
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json)
Hash identifier: YoH07uLYFpDXMP0JzRPC00E0gl5A68pNVwo1K6Dlle0=
Subject key identifier: 95:E1:33:81:3E:F6:81:2E:F5:0F:90:AC:FA:81:C3:DE:EF:83:32:45
Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Certificate serial: 1424DDB2C291FAD4283AF1503B3BF1FC59AB0FB1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 03:51:16 +0000
Manifest this update: Mon 21 Sep 2026 03:46:16 +0000
Manifest next update: Tue 22 Sep 2026 04:39:16 +0000
Files and hashes: 1: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: 1zWtIo9EzjrdlsYNjEdHSvN9awy47V5utwypJ4fY8Hk=)
2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 04:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:24:dd:b2:c2:91:fa:d4:28:3a:f1:50:3b:3b:f1:fc:59:ab:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Validity
Not Before: Sep 21 03:46:16 2026 GMT
Not After : Sep 22 04:39:16 2026 GMT
Subject: CN=95E133813EF6812EF50F90ACFA81C3DEEF833245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:38:4b:89:aa:5c:bf:5a:3f:2d:19:99:93:
89:05:12:6e:11:a2:c1:f2:15:5b:a2:85:0d:6e:8a:
fe:e7:3b:99:f9:46:78:35:8c:36:f5:1e:cd:44:eb:
0c:7e:38:f8:51:4a:bf:c8:0c:a4:d4:09:8a:95:3f:
ab:94:5b:08:e5:6a:37:20:40:74:2d:51:80:c5:2f:
dd:df:d2:94:68:96:b3:a0:d0:b1:a2:55:24:d6:91:
d2:27:8a:13:ba:47:d4:14:b2:86:ce:5e:e7:00:59:
d1:3d:57:b1:ba:60:78:c1:c5:97:23:fe:7e:3f:17:
b3:a5:b6:df:46:4b:08:e6:1e:c2:d3:fb:46:04:7e:
7e:81:d4:72:ab:9b:55:66:36:ba:6e:8b:61:40:50:
44:00:d0:51:c8:2e:e9:6b:1f:0a:32:2e:0f:26:2a:
ad:f9:a6:13:ef:c1:f5:b9:f6:54:c7:6a:a8:e8:e9:
ae:a0:40:69:0c:f0:01:ef:19:95:f9:50:0e:0e:4b:
15:48:92:4c:08:2d:44:b9:56:db:f8:93:5f:81:34:
6c:da:ab:2d:ee:a2:39:54:2e:68:27:9c:32:73:55:
40:53:af:21:f4:a0:9b:69:0c:ce:28:d0:7d:f4:7e:
40:42:5d:cf:c7:ce:ce:9a:a5:4d:27:eb:ba:3f:71:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E1:33:81:3E:F6:81:2E:F5:0F:90:AC:FA:81:C3:DE:EF:83:32:45
X509v3 Authority Key Identifier:
keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:80:2f:d6:8d:ea:b1:3e:3c:c7:ef:36:0c:37:bb:0a:de:a5:
c2:c9:aa:0d:54:68:a1:40:bb:a9:8a:45:3b:c8:2b:84:08:da:
34:83:bd:ca:47:8d:6f:80:d0:47:f4:9b:1a:f7:a9:b0:ff:e5:
34:bd:b6:7a:70:66:86:d6:02:7b:ac:51:c2:21:0f:65:0c:7a:
0a:83:14:88:7a:73:f0:af:6c:aa:36:a1:1e:10:2a:53:21:c3:
36:e0:13:e9:e8:50:3a:3d:94:10:a5:6f:5c:8d:78:5f:1c:cc:
79:b9:a6:a9:64:77:06:36:db:da:1c:4d:24:c9:8f:71:e9:cf:
69:45:d3:c6:04:95:7b:90:4a:9e:1a:3b:2e:ba:c7:54:39:fb:
0c:f0:5a:4c:92:d9:d5:bc:ec:db:48:f8:ef:87:6d:9d:16:60:
f9:3e:6c:98:a5:9a:a5:f3:d4:2a:68:56:8b:8c:27:05:f8:28:
5f:28:b3:1f:f8:dd:c9:97:78:44:f5:2a:ab:d5:5a:3a:53:fe:
41:17:95:6a:aa:7e:b2:1b:ac:3a:6f:b6:6b:c5:cb:2c:a5:85:
1a:4b:57:bf:22:63:bb:f3:3f:f4:6f:fb:af:d9:ba:3e:92:2d:
c6:59:0c:73:fc:72:65:20:d3:b8:dd:b7:7c:4a:31:36:54:e7:
9e:54:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:39:53 2026 by rpki-client