$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: D+7FKOPuOpP0hYzRaQUM7I/6yojoEoCD03qyQIXL1s0= Subject key identifier: FD:A7:C8:BF:80:55:FE:0B:83:D3:0D:F1:9E:F2:39:D7:0E:3B:B6:21 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 3B57B09505EBF4F1F56FFCE2CC035AC617BC1B6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: 0107 Signing time: Sat 18 Apr 2026 02:10:47 +0000 Manifest this update: Sat 18 Apr 2026 02:05:47 +0000 Manifest next update: Tue 21 Apr 2026 08:35:47 +0000 Files and hashes: 1: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: HIy38246FRmXn9uRnJC5S4aJ0IwX5Wy5Z8nfi9qQ+ZI=) 2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:57:b0:95:05:eb:f4:f1:f5:6f:fc:e2:cc:03:5a:c6:17:bc:1b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Apr 18 02:05:47 2026 GMT Not After : Apr 21 08:35:47 2026 GMT Subject: CN=FDA7C8BF8055FE0B83D30DF19EF239D70E3BB621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:98:88:67:8f:e9:37:a5:d2:0a:6d:0f:30: 01:b1:5c:ea:2c:c1:f4:8f:ea:a7:f2:b3:b7:18:d2: e6:76:f5:a0:4d:0f:40:21:4f:63:7f:98:a1:84:68: cf:4e:af:d1:dd:28:ff:ce:43:b3:c1:ae:1e:6a:8b: 3f:53:be:6e:09:a4:9a:45:be:19:0d:da:47:4f:42: 1f:14:45:e2:4c:b9:ec:a6:37:a2:3c:d3:5c:13:86: 1a:e5:a1:22:a4:58:dd:62:da:98:04:83:61:b6:27: 39:8b:e0:c1:83:36:c0:8f:bb:d3:12:4b:bb:99:6b: 90:f3:38:00:4c:4c:5b:21:7b:4b:bb:c5:88:a8:b5: 24:84:8f:ef:90:ff:90:38:b3:a5:3f:ba:78:91:0b: 07:36:ed:50:c0:f4:12:b7:fd:c8:d0:10:4c:29:63: a7:40:69:1d:fc:b3:88:1a:a1:df:45:da:ff:3f:e8: 75:38:2f:b8:46:0a:c2:0d:08:72:34:64:ae:a3:c3: fd:55:ad:43:1e:0c:51:d0:fe:14:64:ee:97:75:1b: 16:42:97:4e:81:ed:82:93:40:79:c6:a6:6b:e4:3a: b8:e4:5e:88:ed:21:4f:c5:3f:cd:ce:6c:c4:cb:b6: ab:e7:03:f6:ce:41:b3:70:96:0e:a3:24:60:a7:a4: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A7:C8:BF:80:55:FE:0B:83:D3:0D:F1:9E:F2:39:D7:0E:3B:B6:21 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:0d:66:65:f0:9c:61:73:2a:7f:7e:f2:0c:03:f6:8a:61:aa: 26:ec:da:5c:98:80:03:ad:fd:cd:67:b5:50:e1:3e:76:93:9d: b2:49:17:1e:36:16:c0:e0:8e:b6:74:36:ff:69:f3:41:ae:69: fb:19:59:ac:e6:bb:91:c2:9b:f5:9e:9f:eb:c3:f9:ce:39:7f: 74:ff:02:a9:e3:78:f3:04:07:60:2c:54:a6:a8:69:70:a0:39: de:bb:d3:07:ba:19:6d:55:be:f5:dc:70:db:e3:f7:e2:ce:3e: 79:b8:86:c5:4e:d3:a2:76:96:93:70:dd:b9:da:62:2b:75:5d: 7e:a1:10:ff:07:f5:81:79:d7:e3:18:b5:a2:9d:13:86:25:07: a4:17:17:5f:99:28:51:d5:80:fa:4a:1a:ec:6c:fc:c2:bc:3a: 45:14:1d:06:dd:39:03:cc:7d:de:ad:c3:94:3f:fd:dc:2f:10: 8c:76:ca:d2:ed:0d:ed:40:45:1a:03:45:1e:f4:bb:ca:20:d4: 9c:13:e8:22:93:20:bd:66:31:96:83:87:a0:16:8f:42:a7:fd: 9d:6e:b3:85:d4:fb:97:61:01:b6:b4:8a:d9:73:6a:04:c7:b1: 78:5a:ab:1c:5f:5d:8d:5b:ed:b0:b8:17:e6:56:d2:6e:5e:f6: 07:00:c2:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1ewlQXr9PH1b/zizANaxhe8G2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNjA0MTgwMjA1NDdaFw0yNjA0MjEwODM1NDdaMDMxMTAvBgNV BAMTKEZEQTdDOEJGODA1NUZFMEI4M0QzMERGMTlFRjIzOUQ3MEUzQkI2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxK5iIZ4/pN6XSCm0PMAGxXOos wfSP6qfys7cY0uZ29aBND0AhT2N/mKGEaM9Or9HdKP/OQ7PBrh5qiz9Tvm4JpJpF vhkN2kdPQh8UReJMueymN6I801wThhrloSKkWN1i2pgEg2G2JzmL4MGDNsCPu9MS S7uZa5DzOABMTFshe0u7xYiotSSEj++Q/5A4s6U/uniRCwc27VDA9BK3/cjQEEwp Y6dAaR38s4gaod9F2v8/6HU4L7hGCsINCHI0ZK6jw/1VrUMeDFHQ/hRk7pd1GxZC l06B7YKTQHnGpmvkOrjkXojtIU/FP83ObMTLtqvnA/bOQbNwlg6jJGCnpG9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/afIv4BV/guD0w3xnvI51w47tiEwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYNZmXwnGFzKn9+8gwD9ophqibs2lyYgAOt /c1ntVDhPnaTnbJJFx42FsDgjrZ0Nv9p80GuafsZWazmu5HCm/Wen+vD+c45f3T/ AqnjePMEB2AsVKaoaXCgOd670we6GW1VvvXccNvj9+LOPnm4hsVO06J2lpNw3bna Yit1XX6hEP8H9YF51+MYtaKdE4YlB6QXF1+ZKFHVgPpKGuxs/MK8OkUUHQbdOQPM fd6tw5Q//dwvEIx2ytLtDe1ARRoDRR70u8og1JwT6CKTIL1mMZaDh6AWj0Kn/Z1u s4XU+5dhAba0itlzagTHsXhaqxxfXY1b7bC4F+ZW0m5e9gcAwkQ= -----END CERTIFICATE-----Generated at Sat Apr 18 06:07:20 2026 by rpki-client