$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft (raw, json) Hash identifier: NzdKGvdbJPfrKrHMMe+pAHruP9OcspwCu078pgknH30= Subject key identifier: 0C:2F:6E:75:AC:FB:4D:EF:51:A2:35:90:EE:32:45:E2:36:34:BA:2A Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Certificate serial: 1643483014506BE30EFB5E21D4DE51F16DD8F092 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:59:30 +0000 Manifest this update: Wed 23 Sep 2026 18:54:30 +0000 Manifest next update: Thu 24 Sep 2026 21:18:30 +0000 Files and hashes: 1: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl (hash: g+GQg0vfLZbDYwiJobPKZEhatd/C+pbCiYNOhxiIRFg=) 2: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=) 3: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: w40+4vjnbHq0TV83WSPBOHHWioBKVnOPxDYQ5jp0iE0=) 4: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=) 5: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: iZC63XKtQ4A+tLBPo00EIvl5gTnecWbM3wWVRgyRhoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:43:48:30:14:50:6b:e3:0e:fb:5e:21:d4:de:51:f1:6d:d8:f0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Validity Not Before: Sep 23 18:54:30 2026 GMT Not After : Sep 24 21:18:30 2026 GMT Subject: CN=0C2F6E75ACFB4DEF51A23590EE3245E23634BA2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:a3:d2:21:f6:65:8a:48:2b:2b:de:b0:f8: 03:4e:d5:a9:db:45:d7:7c:bb:c3:6a:75:31:88:fc: fd:34:33:bd:76:70:18:30:6e:ab:18:09:16:3c:be: 5a:5d:5a:88:6f:74:0c:f7:10:0f:18:45:34:ef:a4: 41:6d:a0:2f:18:f4:39:c8:d8:1f:90:88:d7:45:09: 24:f8:5a:f8:a3:e4:b3:3d:35:63:66:5b:be:ae:c3: 72:21:8f:f9:c0:9b:06:0f:dc:e8:bb:d3:d6:44:68: d5:d3:11:56:26:eb:d1:0f:35:ff:37:f0:45:88:b5: e3:82:ab:b2:6c:86:15:9f:ca:c0:ca:06:1d:f7:c7: f3:6f:7f:05:60:e3:a3:11:55:f2:94:05:97:ed:2a: 33:46:4a:e6:01:9c:05:df:c9:ac:af:bf:02:fc:e3: 04:52:8c:50:3c:bd:32:38:39:1d:df:96:33:31:fe: 42:ba:3a:eb:53:6e:c9:21:19:47:41:88:1d:a6:83: 1a:69:03:72:65:e5:c0:3a:51:0b:e4:24:b2:c4:db: a4:65:b8:47:f2:0f:87:70:64:7a:a7:9a:87:4e:dd: 55:40:16:36:eb:81:b4:01:19:b1:8b:ba:f2:ed:e0: aa:c8:94:2c:32:e3:54:ad:00:3a:b2:00:99:b9:9a: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:6E:75:AC:FB:4D:EF:51:A2:35:90:EE:32:45:E2:36:34:BA:2A X509v3 Authority Key Identifier: keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d3:a6:01:f6:14:48:6e:2e:0c:eb:a0:4d:ec:98:ca:f0:77: d8:3b:b9:fd:9c:bf:93:8c:20:e5:6c:13:cd:ac:2b:63:86:b2: d4:4c:53:72:87:dd:0f:12:ad:43:15:3a:0b:af:92:cf:c4:e8: a0:f6:72:64:1e:14:22:31:57:f9:2f:a9:45:6d:c3:9b:fc:64: 4e:06:03:b9:d4:80:5b:9c:84:7d:e0:59:a2:ec:32:45:8e:3d: c3:99:4d:7c:ec:6c:f0:76:36:45:5b:e8:7f:d3:3d:eb:dd:73: 02:f2:ba:e6:a8:b0:01:64:9a:e3:3b:96:4b:a0:9b:98:9e:b4: a2:86:09:cd:6e:1b:56:d5:e7:4a:7b:4a:c4:ab:2a:2b:87:71: 47:b8:ac:05:61:b9:74:46:e6:ad:15:33:94:38:3a:ea:bb:2e: c8:e2:b0:87:c9:df:3e:9f:a7:65:5b:a8:e9:e0:02:5a:28:fe: a1:ad:6a:27:0d:3a:7b:e1:c9:dd:2e:9f:b6:23:84:2c:8f:cc: 83:2f:6b:66:bb:64:d5:90:3b:c2:30:55:3f:d1:54:df:17:57: aa:33:48:49:c9:15:5c:55:d3:65:60:b1:9a:d1:dd:98:d9:21: 1d:b4:49:81:c7:ac:42:d0:8c:48:ca:4c:76:88:30:2a:ff:0d: ab:2d:75:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkNIMBRQa+MO+14h1N5R8W3Y8JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz RUZEOTU2OTAeFw0yNjA5MjMxODU0MzBaFw0yNjA5MjQyMTE4MzBaMDMxMTAvBgNV BAMTKDBDMkY2RTc1QUNGQjRERUY1MUEyMzU5MEVFMzI0NUUyMzYzNEJBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqm6PSIfZlikgrK96w+ANO1anb Rdd8u8NqdTGI/P00M712cBgwbqsYCRY8vlpdWohvdAz3EA8YRTTvpEFtoC8Y9DnI 2B+QiNdFCST4Wvij5LM9NWNmW76uw3Ihj/nAmwYP3Oi709ZEaNXTEVYm69EPNf83 8EWIteOCq7JshhWfysDKBh33x/NvfwVg46MRVfKUBZftKjNGSuYBnAXfyayvvwL8 4wRSjFA8vTI4OR3fljMx/kK6OutTbskhGUdBiB2mgxppA3Jl5cA6UQvkJLLE26Rl uEfyD4dwZHqnmodO3VVAFjbrgbQBGbGLuvLt4KrIlCwy41StADqyAJm5mv/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDC9udaz7Te9RojWQ7jJF4jY0uiowHwYDVR0j BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5 NTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUw OEUzRUZEOTU2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDTpgH2FEhuLgzroE3smMrwd9g7uf2cv5OM IOVsE82sK2OGstRMU3KH3Q8SrUMVOguvks/E6KD2cmQeFCIxV/kvqUVtw5v8ZE4G A7nUgFuchH3gWaLsMkWOPcOZTXzsbPB2NkVb6H/TPevdcwLyuuaosAFkmuM7lkug m5ietKKGCc1uG1bV50p7SsSrKiuHcUe4rAVhuXRG5q0VM5Q4Ouq7LsjisIfJ3z6f p2VbqOngAloo/qGtaicNOnvhyd0un7YjhCyPzIMva2a7ZNWQO8IwVT/RVN8XV6oz SEnJFVxV02VgsZrR3ZjZIR20SYHHrELQjEjKTHaIMCr/Dastde4= -----END CERTIFICATE-----Generated at Thu Sep 24 15:45:51 2026 by rpki-client