
$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json)
Hash identifier: 1pc8A/YRlpIe/zpkECVJa4MN2GJP6osyk9ifn9Lr1Jc=
Subject key identifier: 86:CC:C2:D0:45:DE:72:77:E9:C6:CF:AB:DC:C8:22:43:75:79:9C:52
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial: 7797C4FD42944CA6D6A5F53301DC44CC4413E8D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
Manifest number: 0172
Signing time: Wed 15 Apr 2026 14:30:57 +0000
Manifest this update: Wed 15 Apr 2026 14:25:57 +0000
Manifest next update: Sat 18 Apr 2026 20:40:57 +0000
Files and hashes: 1: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: Lpc33YMBjJ9T7VbHHDqwImeBd6L01sxZlRa+x954AOo=)
2: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: z0AijCCK1naTP5YmFbSs1RtXYY5T/kLC9Gc+ZK8h2kA=)
3: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: hSqv2eoQTO7JNJFj3qq3n7+1XfpnN6lz7ioOJ9M/TEg=)
4: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: orqCqThqycoctc6XYyOK+LIl6csfBJWq+IZIFeUSemg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 20:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:97:c4:fd:42:94:4c:a6:d6:a5:f5:33:01:dc:44:cc:44:13:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
Validity
Not Before: Apr 15 14:25:57 2026 GMT
Not After : Apr 18 20:40:57 2026 GMT
Subject: CN=86CCC2D045DE7277E9C6CFABDCC8224375799C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:62:91:61:88:28:c3:e7:32:6e:dd:77:00:
a9:1f:d7:60:13:bb:44:de:db:4b:14:68:a4:70:51:
da:1a:7d:e5:78:e6:3c:11:62:a6:f6:e5:5e:21:84:
7b:fd:b6:5b:30:f4:c6:17:dc:36:29:15:ed:72:f8:
ae:f3:a7:c5:4e:c8:3f:ee:0a:b3:0d:8d:db:a9:0a:
3e:9f:73:6a:81:64:51:b7:89:75:26:d3:1c:82:fc:
11:a6:c8:96:ca:d8:56:11:39:20:8a:51:c2:29:48:
19:1c:01:14:37:32:cb:cf:73:63:73:4c:13:1b:dc:
a9:59:fb:64:f6:77:e4:f2:11:88:14:04:29:34:4b:
c1:94:1a:67:5f:ae:4f:69:e9:d7:08:34:c5:d8:80:
1d:ba:7b:79:55:85:f7:cb:97:56:8d:5a:c5:64:1e:
14:11:80:ce:69:7a:f8:26:48:ce:13:1b:18:5c:a2:
88:ca:05:42:38:6e:5f:46:99:82:68:4d:bc:a4:89:
5a:a6:fa:d7:d8:ad:83:8e:c6:3e:4a:3f:9c:98:e9:
ac:54:cc:65:a1:19:a9:be:f7:e5:d6:e6:af:e8:9e:
45:8c:3f:e3:12:13:3a:27:c6:ae:fd:9d:a5:35:76:
12:47:0a:a7:8d:3b:6c:e9:47:c7:1b:24:14:39:f3:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:C2:D0:45:DE:72:77:E9:C6:CF:AB:DC:C8:22:43:75:79:9C:52
X509v3 Authority Key Identifier:
keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:96:04:f2:af:64:3b:c3:fe:c7:84:f2:17:17:f0:f3:54:6c:
41:26:7e:00:f7:39:ac:45:b8:86:21:ee:e5:0f:c7:d9:90:75:
a3:f0:4f:3a:03:45:82:5f:80:1f:4d:e7:23:f8:1f:35:3d:4d:
52:80:79:cc:7b:70:ae:32:d2:bc:3f:1e:3e:96:8b:93:ae:15:
c8:8c:7c:f4:17:b9:dd:20:12:32:e0:e5:b3:e2:4b:33:4d:9b:
06:43:25:1a:af:de:94:57:b7:f6:b9:dc:48:11:15:d7:57:cf:
3b:76:c2:cb:21:5c:f1:48:2e:0a:79:32:ff:54:8c:31:6c:f0:
22:ac:26:e3:bc:2c:b7:07:84:4d:50:4d:bc:9d:20:f8:9d:d4:
47:0c:f5:13:2d:f5:9e:e8:0b:7b:c2:37:9e:49:39:03:e2:07:
93:14:46:01:57:21:43:0c:1f:e6:cc:32:e4:5b:ab:ed:f8:1f:
01:6a:5b:af:f1:c0:92:e6:94:29:f2:ec:fc:3a:95:d0:14:5a:
24:f4:fd:c5:6e:c9:57:4e:23:a2:ab:b0:88:fa:f3:41:2d:60:
a7:d8:f9:0e:96:40:5b:e0:9f:d8:4b:16:21:ad:99:2f:60:49:
b7:a9:fc:4b:02:83:55:01:25:6b:36:9e:00:91:c0:24:67:cc:
0d:10:8f:a1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd5fE/UKUTKbWpfUzAdxEzEQT6NQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy
OTdENjFGMTAeFw0yNjA0MTUxNDI1NTdaFw0yNjA0MTgyMDQwNTdaMDMxMTAvBgNV
BAMTKDg2Q0NDMkQwNDVERTcyNzdFOUM2Q0ZBQkRDQzgyMjQzNzU3OTlDNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSf2KRYYgow+cybt13AKkf12AT
u0Te20sUaKRwUdoafeV45jwRYqb25V4hhHv9tlsw9MYX3DYpFe1y+K7zp8VOyD/u
CrMNjdupCj6fc2qBZFG3iXUm0xyC/BGmyJbK2FYROSCKUcIpSBkcARQ3MsvPc2Nz
TBMb3KlZ+2T2d+TyEYgUBCk0S8GUGmdfrk9p6dcINMXYgB26e3lVhffLl1aNWsVk
HhQRgM5pevgmSM4TGxhcoojKBUI4bl9GmYJoTbykiVqm+tfYrYOOxj5KP5yY6axU
zGWhGam+9+XW5q/onkWMP+MSEzonxq79naU1dhJHCqeNO2zpR8cbJBQ5860tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhszC0EXecnfpxs+r3MgiQ3V5nFIwHwYDVR0j
BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy
OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE
NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw
OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy
NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABSWBPKvZDvD/seE8hcX8PNUbEEmfgD3OaxF
uIYh7uUPx9mQdaPwTzoDRYJfgB9N5yP4HzU9TVKAecx7cK4y0rw/Hj6Wi5OuFciM
fPQXud0gEjLg5bPiSzNNmwZDJRqv3pRXt/a53EgRFddXzzt2wsshXPFILgp5Mv9U
jDFs8CKsJuO8LLcHhE1QTbydIPid1EcM9RMt9Z7oC3vCN55JOQPiB5MURgFXIUMM
H+bMMuRbq+34HwFqW6/xwJLmlCny7Pw6ldAUWiT0/cVuyVdOI6KrsIj680EtYKfY
+Q6WQFvgn9hLFiGtmS9gSbep/EsCg1UBJWs2ngCRwCRnzA0Qj6E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:50 2026 by rpki-client