
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json)
Hash identifier: QsNq+Gdyv6X+5ihZDjpWLR/lt0gJmfXzJivHcQM/ATo=
Subject key identifier: 32:9F:BC:9C:54:E2:FC:CA:7F:8C:FC:03:6B:20:38:16:B9:76:E7:74
Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Certificate serial: 04B500B42712D5AEFE4CD37C46121FCA32B494CA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 17:31:34 +0000
Manifest this update: Thu 23 Jul 2026 17:26:34 +0000
Manifest next update: Fri 24 Jul 2026 21:07:34 +0000
Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=)
2: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: YpoNY5HjsRUCfyuBEkpfZWspeO7s3x2jKEd+4c9ys5g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b5:00:b4:27:12:d5:ae:fe:4c:d3:7c:46:12:1f:ca:32:b4:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Validity
Not Before: Jul 23 17:26:34 2026 GMT
Not After : Jul 24 21:07:34 2026 GMT
Subject: CN=329FBC9C54E2FCCA7F8CFC036B203816B976E774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:9f:fc:97:72:ce:e2:ed:76:fe:f6:c4:84:
8e:31:cd:29:06:07:0a:d5:d0:95:d2:08:b4:9d:b6:
df:c1:f0:ed:f9:3c:29:a2:59:3d:7d:dc:95:fb:ce:
ab:cd:26:2d:ca:be:df:49:00:0f:52:01:15:e2:dd:
fd:dd:6f:e1:37:5a:ac:5b:41:6b:55:d6:a0:2b:f1:
b9:38:8e:29:0b:9e:a5:bd:00:69:47:92:d5:da:fb:
17:d2:9b:00:d7:53:9b:e3:6f:4e:d4:11:67:dc:d0:
a9:7f:41:05:d6:2e:fd:3f:c1:f3:81:ee:40:b0:a0:
28:03:47:f8:a3:01:3e:84:87:6b:7f:e7:8d:88:d9:
2d:dd:c5:ad:b0:10:4c:46:fd:4f:67:52:fb:d8:64:
7c:7d:1f:8d:1b:5d:30:e7:87:07:84:93:e7:bb:6e:
65:d1:7d:62:1e:8b:3d:fd:34:18:ac:d4:3f:6b:b2:
4c:09:ea:2b:2f:62:90:d5:6a:ed:ed:4b:91:87:39:
86:49:21:d9:ce:c3:72:67:4c:0c:c2:d8:04:f3:30:
cd:4d:82:9a:bf:f8:8d:37:b1:db:13:58:73:a9:66:
3c:3b:54:dc:62:28:b3:17:6c:74:52:f7:a8:78:cd:
c5:27:1f:f9:20:d9:f6:f7:77:6a:01:3d:fc:f1:d9:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:BC:9C:54:E2:FC:CA:7F:8C:FC:03:6B:20:38:16:B9:76:E7:74
X509v3 Authority Key Identifier:
keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cb:3d:69:5e:1e:42:28:d8:d3:d4:3e:91:29:65:dc:d3:7a:
cb:64:9a:fb:33:13:31:1f:1a:9e:39:3a:1c:72:84:4b:90:a6:
ff:6a:c0:30:76:c8:ef:fd:f8:de:85:26:5d:36:64:9d:a5:9b:
fd:1b:e4:9b:d0:ec:c0:fd:ae:ee:29:b7:69:61:cb:d9:b7:c5:
be:a3:3b:d8:45:a7:ba:d8:df:8d:a6:6c:70:e0:14:41:e2:af:
66:2f:24:e1:78:8c:7d:88:2e:04:44:c0:c6:4d:52:80:14:67:
22:f9:6f:b2:28:58:9c:72:b4:90:14:47:42:49:b0:5d:2c:22:
d1:39:f6:f3:f7:2a:e9:b0:4c:42:09:b4:f5:ae:24:df:37:ff:
1d:2c:48:cd:4b:51:28:3f:8e:d4:e2:b0:67:a4:fc:f2:cd:c3:
46:c2:66:34:4c:e3:d3:9c:9e:97:fb:3b:c8:05:f5:9e:8b:2d:
df:00:8c:0e:07:64:d1:0e:0e:c8:33:54:f4:35:b2:9c:e1:2f:
d5:e3:fd:b5:bc:57:48:3d:cb:0d:b8:08:67:52:b6:a1:09:1e:
fd:70:da:c4:bd:d2:5c:b2:e7:62:7b:b2:8c:97:4b:65:5d:74:
0d:c4:12:1e:20:01:9f:bd:91:37:4d:80:f2:bd:d6:83:9b:5f:
f0:37:65:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:20 2026 by rpki-client