$ rpki-client -vvf rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft File: 098D1D612D535CED249CDB01EC5565063EBACEEF.mft (raw, json) Hash identifier: /hhwv+L6VKTofAKT9kvolYT2uBm2Hr+bDukd3ptWp+k= Subject key identifier: 98:5E:C5:D5:99:BC:90:D3:D9:EB:D3:26:B0:4C:81:13:75:83:3D:1B Authority key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF Certificate issuer: /CN=098D1D612D535CED249CDB01EC5565063EBACEEF Certificate serial: 383DDE0AAD06B931DF872B8DBB077C594B05A326 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:25:00 +0000 Manifest this update: Thu 23 Jul 2026 20:20:00 +0000 Manifest next update: Fri 24 Jul 2026 21:18:00 +0000 Files and hashes: 1: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: Z0u7IGnQdxSwJ/3PUqshR32Mqm4mC19C1FEuu6LC8Ng=) 2: 098D1D612D535CED249CDB01EC5565063EBACEEF.crl (hash: 46UkiwwuGuuYXhDu3OnL1/9K/YPL+fKNJedYzYnTOKY=) 3: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: 6BOi9a4QIn+pGYzRIaW0daSfHvcVflYv5ZBX0t+b6I0=) 4: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: CY1Z76P9Cm4XC+l2Gxs6pH2wrd99R/AKN3svNUGr+4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3d:de:0a:ad:06:b9:31:df:87:2b:8d:bb:07:7c:59:4b:05:a3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D1D612D535CED249CDB01EC5565063EBACEEF Validity Not Before: Jul 23 20:20:00 2026 GMT Not After : Jul 24 21:18:00 2026 GMT Subject: CN=985EC5D599BC90D3D9EBD326B04C811375833D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:4b:0b:88:17:67:bd:4c:26:79:0b:42:f0: 17:00:67:0b:f8:2e:f1:16:db:19:ce:e0:46:90:f0: c5:5e:e8:05:3f:73:9e:b2:d7:9f:ee:fe:b5:6d:e3: bf:f5:1c:35:57:ba:00:eb:95:c3:ca:e2:70:53:2b: 32:a4:31:8e:6f:8a:4a:ba:2d:91:89:f3:ff:a2:fb: 90:a0:f3:95:cf:0f:ba:cd:2a:98:95:b3:f5:e4:66: db:b1:95:bc:29:5b:f6:8a:c1:2a:80:40:83:5c:22: 1b:5b:69:12:e1:bd:fa:1f:ee:ca:0c:5d:00:53:fc: 18:a0:04:29:a1:ee:01:15:51:86:82:cd:c5:dc:8f: ec:73:ca:ec:9e:35:67:0a:7b:c1:ed:26:7a:4e:12: a5:6e:ac:60:19:05:1c:98:f1:a3:d6:ca:07:f0:a1: d6:45:80:7c:d4:37:a1:e2:81:b3:8a:49:35:f8:f7: 87:95:e3:65:8d:4b:16:49:07:02:06:27:2f:6f:88: c2:fe:6d:fa:11:c5:7b:2b:ea:f1:ba:38:89:be:cd: 0c:28:17:13:81:c5:2a:1d:78:5a:80:99:6a:9b:50: 1a:2a:aa:1b:55:8a:05:a4:77:d3:7a:82:db:92:4a: 1a:49:25:bc:79:f3:3d:82:65:0e:e1:d1:85:79:5b: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5E:C5:D5:99:BC:90:D3:D9:EB:D3:26:B0:4C:81:13:75:83:3D:1B X509v3 Authority Key Identifier: keyid:09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b8:58:c4:2f:ae:a0:44:bd:30:c4:ad:2b:a5:23:f9:3d:a7: 