$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json) Hash identifier: CX4bqC63QV4ZmLhImv8Z5NMQOq5i8cufENDMZeRqXaM= Subject key identifier: BE:7E:4F:B5:7A:0D:BB:E0:F2:3B:0E:60:A5:54:54:09:B6:49:3D:2B Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Certificate serial: 7AEBD03C14F4BB9A3FF2429F6AB5DD7045EE2FF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 07:23:28 +0000 Manifest this update: Sun 15 Nov 2026 07:18:28 +0000 Manifest next update: Mon 16 Nov 2026 09:16:28 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=) 2: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: eJkPKOIJ5He5xAgWl/7i3BKy534gA7FVIAj4wVzGJ9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:eb:d0:3c:14:f4:bb:9a:3f:f2:42:9f:6a:b5:dd:70:45:ee:2f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Validity Not Before: Nov 15 07:18:28 2026 GMT Not After : Nov 16 09:16:28 2026 GMT Subject: CN=BE7E4FB57A0DBBE0F23B0E60A5545409B6493D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:f8:61:bf:41:a0:a5:e0:cb:b5:d8:0c:7f: a1:17:83:95:5a:c3:60:d2:4e:94:ea:7e:d1:98:21: 0d:32:8a:30:07:2f:88:1f:a1:d8:28:11:12:01:b5: a0:d6:ac:57:2d:70:48:f0:59:82:2e:22:a0:93:33: 8f:a9:43:08:69:a6:63:92:47:32:08:50:87:fb:05: 93:bf:db:03:39:d7:17:ea:5d:a2:08:78:74:77:71: e2:b6:59:e3:d6:9d:96:d5:4c:cd:a5:32:d7:21:71: eb:00:02:2a:70:a1:6b:20:0d:f4:a2:21:a7:77:07: 8b:da:83:07:31:c6:26:be:6b:5c:ed:70:65:bc:24: a7:e3:06:a2:e3:a9:e5:5e:c9:86:62:c9:39:40:0e: 75:df:cb:1b:df:78:38:56:c7:2f:37:c3:e5:a1:8c: 68:5a:79:76:8a:21:20:0f:0a:7b:7b:ac:02:bf:4e: 17:01:bd:4c:8c:1e:ff:f8:6b:8c:1f:00:eb:07:64: 50:e0:ef:7d:14:60:6f:21:ea:4f:65:ae:ec:be:ef: 21:6e:06:47:3e:35:70:2b:93:c2:98:99:05:18:e9: 3a:4b:c5:45:5b:44:88:eb:28:3c:a5:c8:8f:f6:ee: b2:02:f6:71:b7:d2:ed:ba:8f:cd:c2:26:55:89:1e: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7E:4F:B5:7A:0D:BB:E0:F2:3B:0E:60:A5:54:54:09:B6:49:3D:2B X509v3 Authority Key Identifier: keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:ab:e0:e5:31:92:2a:b0:eb:60:26:8d:16:8d:68:7d:00:15: e0:65:23:de:68:db:5a:f4:9a:38:e5:10:7f:55:c5:52:66:25: dd:34:4c:fc:f0:fc:aa:61:c7:fb:3c:18:e9:17:e5:22:85:a8: 95:e9:5e:9d:4d:81:82:b4:bc:25:11:31:7e:48:0c:b3:78:57: a4:4e:36:89:3d:08:86:e3:ea:5b:58:bc:4a:77:ee:6f:bf:d2: a3:5d:6f:e0:28:e0:24:16:f5:91:20:cc:00:ce:13:ac:83:55: 72:ee:1e:ad:4b:8e:9f:b2:07:f5:fd:9c:a1:7f:d8:ac:b0:6b: be:47:b3:04:c7:4e:52:58:43:b3:a3:31:92:0e:89:b4:e3:00: c8:f8:14:1e:87:57:91:9d:1f:6b:da:f5:9b:0f:f4:0b:2d:46: 9b:d0:e3:e0:d7:a2:54:b3:9b:5a:bb:95:a4:b4:9b:fb:28:ad: 9a:93:d7:1d:e9:b7:85:dc:b2:be:01:38:00:b4:06:e5:13:74: d8:34:93:f9:61:55:73:60:88:1a:25:7c:26:b5:4a:63:a1:a8: 9e:f7:f2:bc:ed:ee:68:eb:b4:26:3f:53:bd:57:e3:c8:03:d9: d0:c0:be:51:12:6b:1b:9a:1b:0c:12:85:71:3b:bc:3f:b2:d0: cb:7f:9f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuvQPBT0u5o/8kKfarXdcEXuL/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFG RUJENUI4MjAeFw0yNjExMTUwNzE4MjhaFw0yNjExMTYwOTE2MjhaMDMxMTAvBgNV BAMTKEJFN0U0RkI1N0EwREJCRTBGMjNCMEU2MEE1NTQ1NDA5QjY0OTNEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0Phhv0GgpeDLtdgMf6EXg5Va w2DSTpTqftGYIQ0yijAHL4gfodgoERIBtaDWrFctcEjwWYIuIqCTM4+pQwhppmOS RzIIUIf7BZO/2wM51xfqXaIIeHR3ceK2WePWnZbVTM2lMtchcesAAipwoWsgDfSi Iad3B4vagwcxxia+a1ztcGW8JKfjBqLjqeVeyYZiyTlADnXfyxvfeDhWxy83w+Wh jGhaeXaKISAPCnt7rAK/ThcBvUyMHv/4a4wfAOsHZFDg730UYG8h6k9lruy+7yFu Bkc+NXArk8KYmQUY6TpLxUVbRIjrKDylyI/27rIC9nG30u26j83CJlWJHlEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvn5PtXoNu+DyOw5gpVRUCbZJPSswHwYDVR0j BBgwFoAUmOGMV894S17LZHb/2jQDof69W4IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY5YzQ0NmYtZDk3MS00YjVlLWIyNjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdD Rjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFGRUJENUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUxOEM1N0NGNzg0QjVFQ0I2NDc2RkZEQTM0MDNBMUZFQkQ1 QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAz QTFGRUJENUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOar4OUxkiqw62AmjRaNaH0AFeBlI95o21r0 mjjlEH9VxVJmJd00TPzw/Kphx/s8GOkX5SKFqJXpXp1NgYK0vCURMX5IDLN4V6RO Nok9CIbj6ltYvEp37m+/0qNdb+Ao4CQW9ZEgzADOE6yDVXLuHq1Ljp+yB/X9nKF/ 2Kywa75HswTHTlJYQ7OjMZIOibTjAMj4FB6HV5GdH2va9ZsP9AstRpvQ4+DXolSz m1q7laS0m/sorZqT1x3pt4Xcsr4BOAC0BuUTdNg0k/lhVXNgiBolfCa1SmOhqJ73 8rzt7mjrtCY/U71X48gD2dDAvlESaxuaGwwShXE7vD+y0Mt/n4E= -----END CERTIFICATE-----Generated at Sun Nov 15 18:31:43 2026 by rpki-client