
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
File: 98831B982341FB41F283DADC573DB0C97F4466FD.mft (raw, json)
Hash identifier: ebk87qm8IS5cYDz8BPH1IwSWwyLvQm1ZwqISuEac5xM=
Subject key identifier: 59:A4:61:0D:DE:66:81:C7:E3:3D:D5:16:EF:D4:3C:02:99:47:16:66
Authority key identifier: 98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD
Certificate issuer: /CN=98831B982341FB41F283DADC573DB0C97F4466FD
Certificate serial: 1325A3C14D1732F61DB510219D28EE8694C9B5E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
Manifest number: 0107
Signing time: Sun 15 Nov 2026 11:48:47 +0000
Manifest this update: Sun 15 Nov 2026 11:43:47 +0000
Manifest next update: Mon 16 Nov 2026 15:39:47 +0000
Files and hashes: 1: 98831B982341FB41F283DADC573DB0C97F4466FD.crl (hash: RFWthPZljOYGrCnWrg6hOqWLUMhyEj4V+gBxW7xEj5k=)
2: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: /utHY3poH+nHQdYeC9echv8o+Q3cSPrnCccodiG1uEM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.crl
rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:25:a3:c1:4d:17:32:f6:1d:b5:10:21:9d:28:ee:86:94:c9:b5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98831B982341FB41F283DADC573DB0C97F4466FD
Validity
Not Before: Nov 15 11:43:47 2026 GMT
Not After : Nov 16 15:39:47 2026 GMT
Subject: CN=59A4610DDE6681C7E33DD516EFD43C0299471666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:b0:07:a3:23:0e:8b:58:af:a6:f5:89:76:
52:e2:bd:cc:69:52:a0:82:0c:c4:d0:63:0e:df:cf:
f3:88:2f:eb:44:36:af:e3:e8:a0:05:91:d6:8a:14:
17:a9:f7:0c:3f:95:8c:65:32:c3:68:f6:45:47:7a:
b3:ec:4f:e3:04:90:f5:69:01:08:91:cb:4a:f2:47:
5f:ae:cd:b1:6d:4f:fb:56:83:f9:30:98:a7:ed:a2:
a9:63:3c:51:09:99:93:43:66:92:c0:d4:0d:e3:0c:
f3:af:69:f0:f3:81:5d:d7:81:cf:ff:f7:61:84:6e:
67:c8:86:94:99:d6:1c:d9:96:4b:88:2f:d1:c1:b2:
9e:e3:22:d1:f4:c1:fa:d4:87:e6:78:0a:83:db:50:
0f:af:e0:2c:ef:6e:7e:a9:2a:1d:b6:c9:59:8e:7c:
0a:69:2a:43:b4:63:d9:e8:8d:c9:7e:c8:cb:9d:1b:
7d:db:cb:ae:f3:fc:a7:e9:75:28:f0:57:8e:c2:a5:
a2:a8:65:f5:61:e1:a7:1d:07:54:48:a9:5e:ba:10:
41:2e:94:75:3d:cc:8a:53:6f:be:32:8a:20:22:72:
10:36:60:92:b2:79:c8:d2:53:ed:00:2c:84:b2:bb:
e6:ff:f9:96:53:b1:87:96:57:36:ed:3d:d0:41:6c:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:61:0D:DE:66:81:C7:E3:3D:D5:16:EF:D4:3C:02:99:47:16:66
X509v3 Authority Key Identifier:
keyid:98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d0:d7:42:2b:c3:78:b3:ff:c7:1f:04:3b:88:de:ba:85:31:
ed:aa:e1:10:8c:72:5c:72:bc:5b:6f:6d:a3:18:cd:d1:28:20:
77:71:a9:60:84:d4:3c:2e:ff:e2:87:e5:bb:c6:21:99:f0:71:
8b:74:c2:42:72:5c:8a:a3:ae:5d:38:08:e2:4e:d1:fb:04:fc:
e3:c3:e9:b7:7d:25:f8:62:d3:dc:06:db:4f:92:b8:bf:90:9b:
02:5f:3c:35:57:13:b4:f9:a8:19:de:bc:44:ff:96:f3:77:6c:
a2:5e:5f:a0:27:b4:e2:21:14:d6:4f:be:75:40:34:a7:3f:ef:
0b:d7:e6:db:08:79:3d:a0:c8:a8:9f:88:92:9d:be:b2:de:1a:
fe:c3:b3:66:6e:cd:7b:77:45:66:7c:3d:b3:bb:85:52:39:96:
1b:54:d9:e9:ea:9c:6b:1f:56:a2:f8:80:31:1b:25:ba:58:dc:
87:66:69:13:14:c2:e3:38:e7:51:b4:02:50:12:2b:08:5c:dd:
cc:09:f2:8c:10:06:b5:a6:50:8b:64:7f:56:bd:0d:e4:80:f2:
45:3f:18:a4:7e:8c:a8:6a:91:60:8d:4d:b9:c4:f7:92:1a:0e:
0d:56:26:02:c0:16:92:c8:82:01:97:18:81:7a:e9:1a:c5:c7:
a8:fb:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:04:49 2026 by rpki-client