$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft File: 98E2D88430E0F6BCECDC35B8596FF471265D238B.mft (raw, json) Hash identifier: k7eBLqO1Az32YgsnKdKtzycpdybb4K+3z0tYmuSW68A= Subject key identifier: 77:41:36:9C:0D:FF:C9:3B:A9:9A:D1:3C:3C:2B:75:AB:04:03:77:BB Authority key identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B Certificate issuer: /CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Certificate serial: 68FDD060DA205B5523CD4255B123A1F8176DEE7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:39:01 +0000 Manifest this update: Thu 24 Sep 2026 06:34:01 +0000 Manifest next update: Fri 25 Sep 2026 09:58:01 +0000 Files and hashes: 1: 98E2D88430E0F6BCECDC35B8596FF471265D238B.crl (hash: tDo/zPDKKKQWm2OW1O+RxIg4jnG8buLqjxnQSsvz2tw=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: H29DiGXAuolahNiG0w85WM8CZEw5FJ4zYtAOWOwpwGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fd:d0:60:da:20:5b:55:23:cd:42:55:b1:23:a1:f8:17:6d:ee:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Validity Not Before: Sep 24 06:34:01 2026 GMT Not After : Sep 25 09:58:01 2026 GMT Subject: CN=7741369C0DFFC93BA99AD13C3C2B75AB040377BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:81:53:93:2e:7c:45:dc:d7:a6:79:b6:5b: 9b:87:c5:25:1c:ca:bc:85:f4:bd:fe:2a:38:2b:57: c7:53:6a:3e:01:3b:ba:67:a5:0c:1d:55:ee:92:2c: 89:94:46:5c:5b:38:f0:0b:e4:ed:93:a6:ff:6f:23: f4:ce:f3:0c:43:f9:c1:f4:e8:69:0d:49:8a:52:46: 05:bb:4e:26:c2:d9:4c:c7:a9:b9:3b:5a:be:6a:49: 08:17:71:f2:da:9c:97:9a:c0:d5:f7:06:a7:aa:43: a5:96:9a:47:4d:1f:d4:05:25:3e:50:ce:26:46:b3: c4:37:94:14:15:15:ab:5d:da:66:54:12:96:93:61: aa:5c:00:27:be:91:9d:60:10:a6:bf:b0:82:95:55: a0:94:24:d5:86:b7:a0:6a:bb:2d:71:e9:81:f3:c3: e1:a4:12:a7:f7:a5:0b:08:55:8d:65:44:a7:fb:9b: 9c:12:ea:4c:f4:a1:97:78:95:2b:c9:ec:5e:76:df: 8c:25:fe:7c:d3:69:cb:35:a8:99:f5:ad:3d:d9:79: 7a:f5:34:12:01:49:2b:9a:6a:4b:0f:88:db:39:79: d1:01:bb:38:a0:da:5e:c3:1c:27:86:c7:4f:f2:ff: c9:3f:39:af:d0:33:ab:3f:31:11:25:cc:8f:27:4f: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:41:36:9C:0D:FF:C9:3B:A9:9A:D1:3C:3C:2B:75:AB:04:03:77:BB X509v3 Authority Key Identifier: keyid:98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:90:f0:fb:32:49:d5:52:f4:10:e5:0b:59:5d:d8:d9:88:a6: c9:bd:5e:39:12:0e:f6:d8:fe:55:1e:0e:07:7e:05:b6:8c:6e: 14:a6:fe:01:3d:f5:42:ca:27:36:79:05:99:94:5a:cc:c8:00: c2:93:50:e9:46:07:15:ea:40:61:3c:a6:c7:9c:82:74:66:e3: 3d:61:5b:e3:c5:0d:80:ab:94:b3:6c:00:f7:59:02:fc:9b:f1: 0c:8a:f3:41:e4:70:12:d1:99:4a:1c:ca:b5:4d:18:67:d7:02: d7:c3:bb:44:d2:85:57:f8:41:2d:d6:66:17:c2:5e:b1:69:69: 29:76:be:92:fc:70:06:75:28:d9:ff:fd:b7:0d:f3:ac:a1:17: 58:ce:0a:21:fa:06:56:cc:22:d0:24:c3:23:42:9f:12:31:2c: 5c:0f:93:0a:6f:06:43:e7:11:54:2e:42:ce:21:42:f1:a2:c3: 2b:0e:59:94:ac:31:0a:88:40:1d:02:2e:2a:15:d0:8f:6d:6f: 7f:47:4e:13:e8:bb:56:69:0b:3c:f6:e9:e1:6f:46:87:f2:d7: df:ea:d1:c4:1c:2d:2a:25:d1:ae:57:58:6c:16:d0:07:e4:35: 52:2f:b6:d5:e1:61:30:4c:2b:ff:70:58:65:eb:8d:18:43:76: 2f:b8:8f:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaP3QYNogW1UjzUJVsSOh+Bdt7n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEy NjVEMjM4QjAeFw0yNjA5MjQwNjM0MDFaFw0yNjA5MjUwOTU4MDFaMDMxMTAvBgNV BAMTKDc3NDEzNjlDMERGRkM5M0JBOTlBRDEzQzNDMkI3NUFCMDQwMzc3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/4FTky58RdzXpnm2W5uHxSUc yryF9L3+KjgrV8dTaj4BO7pnpQwdVe6SLImURlxbOPAL5O2Tpv9vI/TO8wxD+cH0 6GkNSYpSRgW7TibC2UzHqbk7Wr5qSQgXcfLanJeawNX3BqeqQ6WWmkdNH9QFJT5Q ziZGs8Q3lBQVFatd2mZUEpaTYapcACe+kZ1gEKa/sIKVVaCUJNWGt6Bquy1x6YHz w+GkEqf3pQsIVY1lRKf7m5wS6kz0oZd4lSvJ7F5234wl/nzTacs1qJn1rT3ZeXr1 NBIBSSuaaksPiNs5edEBuzig2l7DHCeGx0/y/8k/Oa/QM6s/MRElzI8nT4b1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd0E2nA3/yTupmtE8PCt1qwQDd7swHwYDVR0j BBgwFoAUmOLYhDDg9rzs3DW4WW/0cSZdI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg5YTA2NjEtMzFlZS00OWEyLWFlOWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQz MEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEyNjVEMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUyRDg4NDMwRTBGNkJDRUNEQzM1Qjg1OTZGRjQ3MTI2NUQy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0 NzEyNjVEMjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECQ8PsySdVS9BDlC1ld2NmIpsm9XjkSDvbY /lUeDgd+BbaMbhSm/gE99ULKJzZ5BZmUWszIAMKTUOlGBxXqQGE8psecgnRm4z1h W+PFDYCrlLNsAPdZAvyb8QyK80HkcBLRmUocyrVNGGfXAtfDu0TShVf4QS3WZhfC XrFpaSl2vpL8cAZ1KNn//bcN86yhF1jOCiH6BlbMItAkwyNCnxIxLFwPkwpvBkPn EVQuQs4hQvGiwysOWZSsMQqIQB0CLioV0I9tb39HThPou1ZpCzz26eFvRofy19/q 0cQcLSol0a5XWGwW0AfkNVIvttXhYTBMK/9wWGXrjRhDdi+4j2c= -----END CERTIFICATE-----Generated at Thu Sep 24 08:54:48 2026 by rpki-client