
$ rpki-client -vvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json)
Hash identifier: kTF9U0BAbC89VwOdAz9rhWilRsiNmlVkqvKHnsXAyo4=
Subject key identifier: FF:F6:0D:4A:D2:AB:FE:AB:5C:4E:28:14:9E:CB:26:B0:90:67:6F:6B
Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3
Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3
Certificate serial: 4A90096F3B324A2E22262F592E213FE2D7F8D1B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 18:34:44 +0000
Manifest this update: Tue 28 Jul 2026 18:29:44 +0000
Manifest next update: Wed 29 Jul 2026 22:05:44 +0000
Files and hashes: 1: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: 9b6q3sbtYcYn12e5Xmzp8djJHAcGwGB6k1pDMA1xSJI=)
2: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=)
3: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=)
4: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl
rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:90:09:6f:3b:32:4a:2e:22:26:2f:59:2e:21:3f:e2:d7:f8:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3
Validity
Not Before: Jul 28 18:29:44 2026 GMT
Not After : Jul 29 22:05:44 2026 GMT
Subject: CN=FFF60D4AD2ABFEAB5C4E28149ECB26B090676F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:da:7b:79:d4:5b:2a:61:f6:7a:5c:08:79:
02:dd:2b:9a:60:af:00:42:b1:1b:45:86:29:5f:21:
94:f3:b1:b8:b9:92:15:46:6f:5f:64:6a:98:89:71:
1d:51:9b:bb:5b:16:8c:ff:e4:70:a0:ac:7e:66:5a:
36:d2:40:49:56:dc:cf:c1:9c:b8:0d:74:c4:29:aa:
48:b9:0c:f5:7c:9e:7b:44:8b:0c:b0:04:e7:e9:c3:
e9:c5:5c:95:b1:6a:4e:f2:38:12:d3:db:bf:43:3b:
ba:45:cf:7f:88:98:4c:21:68:db:44:f6:59:5e:ac:
cd:9e:bb:2c:ed:fd:4e:c6:b8:93:b3:d3:00:88:8f:
78:65:b4:6c:84:40:85:8c:07:20:d9:99:a7:78:8b:
a8:a6:f4:bf:ad:72:ff:89:37:62:33:5d:b3:01:77:
fe:4c:72:5c:31:64:ea:15:bc:35:b2:62:00:50:67:
d2:1e:d8:70:06:8e:92:b4:a0:bb:d6:08:6e:c5:e9:
1b:9b:ce:dc:61:df:06:7e:d8:25:6b:28:2f:fa:60:
31:ee:d7:c7:cc:2c:37:36:49:50:8d:a0:61:bd:e3:
f4:29:07:8f:19:08:cc:f9:c3:71:08:43:9c:d9:09:
06:ec:46:8b:43:45:51:27:21:11:13:35:32:69:2f:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:0D:4A:D2:AB:FE:AB:5C:4E:28:14:9E:CB:26:B0:90:67:6F:6B
X509v3 Authority Key Identifier:
keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f4:fd:31:43:18:09:95:2d:f2:e3:eb:c6:fd:76:67:a1:5e:
d9:0e:4c:4a:72:7b:da:49:ec:61:ee:df:32:20:e7:4a:45:31:
8b:f0:02:bf:d3:74:ae:35:cf:a7:dd:e8:b3:75:1c:05:6d:42:
c9:73:04:3e:0a:c2:a6:ee:a6:79:ee:1a:c9:b8:e3:6a:29:6c:
4e:6d:17:89:ed:b9:d2:57:fd:02:41:a6:0d:d0:3f:8f:ee:47:
a6:13:b3:b5:ea:2d:6f:9f:db:55:b2:d0:6e:51:53:8c:2b:4f:
8e:73:eb:66:61:ba:a0:52:db:ee:bd:ef:9c:0e:79:06:0f:16:
b6:cd:21:64:40:ca:3d:83:53:d2:e7:11:c5:03:a7:ed:3d:a4:
76:23:5c:27:18:51:dc:44:21:f1:0d:12:bf:64:f7:2c:a1:b0:
8c:90:de:0b:ca:f7:f7:35:91:d6:e6:c5:d9:bd:cb:e9:ce:02:
de:02:14:d0:e4:3b:30:d5:55:4b:7a:05:73:1a:64:3a:16:dd:
cb:2b:9d:3a:68:33:3f:90:c2:be:1a:61:da:60:ca:51:52:f5:
5f:96:a6:8e:65:1e:3c:d6:7b:bf:33:8c:31:1d:73:a9:c1:0d:
9e:96:88:af:bf:45:f9:05:35:7a:df:f4:f3:1f:75:4a:41:ce:
ea:e3:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:51 2026 by rpki-client