$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: FxBYWF/D4kURqwo2iH4lGmr+kzFWDu+SzGvQuZMjH0w= Subject key identifier: 60:0A:3A:E0:DF:F8:68:30:04:66:21:0A:0C:23:20:92:32:CA:76:05 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 4CCF0671B3C2C149662ADD6B485FBB4CA9736401 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0288 Signing time: Sat 18 Apr 2026 03:21:00 +0000 Manifest this update: Sat 18 Apr 2026 03:16:00 +0000 Manifest next update: Tue 21 Apr 2026 07:04:00 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: K0mYHWd3R8C5RClbUUtX/dPo9OW0McUoVk2CzTwuqlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cf:06:71:b3:c2:c1:49:66:2a:dd:6b:48:5f:bb:4c:a9:73:64:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Apr 18 03:16:00 2026 GMT Not After : Apr 21 07:04:00 2026 GMT Subject: CN=600A3AE0DFF868300466210A0C23209232CA7605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:5e:8c:4c:43:6f:ea:ce:2c:76:65:69:b5: 85:5c:5a:7f:c1:f7:e1:6b:48:99:2e:e0:3e:27:33: 3a:c4:6d:4b:89:2d:5d:d6:27:65:3f:e3:89:7a:1f: 1b:58:75:db:14:2d:74:e3:f4:db:21:01:87:83:25: 59:e5:6e:85:c4:cd:a9:7b:38:04:d8:61:ab:63:f0: 31:1f:9b:75:51:96:3f:47:fc:c4:3f:e6:91:22:e4: 7c:ee:30:a0:d7:8c:58:53:68:1b:cf:21:ae:f3:73: fb:36:77:e9:b7:7b:fb:4d:fe:58:57:7b:fa:f0:ac: f7:53:3b:b6:75:b6:4b:bb:e9:f9:4f:ed:f4:ee:90: 0b:b5:47:20:80:e7:80:23:94:2b:40:51:c2:39:99: 74:d4:32:12:57:2b:76:06:b6:14:4f:8a:16:6f:91: 77:1a:7e:de:95:25:5d:8f:7f:c5:75:10:b7:ce:9e: b2:b9:55:05:2d:90:10:6f:50:70:42:9b:5e:6d:0f: 91:58:9c:f5:13:e9:40:b3:9a:f7:cf:d7:c1:b7:68: e9:1f:ef:50:3e:d9:e1:88:c4:ff:e6:9b:f1:97:2f: 75:ea:b4:35:1c:78:61:34:54:ff:d1:c4:3d:1f:93: 96:4f:3a:82:61:9d:25:e6:e2:c9:ed:11:6a:20:8c: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0A:3A:E0:DF:F8:68:30:04:66:21:0A:0C:23:20:92:32:CA:76:05 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:59:2f:b8:57:a0:d8:44:3c:af:2d:2d:1b:7d:45:84:a2:7e: 52:00:e5:ad:87:34:3a:3b:6f:42:97:a3:9a:a3:ec:86:8e:16: e8:03:72:d6:5f:da:60:17:5a:b5:e7:fc:ba:8f:a4:70:c2:47: e9:a9:04:78:e6:62:b2:e4:86:4f:56:5a:09:89:d2:6a:25:b7: c8:ea:24:b6:24:28:23:fe:de:fa:23:b9:22:c8:1c:d9:43:c8: 4d:07:09:c1:34:df:5d:3e:c4:19:75:be:56:39:5d:67:5f:a3: f9:ea:97:41:df:f9:c8:52:82:b3:14:db:23:db:70:1d:ed:a5: 3e:c9:ea:7a:3d:85:38:77:f2:25:1d:6f:ed:a9:e2:a5:6d:da: ee:90:e2:07:22:a6:70:27:1b:45:88:7d:34:50:0d:df:37:14: aa:b0:5d:5e:d5:78:c2:7d:84:ae:0b:37:13:66:19:79:da:2c: 61:5b:11:44:bd:95:f0:36:0c:2b:7e:7f:68:34:0f:25:e8:03: 54:26:2f:12:2a:12:ef:4d:82:43:60:bd:97:26:a0:53:e1:61: 49:c0:74:49:68:13:64:45:a8:e5:ad:3e:94:7d:4f:fe:ee:cd: 33:34:b9:16:4b:cc:fe:be:51:d1:e3:e2:82:84:0f:f6:0b:c0: 05:44:03:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTM8GcbPCwUlmKt1rSF+7TKlzZAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNjA0MTgwMzE2MDBaFw0yNjA0MjEwNzA0MDBaMDMxMTAvBgNV BAMTKDYwMEEzQUUwREZGODY4MzAwNDY2MjEwQTBDMjMyMDkyMzJDQTc2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+n16MTENv6s4sdmVptYVcWn/B 9+FrSJku4D4nMzrEbUuJLV3WJ2U/44l6HxtYddsULXTj9NshAYeDJVnlboXEzal7 OATYYatj8DEfm3VRlj9H/MQ/5pEi5HzuMKDXjFhTaBvPIa7zc/s2d+m3e/tN/lhX e/rwrPdTO7Z1tku76flP7fTukAu1RyCA54AjlCtAUcI5mXTUMhJXK3YGthRPihZv kXcaft6VJV2Pf8V1ELfOnrK5VQUtkBBvUHBCm15tD5FYnPUT6UCzmvfP18G3aOkf 71A+2eGIxP/mm/GXL3XqtDUceGE0VP/RxD0fk5ZPOoJhnSXm4sntEWogjMp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYAo64N/4aDAEZiEKDCMgkjLKdgUwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlZL7hXoNhEPK8tLRt9RYSiflIA5a2HNDo7 b0KXo5qj7IaOFugDctZf2mAXWrXn/LqPpHDCR+mpBHjmYrLkhk9WWgmJ0molt8jq JLYkKCP+3vojuSLIHNlDyE0HCcE0310+xBl1vlY5XWdfo/nql0Hf+chSgrMU2yPb cB3tpT7J6no9hTh38iUdb+2p4qVt2u6Q4gcipnAnG0WIfTRQDd83FKqwXV7VeMJ9 hK4LNxNmGXnaLGFbEUS9lfA2DCt+f2g0DyXoA1QmLxIqEu9NgkNgvZcmoFPhYUnA dEloE2RFqOWtPpR9T/7uzTM0uRZLzP6+UdHj4oKED/YLwAVEA8E= -----END CERTIFICATE-----Generated at Sun Apr 19 14:06:28 2026 by rpki-client