$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft (raw, json) Hash identifier: 5aEnmCHxR1K4C6MFeFVT2wCxcOP3MF25l2Nz8drZmEk= Subject key identifier: 47:33:49:7D:24:49:66:18:61:27:B7:20:45:37:2A:5C:28:09:00:E7 Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Certificate serial: 2393C91E5696B274647B3A7FB04FC7DD86A26B8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:32:28 +0000 Manifest this update: Fri 24 Jul 2026 06:27:28 +0000 Manifest next update: Sat 25 Jul 2026 08:49:28 +0000 Files and hashes: 1: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl (hash: b5JgLHvAd5LDhNtddlGXEtHmE4QLVFGvhPzInVnY/+U=) 2: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=) 3: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: w40+4vjnbHq0TV83WSPBOHHWioBKVnOPxDYQ5jp0iE0=) 4: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=) 5: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: iZC63XKtQ4A+tLBPo00EIvl5gTnecWbM3wWVRgyRhoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:93:c9:1e:56:96:b2:74:64:7b:3a:7f:b0:4f:c7:dd:86:a2:6b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Validity Not Before: Jul 24 06:27:28 2026 GMT Not After : Jul 25 08:49:28 2026 GMT Subject: CN=4733497D244966186127B72045372A5C280900E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:4f:3b:47:6a:4d:00:7f:c5:74:28:e9:b8: f8:43:88:1f:81:40:87:ab:5a:02:d8:11:c6:87:8d: bb:c6:84:b5:fd:9b:e9:28:21:26:b4:84:5f:09:0a: b6:02:fe:06:2c:01:97:0f:6b:0a:41:82:5e:47:49: 71:63:b7:4c:be:16:6e:3d:93:e1:35:4d:db:31:c2: c5:1a:98:1f:65:9f:ba:93:08:86:83:4e:ee:d8:6d: 68:13:26:d5:dc:03:f6:ef:df:17:ae:7a:d4:cc:61: 89:fe:00:24:52:c0:8c:1d:b9:a5:14:25:4d:36:86: 07:3d:f1:d3:ac:27:dc:d0:ed:64:2c:a3:48:f5:35: f8:34:4f:c8:eb:8a:96:07:55:84:8d:fe:df:2a:f9: f0:10:86:ec:f4:2a:dc:b3:28:9e:c2:7e:53:b9:71: 75:9d:e6:c4:b8:52:21:c2:35:d8:4a:1d:5d:76:61: e3:55:01:70:b4:cc:95:67:ec:3d:a3:0b:5d:aa:bc: ff:b7:a2:91:6f:b3:1a:91:c4:a8:63:8d:92:78:64: 65:b0:61:26:be:a5:81:34:94:c0:31:1c:7d:59:93: a5:c4:ee:b2:6d:ce:8d:fe:ff:b6:d7:29:ac:82:d6: 78:95:bd:2d:9b:82:55:9e:a8:2f:cf:c9:c5:a5:3d: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:33:49:7D:24:49:66:18:61:27:B7:20:45:37:2A:5C:28:09:00:E7 X509v3 Authority Key Identifier: keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a2:b8:86:c1:e1:92:4f:aa:a9:57:8d:30:57:e3:51:b5:e9: a9:43:dc:09:68:3f:93:d0:ba:65:d5:7e:73:93:8b:98:0c:8b: 77:44:8c:a2:9e:33:a3:9c:8f:a1:67:ba:b2:58:f1:fe:18:2e: d0:76:7b:54:8d:02:57:10:f5:b4:3b:a6:a6:69:9d:26:59:ac: 32:2e:a6:f6:93:bd:e0:93:e8:3d:37:6e:91:ec:d5:46:9b:fc: 94:78:43:8d:ac:f7:5f:c9:5c:91:7d:b3:0a:5d:b4:4d:fe:66: b9:b6:12:34:5d:6f:41:70:a3:4f:3b:e5:0a:e5:02:22:b6:53: b4:2c:52:98:7c:67:02:af:f6:7a:25:2c:7d:66:5c:c3:28:9d: 02:13:de:a0:90:69:67:c6:a0:73:e3:d7:58:f1:6a:b5:bb:c6: f1:72:6d:dc:a6:83:a2:90:75:e1:2f:21:3c:61:9e:3c:94:07: 3a:da:63:69:37:d5:aa:66:93:20:44:ad:f6:26:62:aa:f2:b0: 30:90:0d:ee:13:60:f5:ed:dc:a6:a8:33:4d:df:33:12:d2:65: f1:84:32:fb:d9:45:c7:3f:9a:d3:be:56:e6:96:60:42:56:95: 4b:24:a5:4f:d7:bb:29:1f:40:d4:16:77:d1:91:14:8b:47:b1: 7a:f3:6d:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5PJHlaWsnRkezp/sE/H3Yaia4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz RUZEOTU2OTAeFw0yNjA3MjQwNjI3MjhaFw0yNjA3MjUwODQ5MjhaMDMxMTAvBgNV BAMTKDQ3MzM0OTdEMjQ0OTY2MTg2MTI3QjcyMDQ1MzcyQTVDMjgwOTAwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjkU87R2pNAH/FdCjpuPhDiB+B QIerWgLYEcaHjbvGhLX9m+koISa0hF8JCrYC/gYsAZcPawpBgl5HSXFjt0y+Fm49 k+E1TdsxwsUamB9ln7qTCIaDTu7YbWgTJtXcA/bv3xeuetTMYYn+ACRSwIwduaUU JU02hgc98dOsJ9zQ7WQso0j1Nfg0T8jripYHVYSN/t8q+fAQhuz0KtyzKJ7CflO5 cXWd5sS4UiHCNdhKHV12YeNVAXC0zJVn7D2jC12qvP+3opFvsxqRxKhjjZJ4ZGWw YSa+pYE0lMAxHH1Zk6XE7rJtzo3+/7bXKayC1niVvS2bglWeqC/PycWlPd3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURzNJfSRJZhhhJ7cgRTcqXCgJAOcwHwYDVR0j BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5 NTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUw OEUzRUZEOTU2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmiuIbB4ZJPqqlXjTBX41G16alD3AloP5PQ umXVfnOTi5gMi3dEjKKeM6Ocj6FnurJY8f4YLtB2e1SNAlcQ9bQ7pqZpnSZZrDIu pvaTveCT6D03bpHs1Uab/JR4Q42s91/JXJF9swpdtE3+Zrm2EjRdb0Fwo0875Qrl AiK2U7QsUph8ZwKv9nolLH1mXMMonQIT3qCQaWfGoHPj11jxarW7xvFybdymg6KQ deEvITxhnjyUBzraY2k31apmkyBErfYmYqrysDCQDe4TYPXt3KaoM03fMxLSZfGE MvvZRcc/mtO+VuaWYEJWlUskpU/XuykfQNQWd9GRFItHsXrzbek= -----END CERTIFICATE-----Generated at Fri Jul 24 12:14:49 2026 by rpki-client