$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft File: 98EC8965126CEAAF07DB20456F30ADDA7E619614.mft (raw, json) Hash identifier: xoVY6WDw9hVpE+xRDKRc+a9iyfC5D66mc2ZFnWiTwkA= Subject key identifier: 5D:64:0C:B3:34:EE:D6:33:FB:83:B2:EC:EA:1D:E9:D0:DD:9D:45:EF Authority key identifier: 98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14 Certificate issuer: /CN=98EC8965126CEAAF07DB20456F30ADDA7E619614 Certificate serial: 0396F379B7F43A4F818FBBF61918D1B2221A5E82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 07:40:51 +0000 Manifest this update: Wed 23 Sep 2026 07:35:51 +0000 Manifest next update: Thu 24 Sep 2026 10:56:51 +0000 Files and hashes: 1: 98EC8965126CEAAF07DB20456F30ADDA7E619614.crl (hash: VdIrtSTGdJMK4Zd6OOw9HSA237Bk/Gzh6Pmu8Qv847w=) 2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: H5sSyPFigguVE/vHzW6P4HgP+k0uALrlMtr/Qk6iyOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:96:f3:79:b7:f4:3a:4f:81:8f:bb:f6:19:18:d1:b2:22:1a:5e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98EC8965126CEAAF07DB20456F30ADDA7E619614 Validity Not Before: Sep 23 07:35:51 2026 GMT Not After : Sep 24 10:56:51 2026 GMT Subject: CN=5D640CB334EED633FB83B2ECEA1DE9D0DD9D45EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:c4:68:e9:5d:85:f7:7e:e7:8a:f5:18:64: b4:67:f4:5d:0a:9c:41:74:4f:05:a9:2b:d7:3a:3d: cb:45:08:24:dc:00:32:dc:58:41:27:42:1f:a7:54: da:26:e0:63:1d:80:ae:8d:84:89:fe:d2:cf:d9:da: f4:48:08:84:82:88:ec:48:82:b7:a1:78:3d:99:48: 97:0f:96:f6:dc:96:62:ca:fd:1c:d1:b4:4a:7e:62: fb:8e:9c:ea:8f:5b:62:9a:ed:6a:ea:5b:e7:ae:16: dd:cd:80:ea:37:83:81:c5:8b:e1:7a:7a:2e:f9:f3: 75:3b:56:de:b9:d6:84:eb:55:f3:3b:d4:42:f3:a6: 1b:eb:7f:39:8f:79:15:76:b0:28:83:3a:7d:3b:b6: ee:09:f4:2e:97:47:36:f1:e6:c9:69:73:94:85:e4: 3a:8e:99:e6:2a:9d:be:fc:bd:cd:ee:5a:db:96:68: fa:71:b6:53:7a:54:cc:2f:a4:1e:d3:26:e3:d3:a8: 0c:71:2a:cc:92:c4:d0:32:e0:6c:71:46:76:24:86: 4c:a7:1f:ad:fc:b6:36:60:d4:38:c4:00:b0:c5:03: 6f:43:27:64:dc:06:2d:eb:3b:73:c2:cb:be:47:24: 1b:28:ed:59:1f:6c:e2:48:7e:23:0c:9c:87:8c:d7: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:64:0C:B3:34:EE:D6:33:FB:83:B2:EC:EA:1D:E9:D0:DD:9D:45:EF X509v3 Authority Key Identifier: keyid:98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0a:3a:79:92:e8:8c:24:d4:1e:ea:c9:a9:84:f0:bc:32:cc: 12:25:26:3d:44:1f:3d:4f:86:21:9e:9f:3a:f4:45:51:06:10: