$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft (raw, json) Hash identifier: u4K08VpGAiv06gsSvfuL2El5oT1LLu3mANogtPi0asY= Subject key identifier: 4D:39:2A:B4:68:6F:75:78:6C:BF:2E:34:4E:C3:F0:4D:7B:31:53:D8 Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Certificate serial: 47480F62FC3B8A91A2C7A6F0B5264222DAC6A138 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:30:24 +0000 Manifest this update: Wed 13 May 2026 01:25:24 +0000 Manifest next update: Thu 14 May 2026 03:55:24 +0000 Files and hashes: 1: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=) 2: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=) 3: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: w40+4vjnbHq0TV83WSPBOHHWioBKVnOPxDYQ5jp0iE0=) 4: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl (hash: bRnaAr1JXKpTNJJ4M1cr9QIQKvRQ/4D2OT1w3RO08e8=) 5: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: iZC63XKtQ4A+tLBPo00EIvl5gTnecWbM3wWVRgyRhoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:48:0f:62:fc:3b:8a:91:a2:c7:a6:f0:b5:26:42:22:da:c6:a1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Validity Not Before: May 13 01:25:24 2026 GMT Not After : May 14 03:55:24 2026 GMT Subject: CN=4D392AB4686F75786CBF2E344EC3F04D7B3153D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:a4:71:ac:ef:7c:ff:ab:5f:5b:a1:dd:00: 85:65:21:fc:6f:c8:15:94:6f:d4:69:ff:86:a7:e5: bd:5b:c6:c4:a4:a1:85:8d:f2:b7:b3:b4:10:dc:af: 80:d3:d8:6c:31:e9:42:e1:77:16:39:59:c4:1c:34: 8b:10:49:d0:d8:eb:ea:cc:d2:2b:df:22:60:a5:ad: 46:f2:b9:d1:a2:78:b1:93:e1:e4:93:70:ef:0d:31: f4:16:22:f5:36:a8:e5:c4:b8:4d:ad:fb:85:0f:76: 12:42:93:61:f5:cf:7d:e2:2d:3d:34:46:cd:a4:aa: f9:aa:d9:4b:fa:64:0e:f2:d6:01:0f:39:a8:87:3a: 3f:82:ba:3c:cc:be:13:ae:6d:73:f1:10:14:84:59: 85:af:14:39:7a:fe:37:6c:af:b1:c5:42:ef:73:30: 09:4f:98:da:e1:e4:9c:07:7f:ef:87:7c:cf:06:18: e4:1a:e4:c6:b4:96:0d:9d:26:d9:d2:fe:bb:25:b2: 6a:17:85:59:28:96:5a:45:f3:9a:c6:7c:ee:d8:4f: 3d:96:68:44:7e:99:1b:72:8d:8c:d2:b2:c5:82:84: a2:6a:96:70:ef:51:81:b0:e3:cf:3b:09:53:6a:b2: 77:47:51:d7:31:3f:4c:2b:a7:6a:72:79:80:64:4c: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:39:2A:B4:68:6F:75:78:6C:BF:2E:34:4E:C3:F0:4D:7B:31:53:D8 X509v3 Authority Key Identifier: keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0c:96:d4:10:40:fb:21:19:7d:05:f4:bf:f1:df:78:15:9f: 94:22:aa:b0:a0:ae:5e:a0:12:34:f1:cb:f4:bd:38:ad:49:79: 6b:ee:2f:5b:7f:16:bb:03:b2:90:d8:2b:96:1e:b2:5a:1b:b8: 23:fc:db:12:e5:17:bd:37:bf:1d:58:c9:2f:9d:ff:4a:fa:db: 6d:18:6b:ad:ba:3c:21:2e:07:08:f0:e8:f7:14:9b:86:70:76: 7f:3f:08:00:d0:e9:80:fc:34:40:2f:b7:9d:df:5f:dd:cf:67: 8d:60:fa:26:4b:b4:e5:c0:2b:5e:5c:14:9e:51:5e:8b:b3:8b: 28:c0:ed:47:3f:b1:2f:46:4d:5f:ba:09:45:83:1b:27:be:0d: 32:b9:75:02:3e:a6:7b:f2:02:2e:14:dc:b6:f8:a1:e7:95:74: 99:f6:3d:a1:71:47:0a:9c:ba:65:37:3d:81:5d:46:d1:35:68: 2c:58:a9:cc:97:8d:57:c9:37:8f:da:cd:bb:10:e3:80:20:68: 64:e4:e8:a1:6a:78:c6:8b:7c:9f:a1:11:5f:93:d4:e7:61:58: 13:3f:2a:e9:7d:af:e4:39:85:5e:f5:8f:a7:a4:1d:26:16:8f: 01:97:05:87:b8:d6:6c:fe:82:41:49:0c:72:1c:0a:76:56:a8: 05:fb:dd:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0gPYvw7ipGix6bwtSZCItrGoTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz RUZEOTU2OTAeFw0yNjA1MTMwMTI1MjRaFw0yNjA1MTQwMzU1MjRaMDMxMTAvBgNV BAMTKDREMzkyQUI0Njg2Rjc1Nzg2Q0JGMkUzNDRFQzNGMDREN0IzMTUzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwd6RxrO98/6tfW6HdAIVlIfxv yBWUb9Rp/4an5b1bxsSkoYWN8reztBDcr4DT2Gwx6ULhdxY5WcQcNIsQSdDY6+rM 0ivfImClrUbyudGieLGT4eSTcO8NMfQWIvU2qOXEuE2t+4UPdhJCk2H1z33iLT00 Rs2kqvmq2Uv6ZA7y1gEPOaiHOj+CujzMvhOubXPxEBSEWYWvFDl6/jdsr7HFQu9z MAlPmNrh5JwHf++HfM8GGOQa5Ma0lg2dJtnS/rslsmoXhVkollpF85rGfO7YTz2W aER+mRtyjYzSssWChKJqlnDvUYGw4887CVNqsndHUdcxP0wrp2pyeYBkTBbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTkqtGhvdXhsvy40TsPwTXsxU9gwHwYDVR0j BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5 NTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUw OEUzRUZEOTU2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8MltQQQPshGX0F9L/x33gVn5QiqrCgrl6g EjTxy/S9OK1JeWvuL1t/FrsDspDYK5YeslobuCP82xLlF703vx1YyS+d/0r6220Y a626PCEuBwjw6PcUm4Zwdn8/CADQ6YD8NEAvt53fX93PZ41g+iZLtOXAK15cFJ5R XouziyjA7Uc/sS9GTV+6CUWDGye+DTK5dQI+pnvyAi4U3Lb4oeeVdJn2PaFxRwqc umU3PYFdRtE1aCxYqcyXjVfJN4/azbsQ44AgaGTk6KFqeMaLfJ+hEV+T1OdhWBM/ Kul9r+Q5hV71j6ekHSYWjwGXBYe41mz+gkFJDHIcCnZWqAX73ZQ= -----END CERTIFICATE-----Generated at Wed May 13 06:08:07 2026 by rpki-client