
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
File: 98EC8965126CEAAF07DB20456F30ADDA7E619614.mft (raw, json)
Hash identifier: srL3+O4k8LEsHuNQ7ode5DASdFdOvH+oFPrgE18g6Ms=
Subject key identifier: BB:24:12:F1:CA:8E:66:B2:42:40:9E:35:6B:48:48:EC:78:74:36:EE
Authority key identifier: 98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14
Certificate issuer: /CN=98EC8965126CEAAF07DB20456F30ADDA7E619614
Certificate serial: 64CD8AB15A2084C4AC49359E462AA3E85A46E991
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:00:35 +0000
Manifest this update: Tue 12 May 2026 15:55:35 +0000
Manifest next update: Wed 13 May 2026 16:41:35 +0000
Files and hashes: 1: 98EC8965126CEAAF07DB20456F30ADDA7E619614.crl (hash: tMiyyibHd3tAs3UPSoIQ5qwudEfk36Csj2K6BcNEgOc=)
2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: H5sSyPFigguVE/vHzW6P4HgP+k0uALrlMtr/Qk6iyOw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl
rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:cd:8a:b1:5a:20:84:c4:ac:49:35:9e:46:2a:a3:e8:5a:46:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98EC8965126CEAAF07DB20456F30ADDA7E619614
Validity
Not Before: May 12 15:55:35 2026 GMT
Not After : May 13 16:41:35 2026 GMT
Subject: CN=BB2412F1CA8E66B242409E356B4848EC787436EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:04:0e:52:7c:eb:64:f2:a7:66:a7:f3:0f:
ee:a4:02:ff:8c:df:2f:93:e2:95:aa:1b:2b:f7:84:
fa:da:d8:e2:c3:65:cb:31:ce:78:c7:dc:ad:e2:20:
7f:ea:ca:86:41:25:b3:04:53:98:52:a9:3f:1f:5a:
3c:c3:cf:af:8a:f0:b2:56:02:c3:aa:b8:73:32:ce:
d0:55:9c:53:2b:a5:57:da:f0:61:83:33:74:23:cf:
c0:6d:90:04:d3:90:36:62:8c:ae:57:34:8a:64:f0:
ba:ea:b2:c5:f6:c0:41:d9:36:d1:6f:d4:95:10:44:
db:59:4f:e5:f4:d0:88:17:e4:bc:01:ab:e9:08:e3:
b4:89:38:a0:70:99:2d:bb:32:10:83:92:4f:0f:da:
83:a4:4e:77:d0:07:36:f0:1c:40:31:59:8d:67:e8:
26:02:85:d5:6a:b3:e3:9d:73:d1:2a:6e:d9:65:a0:
72:a2:5f:01:64:29:23:47:71:e4:10:66:8a:77:59:
9d:69:5d:76:49:8c:6f:80:2c:82:18:66:1a:b0:92:
91:e5:36:fa:98:00:0c:d3:02:dc:84:c1:1b:4b:5a:
db:c9:74:ee:c1:7c:26:74:42:a3:72:6a:a3:e7:ec:
50:e1:c9:2a:d1:b4:33:49:43:1e:ac:9c:c5:75:21:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:24:12:F1:CA:8E:66:B2:42:40:9E:35:6B:48:48:EC:78:74:36:EE
X509v3 Authority Key Identifier:
keyid:98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3a:fb:ae:cd:20:31:8d:6e:7f:6c:a3:1e:f6:71:87:1b:96:
a3:5f:4f:22:49:f6:c8:f4:cf:3d:bf:ef:ee:a6:65:fc:5e:d5:
c5:ae:24:58:35:57:58:b4:73:07:b9:7e:67:4c:1a:83:db:c3:
aa:9f:93:82:9e:cf:50:4a:51:b2:4d:ff:c2:0a:fb:0b:e9:bd:
0d:3c:3b:f2:e3:e2:f2:bb:99:e9:c6:e2:2d:4a:ca:77:d2:29:
db:fc:54:b9:40:cd:06:36:30:6f:09:bf:ef:f5:ef:54:3b:18:
27:b0:d2:6d:d1:1a:51:e0:e9:2d:97:f8:c4:50:ec:38:c4:3c:
0b:2b:9e:02:5f:2b:f5:06:70:9b:c3:6e:be:36:90:7e:ce:ca:
91:f9:02:57:f8:f5:41:9b:ef:fc:0b:55:c9:35:22:f8:5e:a3:
d5:3e:5c:86:53:11:33:4f:3f:3b:40:95:16:6e:7e:3d:b3:15:
59:99:fc:97:89:80:ff:28:51:12:c5:a5:4f:cb:10:e8:15:96:
22:67:ea:fa:9f:22:81:93:43:f6:92:0d:a0:d5:ab:26:ad:4e:
d0:15:1a:12:b0:e1:3b:dd:78:bc:a8:8d:6f:86:85:75:03:ee:
9d:f1:f1:f9:e4:4d:fe:43:43:36:5a:7e:d6:74:99:97:1f:2f:
fb:ad:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:18 2026 by rpki-client