$ rpki-client -vvvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json) Hash identifier: PtuEyGdeYEByb0orFDeJQaq9SJG/btE0vOPrzzeZL1g= Subject key identifier: 48:FF:70:3F:47:A4:83:55:52:8A:59:4D:3F:BD:E7:63:49:E9:DC:01 Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Certificate serial: 7594A06BAB0E39D29845983B93E87B75478B4119 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:38:38 +0000 Manifest this update: Mon 21 Sep 2026 05:33:38 +0000 Manifest next update: Tue 22 Sep 2026 06:55:38 +0000 Files and hashes: 1: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=) 2: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: g1Uq3v5i175As8y99kpLqd+tGjKLuyOeWSlbtMka0h0=) 3: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=) 4: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:94:a0:6b:ab:0e:39:d2:98:45:98:3b:93:e8:7b:75:47:8b:41:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Validity Not Before: Sep 21 05:33:38 2026 GMT Not After : Sep 22 06:55:38 2026 GMT Subject: CN=48FF703F47A48355528A594D3FBDE76349E9DC01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:b2:06:7f:5c:54:03:1d:5f:3c:a9:90:4a: 98:b7:0b:5d:c3:83:10:6c:60:8b:18:6c:34:56:38: b4:01:58:79:1c:7c:4a:72:17:de:3f:28:1e:94:82: 98:60:13:69:da:c1:25:5b:67:53:c5:fe:57:f5:9c: 8f:f7:a5:6d:cc:97:21:d2:72:50:4f:f6:44:a6:67: b7:e0:54:52:75:de:41:3e:4f:e9:53:4e:86:cb:3a: 15:7c:61:16:f6:dc:83:b5:0f:13:bf:20:3f:19:38: b0:64:5c:0d:ae:b3:95:80:3a:bf:83:3d:6e:de:2b: fe:02:ae:d9:a2:53:56:99:97:7f:1d:99:cb:2a:bb: 1d:04:77:d7:60:69:9a:22:03:68:4d:5b:a6:99:2e: 53:22:c7:5b:7a:fc:2c:61:23:fa:df:96:32:7d:c6: c3:36:80:37:12:c0:58:da:ac:4b:8a:10:d2:7e:c2: eb:ca:87:87:e4:46:92:4a:71:49:b6:af:90:b8:68: e1:16:06:16:55:d4:7f:f2:3c:46:65:d4:ff:da:0b: ff:52:e7:37:43:30:a3:49:23:0f:52:a2:c8:bb:4e: 92:a9:23:12:05:5a:75:0b:b5:a2:de:9f:a8:f2:8d: ed:c1:2a:56:70:99:a6:60:c4:fb:0c:de:8e:57:fd: dd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:70:3F:47:A4:83:55:52:8A:59:4D:3F:BD:E7:63:49:E9:DC:01 X509v3 Authority Key Identifier: keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ca:68:8e:6c:af:23:32:38:b9:de:cb:8f:01:5d:3e:a4:06: 4c:72:ca:50:1f:eb:ed:f7:62:97:7d:c4:1c:de:29:5d:c0:1b: 86:f4:0e:d7:af:33:19:3e:75:4e:9c:0a:c5:28:31:a3:16:b8: db:2c:9c:7c:ba:3c:80:6c:58:a9:f0:2c:74:2b:a0:f0:11:9c: 5a:f9:47:f9:c7:a5:f1:11:ad:3c:3b:e6:3f:43:76:9d:61:b5: d2:4e:5e:cd:83:e0:1a:6a:47:2b:48:1b:16:32:5a:74:a6:ee: 0f:06:87:25:dd:c2:ab:fa:31:a1:9d:5b:39:50:68:e9:8d:ec: 5c:13:ee:df:b0:93:36:40:11:b2:cd:a8:b1:b4:9b:49:51:7b: 97:df:bc:c5:81:87:14:fa:e4:ac:f8:f4:86:93:17:9f:9e:e4: 6a:f2:34:72:3c:7c:3b:02:e6:df:97:79:3d:48:83:6b:08:d7: 78:77:c6:12:71:27:1e:99:b1:64:44:cc:e8:57:c1:41:5b:d9: 46:bb:6b:49:b1:11:67:d8:88:29:ae:4f:d8:b0:1b:0c:70:7b: b2:32:bf:ff:9e:47:de:7c:b5:c8:c3:48:50:4b:6e:76:74:c3: 13:12:8d:4d:2c:e2:aa:63:da:c8:f1:0d:90:1e:0f:fe:f9:9d: ca:ca:10:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZSga6sOOdKYRZg7k+h7dUeLQRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0 OEIwNDdFMzAeFw0yNjA5MjEwNTMzMzhaFw0yNjA5MjIwNjU1MzhaMDMxMTAvBgNV BAMTKDQ4RkY3MDNGNDdBNDgzNTU1MjhBNTk0RDNGQkRFNzYzNDlFOURDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD7IGf1xUAx1fPKmQSpi3C13D gxBsYIsYbDRWOLQBWHkcfEpyF94/KB6UgphgE2nawSVbZ1PF/lf1nI/3pW3MlyHS clBP9kSmZ7fgVFJ13kE+T+lTTobLOhV8YRb23IO1DxO/ID8ZOLBkXA2us5WAOr+D PW7eK/4CrtmiU1aZl38dmcsqux0Ed9dgaZoiA2hNW6aZLlMix1t6/CxhI/rfljJ9 xsM2gDcSwFjarEuKENJ+wuvKh4fkRpJKcUm2r5C4aOEWBhZV1H/yPEZl1P/aC/9S 5zdDMKNJIw9Sosi7TpKpIxIFWnULtaLen6jyje3BKlZwmaZgxPsM3o5X/d27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSP9wP0ekg1VSillNP73nY0np3AEwHwYDVR0j BBgwFoAUmLFuyIQwDH8unlOkpkesZ0iwR+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJjYWVhM2ItYmQ3Zi00ODFhLTliYzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4 NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0OEIwNDdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEIxNkVDODg0MzAwQzdGMkU5RTUzQTRBNjQ3QUM2NzQ4QjA0 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FD Njc0OEIwNDdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbKaI5sryMyOLney48BXT6kBkxyylAf6+33 Ypd9xBzeKV3AG4b0DtevMxk+dU6cCsUoMaMWuNssnHy6PIBsWKnwLHQroPARnFr5 R/nHpfERrTw75j9Ddp1htdJOXs2D4BpqRytIGxYyWnSm7g8GhyXdwqv6MaGdWzlQ aOmN7FwT7t+wkzZAEbLNqLG0m0lRe5ffvMWBhxT65Kz49IaTF5+e5GryNHI8fDsC 5t+XeT1Ig2sI13h3xhJxJx6ZsWREzOhXwUFb2Ua7a0mxEWfYiCmuT9iwGwxwe7Iy v/+eR958tcjDSFBLbnZ0wxMSjU0s4qpj2sjxDZAeD/75ncrKEBs= -----END CERTIFICATE-----Generated at Mon Sep 21 17:32:40 2026 by rpki-client