
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
File: 98831B982341FB41F283DADC573DB0C97F4466FD.mft (raw, json)
Hash identifier: aUZphx3Ed1s1jf44QiHBYGXzomoLSLO8nxusPlVncb0=
Subject key identifier: 38:8A:26:39:4D:28:0B:41:D3:E6:69:2C:CB:D5:FF:C4:68:7D:D0:7D
Authority key identifier: 98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD
Certificate issuer: /CN=98831B982341FB41F283DADC573DB0C97F4466FD
Certificate serial: 26179B4ACB4160281FE4E607866C4240F66CA798
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
Manifest number: BE
Signing time: Sun 20 Sep 2026 23:10:35 +0000
Manifest this update: Sun 20 Sep 2026 23:05:35 +0000
Manifest next update: Tue 22 Sep 2026 03:05:35 +0000
Files and hashes: 1: 98831B982341FB41F283DADC573DB0C97F4466FD.crl (hash: pqSlAW5qlrhW1FW4jml3GX3Qss+LgfGrSH3L+2Hz/xY=)
2: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: /utHY3poH+nHQdYeC9echv8o+Q3cSPrnCccodiG1uEM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.crl
rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:17:9b:4a:cb:41:60:28:1f:e4:e6:07:86:6c:42:40:f6:6c:a7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98831B982341FB41F283DADC573DB0C97F4466FD
Validity
Not Before: Sep 20 23:05:35 2026 GMT
Not After : Sep 22 03:05:35 2026 GMT
Subject: CN=388A26394D280B41D3E6692CCBD5FFC4687DD07D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:28:3f:19:44:8b:d8:36:3e:63:2f:50:80:
1d:ff:55:7c:73:55:e6:31:04:6d:12:17:a7:27:1f:
0c:81:e2:00:81:21:ed:24:6c:b8:28:22:48:fd:94:
d5:fb:f9:00:3e:ed:f9:cd:90:32:f1:41:d2:7b:00:
ce:26:da:a7:8d:60:72:cf:b4:e2:56:4f:f3:c6:82:
d4:69:9e:1f:24:2a:4e:c7:dc:6f:77:be:79:63:fd:
60:d0:d9:42:b0:80:7a:a1:e2:7c:2a:56:8a:3e:62:
d5:32:87:fc:41:40:ce:5e:22:18:09:cb:23:f2:9e:
70:e9:77:8f:50:23:70:54:2c:0d:2f:af:a8:c6:34:
1a:9e:45:ee:76:5c:b6:08:c8:33:58:84:36:39:14:
55:d2:53:42:46:32:73:70:8a:69:7d:69:5a:87:05:
29:7d:71:7e:00:5e:d1:ab:47:1e:8e:8f:0d:c1:f3:
8c:6b:9f:20:7e:d8:34:f0:77:1e:41:4b:fd:7e:8a:
47:1b:e2:12:97:26:a1:47:b1:fb:08:81:46:10:93:
e8:d4:55:16:f4:48:57:44:33:88:90:58:d6:11:59:
c0:2c:c5:dc:33:91:ea:f6:8b:fe:5b:90:7b:a0:12:
78:08:93:c0:eb:e0:3a:71:64:8d:e3:9a:e7:f3:71:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:26:39:4D:28:0B:41:D3:E6:69:2C:CB:D5:FF:C4:68:7D:D0:7D
X509v3 Authority Key Identifier:
keyid:98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:93:7a:c0:71:86:5e:16:d8:ba:ce:c6:6f:65:c1:2e:e8:a3:
f8:08:50:a0:bf:2d:7a:87:1a:98:25:3a:90:d3:e3:e3:38:03:
d1:56:e2:14:dd:25:24:3a:21:99:6e:1e:e0:13:79:2a:05:d0:
02:41:94:7f:8c:68:32:cc:c3:0f:13:93:95:b4:d6:81:2e:df:
88:ca:fe:75:4e:1f:7a:20:7c:aa:b2:ee:24:7e:84:55:42:80:
62:fa:bf:f4:ea:e1:08:0b:85:92:d4:f5:34:6e:ca:95:20:32:
4a:23:ed:ed:e4:84:18:f5:2b:4b:6d:a2:d7:bf:d7:9c:fb:99:
79:a8:4f:38:54:fc:12:bf:50:85:2e:cf:5f:d2:75:71:a6:2b:
ab:66:fc:e4:9e:bb:cf:e1:f6:34:b8:ed:80:9a:6c:22:a3:f7:
d1:86:69:71:39:a4:05:54:33:c6:58:8c:96:55:54:b4:dd:54:
bc:14:71:33:fa:e4:09:60:19:2d:37:6c:04:95:89:c7:45:b7:
a1:ae:9b:5b:a4:e3:75:21:78:c3:88:95:8c:5b:c4:2b:db:53:
88:86:35:d4:15:7c:ca:5d:93:46:84:83:00:2e:91:8d:61:56:
f0:4d:38:98:5d:a8:8e:54:5c:8f:40:b2:ca:20:a7:1a:5e:df:
6e:3d:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:07:33 2026 by rpki-client