646ACD8230F0985B97FB458974E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:28:30 +0000
Manifest this update: Fri 24 Jul 2026 03:23:30 +0000
Manifest next update: Sat 25 Jul 2026 06:54:30 +0000
Files and hashes: 1: 98FBC9C110EF2F9B4553D613927F55774E076EA9.crl (hash: exvJO50bJ7rOwWOTYNyDPKUJN1htklX16fICoGTOb+o=)
2: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: PRQ0wyh257Ie4C2D9c8Ywf6UyKXsn9qs6MWo6/u5E68=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl
rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9b:e9:8e:29:a9:a6:46:ac:d8:23:0f:09:85:b9:7f:b4:58:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98FBC9C110EF2F9B4553D613927F55774E076EA9
Validity
Not Before: Jul 24 03:23:30 2026 GMT
Not After : Jul 25 06:54:30 2026 GMT
Subject: CN=76976480CCD987EFD5F4213CA96B6D4AF1C373E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:3e:6e:25:a4:d1:be:1f:b2:ce:d4:ba:25:
5f:e7:90:1d:d1:88:68:54:1d:5a:46:5c:74:9a:79:
a7:43:42:19:13:48:a1:7e:6e:ce:80:96:8f:e9:07:
a3:0a:42:4b:0b:95:74:17:b0:34:97:2a:b5:35:77:
11:77:76:b0:6a:37:36:10:12:5b:74:03:fa:c7:bb:
07:50:cc:75:d1:4d:ff:c0:79:33:47:15:97:2f:9e:
6d:29:d1:a9:b7:59:e7:d4:48:f4:0b:28:39:20:46:
74:86:4a:52:44:cb:8d:0c:29:12:22:72:05:7c:d7:
6e:c6:b7:a1:9f:e6:f1:e5:cf:59:73:e2:0c:24:5f:
0a:74:e6:50:c0:36:aa:7b:e3:60:2f:55:51:fb:88:
7e:59:f2:82:f0:fa:4e:33:1d:b2:89:f7:72:b7:be:
e0:a6:ef:39:28:6c:1f:63:8c:5c:c7:c0:d0:b9:79:
a0:24:02:11:92:90:7e:71:b8:a2:bd:cc:61:35:20:
4d:b3:af:93:af:1a:1c:28:db:0e:8b:f4:6b:c9:b3:
af:9e:71:a3:d3:91:df:ec:27:91:d4:42:6a:e0:ad:
6e:23:7f:34:d7:7c:86:d2:a4:1a:f9:1d:9d:ed:32:
00:b5:5e:88:10:56:7e:7c:96:f5:90:b4:b1:5c:16:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:64:80:CC:D9:87:EF:D5:F4:21:3C:A9:6B:6D:4A:F1:C3:73:E9
X509v3 Authority Key Identifier:
keyid:98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:87:e0:a6:61:63:28:7d:7c:0a:32:ca:eb:a7:90:1b:4c:ff:
52:7f:de:f4:99:48:2f:7f:4f:a8:01:ef:4f:35:93:a5:7a:54:
b7:1e:7d:4f:a6:85:fd:0a:1a:8d:c1:d2:98:b3:9c:aa:e6:d5:
95:db:1c:07:71:64:0e:d5:6c:f2:0e:7c:4f:8d:ae:a5:3b:26:
ab:d3:3e:eb:f5:c8:ae:08:1e:48:1b:e7:4f:2b:56:12:dd:c6:
f8:ef:8c:5f:e6:e2:c0:04:0b:77:77:bd:f7:7b:d3:f4:d4:f3:
d4:44:e7:c4:cf:b9:f2:c3:bb:77:64:e8:59:e3:d6:04:1c:8d:
96:50:57:ec:30:fe:24:c3:cc:3f:f0:90:60:2c:a4:c0:eb:58:
bf:bb:0c:aa:f5:82:45:ad:4a:f0:4b:2d:20:75:2a:f2:14:92:
d8:3f:c8:8d:60:24:64:41:05:1c:98:e1:28:f1:17:40:38:32:
fc:59:bf:53:98:3e:a6:a7:53:29:b1:28:2a:e2:02:f3:a3:46:
a1:4a:fe:17:c2:50:43:91:00:13:8d:f6:b1:a3:0c:31:24:57:
be:c2:27:15:6a:9a:5a:b3:86:b9:ef:26:b0:0c:44:ab:33:9e:
de:5b:fb:48:f7:fd:c6:0f:df:6e:82:0f:da:f7:ba:56:ca:51:
45:eb:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:40 2026 by rpki-client