$ rpki-client -vvf rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft File: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft (raw, json) Hash identifier: Nj+u9FnGYj16+V+kDofYUXh49cl4FaVgX/f7E1UJxOY= Subject key identifier: 08:10:DA:8A:DB:11:37:DE:B4:63:AD:0A:9C:BB:DB:E1:C6:1F:8E:D4 Authority key identifier: B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 Certificate issuer: /CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Certificate serial: 463959DF0F18B7D815BD4BE67EA6BBFBE26E2075 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:47:45 +0000 Manifest this update: Tue 12 May 2026 17:42:45 +0000 Manifest next update: Wed 13 May 2026 21:10:45 +0000 Files and hashes: 1: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl (hash: FVdIxCLdr+KBa7p50CUhViy8DNQrIc0cJsJL4eD8N1k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:39:59:df:0f:18:b7:d8:15:bd:4b:e6:7e:a6:bb:fb:e2:6e:20:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Validity Not Before: May 12 17:42:45 2026 GMT Not After : May 13 21:10:45 2026 GMT Subject: CN=0810DA8ADB1137DEB463AD0A9CBBDBE1C61F8ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:0b:68:3e:88:a5:87:67:91:6f:01:f9:2f: 67:01:82:1d:36:ae:88:be:50:6a:ff:44:cd:c8:5c: f6:98:a3:de:aa:fe:29:9a:a7:39:a3:e9:f4:7a:95: 27:32:dc:26:06:08:f8:2c:22:fc:99:03:f6:45:18: bf:77:d3:28:34:29:03:b8:24:0f:29:c4:65:de:37: 45:71:a6:ed:24:58:84:52:46:43:3d:b8:96:97:40: 8c:23:aa:ff:e0:94:21:ae:5f:9e:90:29:13:0a:7b: 61:00:82:54:70:e3:68:0c:16:2a:86:35:a9:cf:8e: 7e:4d:9a:e5:32:c9:37:bc:34:48:b0:33:d0:8d:6f: bc:09:93:0d:79:fa:f1:7e:f9:4b:ab:11:9b:ae:f1: b2:89:47:d0:e8:26:12:8d:bd:b4:1c:79:dd:88:5d: 77:e0:8e:d3:20:b6:6e:f8:a1:35:9f:2d:ad:f1:dd: cc:78:e0:b8:f4:b7:d8:76:da:a7:8b:d2:84:35:d9: bd:17:6c:6c:a8:f4:01:8c:ca:5c:9f:68:fd:c9:cd: 4b:53:f5:20:a0:18:ee:f0:26:2b:31:b1:b1:68:da: 96:93:f5:07:6a:3c:aa:3d:13:e6:17:af:fb:be:f5: 30:18:c3:0a:e8:0a:f2:49:91:23:e9:3a:3a:ac:7a: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:10:DA:8A:DB:11:37:DE:B4:63:AD:0A:9C:BB:DB:E1:C6:1F:8E:D4 X509v3 Authority Key Identifier: keyid:B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:39:e2:ad:15:d0:52:7d:d6:ba:71:cb:ab:70:6a:22:f1:fb: 61:67:1e:25:92:92:95:46:3a:a2:2d:3c:ea:a0:40:30:58:2b: f3:96:0c:2e:90:38:83:06:78:d9:e1:50:c4:6d:94:1b:a4:30: 42:b9:0b:fe:95:af:d1:c9:c3:75:01:f2:1b:21:80:db:e1:9a: b8:eb:5c:7d:64:f3:92:a2:47:c7:14:f5:ff:7a:67:15:16:0d: 1c:50:93:d0:f1:c8:d5:b9:7c:16:66:3c:8d:d6:a4:69:0f:59: 45:27:26:84:ca:95:9c:59:13:d3:4a:4c:8b:7e:60:14:7a:88: 62:2d:5f:52:fd:80:35:f5:65:00:1a:95:d7:8f:a2:75:e3:a4: 00:3b:d1:b5:0f:8c:9f:6a:45:26:61:d1:ab:be:0d:08:44:9d: 29:9f:0c:d2:f0:07:02:81:29:c1:70:57:18:84:c3:f8:bc:f1: b1:77:38:6c:0d:2e:03:9b:d7:4e:5e:40:03:4a:d3:c1:8d:2c: 6f:6a:7f:0b:41:7f:5f:ff:8c:74:53:58:7a:ae:90:5d:1b:14: a2:8b:8b:8e:fa:e1:72:49:04:8d:36:f2:07:0a:3e:86:88:9e: 19:08:8e:2d:02:d8:75:c8:97:3f:61:1b:08:23:50:38:ff:f9: 98:41:cc:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjlZ3w8Yt9gVvUvmfqa7++JuIHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYw M0JFRUFEMjAeFw0yNjA1MTIxNzQyNDVaFw0yNjA1MTMyMTEwNDVaMDMxMTAvBgNV BAMTKDA4MTBEQThBREIxMTM3REVCNDYzQUQwQTlDQkJEQkUxQzYxRjhFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKAtoPoilh2eRbwH5L2cBgh02 roi+UGr/RM3IXPaYo96q/imapzmj6fR6lScy3CYGCPgsIvyZA/ZFGL930yg0KQO4 JA8pxGXeN0Vxpu0kWIRSRkM9uJaXQIwjqv/glCGuX56QKRMKe2EAglRw42gMFiqG NanPjn5NmuUyyTe8NEiwM9CNb7wJkw15+vF++UurEZuu8bKJR9DoJhKNvbQced2I XXfgjtMgtm74oTWfLa3x3cx44Lj0t9h22qeL0oQ12b0XbGyo9AGMylyfaP3JzUtT 9SCgGO7wJisxsbFo2paT9QdqPKo9E+YXr/u+9TAYwwroCvJJkSPpOjqsetL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCBDaitsRN960Y60KnLvb4cYfjtQwHwYDVR0j BBgwFoAUuY/UiRS0iceEenon5Tx/FgO+6tIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDVjMmM3MWMtNmFlNS00ZWE5LWI4NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkx NEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYwM0JFRUFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COThGRDQ4OTE0QjQ4OUM3ODQ3QTdBMjdFNTNDN0YxNjAzQkVF QUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdG MTYwM0JFRUFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo54q0V0FJ91rpxy6twaiLx+2FnHiWSkpVG OqItPOqgQDBYK/OWDC6QOIMGeNnhUMRtlBukMEK5C/6Vr9HJw3UB8hshgNvhmrjr XH1k85KiR8cU9f96ZxUWDRxQk9DxyNW5fBZmPI3WpGkPWUUnJoTKlZxZE9NKTIt+ YBR6iGItX1L9gDX1ZQAaldePonXjpAA70bUPjJ9qRSZh0au+DQhEnSmfDNLwBwKB KcFwVxiEw/i88bF3OGwNLgOb105eQANK08GNLG9qfwtBf1//jHRTWHqukF0bFKKL i4764XJJBI028gcKPoaInhkIji0C2HXIlz9hGwgjUDj/+ZhBzKM= -----END CERTIFICATE-----Generated at Wed May 13 01:10:54 2026 by rpki-client