$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json) Hash identifier: ggYdNDd263nHy+nIZGyj3wyiSoaUArSE3AD3wHM8O4o= Subject key identifier: C8:F1:29:85:61:13:F0:F2:B8:2A:DE:15:1D:14:CD:2C:4B:EB:CC:C0 Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Certificate serial: 595AEC4C68C394BA0AAE4A4DD26CA87AE7640F3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:49:25 +0000 Manifest this update: Tue 12 May 2026 18:44:25 +0000 Manifest next update: Wed 13 May 2026 22:07:25 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=) 2: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: 8peAOkzdeX+sI7giY70vs3VKjfxOA3QymX8QyFDXEQ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5a:ec:4c:68:c3:94:ba:0a:ae:4a:4d:d2:6c:a8:7a:e7:64:0f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Validity Not Before: May 12 18:44:25 2026 GMT Not After : May 13 22:07:25 2026 GMT Subject: CN=C8F129856113F0F2B82ADE151D14CD2C4BEBCCC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:dd:9d:0a:40:9e:fe:36:6e:5f:4f:47:e5: 5a:ce:7e:26:90:d0:40:d6:58:50:89:62:53:f4:d5: 99:17:95:df:d7:52:53:31:dc:5a:d4:27:e1:bd:78: c1:bf:9f:cf:d9:dd:85:51:88:be:c0:62:46:95:25: fe:bf:38:78:f4:6f:1e:1e:fc:6f:2e:81:c1:83:f1: 01:43:79:f2:1d:2a:55:e7:7a:b4:7b:9c:a4:81:79: cc:91:06:8f:37:e3:0a:8d:5e:0e:d9:2b:be:6f:0e: 96:d6:31:e2:5d:b4:65:d6:34:e2:75:98:8f:f3:e4: 23:7f:eb:d5:17:9e:c6:5b:8d:67:4f:a8:8f:df:8d: 03:c4:ef:c9:46:25:4e:bc:04:1d:39:2b:ce:e4:44: 9b:d0:a5:95:c4:ed:f4:d9:db:12:8f:15:69:f6:60: ec:49:62:2f:e6:e5:bd:8b:60:ec:04:a3:d3:87:8a: 24:5d:35:81:6f:f1:f4:9d:cc:d3:45:43:01:2d:fe: 43:65:27:c9:12:05:e7:53:29:aa:c9:8d:cb:02:14: 4b:3c:a7:c0:cf:58:7a:7b:92:c3:d1:cb:2d:ab:fb: 2b:dd:ac:b2:2a:1c:2f:c7:a8:5b:14:39:a5:cc:30: 15:ae:00:39:5a:d6:fa:a6:4f:48:c0:db:ef:dc:7d: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F1:29:85:61:13:F0:F2:B8:2A:DE:15:1D:14:CD:2C:4B:EB:CC:C0 X509v3 Authority Key Identifier: keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ac:4e:31:c0:a5:ab:f6:5d:de:48:5e:07:6e:94:bf:21:d2: 1d:bf:34:0f:54:a9:9f:f1:40:47:0e:7b:57:d0:57:a5:66:5d: 95:20:b2:08:fd:0c:da:de:80:44:2f:45:c4:af:55:8c:6e:80: 19:8c:9f:65:85:14:dc:ed:38:f1:d2:97:dc:99:7b:f4:6e:13: 18:1b:b4:94:c8:b0:7c:25:f9:cc:e2:a7:98:f3:68:bf:d2:da: 1d:99:96:f8:c1:b5:f7:55:9e:f6:ff:f8:fe:89:22:c1:9b:c4: c3:24:30:5c:11:07:4b:73:1a:26:c5:a0:3c:07:23:56:3c:d0: b8:df:ae:09:86:3f:5b:ae:3a:47:fd:e5:b1:a2:aa:e9:ad:d9: 23:35:a3:9b:f8:f8:2b:1c:0a:01:a9:9f:f3:c6:72:78:e5:eb: be:e7:48:74:f8:8d:33:48:e5:3d:05:79:bc:5a:f9:96:31:9f: 0c:dc:71:6b:22:61:c1:19:2a:86:2b:05:64:50:bf:b6:c6:ff: 26:fb:15:91:39:22:38:cc:a8:b8:fe:1a:c5:70:5e:0b:ff:c0: 24:2d:54:af:fe:e8:9a:30:63:9d:dd:e8:73:d6:e1:31:d7:ef: 55:69:ca:3b:e5:7b:02:41:ef:bd:6e:15:4a:0a:08:4f:e1:ea: 36:5f:59:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVrsTGjDlLoKrkpN0myoeudkDzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFG RUJENUI4MjAeFw0yNjA1MTIxODQ0MjVaFw0yNjA1MTMyMjA3MjVaMDMxMTAvBgNV BAMTKEM4RjEyOTg1NjExM0YwRjJCODJBREUxNTFEMTRDRDJDNEJFQkNDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31N2dCkCe/jZuX09H5VrOfiaQ 0EDWWFCJYlP01ZkXld/XUlMx3FrUJ+G9eMG/n8/Z3YVRiL7AYkaVJf6/OHj0bx4e /G8ugcGD8QFDefIdKlXnerR7nKSBecyRBo834wqNXg7ZK75vDpbWMeJdtGXWNOJ1 mI/z5CN/69UXnsZbjWdPqI/fjQPE78lGJU68BB05K87kRJvQpZXE7fTZ2xKPFWn2 YOxJYi/m5b2LYOwEo9OHiiRdNYFv8fSdzNNFQwEt/kNlJ8kSBedTKarJjcsCFEs8 p8DPWHp7ksPRyy2r+yvdrLIqHC/HqFsUOaXMMBWuADla1vqmT0jA2+/cff4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPEphWET8PK4Kt4VHRTNLEvrzMAwHwYDVR0j BBgwFoAUmOGMV894S17LZHb/2jQDof69W4IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY5YzQ0NmYtZDk3MS00YjVlLWIyNjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdD Rjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFGRUJENUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUxOEM1N0NGNzg0QjVFQ0I2NDc2RkZEQTM0MDNBMUZFQkQ1 QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAz QTFGRUJENUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSsTjHApav2Xd5IXgdulL8h0h2/NA9UqZ/x QEcOe1fQV6VmXZUgsgj9DNregEQvRcSvVYxugBmMn2WFFNztOPHSl9yZe/RuExgb tJTIsHwl+czip5jzaL/S2h2ZlvjBtfdVnvb/+P6JIsGbxMMkMFwRB0tzGibFoDwH I1Y80LjfrgmGP1uuOkf95bGiqumt2SM1o5v4+CscCgGpn/PGcnjl677nSHT4jTNI 5T0Febxa+ZYxnwzccWsiYcEZKoYrBWRQv7bG/yb7FZE5IjjMqLj+GsVwXgv/wCQt VK/+6JowY53d6HPW4THX71VpyjvlewJB771uFUoKCE/h6jZfWZE= -----END CERTIFICATE-----Generated at Wed May 13 00:13:32 2026 by rpki-client