
$ rpki-client -vvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json)
Hash identifier: x82crvXSm3ENPf6ObFeRrP4kdstow8Jum3WhwpXLMpc=
Subject key identifier: 70:BB:D3:E2:47:97:DC:3B:70:F4:82:F8:9F:CB:A4:B8:76:CE:83:E2
Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3
Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3
Certificate serial: 053CD9E05CE102FC1B4A5811F83DA9110A6A0196
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 04:49:52 +0000
Manifest this update: Sat 13 Jun 2026 04:44:52 +0000
Manifest next update: Sun 14 Jun 2026 07:04:52 +0000
Files and hashes: 1: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: uTNAUyjPSx+mmw8jkS+mDpfFd155cLKMT+MoaKTaj+k=)
2: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=)
3: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=)
4: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl
rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3c:d9:e0:5c:e1:02:fc:1b:4a:58:11:f8:3d:a9:11:0a:6a:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3
Validity
Not Before: Jun 13 04:44:52 2026 GMT
Not After : Jun 14 07:04:52 2026 GMT
Subject: CN=70BBD3E24797DC3B70F482F89FCBA4B876CE83E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:2c:40:23:e5:45:f4:ec:e3:5d:3c:b2:c2:
53:ea:14:88:7c:03:d1:0b:03:d5:92:f7:39:20:2f:
9d:8f:60:ae:e5:29:98:57:2c:18:f4:8c:61:e8:83:
6f:26:00:46:00:f1:60:07:72:a7:9a:e1:9b:d4:6e:
c1:0b:ce:ba:30:dd:da:27:90:e7:4c:52:86:0a:43:
6a:39:fa:b4:6a:5e:87:ae:ad:09:1c:ef:b2:72:94:
88:46:9a:24:ef:6e:57:8f:08:f8:d4:13:b4:14:a3:
fd:9c:b7:3d:6f:88:4c:ec:e7:d2:7a:aa:c3:86:b5:
e7:50:ed:c7:96:3e:5c:09:0a:0b:69:02:9a:66:ba:
9e:1b:0b:2c:7e:c6:43:65:7b:34:f0:d1:7c:3c:6f:
ee:07:18:9b:59:d6:3c:6f:98:7d:2c:e0:62:ca:94:
00:85:37:0c:7b:74:b5:b4:d1:7b:66:94:48:be:20:
05:73:aa:f2:e3:e4:f7:9f:41:8d:84:ea:a8:41:1f:
36:b0:f3:3b:5d:58:35:81:db:40:7e:48:27:85:89:
8e:2f:bc:b6:e5:8f:9d:fb:fe:2e:23:bf:6b:b6:46:
5c:5c:b6:de:96:b3:c9:00:94:2a:44:11:a2:c8:75:
da:67:59:d4:a9:80:4c:59:9b:d2:a8:fe:a8:74:0c:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:D3:E2:47:97:DC:3B:70:F4:82:F8:9F:CB:A4:B8:76:CE:83:E2
X509v3 Authority Key Identifier:
keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6c:a0:d1:f9:9e:fd:3d:6c:35:41:4e:df:d5:d9:36:72:64:
84:83:2a:bd:5b:4d:1a:75:04:f0:64:1a:9e:e2:1c:56:6d:b0:
23:5f:48:8a:5e:d9:29:a1:e5:9c:3c:f6:86:08:ec:34:f3:25:
94:8e:35:52:2c:c4:77:fc:70:66:84:9b:a9:39:c4:4b:0d:18:
30:06:9f:25:8a:ba:84:9a:34:b5:d7:8b:85:2b:8b:68:d2:a2:
26:33:55:97:10:eb:17:78:9a:eb:73:8c:b3:aa:5b:1f:b6:e8:
6c:43:6e:17:48:5d:89:a0:32:32:90:c8:37:aa:bb:98:f1:be:
e5:ad:4e:02:d3:64:70:3d:cc:c9:cb:0c:92:22:3a:9a:27:a3:
33:f2:92:06:c1:f1:bd:52:e9:f8:84:2a:47:c7:58:59:8e:6e:
01:f7:e7:2b:51:2e:7f:fb:ab:fb:b6:5d:86:b6:5a:df:59:a1:
db:23:66:dc:7b:33:b1:11:ff:91:76:1b:db:a4:f4:3e:cd:a4:
92:a0:78:f3:b3:ee:1d:34:47:d9:56:93:ea:12:2e:d9:99:48:
97:e3:90:5d:b6:a1:f4:63:5a:f4:c7:d9:b7:d5:21:42:5c:63:
6e:b3:12:52:60:7a:5d:90:13:1b:9b:90:6b:2d:27:0e:eb:b7:
a3:f9:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:39:40 2026 by rpki-client