$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft (raw, json) Hash identifier: D9gg2FKzGSTYY0FMyc04vCQsPsThrw/m8Z1+0RHjf/A= Subject key identifier: 5E:50:3C:11:F7:43:A0:4D:2F:9B:27:B1:E1:55:A3:4F:EB:5B:22:43 Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Certificate serial: 758D73F465A45B913AEC492361E506380B4076D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 03:56:20 +0000 Manifest this update: Tue 22 Sep 2026 03:51:20 +0000 Manifest next update: Wed 23 Sep 2026 07:52:20 +0000 Files and hashes: 1: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl (hash: 0fEf5gQPkEhWvB4TBfwAs6dN4J68QKiy1xiBitCBpRc=) 2: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=) 3: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: iZC63XKtQ4A+tLBPo00EIvl5gTnecWbM3wWVRgyRhoQ=) 4: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=) 5: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: w40+4vjnbHq0TV83WSPBOHHWioBKVnOPxDYQ5jp0iE0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8d:73:f4:65:a4:5b:91:3a:ec:49:23:61:e5:06:38:0b:40:76:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Validity Not Before: Sep 22 03:51:20 2026 GMT Not After : Sep 23 07:52:20 2026 GMT Subject: CN=5E503C11F743A04D2F9B27B1E155A34FEB5B2243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:a2:5c:91:7a:85:38:1d:94:15:5e:71:10: 1b:b4:93:45:a6:51:31:09:97:f7:a4:de:15:96:11: e6:61:65:a5:e9:05:87:3a:e4:1f:83:e0:ce:d2:23: 52:44:1a:22:cc:55:2a:80:78:af:e4:3c:49:10:59: c8:78:00:ad:1f:28:40:2f:b7:bf:1b:0a:71:80:33: 8d:13:58:8a:86:53:49:77:98:af:6b:9a:94:fa:2d: 00:65:99:46:c1:b6:d0:44:a9:73:17:55:2a:62:d7: 26:51:76:26:8f:ec:15:b8:ac:f5:59:dc:e0:0c:7a: ef:ba:af:73:62:f6:bf:74:f6:3d:7f:df:7d:0e:1a: 73:28:57:fe:4d:84:dc:fc:5b:8c:cd:c3:3f:63:94: c7:dd:c6:19:3a:64:14:58:a2:f4:b4:f8:61:c4:cd: 49:5d:29:43:1f:3a:d2:c2:3a:f1:4e:e3:d3:3f:19: c8:b3:84:e9:97:c4:e5:48:07:28:31:39:12:d9:01: 74:79:ea:96:40:6d:4d:ad:d3:dc:74:b0:ea:47:7f: 3c:b6:a9:65:42:8e:eb:1f:61:f3:73:1f:72:1a:7f: ed:51:62:f4:3e:0d:44:d7:f9:83:45:47:b9:00:33: 14:c3:e9:6a:20:7a:e2:51:50:fd:99:81:27:76:34: d0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:50:3C:11:F7:43:A0:4D:2F:9B:27:B1:E1:55:A3:4F:EB:5B:22:43 X509v3 Authority Key Identifier: keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:df:08:c5:7d:1b:19:99:79:44:50:e9:e5:0b:f1:a2:fc:be: 25:30:98:ab:bb:80:52:45:1b:a8:47:ec:bd:2d:8f:01:08:d4: c3:4c:2d:44:5d:27:05:ca:28:22:34:34:71:a0:41:30:93:21: 49:09:74:17:dc:8c:09:cb:77:5b:44:54:23:98:8c:30:98:c8: 11:be:c5:8a:f6:7d:d9:e6:8a:a3:02:7f:3c:02:a1:41:c7:a4: ff:65:cd:a8:dd:87:2c:39:46:d8:50:b9:a0:0d:4e:56:33:e7: db:53:5d:69:35:d6:b5:96:c9:a7:70:7a:c2:5e:dd:55:32:e0: 67:d9:a3:6c:a9:d5:f1:7b:20:65:93:ff:36:c1:28:d7:0b:06: f8:f3:b9:03:34:9c:45:dc:a8:f5:9a:ec:80:96:44:6a:29:6b: fd:72:67:e9:75:ee:a1:25:d3:a6:cb:54:07:5d:f1:4e:8d:ea: 16:61:6a:25:58:da:b4:8b:f7:3f:84:9f:99:a6:01:3f:6f:31: 2d:0c:a2:72:09:9b:60:52:04:5a:35:9f:8f:1b:4a:79:70:b6: 3d:63:98:18:d6:78:83:5f:44:fa:7e:b6:3d:d1:71:50:85:77: db:72:61:aa:17:d0:d8:5f:67:d0:b9:1e:0d:82:8f:29:8e:47: 1f:e0:ae:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdY1z9GWkW5E67EkjYeUGOAtAdtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz RUZEOTU2OTAeFw0yNjA5MjIwMzUxMjBaFw0yNjA5MjMwNzUyMjBaMDMxMTAvBgNV BAMTKDVFNTAzQzExRjc0M0EwNEQyRjlCMjdCMUUxNTVBMzRGRUI1QjIyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRaJckXqFOB2UFV5xEBu0k0Wm UTEJl/ek3hWWEeZhZaXpBYc65B+D4M7SI1JEGiLMVSqAeK/kPEkQWch4AK0fKEAv t78bCnGAM40TWIqGU0l3mK9rmpT6LQBlmUbBttBEqXMXVSpi1yZRdiaP7BW4rPVZ 3OAMeu+6r3Ni9r909j1/330OGnMoV/5NhNz8W4zNwz9jlMfdxhk6ZBRYovS0+GHE zUldKUMfOtLCOvFO49M/GcizhOmXxOVIBygxORLZAXR56pZAbU2t09x0sOpHfzy2 qWVCjusfYfNzH3Iaf+1RYvQ+DUTX+YNFR7kAMxTD6WogeuJRUP2ZgSd2NNADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlA8EfdDoE0vmyex4VWjT+tbIkMwHwYDVR0j BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5 NTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUw OEUzRUZEOTU2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzfCMV9GxmZeURQ6eUL8aL8viUwmKu7gFJF G6hH7L0tjwEI1MNMLURdJwXKKCI0NHGgQTCTIUkJdBfcjAnLd1tEVCOYjDCYyBG+ xYr2fdnmiqMCfzwCoUHHpP9lzajdhyw5RthQuaANTlYz59tTXWk11rWWyadwesJe 3VUy4GfZo2yp1fF7IGWT/zbBKNcLBvjzuQM0nEXcqPWa7ICWRGopa/1yZ+l17qEl 06bLVAdd8U6N6hZhaiVY2rSL9z+En5mmAT9vMS0MonIJm2BSBFo1n48bSnlwtj1j mBjWeINfRPp+tj3RcVCFd9tyYaoX0NhfZ9C5Hg2CjymORx/grpE= -----END CERTIFICATE-----Generated at Tue Sep 22 11:56:40 2026 by rpki-client