$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: DsED7tEwn5Yb7VO+lTlmaKKWJz92yPJQVWCCdGcvBf0= Subject key identifier: 63:04:59:CC:E3:31:C8:B1:C7:BF:FD:FE:3D:B6:40:0D:58:3D:24:33 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 04AA17EA00A755F7FCA48F9807E8B011FAEDF855 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 01DA Signing time: Sun 01 Mar 2026 10:42:29 +0000 Manifest this update: Sun 01 Mar 2026 10:37:29 +0000 Manifest next update: Wed 04 Mar 2026 12:42:29 +0000 Files and hashes: 1: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 5L7KwFUgvVnXbTdBI9pybBL9RZN1DFSQWqr7TkH60p0=) 2: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: PTq4K7C1NfA7u/hBgxfzHnc927GHuD0+t6G+/br9unw=) 3: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: O4mdP6+qvT22Q0LDvrlBANjJOpMoByBbkRtr0y7gJtU=) 4: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: eQ5WMRJPy7gKupW5F4m6uPUC6SkCMo1WY0hvFb3YFm0=) 5: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: FwnTkVzQWgoKMRzF7esZO1ZfNgmKG76WWo0douLTHP0=) 6: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: pBJdYJ8asfUnEsHbPR9HW0sZ8Aakk4K058GUyj3kAiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:aa:17:ea:00:a7:55:f7:fc:a4:8f:98:07:e8:b0:11:fa:ed:f8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Mar 1 10:37:29 2026 GMT Not After : Mar 4 12:42:29 2026 GMT Subject: CN=630459CCE331C8B1C7BFFDFE3DB6400D583D2433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:d3:3f:da:96:0d:4d:2a:05:3b:04:dc:9b: 4e:d9:5d:35:08:7a:2b:e3:01:02:3e:63:1d:3f:f8: 0c:9d:cc:1e:83:e4:3b:7a:b1:77:a4:d1:07:5d:a6: 7e:be:8d:c6:ee:c6:ab:4d:96:4b:3d:62:b3:41:2e: d2:28:9e:bb:37:21:af:0d:d7:79:fa:0d:00:93:7c: e0:af:dc:b1:89:b7:cf:86:b0:9d:89:90:fe:7d:60: 27:18:38:f3:23:88:df:d0:d3:c5:2f:e4:e1:83:f6: da:d5:f2:87:fd:99:d8:f2:8a:5d:64:6e:65:b5:66: fd:8a:48:d9:83:7a:39:17:f4:15:f0:dc:4e:f5:96: e1:ea:fc:d2:19:3a:da:73:65:9c:57:7f:23:78:b0: c3:32:c4:90:43:ef:63:f4:d5:eb:64:5f:83:bd:c5: d5:b8:cc:94:1a:4d:8d:af:39:76:a2:ad:f8:78:c1: da:3b:00:00:91:16:de:3e:b8:dd:12:06:0c:1e:e8: 31:73:56:75:0a:03:8a:b6:c1:b4:8b:72:83:59:a1: 94:36:ea:45:5c:4f:0c:0b:26:c3:2a:2f:41:7a:78: d3:fd:57:80:63:6f:a4:67:05:b9:1a:9b:87:6c:53: 7c:c5:2e:00:1d:9b:bf:fb:e9:6f:5b:e0:23:a2:47: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:04:59:CC:E3:31:C8:B1:C7:BF:FD:FE:3D:B6:40:0D:58:3D:24:33 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:83:5c:b5:da:2f:31:09:26:68:b2:21:99:27:0c:91:04:68: 53:4f:b1:19:35:39:e9:b2:c0:76:9c:80:7f:bd:82:95:82:15: 8c:b7:08:98:4c:5a:e7:4e:2e:3a:bf:5a:f8:30:75:2b:2b:1c: 70:bd:ec:34:41:bd:d4:fa:54:0d:42:61:6e:be:ca:7d:bd:9f: bd:3a:05:4b:8e:f6:25:28:56:6e:61:d7:57:e2:da:d3:55:7d: 81:84:7c:13:22:e8:0d:2c:fb:54:61:40:bc:05:42:c1:84:a8: 0a:05:bf:dd:39:99:8b:5b:ea:ab:1f:a4:fa:48:2b:e0:b4:e3: 76:6f:0c:15:a9:57:3e:ec:f8:57:53:16:3b:0a:93:b2:0f:5c: 45:ff:1b:3c:2f:26:0d:fe:48:f8:d5:b1:f8:b8:71:6e:04:11: e6:52:51:68:ef:f8:f5:d5:3c:91:22:8d:3a:d8:60:94:d9:19: b9:c2:1d:75:e7:e6:ae:82:d6:02:13:93:ef:da:54:83:94:b2: dd:07:67:1a:46:53:ff:b8:04:53:8d:f4:87:19:f1:b7:bf:c3: 91:63:c2:24:52:2c:02:4c:23:7c:23:49:f9:18:cc:b3:6c:f7: cf:d0:3b:c9:9c:d3:97:3d:be:89:4e:e9:dd:68:8c:c0:1d:66: 63:57:13:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKoX6gCnVff8pI+YB+iwEfrt+FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNjAzMDExMDM3MjlaFw0yNjAzMDQxMjQyMjlaMDMxMTAvBgNV BAMTKDYzMDQ1OUNDRTMzMUM4QjFDN0JGRkRGRTNEQjY0MDBENTgzRDI0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWgdM/2pYNTSoFOwTcm07ZXTUI eivjAQI+Yx0/+AydzB6D5Dt6sXek0Qddpn6+jcbuxqtNlks9YrNBLtIonrs3Ia8N 13n6DQCTfOCv3LGJt8+GsJ2JkP59YCcYOPMjiN/Q08Uv5OGD9trV8of9mdjyil1k bmW1Zv2KSNmDejkX9BXw3E71luHq/NIZOtpzZZxXfyN4sMMyxJBD72P01etkX4O9 xdW4zJQaTY2vOXairfh4wdo7AACRFt4+uN0SBgwe6DFzVnUKA4q2wbSLcoNZoZQ2 6kVcTwwLJsMqL0F6eNP9V4Bjb6RnBbkam4dsU3zFLgAdm7/76W9b4COiR+G/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwRZzOMxyLHHv/3+PbZADVg9JDMwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyDXLXaLzEJJmiyIZknDJEEaFNPsRk1Oemy wHacgH+9gpWCFYy3CJhMWudOLjq/WvgwdSsrHHC97DRBvdT6VA1CYW6+yn29n706 BUuO9iUoVm5h11fi2tNVfYGEfBMi6A0s+1RhQLwFQsGEqAoFv905mYtb6qsfpPpI K+C043ZvDBWpVz7s+FdTFjsKk7IPXEX/GzwvJg3+SPjVsfi4cW4EEeZSUWjv+PXV PJEijTrYYJTZGbnCHXXn5q6C1gITk+/aVIOUst0HZxpGU/+4BFON9IcZ8be/w5Fj wiRSLAJMI3wjSfkYzLNs98/QO8mc05c9volO6d1ojMAdZmNXE6o= -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:42 2026 by rpki-client