
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json)
Hash identifier: dYfXf/VM+gdUKcxYRY6vdx4qtYzvOClOheLc4M+oyts=
Subject key identifier: D2:A8:FA:59:61:B4:F4:BB:53:4B:5E:21:4A:23:0F:B7:25:65:72:86
Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Certificate serial: 26B99257F8E4480F5E39C56061E18BA4C893BFA3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:02:43 +0000
Manifest this update: Wed 17 Jun 2026 03:57:43 +0000
Manifest next update: Thu 18 Jun 2026 05:56:43 +0000
Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=)
2: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: f0rY/usf/4o0rrZUCg4gLXh5h+rcje2wDxBNh8ddbUE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b9:92:57:f8:e4:48:0f:5e:39:c5:60:61:e1:8b:a4:c8:93:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Validity
Not Before: Jun 17 03:57:43 2026 GMT
Not After : Jun 18 05:56:43 2026 GMT
Subject: CN=D2A8FA5961B4F4BB534B5E214A230FB725657286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ea:8a:9d:0e:89:65:fd:5f:ed:7a:e1:e4:ef:
c9:f2:db:62:a5:4a:94:1e:13:e8:38:de:f9:ee:94:
b3:2e:90:40:9f:fb:a3:c9:8c:2e:a0:dd:2c:b7:cb:
9f:2d:c3:22:c6:c1:fb:16:2d:7f:81:64:df:a2:d7:
46:ef:c0:7e:c1:55:28:0b:cc:fd:4d:f4:8d:57:9e:
3f:0b:37:fb:0a:85:2b:13:d3:bc:1b:1e:6e:1e:d3:
ad:7c:df:6b:5e:c5:87:4c:ec:3e:8d:0b:e2:79:ef:
77:26:8f:61:6b:ae:30:43:2d:ca:67:3a:bb:ae:05:
eb:07:78:c8:43:90:f9:62:80:53:ae:c2:c6:1c:0f:
33:47:40:42:93:33:56:56:13:db:85:81:57:01:37:
15:32:96:0d:e0:4f:bd:df:6a:56:da:94:02:01:b1:
c8:5f:4f:11:f4:bf:a1:de:3d:f3:5b:94:8d:60:18:
d3:af:e7:fe:22:16:8d:73:8a:dd:b0:58:d7:8b:1d:
b1:ed:1f:fa:72:bc:0a:33:27:5f:df:7c:d9:b8:d1:
0e:e7:f8:06:ad:ed:a4:54:37:21:c5:0e:22:2d:b3:
b2:41:19:ff:d9:06:e4:51:c3:ae:c9:93:df:57:ed:
db:d1:cd:d3:f3:7d:c1:dd:02:2c:f8:ac:c7:5d:41:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:FA:59:61:B4:F4:BB:53:4B:5E:21:4A:23:0F:B7:25:65:72:86
X509v3 Authority Key Identifier:
keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:50:3a:e9:13:33:9c:3c:06:70:e1:80:c3:7a:94:f0:ff:e3:
68:46:7d:d3:bf:1b:2a:b2:66:ec:3a:e2:cb:75:1b:c2:36:d3:
cd:e2:4b:2d:43:71:b3:9f:3e:cc:55:34:ba:56:76:4e:7c:81:
34:34:3f:0f:61:87:6f:e5:92:04:84:99:51:17:6b:19:49:ef:
b4:de:8b:03:8e:e4:53:cf:48:e5:4e:5a:ef:cc:81:1a:b0:da:
d9:43:b4:69:5f:64:df:27:9a:f5:57:a3:37:1b:d8:06:8d:0e:
b6:00:d9:44:6d:8b:d9:ed:2f:d8:0c:f5:9e:a0:f6:ee:7f:01:
39:6a:c0:03:c1:8a:d7:ee:73:d0:31:54:d9:cd:b7:62:89:1b:
c1:fa:e5:de:d7:b5:bd:62:ef:eb:6c:21:b5:da:22:9a:08:46:
06:6b:c0:04:5f:7f:c4:fd:bd:1b:fd:cc:da:05:30:94:72:a0:
bf:03:b8:0a:3c:4d:aa:2a:23:24:77:5b:5d:2a:23:91:15:6f:
97:d9:02:76:4e:4a:da:78:e8:b7:c3:0f:45:1e:f5:cb:83:d7:
c7:d2:6a:df:06:71:ff:04:7b:ad:86:94:5b:0e:05:13:f4:9d:
d4:8e:7d:61:a5:9b:ef:aa:a3:35:7b:7e:33:2d:3e:5b:a5:e1:
33:24:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:50 2026 by rpki-client