$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: yTcWMuiboh3B7o+ncE1z5EuSwNby0eQgjKg2C6d9BF4= Subject key identifier: 9F:74:7A:71:5D:CD:24:B1:A2:CD:CE:35:05:F1:0D:E4:9E:A0:A2:73 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 06C87C80ECEE4D21933CAAF25DF925DDEACD1F13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: F9 Signing time: Thu 16 Apr 2026 13:10:44 +0000 Manifest this update: Thu 16 Apr 2026 13:05:44 +0000 Manifest next update: Sun 19 Apr 2026 22:47:44 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) 2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: zjmpCyf5ltOc8Kyvi7qv8ybRRAwPwTgXHZXCNHIMv6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c8:7c:80:ec:ee:4d:21:93:3c:aa:f2:5d:f9:25:dd:ea:cd:1f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Apr 16 13:05:44 2026 GMT Not After : Apr 19 22:47:44 2026 GMT Subject: CN=9F747A715DCD24B1A2CDCE3505F10DE49EA0A273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:21:89:59:30:e3:8f:1f:9a:d0:70:bf:8c: 1f:0b:20:87:3b:8d:0b:a3:40:67:ba:16:f5:82:7e: 58:d2:4f:66:95:e2:b9:79:ce:bc:ab:63:74:ca:1f: ee:8d:5a:ac:f7:1d:00:89:13:28:19:ea:c7:8e:3d: 78:4f:d0:a9:a6:7a:18:24:e6:7f:f2:82:23:b0:f3: a7:df:d9:73:81:e7:dc:c1:f4:be:17:a6:46:3f:00: d9:c5:b9:a6:70:fb:e3:aa:a5:9c:ed:2a:51:28:ba: 53:c7:0d:78:91:24:41:95:2b:84:48:00:25:4c:1b: 34:b6:aa:e7:bd:4f:7c:23:76:aa:36:88:b7:db:6f: 77:b8:aa:cc:10:0c:34:be:aa:d2:0f:4f:19:33:89: 78:e5:80:27:36:3d:3b:48:42:78:f2:97:88:55:da: 87:63:f3:2a:3f:ed:56:cf:be:21:ab:e4:38:61:46: 37:bf:71:65:25:9b:bd:a5:77:ce:8f:c5:49:99:ac: 7e:0c:26:4d:48:a7:42:d7:d8:25:68:9d:d5:ad:1f: 42:f7:50:f7:ba:c3:2a:fc:0e:b3:23:47:a4:a2:ef: 6c:52:c2:ae:85:78:9a:b0:8a:f9:6b:bc:f0:8a:ab: 39:65:92:6b:1c:32:cf:ac:e5:08:28:db:cd:37:a3: cb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:7A:71:5D:CD:24:B1:A2:CD:CE:35:05:F1:0D:E4:9E:A0:A2:73 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cb:a8:c6:c1:2b:77:11:8f:41:fe:9d:66:81:2f:e5:72:11: ee:6a:51:d7:a4:ca:41:e1:0c:d9:7d:0b:39:76:5c:71:5b:e0: 9d:c9:5d:86:91:ca:6d:f0:60:50:b8:66:c2:84:63:13:d5:5e: d4:0e:44:9b:6a:c1:b2:87:12:8f:b4:0b:a1:f9:2b:eb:6c:b1: f9:17:01:ba:38:80:5d:f3:ee:7f:f0:11:a6:69:c1:79:64:05: e6:98:7b:a9:bf:8d:ad:98:91:ee:f2:92:d1:3a:06:f3:1c:0c: 4c:bd:1b:3b:5f:02:ae:f2:8d:0b:b3:70:d0:f1:6e:1f:40:98: 7f:c1:6c:30:1b:7e:85:9f:de:6d:ca:4b:5c:33:c4:02:92:70: 04:c8:c0:2b:56:81:3d:5d:a4:6c:e6:8d:12:5f:a2:ed:3c:39: e2:34:cb:4f:06:48:4c:49:95:46:5e:18:3b:e7:e6:e0:6a:a7: 40:29:6f:1e:2e:b9:5f:d0:03:48:53:2e:81:5a:43:44:ca:34: 02:e6:d5:a1:6f:85:77:b6:4b:0b:5a:02:5c:5a:02:09:de:1b: c9:70:d3:1c:aa:fb:f7:ee:ee:15:3d:57:8c:66:27:8f:bf:99: 66:1c:03:33:3c:80:10:14:65:eb:ab:83:1b:29:8a:24:81:73: fc:0d:79:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsh8gOzuTSGTPKryXfkl3erNHxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNjA0MTYxMzA1NDRaFw0yNjA0MTkyMjQ3NDRaMDMxMTAvBgNV BAMTKDlGNzQ3QTcxNURDRDI0QjFBMkNEQ0UzNTA1RjEwREU0OUVBMEEyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCyGJWTDjjx+a0HC/jB8LIIc7 jQujQGe6FvWCfljST2aV4rl5zryrY3TKH+6NWqz3HQCJEygZ6seOPXhP0Kmmehgk 5n/ygiOw86ff2XOB59zB9L4XpkY/ANnFuaZw++OqpZztKlEoulPHDXiRJEGVK4RI ACVMGzS2que9T3wjdqo2iLfbb3e4qswQDDS+qtIPTxkziXjlgCc2PTtIQnjyl4hV 2odj8yo/7VbPviGr5DhhRje/cWUlm72ld86PxUmZrH4MJk1Ip0LX2CVondWtH0L3 UPe6wyr8DrMjR6Si72xSwq6FeJqwivlrvPCKqzllkmscMs+s5Qgo2803o8tlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn3R6cV3NJLGizc41BfEN5J6gonMwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvLqMbBK3cRj0H+nWaBL+VyEe5qUdekykHh DNl9Czl2XHFb4J3JXYaRym3wYFC4ZsKEYxPVXtQORJtqwbKHEo+0C6H5K+tssfkX Abo4gF3z7n/wEaZpwXlkBeaYe6m/ja2Yke7yktE6BvMcDEy9GztfAq7yjQuzcNDx bh9AmH/BbDAbfoWf3m3KS1wzxAKScATIwCtWgT1dpGzmjRJfou08OeI0y08GSExJ lUZeGDvn5uBqp0Apbx4uuV/QA0hTLoFaQ0TKNALm1aFvhXe2SwtaAlxaAgneG8lw 0xyq+/fu7hU9V4xmJ4+/mWYcAzM8gBAUZeurgxspiiSBc/wNeVs= -----END CERTIFICATE-----Generated at Fri Apr 17 19:15:25 2026 by rpki-client