$ rpki-client -vvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json) Hash identifier: CGEH7XZyqqC7kE0dYfest01cG9WNbmumBnI+E9IZXjQ= Subject key identifier: F0:52:B8:C9:91:D0:8A:8C:07:8A:99:C6:92:F0:A7:47:39:4E:98:F5 Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Certificate serial: 13CC87B8E244F9A246443D3D0B62A04B327C2A8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:49:22 +0000 Manifest this update: Tue 12 May 2026 18:44:22 +0000 Manifest next update: Wed 13 May 2026 22:38:22 +0000 Files and hashes: 1: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: rrqC2eAjj1u4lKGZfnVEwVUH1OEuSEmUYPSVOZ6qvsE=) 2: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=) 3: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=) 4: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cc:87:b8:e2:44:f9:a2:46:44:3d:3d:0b:62:a0:4b:32:7c:2a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Validity Not Before: May 12 18:44:22 2026 GMT Not After : May 13 22:38:22 2026 GMT Subject: CN=F052B8C991D08A8C078A99C692F0A747394E98F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:39:58:01:2c:90:45:49:c1:bb:48:a7:aa: a9:e3:70:d1:f2:0c:eb:03:83:8a:06:34:47:03:2c: d6:e2:ec:5d:5f:a0:fe:82:e6:38:7d:2b:e7:8c:53: 23:01:e2:ea:96:7b:b5:db:e0:b6:f4:54:55:61:ca: fe:49:4a:d1:72:81:4d:cb:a6:52:ca:5c:b1:c8:a3: 1b:6d:a3:b6:9d:31:c6:fa:bf:d9:83:67:f0:e9:38: 96:52:02:2c:87:b2:1a:44:c8:79:28:ef:01:47:a6: 95:ef:fd:93:6e:4c:5f:24:33:6d:43:ae:4a:cb:c9: c5:39:41:d3:c1:99:68:42:64:47:49:46:dc:df:da: 69:52:91:0b:0b:48:00:32:48:9b:ac:7f:63:e6:8a: 5d:bf:53:64:21:02:37:5f:d3:c9:06:54:85:ea:9a: 1c:ff:34:a4:4f:17:0d:4f:e3:16:0d:8a:d4:21:d6: 49:ed:79:2b:0c:1f:35:dc:49:67:99:8e:14:20:1b: 8b:96:06:d0:0a:38:98:05:66:9e:3e:94:43:a0:af: 43:bb:b3:4a:f2:08:63:63:15:d4:2c:97:ee:36:b1: 56:c0:5c:56:5c:80:4c:9e:9a:a8:ee:7a:ad:cb:72: 09:36:b4:6a:f7:05:d1:f9:a9:12:d3:6f:86:a1:38: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:52:B8:C9:91:D0:8A:8C:07:8A:99:C6:92:F0:A7:47:39:4E:98:F5 X509v3 Authority Key Identifier: keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c5:46:5e:bd:ef:b5:dc:7a:99:ca:81:cb:a4:d6:45:16:93: a7:7d:92:c3:42:32:90:41:78:00:2b:f8:d7:a4:96:f3:28:0f: 95:10:1d:5a:11:5c:ea:af:44:a9:cc:e6:8c:f7:bc:25:4f:ed: f1:bb:ec:37:cd:41:79:b7:08:43:0f:7f:3b:76:b1:91:12:c8: 1d:a2:ea:dc:b1:3c:77:a1:05:ed:cb:d9:4a:7b:85:92:7d:bd: a5:cb:ef:42:12:dc:88:1d:ce:10:07:7e:3b:66:73:70:ed:e8: eb:52:fe:76:ae:b5:11:2f:2a:37:ed:9c:f4:82:28:7a:12:77: 37:74:85:e9:93:fe:09:dd:e1:84:8f:ae:e7:aa:01:39:26:1f: eb:88:20:6b:e2:3c:c7:14:87:a3:d3:85:70:1f:ed:8b:f7:99: 6c:7f:91:63:87:ab:25:2a:2a:9e:fc:75:8f:66:3a:bc:38:16: 65:af:f5:97:28:56:29:1e:4a:7d:80:41:04:7b:77:95:38:89: ac:e6:be:26:4b:e2:97:3f:ba:71:72:d5:21:58:7a:0a:47:d4: e4:8a:17:91:31:95:fa:78:9a:91:8b:0b:0c:21:8f:49:00:9c: 82:d6:bd:64:00:6a:23:10:9e:d2:d4:27:86:77:5d:4f:19:6f: 0b:15:04:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8yHuOJE+aJGRD09C2KgSzJ8KowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0 OEIwNDdFMzAeFw0yNjA1MTIxODQ0MjJaFw0yNjA1MTMyMjM4MjJaMDMxMTAvBgNV BAMTKEYwNTJCOEM5OTFEMDhBOEMwNzhBOTlDNjkyRjBBNzQ3Mzk0RTk4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VTlYASyQRUnBu0inqqnjcNHy DOsDg4oGNEcDLNbi7F1foP6C5jh9K+eMUyMB4uqWe7Xb4Lb0VFVhyv5JStFygU3L plLKXLHIoxtto7adMcb6v9mDZ/DpOJZSAiyHshpEyHko7wFHppXv/ZNuTF8kM21D rkrLycU5QdPBmWhCZEdJRtzf2mlSkQsLSAAySJusf2Pmil2/U2QhAjdf08kGVIXq mhz/NKRPFw1P4xYNitQh1knteSsMHzXcSWeZjhQgG4uWBtAKOJgFZp4+lEOgr0O7 s0ryCGNjFdQsl+42sVbAXFZcgEyemqjueq3Lcgk2tGr3BdH5qRLTb4ahOInnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8FK4yZHQiowHipnGkvCnRzlOmPUwHwYDVR0j BBgwFoAUmLFuyIQwDH8unlOkpkesZ0iwR+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJjYWVhM2ItYmQ3Zi00ODFhLTliYzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4 NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0OEIwNDdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEIxNkVDODg0MzAwQzdGMkU5RTUzQTRBNjQ3QUM2NzQ4QjA0 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FD Njc0OEIwNDdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfFRl6977XcepnKgcuk1kUWk6d9ksNCMpBB eAAr+NeklvMoD5UQHVoRXOqvRKnM5oz3vCVP7fG77DfNQXm3CEMPfzt2sZESyB2i 6tyxPHehBe3L2Up7hZJ9vaXL70IS3IgdzhAHfjtmc3Dt6OtS/nautREvKjftnPSC KHoSdzd0hemT/gnd4YSPrueqATkmH+uIIGviPMcUh6PThXAf7Yv3mWx/kWOHqyUq Kp78dY9mOrw4FmWv9ZcoVikeSn2AQQR7d5U4iazmviZL4pc/unFy1SFYegpH1OSK F5Exlfp4mpGLCwwhj0kAnILWvWQAaiMQntLUJ4Z3XU8ZbwsVBP4= -----END CERTIFICATE-----Generated at Tue May 12 22:13:27 2026 by rpki-client