$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json) Hash identifier: HMpkdWeOGXtpoOkIyMqNbfxvAyHoLD82na+Ja97vAxw= Subject key identifier: 2F:CC:41:61:12:44:78:F0:2D:7C:16:D6:88:F5:63:79:9B:94:7F:7D Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Certificate serial: A9C572B83299717D5382FD4432C2B9A5A9BED9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:59:25 +0000 Manifest this update: Thu 24 Sep 2026 02:54:25 +0000 Manifest next update: Fri 25 Sep 2026 03:29:25 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=) 2: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: UEzmjk0ImaJU06yuB31mnzzR/2/uuay8ZzwieKwdgKQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a9:c5:72:b8:32:99:71:7d:53:82:fd:44:32:c2:b9:a5:a9:be:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Validity Not Before: Sep 24 02:54:25 2026 GMT Not After : Sep 25 03:29:25 2026 GMT Subject: CN=2FCC4161124478F02D7C16D688F563799B947F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3a:15:03:d2:4e:e1:75:7b:d7:b8:ae:9c:41: d8:82:9c:b2:c7:2e:83:02:3a:a7:1a:87:09:2e:4e: e5:1f:ba:e3:c3:f4:f5:7e:d3:a0:ec:54:91:36:1c: 76:34:2f:a3:1d:a0:04:f0:82:73:06:07:ce:28:46: d7:3f:13:85:e2:7d:f1:cd:78:5a:2a:32:6e:b3:e7: 7c:72:e0:40:54:4f:47:00:65:02:80:26:e2:b9:85: 56:ff:12:03:42:40:68:e1:6e:a1:0d:b1:76:85:56: 59:a2:a7:be:24:0b:80:c1:c8:1f:df:0f:93:1e:25: 9c:f5:77:9f:e7:26:e8:01:a4:04:ee:67:8a:23:bd: 02:13:56:61:2b:9e:63:1f:a4:dd:f4:e9:c4:1b:f8: cf:b7:d9:73:6a:41:5e:f0:08:d5:ae:6e:82:c4:6c: d6:3d:99:c2:5c:e3:89:8c:f5:23:49:f5:df:fa:8f: e3:4d:c2:d5:5c:b5:c1:01:97:27:5c:40:bd:8e:91: 6b:ef:7c:8b:76:90:d6:e2:64:a0:2c:6f:69:86:7f: 16:ed:ff:b3:b2:c2:5d:24:f3:39:cc:d4:8b:aa:9d: e7:50:ff:02:36:29:7f:0f:38:0a:13:51:81:42:f6: e1:fa:ad:de:d3:96:c4:96:9c:9a:c7:c7:d3:b5:d6: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CC:41:61:12:44:78:F0:2D:7C:16:D6:88:F5:63:79:9B:94:7F:7D X509v3 Authority Key Identifier: keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:44:51:29:ab:5c:96:20:80:fa:9b:81:e8:2b:7e:6c:b3:6b: 37:0b:db:76:be:51:32:0a:86:c4:e3:64:91:ed:c4:2f:b9:e4: f6:c8:df:b4:90:93:02:84:2f:91:75:2c:1f:d9:6b:e3:e2:09: e4:0a:a1:f4:48:5b:99:bd:5d:8e:19:b0:a4:1a:b2:2c:0a:57: 65:af:47:60:3c:13:6d:62:f0:99:c8:cd:30:eb:32:cb:1d:f1: 36:36:08:4c:a3:cb:54:77:20:57:ef:d6:1c:7c:61:4c:63:bb: fd:6c:48:c8:07:1c:ba:34:64:e3:a8:32:d4:94:00:d4:43:99: a0:71:ee:1a:2b:5f:60:ba:b8:33:a5:51:58:1e:0b:5b:4a:63: 90:47:2e:f5:e6:59:83:fe:f6:ed:05:28:b5:63:aa:b6:f9:03: 09:42:f4:07:c3:82:60:2a:a3:df:d4:4f:bc:8e:dd:8a:4c:eb: 47:ea:ad:03:60:66:ea:f2:0a:bd:be:f2:12:b0:b1:38:de:52: b2:4e:4e:9b:62:6e:b8:d1:22:f0:e5:dc:00:3e:ed:41:ca:e8: 38:bb:bd:2a:c4:80:b5:1d:98:f8:55:a7:60:28:0c:38:d7:24: cf:36:32:0b:c6:db:69:8d:c0:95:db:a4:a0:ed:28:1e:87:bd: 8d:bf:cc:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKnFcrgymXF9U4L9RDLCuaWpvtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFG RUJENUI4MjAeFw0yNjA5MjQwMjU0MjVaFw0yNjA5MjUwMzI5MjVaMDMxMTAvBgNV BAMTKDJGQ0M0MTYxMTI0NDc4RjAyRDdDMTZENjg4RjU2Mzc5OUI5NDdGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwOhUD0k7hdXvXuK6cQdiCnLLH LoMCOqcahwkuTuUfuuPD9PV+06DsVJE2HHY0L6MdoATwgnMGB84oRtc/E4XiffHN eFoqMm6z53xy4EBUT0cAZQKAJuK5hVb/EgNCQGjhbqENsXaFVlmip74kC4DByB/f D5MeJZz1d5/nJugBpATuZ4ojvQITVmErnmMfpN306cQb+M+32XNqQV7wCNWuboLE bNY9mcJc44mM9SNJ9d/6j+NNwtVctcEBlydcQL2OkWvvfIt2kNbiZKAsb2mGfxbt /7Oywl0k8znM1IuqnedQ/wI2KX8POAoTUYFC9uH6rd7TlsSWnJrHx9O11l43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL8xBYRJEePAtfBbWiPVjeZuUf30wHwYDVR0j BBgwFoAUmOGMV894S17LZHb/2jQDof69W4IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY5YzQ0NmYtZDk3MS00YjVlLWIyNjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdD Rjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFGRUJENUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUxOEM1N0NGNzg0QjVFQ0I2NDc2RkZEQTM0MDNBMUZFQkQ1 QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAz QTFGRUJENUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOdEUSmrXJYggPqbgegrfmyzazcL23a+UTIK hsTjZJHtxC+55PbI37SQkwKEL5F1LB/Za+PiCeQKofRIW5m9XY4ZsKQasiwKV2Wv R2A8E21i8JnIzTDrMssd8TY2CEyjy1R3IFfv1hx8YUxju/1sSMgHHLo0ZOOoMtSU ANRDmaBx7horX2C6uDOlUVgeC1tKY5BHLvXmWYP+9u0FKLVjqrb5AwlC9AfDgmAq o9/UT7yO3YpM60fqrQNgZuryCr2+8hKwsTjeUrJOTptibrjRIvDl3AA+7UHK6Di7 vSrEgLUdmPhVp2AoDDjXJM82MgvG22mNwJXbpKDtKB6HvY2/zMI= -----END CERTIFICATE-----Generated at Thu Sep 24 13:22:11 2026 by rpki-client