
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft
File: 098D1D612D535CED249CDB01EC5565063EBACEEF.mft (raw, json)
Hash identifier: npsJsw6+0SqnQDWSSxAWdayZ1re021qTlGH7rdKpnKI=
Subject key identifier: 5F:43:B6:A6:03:20:B5:00:4D:5D:F2:4D:0E:39:B5:54:9B:C8:EA:CB
Authority key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF
Certificate issuer: /CN=098D1D612D535CED249CDB01EC5565063EBACEEF
Certificate serial: 481759104A16E7DBEA664F7D77DECE060EF215C6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 11:20:09 +0000
Manifest this update: Wed 23 Sep 2026 11:15:09 +0000
Manifest next update: Thu 24 Sep 2026 13:20:09 +0000
Files and hashes: 1: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: 6BOi9a4QIn+pGYzRIaW0daSfHvcVflYv5ZBX0t+b6I0=)
2: 098D1D612D535CED249CDB01EC5565063EBACEEF.crl (hash: eJXfCqXbG8J5NoaochJYpfwKP1bzHbVg3tsWf2JtUmM=)
3: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: Z0u7IGnQdxSwJ/3PUqshR32Mqm4mC19C1FEuu6LC8Ng=)
4: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: CY1Z76P9Cm4XC+l2Gxs6pH2wrd99R/AKN3svNUGr+4E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl
rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 13:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:17:59:10:4a:16:e7:db:ea:66:4f:7d:77:de:ce:06:0e:f2:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D1D612D535CED249CDB01EC5565063EBACEEF
Validity
Not Before: Sep 23 11:15:09 2026 GMT
Not After : Sep 24 13:20:09 2026 GMT
Subject: CN=5F43B6A60320B5004D5DF24D0E39B5549BC8EACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:55:ab:4a:cb:a6:39:5f:a5:3c:f7:26:50:
38:84:50:33:8f:a8:90:15:98:ed:e2:e2:10:25:13:
99:67:aa:34:26:1a:13:f7:c3:83:ef:a5:07:97:07:
cf:e1:94:4f:a4:eb:38:54:08:c0:12:8d:22:22:ee:
e1:ba:83:1d:53:0d:65:6d:78:c3:64:07:af:4f:45:
81:e6:19:5d:cf:eb:0f:3f:5a:55:12:a7:37:e1:15:
b4:5b:92:13:7e:15:60:fd:43:6c:06:7e:00:b4:3b:
22:97:73:7a:c5:3d:8e:c8:4e:c7:c8:fb:5d:51:cc:
e9:be:9e:a6:59:f8:8d:f1:a8:5b:fe:e4:35:ba:44:
33:da:6f:f3:e5:8b:26:ef:de:d4:fe:dd:6e:da:d4:
89:58:06:fc:48:9e:d6:d4:62:1d:52:03:24:2e:1c:
43:60:76:97:3f:13:73:f4:89:4e:62:c2:4a:93:11:
0e:2e:5a:3d:fc:12:51:b2:7c:d3:86:62:ad:23:7b:
b4:0c:cd:6f:7b:47:ba:f8:4c:fc:8f:e4:05:ab:79:
6e:e9:97:35:87:46:84:af:85:01:3d:b0:eb:98:1e:
1e:88:89:7a:85:b9:c9:32:a9:6f:58:62:8b:0f:ae:
5b:a1:38:1b:9b:01:3d:98:33:8a:6b:ec:8e:da:a8:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:B6:A6:03:20:B5:00:4D:5D:F2:4D:0E:39:B5:54:9B:C8:EA:CB
X509v3 Authority Key Identifier:
keyid:09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3d:3b:b7:83:40:f1:9c:6c:2b:98:4e:56:a3:d8:43:d4:82:
b0:d6:67:2a:cd:59:6a:43:f9:74:48:06:e9:a4:e3:d3:96:b2:
5a:fa:0f:a1:82:71:a3:e9:51:d2:e9:44:50:92:8b:94:5b:52:
b4:0e:3d:8c:97:93:79:b2:ed:18:7f:d0:0b:83:f8:ab:bb:5c:
74:a4:58:0d:ae:62:82:48:23:bb:cc:c3:2e:35:ee:5c:b0:bd:
ef:c2:ad:f2:ec:13:57:e9:85:cc:76:12:41:6c:e9:3c:87:14:
44:7c:31:b0:9c:97:74:fd:e0:b1:3d:87:df:0a:2e:72:70:23:
d1:99:f7:71:f8:a3:24:d6:bf:70:24:8f:b1:b6:d1:bd:3b:ad:
1b:f4:01:99:6f:48:c9:c1:73:fc:38:11:98:12:67:a4:e0:39:
26:e0:16:17:9f:a0:ab:c6:89:52:ae:a2:7a:45:1a:1b:c7:e7:
55:33:88:ad:00:26:e8:43:40:b6:17:84:b7:11:ad:31:86:ae:
cf:a3:d3:0f:a6:aa:4b:c7:2e:9e:87:31:57:49:ff:79:ff:2b:
14:33:5b:df:8f:54:22:54:6d:24:a5:3f:cb:77:5e:1a:1d:f1:
7f:b4:cd:22:a9:c2:eb:da:e1:21:41:7e:07:af:a3:ea:6f:ad:
97:d5:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:34:05 2026 by rpki-client