$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft File: 98E2D88430E0F6BCECDC35B8596FF471265D238B.mft (raw, json) Hash identifier: 0QaHEW5JirusXPdAYLGXQk5fzVPv4ZAqJv00ZCOSq4M= Subject key identifier: 43:05:2E:9E:52:7A:48:D1:D6:59:96:F9:0C:39:82:6E:C1:7D:39:7E Authority key identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B Certificate issuer: /CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Certificate serial: 0812D9F51EFF6C0C767D5A26B9050A24CEA0DD0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:37:18 +0000 Manifest this update: Tue 22 Sep 2026 00:32:18 +0000 Manifest next update: Wed 23 Sep 2026 04:12:18 +0000 Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: H29DiGXAuolahNiG0w85WM8CZEw5FJ4zYtAOWOwpwGM=) 2: 98E2D88430E0F6BCECDC35B8596FF471265D238B.crl (hash: 9zyjlFuo1I8oHfH4T11szZFD9Flt9EK7GxvZ7vjhAGo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:12:d9:f5:1e:ff:6c:0c:76:7d:5a:26:b9:05:0a:24:ce:a0:dd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Validity Not Before: Sep 22 00:32:18 2026 GMT Not After : Sep 23 04:12:18 2026 GMT Subject: CN=43052E9E527A48D1D65996F90C39826EC17D397E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:8c:38:07:e2:54:61:24:ac:df:53:90:45: 43:72:3c:85:21:42:91:51:ca:06:72:0a:af:22:9a: ef:58:5f:42:0b:08:84:94:0e:a2:03:db:3e:6c:b8: 0f:d8:8e:a3:ad:ee:06:5f:fd:10:5e:d7:04:03:d7: b4:d9:a0:8b:1e:01:c4:b2:f3:5e:be:43:44:a8:ea: 2c:c5:a7:f6:b5:ab:d6:94:0e:34:d6:ad:5d:22:ad: 19:9e:b9:24:97:03:15:d1:cb:de:df:f7:e4:61:c7: 76:68:c6:7b:82:6a:a9:e3:3f:4a:07:6c:34:e6:e1: 19:85:72:6d:de:19:5b:2d:f4:6d:1d:80:f7:b4:46: 1e:0e:79:80:c5:62:17:83:1a:f0:e8:ab:bc:a8:d2: db:f0:73:a0:79:91:42:ca:70:43:a2:fc:2f:21:a3: c2:26:6f:f6:00:16:10:f2:82:4d:74:03:93:87:78: 1d:60:b7:22:63:53:57:45:91:12:3f:01:a3:97:29: 47:bf:3f:0d:70:2b:8d:6d:85:3a:c2:da:c6:f5:ff: 14:18:d7:75:c5:6b:c4:18:04:65:4c:a7:a9:e3:95: 32:4c:b2:3a:35:92:2c:46:42:a7:e9:a4:6a:47:2c: 76:5e:00:0a:3b:96:bf:82:4f:65:a8:46:30:dd:ae: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:05:2E:9E:52:7A:48:D1:D6:59:96:F9:0C:39:82:6E:C1:7D:39:7E X509v3 Authority Key Identifier: keyid:98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a4:8d:75:7e:94:02:49:a5:69:c4:d6:4f:d0:94:0d:7f:c7: 0f:cd:73:73:98:2e:8c:94:12:e2:37:a2:56:50:9a:95:29:e6: 1e:fa:3e:5b:36:9e:c1:8f:e0:1f:69:0a:d0:34:50:66:a2:28: 3b:c0:02:4d:fa:83:a8:96:54:0b:c8:8d:98:c6:d1:c5:23:b8: 9c:53:14:26:94:da:c2:17:05:18:41:63:f1:cb:ce:08:85:a9: e2:21:5b:f0:51:a9:9c:36:3b:e3:ba:c5:e6:c8:e4:fe:e9:4f: 2d:13:7c:80:f4:01:08:a6:9b:c5:be:58:e2:d8:10:13:7b:0b: 89:b2:59:8c:4e:b3:32:73:3b:81:2d:c1:df:6c:df:aa:39:6a: 2c:67:8e:97:10:31:ac:f9:81:38:fa:f5:76:2b:8f:7f:fc:43: 83:0e:15:59:27:97:c8:d6:78:d8:34:08:51:7e:40:cd:38:ba: d4:5e:2a:9c:da:fa:c9:26:a2:c4:e5:2c:fd:66:54:6a:ff:99: 13:bb:fa:5f:f2:0d:9b:c8:69:33:ff:c0:2a:82:e9:62:d8:96: b0:c8:31:2a:3c:60:69:28:67:eb:54:c1:8f:a6:d4:97:72:64: 9d:d2:99:01:07:17:d0:18:00:49:8b:79:a2:78:33:12:a9:e3: 43:89:18:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBLZ9R7/bAx2fVomuQUKJM6g3Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEy NjVEMjM4QjAeFw0yNjA5MjIwMDMyMThaFw0yNjA5MjMwNDEyMThaMDMxMTAvBgNV BAMTKDQzMDUyRTlFNTI3QTQ4RDFENjU5OTZGOTBDMzk4MjZFQzE3RDM5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fIw4B+JUYSSs31OQRUNyPIUh QpFRygZyCq8imu9YX0ILCISUDqID2z5suA/YjqOt7gZf/RBe1wQD17TZoIseAcSy 816+Q0So6izFp/a1q9aUDjTWrV0irRmeuSSXAxXRy97f9+Rhx3ZoxnuCaqnjP0oH bDTm4RmFcm3eGVst9G0dgPe0Rh4OeYDFYheDGvDoq7yo0tvwc6B5kULKcEOi/C8h o8Imb/YAFhDygk10A5OHeB1gtyJjU1dFkRI/AaOXKUe/Pw1wK41thTrC2sb1/xQY 13XFa8QYBGVMp6njlTJMsjo1kixGQqfppGpHLHZeAAo7lr+CT2WoRjDdrnKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQwUunlJ6SNHWWZb5DDmCbsF9OX4wHwYDVR0j BBgwFoAUmOLYhDDg9rzs3DW4WW/0cSZdI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg5YTA2NjEtMzFlZS00OWEyLWFlOWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQz MEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEyNjVEMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUyRDg4NDMwRTBGNkJDRUNEQzM1Qjg1OTZGRjQ3MTI2NUQy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0 NzEyNjVEMjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKkjXV+lAJJpWnE1k/QlA1/xw/Nc3OYLoyU EuI3olZQmpUp5h76Pls2nsGP4B9pCtA0UGaiKDvAAk36g6iWVAvIjZjG0cUjuJxT FCaU2sIXBRhBY/HLzgiFqeIhW/BRqZw2O+O6xebI5P7pTy0TfID0AQimm8W+WOLY EBN7C4myWYxOszJzO4Etwd9s36o5aixnjpcQMaz5gTj69XYrj3/8Q4MOFVknl8jW eNg0CFF+QM04utReKpza+skmosTlLP1mVGr/mRO7+l/yDZvIaTP/wCqC6WLYlrDI MSo8YGkoZ+tUwY+m1JdyZJ3SmQEHF9AYAEmLeaJ4MxKp40OJGIk= -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:11 2026 by rpki-client