
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
File: 98E2D88430E0F6BCECDC35B8596FF471265D238B.mft (raw, json)
Hash identifier: F2iXe+7hdqCJyVkdFfQkca/4SlzPwZ4+Z8+36GEIrbM=
Subject key identifier: 99:AB:41:73:36:8A:D6:EB:1A:F4:8E:30:EE:77:58:98:58:A9:94:BA
Authority key identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B
Certificate issuer: /CN=98E2D88430E0F6BCECDC35B8596FF471265D238B
Certificate serial: 6D79D71308CB51EC0936CE521B0703105FA61BDA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:55:00 +0000
Manifest this update: Tue 12 May 2026 21:50:00 +0000
Manifest next update: Thu 14 May 2026 00:07:00 +0000
Files and hashes: 1: 98E2D88430E0F6BCECDC35B8596FF471265D238B.crl (hash: 0cZYeTp9GGB12u2OLU/Si0FAn2OtuMtp/Qst1BYXgm8=)
2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: H29DiGXAuolahNiG0w85WM8CZEw5FJ4zYtAOWOwpwGM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl
rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:79:d7:13:08:cb:51:ec:09:36:ce:52:1b:07:03:10:5f:a6:1b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E2D88430E0F6BCECDC35B8596FF471265D238B
Validity
Not Before: May 12 21:50:00 2026 GMT
Not After : May 14 00:07:00 2026 GMT
Subject: CN=99AB4173368AD6EB1AF48E30EE77589858A994BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:e7:11:35:cb:f9:1f:35:22:a3:b9:f7:21:
42:42:f7:44:85:ab:59:2c:23:b0:a9:bd:b6:9a:44:
c0:08:3c:b9:86:d8:c9:a2:fe:b0:39:65:92:e3:95:
04:81:84:65:ab:b3:c3:26:d2:34:73:b0:5c:37:e5:
8f:77:81:8d:70:3b:94:7d:24:a2:91:7e:ba:e5:a1:
ed:5e:80:4d:e4:78:7c:1c:e5:d1:4b:3f:4b:34:2c:
c4:75:ff:ee:b8:52:40:a9:f7:f7:de:23:64:13:59:
67:e8:66:bb:97:1c:7a:79:0c:25:4e:23:b3:fc:f8:
b5:76:d2:39:40:54:6d:1e:d1:9b:3d:f3:14:4e:1b:
cd:89:85:21:be:42:28:dd:2c:68:20:b1:4e:f3:a7:
59:36:8c:29:2b:ba:44:d5:8e:c0:a2:4c:23:03:f1:
84:1a:ba:88:2b:f8:5d:64:54:0a:3c:bd:81:cf:06:
41:e9:1b:22:5a:e5:ab:dc:61:f6:bf:56:2d:6c:d2:
28:56:41:cf:a5:57:92:be:5e:0e:e2:8f:ac:5b:23:
1e:3f:7c:d6:9e:71:ec:5f:98:4f:10:00:39:b3:e4:
f0:6e:82:20:30:c2:44:41:c4:74:b9:7a:04:18:42:
bc:79:54:1b:bd:e9:8e:c7:72:f2:4c:8c:d1:9a:02:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:41:73:36:8A:D6:EB:1A:F4:8E:30:EE:77:58:98:58:A9:94:BA
X509v3 Authority Key Identifier:
keyid:98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:40:35:63:f7:35:d2:83:31:1f:9b:7f:5e:28:c6:87:1f:c1:
cd:f7:a5:ed:5f:06:4d:0c:aa:5d:a8:10:e2:e7:03:e2:5d:b1:
21:a0:93:3e:fb:de:6e:ab:4f:6b:8f:06:3c:69:00:8d:0a:aa:
24:a4:54:97:b3:05:5f:d5:57:17:68:63:60:9e:a7:1d:a9:39:
19:e1:9d:ec:6a:59:a5:af:00:35:d7:4b:40:15:86:39:e8:9a:
88:18:2f:2b:ef:47:75:dc:8f:23:30:5e:fa:f6:7b:10:b9:c6:
df:68:3c:75:60:01:54:83:d7:13:15:03:96:2f:ab:ea:59:88:
78:d4:88:76:3e:03:0d:29:32:c7:08:39:0c:3f:8b:a0:50:0c:
42:f3:76:05:93:64:4d:ab:7a:e8:fe:d4:1a:18:cb:58:d9:35:
ee:b8:1e:41:2b:c9:8a:72:c2:25:43:48:88:b5:4e:ec:8f:bb:
12:4d:32:70:56:d7:0b:80:4e:47:48:c5:97:45:d7:6b:5b:15:
d5:65:e7:fc:22:53:b9:d1:14:72:65:1e:e8:b6:16:57:7a:9c:
95:7a:6c:12:8b:a0:58:03:5e:94:97:85:c7:02:6c:56:cc:f9:
b4:25:b8:ee:f0:e2:0b:f7:49:22:6c:17:b8:6f:fa:06:75:3e:
47:ca:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:54 2026 by rpki-client