$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: Rp6RQxk7hX1181jQHPCOiRIL9YCVn/QgyoU+0CMn5aA= Subject key identifier: 09:7B:9E:A7:73:2C:04:B8:2B:F7:DA:1E:5B:C2:BD:8D:4E:F8:A8:34 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 36E6D952DE9923318D4E66D14860BF5BF770EA92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: F2 Signing time: Mon 02 Mar 2026 09:00:46 +0000 Manifest this update: Mon 02 Mar 2026 08:55:46 +0000 Manifest next update: Thu 05 Mar 2026 19:07:46 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: zxfrLvOurs1CIshCgQ3cS4OS9VLQfMw1IQrUpXGALbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e6:d9:52:de:99:23:31:8d:4e:66:d1:48:60:bf:5b:f7:70:ea:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Mar 2 08:55:46 2026 GMT Not After : Mar 5 19:07:46 2026 GMT Subject: CN=097B9EA7732C04B82BF7DA1E5BC2BD8D4EF8A834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:df:46:14:a6:03:57:a8:76:60:5c:97:ff:b0: 2b:a6:e9:a0:2e:3f:94:72:47:12:df:9c:48:70:aa: cc:4b:35:cb:75:33:c6:7c:6f:95:3b:93:2c:aa:0e: 21:5c:1c:2c:29:53:f7:21:9e:08:2e:62:27:c1:03: 68:76:ba:e2:41:6a:de:52:1d:c0:d0:f2:2b:ca:61: 5a:8f:40:91:9a:00:67:34:bb:b1:27:aa:24:b2:6a: 9d:82:1e:4e:1f:93:0b:98:fc:24:24:3b:9b:cb:83: ec:c5:32:c4:8f:4f:a7:30:96:2f:5f:34:ea:38:dc: 33:2b:58:fb:d8:cb:a2:9f:5a:25:04:79:b3:1a:b9: 85:50:6f:94:ac:a4:86:50:24:71:4b:c4:c7:a2:17: 5b:80:b4:57:ff:24:c8:00:02:61:f8:5c:fb:4f:ed: c4:5a:0a:ea:21:9c:6b:cf:24:ac:12:53:8f:ed:9f: cf:d7:96:30:31:ef:ba:97:73:0c:f4:c9:70:9b:bc: 40:a7:77:cd:f5:f7:cc:69:27:bc:80:fa:5d:39:2e: bf:47:52:b9:a1:4a:a5:78:d0:59:94:26:2d:dd:53: dc:36:38:6d:d5:bd:85:f9:8e:e5:d9:e1:38:4b:bb: 74:45:76:9d:35:83:1d:f9:5f:96:43:42:11:91:00: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7B:9E:A7:73:2C:04:B8:2B:F7:DA:1E:5B:C2:BD:8D:4E:F8:A8:34 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e7:33:6c:6d:3e:b2:a0:b5:ee:f5:aa:f8:ea:29:ec:8c:6a: 42:b4:c3:53:fb:db:31:e8:f2:df:db:06:e8:70:21:20:ae:de: 4c:34:ae:3e:c7:9e:00:c8:c4:6c:d6:6d:94:8e:c9:35:08:67: 69:0f:81:2e:37:34:4c:a6:d6:5d:03:8b:a8:28:98:47:b0:bd: 34:9f:d3:59:6d:ae:70:c2:de:59:e1:69:11:9a:90:ee:eb:92: 31:df:38:1e:cb:ed:3e:e9:c9:df:d2:09:05:ec:0a:16:21:a9: 4e:75:fd:d5:6f:3d:22:af:64:9e:ff:48:1c:f6:38:59:93:0a: 05:2c:d1:1e:d5:f5:14:4b:99:5b:0b:8f:e9:36:ca:84:34:e8: ad:af:34:a1:f4:f8:44:a4:24:67:c0:30:57:09:36:00:b5:e5: 44:f1:d7:a6:99:24:1d:6e:9f:1f:ca:33:35:7e:26:c9:5a:0a: 10:65:35:04:e8:ad:9c:78:47:db:06:39:70:24:83:fe:c2:3f: 18:97:59:c1:e8:da:8f:67:59:cf:8c:5a:2d:25:7b:69:75:94: 8c:68:18:75:6c:fa:a8:0b:c4:5f:ba:7a:23:8e:52:aa:a1:69: e0:19:62:08:e4:0d:0e:7d:74:73:de:78:7c:46:23:e5:79:f1: 8f:28:81:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNubZUt6ZIzGNTmbRSGC/W/dw6pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNjAzMDIwODU1NDZaFw0yNjAzMDUxOTA3NDZaMDMxMTAvBgNV BAMTKDA5N0I5RUE3NzMyQzA0QjgyQkY3REExRTVCQzJCRDhENEVGOEE4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs30YUpgNXqHZgXJf/sCum6aAu P5RyRxLfnEhwqsxLNct1M8Z8b5U7kyyqDiFcHCwpU/chngguYifBA2h2uuJBat5S HcDQ8ivKYVqPQJGaAGc0u7EnqiSyap2CHk4fkwuY/CQkO5vLg+zFMsSPT6cwli9f NOo43DMrWPvYy6KfWiUEebMauYVQb5SspIZQJHFLxMeiF1uAtFf/JMgAAmH4XPtP 7cRaCuohnGvPJKwSU4/tn8/XljAx77qXcwz0yXCbvECnd83198xpJ7yA+l05Lr9H UrmhSqV40FmUJi3dU9w2OG3VvYX5juXZ4ThLu3RFdp01gx35X5ZDQhGRACi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCXuep3MsBLgr99oeW8K9jU74qDQwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDnM2xtPrKgte71qvjqKeyMakK0w1P72zHo 8t/bBuhwISCu3kw0rj7HngDIxGzWbZSOyTUIZ2kPgS43NEym1l0Di6gomEewvTSf 01ltrnDC3lnhaRGakO7rkjHfOB7L7T7pyd/SCQXsChYhqU51/dVvPSKvZJ7/SBz2 OFmTCgUs0R7V9RRLmVsLj+k2yoQ06K2vNKH0+ESkJGfAMFcJNgC15UTx16aZJB1u nx/KMzV+JslaChBlNQTorZx4R9sGOXAkg/7CPxiXWcHo2o9nWc+MWi0le2l1lIxo GHVs+qgLxF+6eiOOUqqhaeAZYgjkDQ59dHPeeHxGI+V58Y8ogeY= -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:53 2026 by rpki-client