$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: /MZpIYonZayMxYwAKuUWq5fwLkdvmt7UiQl3nMRicKs= Subject key identifier: AC:04:37:DF:15:3D:00:1C:CA:FE:5E:F3:7E:8B:62:A7:04:4C:80:A8 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 730785365E72FC8EB8C9809397C0E48C7DAB38FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: E5 Signing time: Sat 28 Feb 2026 21:40:42 +0000 Manifest this update: Sat 28 Feb 2026 21:35:42 +0000 Manifest next update: Wed 04 Mar 2026 03:03:42 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: ZfcCzx1+Qw919lP3DjOxTuF8LKIdtujx1tPXMBJeEwk=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:07:85:36:5e:72:fc:8e:b8:c9:80:93:97:c0:e4:8c:7d:ab:38:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Feb 28 21:35:42 2026 GMT Not After : Mar 4 03:03:42 2026 GMT Subject: CN=AC0437DF153D001CCAFE5EF37E8B62A7044C80A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:a5:62:c8:14:15:0c:f6:c4:7a:40:2c:ee: 51:3d:e7:8e:07:ee:d8:a4:a1:a9:71:b3:a0:51:5b: 04:4b:3c:c6:6f:d7:4b:af:62:1b:62:82:83:a4:3d: 60:52:c0:8a:f0:b4:eb:fc:29:d9:3c:6a:c5:f7:c6: 0e:4e:63:69:45:07:a7:01:33:1d:a1:a7:bd:9d:61: 2c:1a:1f:c8:a3:4f:35:a4:08:52:e8:f9:d7:b3:bf: 64:c7:76:8c:67:36:cb:02:ab:e4:53:0c:39:0e:8f: 21:8c:11:29:48:ae:08:e6:b6:b7:17:cd:e8:44:04: 1d:80:7e:3d:bf:75:65:2b:7a:1f:81:bc:23:8e:77: 4b:0d:c3:e3:b0:1b:4d:4a:00:ec:7f:d0:92:a3:3d: fd:b7:54:b4:f4:89:24:f5:41:fc:08:67:2a:28:2d: 64:60:b8:6e:b3:39:98:fc:68:ce:40:cd:3a:e9:28: 4d:d9:ca:af:8f:87:db:9d:a5:14:04:50:96:07:2d: a2:ce:14:1d:e2:a4:88:bd:76:38:b2:7c:5c:ca:ae: 1e:68:a8:8a:d6:ba:69:f7:e4:d1:a7:07:57:d3:cf: cf:fe:d5:40:46:c6:3f:2a:c6:31:da:31:02:29:98: 2c:c6:be:50:06:f2:f7:b6:d2:77:79:92:0d:8d:51: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:37:DF:15:3D:00:1C:CA:FE:5E:F3:7E:8B:62:A7:04:4C:80:A8 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:76:5d:16:75:30:6b:b7:5d:24:cc:29:d9:07:71:b0:bc:3f: 7c:e4:13:46:e4:3a:3a:2b:14:db:04:d6:b2:fd:8c:9a:92:3e: 4e:a8:99:51:5a:3e:68:46:f2:80:0e:ec:4a:2b:7a:b8:64:0a: 3d:2d:cb:da:69:09:84:12:e7:e1:80:d8:ea:c4:9c:1c:a9:4d: d8:f7:87:09:1f:93:35:ec:41:58:aa:41:28:42:3d:ba:85:24: 30:5b:46:d4:20:6a:40:4f:e8:c7:ed:6c:ee:3f:d1:42:fc:bc: 77:09:0e:83:0d:f0:61:90:d1:6f:db:33:30:5e:08:fb:39:6b: 21:1c:de:e5:03:be:97:fb:ca:54:7f:8b:4d:f7:40:71:98:96: 36:fb:13:31:a4:ef:5a:d2:3b:63:54:a0:5f:a0:bf:30:00:bb: 6e:a7:fe:56:99:35:23:fd:9d:0d:1a:79:df:20:1b:28:e1:fa: 7e:89:12:14:79:99:97:c2:91:91:04:1e:d3:90:ef:55:da:c7: 24:a2:f9:ce:48:b9:b9:f6:12:fb:c5:50:fc:e1:31:47:8b:2e: dd:32:0e:41:fb:d1:30:29:f7:9c:66:1e:74:9b:9e:1f:85:ad: 70:02:eb:04:73:f4:66:03:b4:8c:6f:09:ae:a9:3c:13:ac:b4: f2:6d:87:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcweFNl5y/I64yYCTl8DkjH2rOPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNjAyMjgyMTM1NDJaFw0yNjAzMDQwMzAzNDJaMDMxMTAvBgNV BAMTKEFDMDQzN0RGMTUzRDAwMUNDQUZFNUVGMzdFOEI2MkE3MDQ0QzgwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1KViyBQVDPbEekAs7lE9544H 7tikoalxs6BRWwRLPMZv10uvYhtigoOkPWBSwIrwtOv8Kdk8asX3xg5OY2lFB6cB Mx2hp72dYSwaH8ijTzWkCFLo+dezv2THdoxnNssCq+RTDDkOjyGMESlIrgjmtrcX zehEBB2Afj2/dWUreh+BvCOOd0sNw+OwG01KAOx/0JKjPf23VLT0iST1QfwIZyoo LWRguG6zOZj8aM5AzTrpKE3Zyq+Ph9udpRQEUJYHLaLOFB3ipIi9djiyfFzKrh5o qIrWumn35NGnB1fTz8/+1UBGxj8qxjHaMQIpmCzGvlAG8ve20nd5kg2NUUmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrAQ33xU9ABzK/l7zfotipwRMgKgwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB2XRZ1MGu3XSTMKdkHcbC8P3zkE0bkOjor FNsE1rL9jJqSPk6omVFaPmhG8oAO7EorerhkCj0ty9ppCYQS5+GA2OrEnBypTdj3 hwkfkzXsQViqQShCPbqFJDBbRtQgakBP6MftbO4/0UL8vHcJDoMN8GGQ0W/bMzBe CPs5ayEc3uUDvpf7ylR/i033QHGYljb7EzGk71rSO2NUoF+gvzAAu26n/laZNSP9 nQ0aed8gGyjh+n6JEhR5mZfCkZEEHtOQ71XaxySi+c5Iubn2EvvFUPzhMUeLLt0y DkH70TAp95xmHnSbnh+FrXAC6wRz9GYDtIxvCa6pPBOstPJthyk= -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:01 2026 by rpki-client