d5:c5:70:08:62:09:b7:db:9e:a9:2d:e5:e0:04:66:f7:07:63: 15:70:bb:0e:c9:72:5e:9c:39:15:92:6e:a4:7f:82:e6:b0:fa: de:84:58:9b:e5:7e:44:6c:52:27:1a:10:bd:df:04:9c:e5:1b: f5:60:c1:74:bc:ac:7f:b2:f4:34:e9:7b:06:ff:20:28:b2:c8: d3:48:29:c0:13:9b:80:41:91:a6:53:a5:12:95:ac:58:64:d3: f5:9c:08:48:bb:7c:e0:1e:17:50:68:7a:43:d4:c3:63:94:a0: a3:c7:b0:57:83:d7:6e:4a:f0:1b:98:ad:9d:a2:26:04:72:f1: 8c:a9:0f:7c:9d:54:20:f9:3f:d8:3b:d5:82:6c:05:77:8a:dd: 13:88:aa:bb:8c:31:76:55:85:38:35:43:24:94:a8:58:4d:53: 66:8b:dd:cd:e3:3c:69:52:ea:12:52:06:34:cf:0a:f2:f8:8b: b8:87:20:ef:0c:49:d2:c8:e6:0c:0d:37:a9:91:e0:25:fd:3c: f7:0b:55:5c:19:e3:79:56:91:0d:2f:d3:fa:3f:5d:8d:88:4c: 22:72:79:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5bzebf0Ok+Bj7v2GRjRsiIaXoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFQzg5NjUxMjZDRUFBRjA3REIyMDQ1NkYzMEFEREE3 RTYxOTYxNDAeFw0yNjA5MjMwNzM1NTFaFw0yNjA5MjQxMDU2NTFaMDMxMTAvBgNV BAMTKDVENjQwQ0IzMzRFRUQ2MzNGQjgzQjJFQ0VBMURFOUQwREQ5RDQ1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCln8Ro6V2F937nivUYZLRn9F0K nEF0TwWpK9c6PctFCCTcADLcWEEnQh+nVNom4GMdgK6NhIn+0s/Z2vRICISCiOxI greheD2ZSJcPlvbclmLK/RzRtEp+YvuOnOqPW2Ka7WrqW+euFt3NgOo3g4HFi+F6 ei7583U7Vt651oTrVfM71ELzphvrfzmPeRV2sCiDOn07tu4J9C6XRzbx5slpc5SF 5DqOmeYqnb78vc3uWtuWaPpxtlN6VMwvpB7TJuPTqAxxKsySxNAy4GxxRnYkhkyn H638tjZg1DjEALDFA29DJ2TcBi3rO3PCy75HJBso7VkfbOJIfiMMnIeM19IZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWQMszTu1jP7g7Ls6h3p0N2dRe8wHwYDVR0j BBgwFoAUmOyJZRJs6q8H2yBFbzCt2n5hlhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjY2ODg1NGEtM2YyNC00MGIxLTgwY2QtZTYzNmFhN2U4YjFjLzAvOThFQzg5NjUx MjZDRUFBRjA3REIyMDQ1NkYzMEFEREE3RTYxOTYxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEVDODk2NTEyNkNFQUFGMDdEQjIwNDU2RjMwQUREQTdFNjE5 NjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvOThFQzg5NjUxMjZDRUFBRjA3REIyMDQ1NkYzMEFE REE3RTYxOTYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8KOnmS6Iwk1B7qyamE8LwyzBIlJj1EHz1P hiGenzr0RVEGENXFcAhiCbfbnqkt5eAEZvcHYxVwuw7Jcl6cORWSbqR/guaw+t6E WJvlfkRsUicaEL3fBJzlG/VgwXS8rH+y9DTpewb/ICiyyNNIKcATm4BBkaZTpRKV rFhk0/WcCEi7fOAeF1BoekPUw2OUoKPHsFeD125K8BuYrZ2iJgRy8YypD3ydVCD5 P9g71YJsBXeK3ROIqruMMXZVhTg1QySUqFhNU2aL3c3jPGlS6hJSBjTPCvL4i7iH IO8MSdLI5gwNN6mR4CX9PPcLVVwZ43lWkQ0v0/o/XY2ITCJyeW8= -----END CERTIFICATE-----Generated at Wed Sep 23 23:08:28 2026 by rpki-client