
$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json)
Hash identifier: +Q/4E4vXyzHnX5T6bzg+TfKix8izPvKKmZLrdSqLLpQ=
Subject key identifier: 82:C0:A5:8C:57:30:4A:37:06:66:15:2D:33:E4:F7:F7:BE:72:DA:EF
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial: 54010CAE5152B2275A2639CE64A2A1AA19592E5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
Manifest number: 015E
Signing time: Sun 01 Mar 2026 01:00:54 +0000
Manifest this update: Sun 01 Mar 2026 00:55:54 +0000
Manifest next update: Wed 04 Mar 2026 08:31:54 +0000
Files and hashes: 1: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: hSqv2eoQTO7JNJFj3qq3n7+1XfpnN6lz7ioOJ9M/TEg=)
2: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: 9X8kvNYpHEaDxWvIatB2itKCIchQ9foay+Ex1XxBxR8=)
3: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: Lpc33YMBjJ9T7VbHHDqwImeBd6L01sxZlRa+x954AOo=)
4: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: z0AijCCK1naTP5YmFbSs1RtXYY5T/kLC9Gc+ZK8h2kA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 08:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:01:0c:ae:51:52:b2:27:5a:26:39:ce:64:a2:a1:aa:19:59:2e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
Validity
Not Before: Mar 1 00:55:54 2026 GMT
Not After : Mar 4 08:31:54 2026 GMT
Subject: CN=82C0A58C57304A370666152D33E4F7F7BE72DAEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:be:51:b1:33:4f:96:59:58:f4:3b:5c:a9:
b9:c1:b1:4c:04:39:7e:ae:b0:5a:da:59:da:5b:c4:
f7:b5:ea:f4:c2:6a:70:af:c8:99:f3:e8:2b:79:b1:
0d:fe:4d:de:87:1f:45:14:4c:49:96:ef:70:24:94:
83:ed:f7:9d:32:c2:69:43:1d:e4:0b:f0:ca:81:1f:
bd:7a:a3:0d:70:7c:4e:90:61:d8:32:08:c6:55:60:
8e:06:6d:81:4f:a9:7b:e3:c8:25:16:21:cd:c6:0e:
f2:6c:4f:51:38:a0:8e:06:20:c6:ff:12:e1:e1:2a:
68:c8:de:ee:bd:34:6d:c0:7b:cd:2a:88:cc:7b:6a:
dc:67:ed:25:7e:e7:0d:29:79:ba:d2:3c:5e:81:5a:
56:b9:ae:73:14:f3:b4:f0:25:6c:47:af:47:08:cf:
d8:c6:db:37:ad:79:d8:e0:1d:4b:1e:1e:17:57:5a:
fd:72:51:ff:5c:0e:b6:28:c1:13:4c:95:0f:3d:3c:
d0:0f:3b:a0:ef:ea:e9:4f:0c:95:11:e6:34:23:40:
ca:35:a9:8e:9a:27:cc:8b:8d:95:46:c3:77:c6:4d:
91:83:f4:e0:fa:12:3f:b4:c2:6a:56:5d:bd:d9:06:
a3:63:d9:dd:b1:fc:cb:24:b8:98:69:f2:be:95:c3:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C0:A5:8C:57:30:4A:37:06:66:15:2D:33:E4:F7:F7:BE:72:DA:EF
X509v3 Authority Key Identifier:
keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e5:4c:93:75:72:64:bb:ef:e6:9c:f2:04:33:87:dd:cb:1b:
64:57:db:c5:13:c7:18:95:08:16:a1:56:df:21:21:67:f0:95:
f1:89:d6:06:67:cd:53:9f:f1:ac:ab:c0:07:9c:61:23:84:39:
39:4f:3e:93:55:9a:3d:f4:4e:d8:37:ba:d4:88:cc:32:8e:6a:
17:07:b2:39:c8:d4:d2:00:2f:86:3f:bb:42:8c:a4:3e:b6:91:
c9:6e:61:31:6c:3e:a8:a0:84:a8:81:14:8a:eb:1a:66:dd:8f:
1c:33:ac:68:47:a0:43:09:f9:4f:96:7c:10:69:a8:d2:f5:d1:
b9:67:23:cc:91:41:01:9c:33:a2:38:90:f3:f5:01:de:0d:02:
4d:9c:9e:d6:3f:f8:22:3b:03:21:51:4e:f6:d5:06:31:0c:bd:
b5:35:37:a1:0b:de:e3:fa:60:95:e8:12:18:22:e0:c3:ec:49:
be:d1:f5:6f:d1:a9:08:aa:cd:e6:8c:93:9a:8d:fa:97:3e:e6:
8f:e3:d4:38:33:c6:06:4c:32:a5:4d:70:12:55:d4:ee:26:9d:
75:37:89:de:c0:26:20:8f:48:2f:19:71:21:97:c9:da:e0:06:
8c:ff:c5:71:28:e6:01:f9:00:30:7f:69:f8:7e:21:76:18:80:
54:7a:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:42 2026 by rpki-client