$ rpki-client -vvvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json) Hash identifier: T9Qx87o2OhC0OVKQcbLOwYnFcCzM3+Onr+3f/bD2kR4= Subject key identifier: B7:A4:F5:AA:87:89:0F:BB:45:A5:7D:0A:FF:1F:ED:76:FD:B2:15:62 Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Certificate serial: 6B26FC862290AA64DC6973703D8928031B87D01D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:31:36 +0000 Manifest this update: Wed 23 Sep 2026 12:26:36 +0000 Manifest next update: Thu 24 Sep 2026 15:01:36 +0000 Files and hashes: 1: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: Kqy35Rjw6YO+3FakTqcm3qyAOQ11GicmxEKFa6Dl5qA=) 2: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=) 3: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=) 4: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:26:fc:86:22:90:aa:64:dc:69:73:70:3d:89:28:03:1b:87:d0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Validity Not Before: Sep 23 12:26:36 2026 GMT Not After : Sep 24 15:01:36 2026 GMT Subject: CN=B7A4F5AA87890FBB45A57D0AFF1FED76FDB21562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:75:62:13:58:76:be:d2:d0:14:c2:e7:c5: 42:4a:0b:74:e8:b0:04:38:dc:a2:8d:0b:28:7a:7e: f3:98:19:ec:1f:95:47:4d:32:4b:07:7f:b6:10:e7: a9:0b:24:56:0b:30:53:78:b9:d4:3b:6b:30:64:5a: b6:d6:a0:1f:16:65:54:e0:f6:e7:61:f4:c8:e7:71: c3:81:48:14:3d:60:2b:97:ef:18:be:9b:04:2c:de: c2:c2:d8:c1:7a:e9:90:c4:8a:c0:af:a2:8b:cf:01: e8:1e:fd:1a:a3:1f:e5:5c:74:11:b9:f4:1f:9f:4b: fc:de:d3:0d:8f:18:72:ff:fa:09:e6:1a:c4:e1:8c: cc:73:d5:db:eb:71:7c:c8:86:c9:1a:66:fe:17:93: a1:79:a6:eb:42:11:e2:20:f1:61:b5:3f:5c:c4:8f: ee:14:fb:5d:1f:b6:b4:11:65:6f:35:23:d8:ae:01: 46:3c:2a:fd:0c:16:18:cb:01:79:31:c8:61:e1:c0: 01:08:82:f8:66:4d:82:07:29:7a:20:bc:80:2e:d4: 23:c5:ec:0e:fc:9c:ec:91:3d:13:a6:c3:7f:96:8a: 58:9c:ed:e0:8a:41:f5:b5:d8:48:36:bd:29:b2:4d: 5d:4d:bf:f5:ca:c4:f9:02:9e:6f:a1:4a:79:fc:4f: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A4:F5:AA:87:89:0F:BB:45:A5:7D:0A:FF:1F:ED:76:FD:B2:15:62 X509v3 Authority Key Identifier: keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b7:4e:1a:a8:a5:b5:da:51:b3:2e:41:1b:ff:df:76:82:fe: b7:ee:ad:55:36:25:99:27:da:d8:1b:ca:7e:06:a0:f3:c9:e2: 11:b6:ba:2d:32:37:70:71:98:e8:c5:8c:bf:8f:a0:8d:54:68: ed:77:b6:6c:b1:20:17:dc:0e:85:fc:7c:9b:51:c9:6f:90:33: 99:31:65:5b:af:bc:eb:ed:b6:00:4c:f8:1c:f6:0f:e2:61:6d: d0:aa:48:17:e3:f8:da:5a:1d:d6:e2:bb:52:c8:b4:90:01:b3: 2e:3f:40:f2:d1:57:fc:f7:86:b8:c2:0a:fc:64:d6:fa:57:90: 17:33:08:97:e5:3b:dd:4b:c0:19:c3:7c:05:9f:98:69:a1:7a: d0:72:5d:15:b1:da:be:40:e9:93:c8:64:9e:dd:68:5a:90:13: 93:53:f2:3b:54:c4:94:cd:c5:af:6c:84:b2:15:a7:21:ce:66: a7:7d:1e:f8:1e:f9:43:da:55:5d:0e:22:c6:96:68:3e:99:e9: dc:f0:47:82:e0:64:2b:a8:cb:fd:d1:3f:bd:dd:f2:93:83:c9: f5:c0:04:ea:92:f8:60:78:8a:ec:c4:65:3f:32:7d:3b:81:dc: 01:1c:f3:2a:6b:d3:9d:26:91:dd:51:0f:3f:b6:ec:f1:0b:07: 7f:db:82:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayb8hiKQqmTcaXNwPYkoAxuH0B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0 OEIwNDdFMzAeFw0yNjA5MjMxMjI2MzZaFw0yNjA5MjQxNTAxMzZaMDMxMTAvBgNV BAMTKEI3QTRGNUFBODc4OTBGQkI0NUE1N0QwQUZGMUZFRDc2RkRCMjE1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4nViE1h2vtLQFMLnxUJKC3To sAQ43KKNCyh6fvOYGewflUdNMksHf7YQ56kLJFYLMFN4udQ7azBkWrbWoB8WZVTg 9udh9MjnccOBSBQ9YCuX7xi+mwQs3sLC2MF66ZDEisCvoovPAege/RqjH+VcdBG5 9B+fS/ze0w2PGHL/+gnmGsThjMxz1dvrcXzIhskaZv4Xk6F5putCEeIg8WG1P1zE j+4U+10ftrQRZW81I9iuAUY8Kv0MFhjLAXkxyGHhwAEIgvhmTYIHKXogvIAu1CPF 7A78nOyRPROmw3+Wilic7eCKQfW12Eg2vSmyTV1Nv/XKxPkCnm+hSnn8T45NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt6T1qoeJD7tFpX0K/x/tdv2yFWIwHwYDVR0j BBgwFoAUmLFuyIQwDH8unlOkpkesZ0iwR+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJjYWVhM2ItYmQ3Zi00ODFhLTliYzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4 NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0OEIwNDdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEIxNkVDODg0MzAwQzdGMkU5RTUzQTRBNjQ3QUM2NzQ4QjA0 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FD Njc0OEIwNDdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFK3ThqopbXaUbMuQRv/33aC/rfurVU2JZkn 2tgbyn4GoPPJ4hG2ui0yN3BxmOjFjL+PoI1UaO13tmyxIBfcDoX8fJtRyW+QM5kx ZVuvvOvttgBM+Bz2D+JhbdCqSBfj+NpaHdbiu1LItJABsy4/QPLRV/z3hrjCCvxk 1vpXkBczCJflO91LwBnDfAWfmGmhetByXRWx2r5A6ZPIZJ7daFqQE5NT8jtUxJTN xa9shLIVpyHOZqd9Hvge+UPaVV0OIsaWaD6Z6dzwR4LgZCuoy/3RP73d8pODyfXA BOqS+GB4iuzEZT8yfTuB3AEc8ypr050mkd1RDz+27PELB3/bgoY= -----END CERTIFICATE-----Generated at Thu Sep 24 05:54:21 2026 by rpki-client