$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: E/Ly5GSYUjlEqfZ0YqhjieTqDQmMYPTFOGOFNvZs0/c= Subject key identifier: 1A:32:61:ED:7C:9C:3E:BA:25:B4:5A:62:57:CD:07:04:C5:62:18:00 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 1FC068A69A9B96E8D9FE7389ECA99C4E956D2FB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 01F1 Signing time: Sun 19 Apr 2026 04:12:30 +0000 Manifest this update: Sun 19 Apr 2026 04:07:30 +0000 Manifest next update: Wed 22 Apr 2026 08:36:30 +0000 Files and hashes: 1: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: O4mdP6+qvT22Q0LDvrlBANjJOpMoByBbkRtr0y7gJtU=) 2: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: fTLUAZbiCY/Ww+CA8ekFwysStY8qimv1O0WpbE/EpHs=) 3: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: cXfalAbn/aSrC4y515TJBT88AQmF7y95/5KGKuOO2HY=) 4: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: 7pjFoEqpwiXopkcvlXdHmAMnkhazHCcUS4M07HWAyuY=) 5: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: OhCikhmCmpxJ179Dz3jD3MYaX472XabuwFiYuL+ycvU=) 6: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: pBJdYJ8asfUnEsHbPR9HW0sZ8Aakk4K058GUyj3kAiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c0:68:a6:9a:9b:96:e8:d9:fe:73:89:ec:a9:9c:4e:95:6d:2f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Apr 19 04:07:30 2026 GMT Not After : Apr 22 08:36:30 2026 GMT Subject: CN=1A3261ED7C9C3EBA25B45A6257CD0704C5621800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:a4:95:95:bf:be:2f:cd:18:dc:b4:b3:38: a4:3f:50:48:c5:a8:b9:8f:dd:8a:27:bf:56:96:bb: 67:86:c1:2d:96:ae:0d:4e:f7:67:65:d1:95:1e:b9: 96:db:27:e0:70:8d:f6:2e:0d:b3:a7:51:c6:8e:ae: d9:03:4f:d6:cc:59:3a:d6:df:d4:74:ca:83:31:a9: 21:e7:6e:38:b4:fa:b3:68:6d:17:2f:4c:46:2e:54: 4f:8d:1e:1a:83:59:46:cf:23:e4:9d:5a:2e:91:57: 21:f4:f5:f5:94:f2:87:fd:7b:b5:a0:86:2f:f5:f1: 9a:cb:38:d9:f3:70:1a:87:1f:7e:86:4c:9d:91:44: 9a:39:41:a9:ec:a7:83:20:1b:e6:d5:69:6f:01:28: 9e:01:73:e2:b0:11:bb:64:84:ae:d1:91:de:5b:0f: 36:52:03:1e:5f:10:27:ec:d5:37:41:f4:b6:1d:30: 94:20:23:ac:7b:c1:1e:3d:68:7a:8c:20:58:e1:fb: c7:9d:ad:e2:56:da:5e:bd:c4:e1:ec:ad:18:2a:98: 59:fc:91:95:f2:60:91:cc:02:d4:c2:27:64:d6:20: 61:bc:c3:82:95:38:41:c4:9b:38:9d:da:a3:6a:f2: 9a:d9:74:2a:a7:51:da:1b:ca:2e:0c:86:de:31:af: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:61:ED:7C:9C:3E:BA:25:B4:5A:62:57:CD:07:04:C5:62:18:00 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c4:d3:ea:af:e6:8c:2a:a0:f8:31:7b:0f:d3:02:ee:6a:dd: ec:54:0a:8d:cf:e3:ac:50:5d:5e:cf:f5:ef:04:9f:ac:a6:ea: e8:1a:e6:d4:d1:b3:f2:84:f7:16:cb:c9:43:78:06:89:4d:ff: 30:f7:17:66:9c:50:35:9b:33:23:dc:1d:1b:36:97:b4:66:f6: c4:27:cf:fd:f0:bf:0d:0d:22:da:5b:c1:1a:95:ec:89:7f:08: f4:4a:42:1c:ef:83:64:4b:bd:23:18:dc:fc:48:bd:d3:29:28: bb:d4:42:fd:0f:b1:63:e4:e3:74:fb:b2:99:6f:6d:44:79:7a: 74:12:79:a0:d5:58:34:25:90:a4:41:af:35:6f:2b:44:e4:e9: 30:75:32:91:a3:77:ab:7f:6c:b8:d0:8b:ae:e4:0b:e0:50:6e: 7d:5a:a2:b3:30:33:6d:a6:30:8b:2c:4b:ad:b3:b6:db:19:e1: bc:2e:9e:39:48:de:5f:aa:19:a5:52:40:13:68:f0:f8:bd:12: a6:44:51:45:e5:be:8c:ff:11:fa:07:78:7c:d3:7a:77:88:68: 82:94:9b:f5:f8:45:58:af:f5:82:72:7d:83:e9:49:35:5e:88: 9b:7a:e5:65:2f:91:f8:c3:61:2c:00:c8:5b:4d:cd:99:e7:16: e3:31:38:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8BoppqblujZ/nOJ7KmcTpVtL7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNjA0MTkwNDA3MzBaFw0yNjA0MjIwODM2MzBaMDMxMTAvBgNV BAMTKDFBMzI2MUVEN0M5QzNFQkEyNUI0NUE2MjU3Q0QwNzA0QzU2MjE4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGKSVlb++L80Y3LSzOKQ/UEjF qLmP3Yonv1aWu2eGwS2Wrg1O92dl0ZUeuZbbJ+BwjfYuDbOnUcaOrtkDT9bMWTrW 39R0yoMxqSHnbji0+rNobRcvTEYuVE+NHhqDWUbPI+SdWi6RVyH09fWU8of9e7Wg hi/18ZrLONnzcBqHH36GTJ2RRJo5Qansp4MgG+bVaW8BKJ4Bc+KwEbtkhK7Rkd5b DzZSAx5fECfs1TdB9LYdMJQgI6x7wR49aHqMIFjh+8edreJW2l69xOHsrRgqmFn8 kZXyYJHMAtTCJ2TWIGG8w4KVOEHEmzid2qNq8prZdCqnUdobyi4Mht4xr+L9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjJh7XycProltFpiV80HBMViGAAwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXE0+qv5owqoPgxew/TAu5q3exUCo3P46xQ XV7P9e8En6ym6uga5tTRs/KE9xbLyUN4BolN/zD3F2acUDWbMyPcHRs2l7Rm9sQn z/3wvw0NItpbwRqV7Il/CPRKQhzvg2RLvSMY3PxIvdMpKLvUQv0PsWPk43T7splv bUR5enQSeaDVWDQlkKRBrzVvK0Tk6TB1MpGjd6t/bLjQi67kC+BQbn1aorMwM22m MIssS62zttsZ4bwunjlI3l+qGaVSQBNo8Pi9EqZEUUXlvoz/EfoHeHzTeneIaIKU m/X4RViv9YJyfYPpSTVeiJt65WUvkfjDYSwAyFtNzZnnFuMxOA0= -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:07 2026 by rpki-client