$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: sjtOswc7lKlT+EZiN2EtPmydkZylBJ06rXTsilmd138= Subject key identifier: 7B:E9:5C:D0:43:0D:0E:C3:5B:7C:CB:C7:10:79:28:F4:BE:4E:02:F3 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 16DCBDC17F31C5440F3682C35A7DD70EA99BA7FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 0256 Signing time: Thu 16 Apr 2026 21:41:52 +0000 Manifest this update: Thu 16 Apr 2026 21:36:52 +0000 Manifest next update: Mon 20 Apr 2026 00:25:52 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 2: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: W+CI4vqpEPEbwHsn6e52n41U2EqXNnUx5gAe4hG80UE=) 3: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) 4: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:dc:bd:c1:7f:31:c5:44:0f:36:82:c3:5a:7d:d7:0e:a9:9b:a7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Apr 16 21:36:52 2026 GMT Not After : Apr 20 00:25:52 2026 GMT Subject: CN=7BE95CD0430D0EC35B7CCBC7107928F4BE4E02F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:b6:4f:cb:53:08:69:0c:b7:cd:d5:e2:99: 76:96:15:45:35:8e:a6:9d:5c:c0:79:79:71:66:3d: 6b:3f:08:bb:55:7a:69:a2:a0:60:30:1c:07:52:ed: fa:99:98:a3:fc:96:70:63:dd:57:59:c9:93:83:a0: c0:00:f3:07:9c:1a:d6:fd:a7:2e:8f:52:e6:03:8f: 72:41:24:a3:75:ef:dd:0f:23:92:41:55:59:7e:e9: ea:5b:69:74:c7:e8:3f:04:c0:84:ed:ee:ee:17:ea: 39:da:76:f3:b5:ba:bb:32:7e:f5:74:10:86:b3:37: 8b:95:e1:8e:10:67:c0:70:df:5e:8b:62:47:40:82: ff:aa:a0:da:4f:ef:7f:39:82:41:c4:2f:53:69:7a: 03:ca:82:95:f4:61:28:ad:e7:ae:d3:d0:1e:7a:84: 6c:d7:c2:ae:35:ae:e9:09:94:57:40:8d:eb:de:49: 99:73:72:e5:ff:46:2c:67:a9:37:a0:02:1c:15:73: 35:77:00:24:81:61:8c:0a:90:04:3d:7a:df:e3:87: 5b:40:54:98:51:fa:ac:28:71:5d:45:02:74:fc:06: 37:cd:67:e1:94:18:1b:cd:45:c6:8a:48:69:ed:3d: e3:28:0f:d6:ab:8a:5d:35:36:fd:e2:58:dc:6d:14: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E9:5C:D0:43:0D:0E:C3:5B:7C:CB:C7:10:79:28:F4:BE:4E:02:F3 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:37:f8:e3:f4:64:b6:31:7b:76:2d:43:7e:fe:0a:4e:0a:b5: 21:b9:0e:98:b9:ca:ec:04:9b:44:bb:d5:80:04:03:aa:e6:bd: ad:09:89:01:e9:4d:dc:2b:e9:3a:41:54:05:ef:62:9c:1b:2f: cb:9e:78:17:92:46:37:54:06:9f:4b:b8:d8:79:cf:05:72:d2: fb:05:b0:e1:ce:06:46:c8:44:ee:e9:07:85:f5:9b:ac:2f:10: 49:c7:09:e0:a1:7d:ab:3b:60:a5:b3:6d:f7:08:48:c3:a7:a3: 0a:02:d9:e9:9d:b6:0d:5d:18:37:96:c1:56:e0:7d:dc:43:0d: a9:d7:53:ed:0d:25:b9:30:a9:75:c0:79:d9:f0:3d:81:32:fc: f6:e8:1c:f5:15:bc:d8:d3:2f:4b:85:fe:f2:ec:85:c5:73:9b: 1b:4a:a5:ba:7e:24:a7:3e:ba:8b:62:64:c3:2d:11:56:40:51: 0e:7b:63:5c:b2:25:d3:f5:4c:28:96:55:a3:d3:78:96:13:8f: d8:18:48:bf:85:83:1e:88:8c:2a:1c:92:b8:8d:ca:3f:a9:71: 6f:0b:8e:5b:d8:a7:56:1b:e0:e4:82:5e:40:cf:74:b7:ba:d2: 49:d4:74:61:b5:9f:cd:91:58:90:b8:f7:ff:d5:c0:dd:eb:77: 34:2d:1a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFty9wX8xxUQPNoLDWn3XDqmbp/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNjA0MTYyMTM2NTJaFw0yNjA0MjAwMDI1NTJaMDMxMTAvBgNV BAMTKDdCRTk1Q0QwNDMwRDBFQzM1QjdDQ0JDNzEwNzkyOEY0QkU0RTAyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dbZPy1MIaQy3zdXimXaWFUU1 jqadXMB5eXFmPWs/CLtVemmioGAwHAdS7fqZmKP8lnBj3VdZyZODoMAA8wecGtb9 py6PUuYDj3JBJKN1790PI5JBVVl+6epbaXTH6D8EwITt7u4X6jnadvO1ursyfvV0 EIazN4uV4Y4QZ8Bw316LYkdAgv+qoNpP7385gkHEL1NpegPKgpX0YSit567T0B56 hGzXwq41rukJlFdAjeveSZlzcuX/RixnqTegAhwVczV3ACSBYYwKkAQ9et/jh1tA VJhR+qwocV1FAnT8BjfNZ+GUGBvNRcaKSGntPeMoD9aril01Nv3iWNxtFMtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe+lc0EMNDsNbfMvHEHko9L5OAvMwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo3+OP0ZLYxe3YtQ37+Ck4KtSG5Dpi5yuwE m0S71YAEA6rmva0JiQHpTdwr6TpBVAXvYpwbL8ueeBeSRjdUBp9LuNh5zwVy0vsF sOHOBkbIRO7pB4X1m6wvEEnHCeChfas7YKWzbfcISMOnowoC2emdtg1dGDeWwVbg fdxDDanXU+0NJbkwqXXAednwPYEy/PboHPUVvNjTL0uF/vLshcVzmxtKpbp+JKc+ uotiZMMtEVZAUQ57Y1yyJdP1TCiWVaPTeJYTj9gYSL+Fgx6IjCockriNyj+pcW8L jlvYp1Yb4OSCXkDPdLe60knUdGG1n82RWJC49//VwN3rdzQtGho= -----END CERTIFICATE-----Generated at Fri Apr 17 18:18:17 2026 by rpki-client