78:db:55:36:03:ee:40:28:4f:bf:1a:92:af:f5:35:c7:e3:f0: b3:ca:e0:9b:c8:cf:42:87:54:59:5e:54:cf:46:66:4b:86:d9: dc:94:f7:ce:ee:5c:46:1d:f4:77:4a:8b:b7:ed:4c:2e:dc:0e: 51:9c:86:1e:a5:68:2a:e5:8a:03:3c:22:8b:ab:26:8f:8d:54: 90:bb:3b:71:46:d3:e8:bf:e2:bf:42:11:13:11:bf:43:87:e3: 56:be:08:35:3f:51:04:ae:38:54:fd:68:87:00:7e:5d:d6:33: 9f:ca:d6:df:05:c5:48:ae:42:ae:34:15:c5:75:8c:7c:7b:d6: a3:e8:09:38:6c:ed:92:a9:47:20:da:1e:c9:81:f0:7e:77:9b: 1d:0d:03:ad:44:d9:23:2f:f3:0c:88:88:89:5b:58:d6:3e:c8: d3:6a:2e:b9:f5:2e:45:ba:c7:94:16:ae:b2:1c:80:64:55:cb: a2:4b:87:11:58:81:c2:0e:88:dc:ec:64:bb:d5:70:9c:1b:92: 10:cc:40:65:68:f7:1f:8b:4c:dc:0f:cf:ac:5c:8a:1c:ac:ec: 6a:24:d3:5c:4e:0a:15:1b:af:a1:2f:2a:69:a9:b8:7b:24:b8: 56:5a:79:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOD3eCq0GuTHfhyuNuwd8WUsFoyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDFENjEyRDUzNUNFRDI0OUNEQjAxRUM1NTY1MDYz RUJBQ0VFRjAeFw0yNjA3MjMyMDIwMDBaFw0yNjA3MjQyMTE4MDBaMDMxMTAvBgNV BAMTKDk4NUVDNUQ1OTlCQzkwRDNEOUVCRDMyNkIwNEM4MTEzNzU4MzNEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0ksLiBdnvUwmeQtC8BcAZwv4 LvEW2xnO4EaQ8MVe6AU/c56y15/u/rVt47/1HDVXugDrlcPK4nBTKzKkMY5vikq6 LZGJ8/+i+5Cg85XPD7rNKpiVs/XkZtuxlbwpW/aKwSqAQINcIhtbaRLhvfof7soM XQBT/BigBCmh7gEVUYaCzcXcj+xzyuyeNWcKe8HtJnpOEqVurGAZBRyY8aPWygfw odZFgHzUN6HigbOKSTX494eV42WNSxZJBwIGJy9viML+bfoRxXsr6vG6OIm+zQwo FxOBxSodeFqAmWqbUBoqqhtVigWkd9N6gtuSShpJJbx58z2CZQ7h0YV5W7+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmF7F1Zm8kNPZ69MmsEyBE3WDPRswHwYDVR0j BBgwFoAUCY0dYS1TXO0knNsB7FVlBj66zu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjk2NDAxZTMtOWY2Mi00YjNjLWJmZmItNzgzMzU1YWU2NzcwLzAvMDk4RDFENjEy RDUzNUNFRDI0OUNEQjAxRUM1NTY1MDYzRUJBQ0VFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOThEMUQ2MTJENTM1Q0VEMjQ5Q0RCMDFFQzU1NjUwNjNFQkFD RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvMDk4RDFENjEyRDUzNUNFRDI0OUNEQjAxRUM1NTY1 MDYzRUJBQ0VFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFq4WMQvrqBEvTDErSulI/k9p3jbVTYD7kAo T78akq/1Ncfj8LPK4JvIz0KHVFleVM9GZkuG2dyU987uXEYd9HdKi7ftTC7cDlGc hh6laCrligM8IourJo+NVJC7O3FG0+i/4r9CERMRv0OH41a+CDU/UQSuOFT9aIcA fl3WM5/K1t8FxUiuQq40FcV1jHx71qPoCThs7ZKpRyDaHsmB8H53mx0NA61E2SMv 8wyIiIlbWNY+yNNqLrn1LkW6x5QWrrIcgGRVy6JLhxFYgcIOiNzsZLvVcJwbkhDM QGVo9x+LTNwPz6xcihys7Gok01xOChUbr6EvKmmpuHskuFZaeaI= -----END CERTIFICATE-----Generated at Fri Jul 24 07:36:26 2026 by rpki-client