
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
File: 98EC8965126CEAAF07DB20456F30ADDA7E619614.mft (raw, json)
Hash identifier: BEzjxSo2MAVycabasiFaN80+q3NIL/XeqpCIZI9JDpc=
Subject key identifier: 5E:D5:75:BD:0D:89:FD:90:58:6C:8D:2B:A7:48:70:EF:F5:B2:69:0B
Authority key identifier: 98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14
Certificate issuer: /CN=98EC8965126CEAAF07DB20456F30ADDA7E619614
Certificate serial: 513B7AB9720E870D028895BD98BD01573996CABB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 06:10:23 +0000
Manifest this update: Wed 17 Jun 2026 06:05:23 +0000
Manifest next update: Thu 18 Jun 2026 07:13:23 +0000
Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: H5sSyPFigguVE/vHzW6P4HgP+k0uALrlMtr/Qk6iyOw=)
2: 98EC8965126CEAAF07DB20456F30ADDA7E619614.crl (hash: iQSLAA0iFGN/MHo5onbe66geBHuMpOCnn2kd2KWz81g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl
rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3b:7a:b9:72:0e:87:0d:02:88:95:bd:98:bd:01:57:39:96:ca:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98EC8965126CEAAF07DB20456F30ADDA7E619614
Validity
Not Before: Jun 17 06:05:23 2026 GMT
Not After : Jun 18 07:13:23 2026 GMT
Subject: CN=5ED575BD0D89FD90586C8D2BA74870EFF5B2690B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:27:83:00:fb:ad:67:a7:5e:4a:21:ba:98:
63:4e:4c:80:b2:e1:94:0c:a0:c8:f0:75:1e:9a:6c:
de:d3:60:b5:48:97:06:5a:b3:b8:d5:90:d8:2a:02:
93:5a:84:a1:58:2f:5b:1b:53:08:93:48:71:7f:59:
6e:ac:3a:13:e4:2b:0b:f1:e9:5f:39:44:e4:84:e0:
b7:56:ec:c2:33:a5:f9:3d:97:62:57:98:6a:76:a8:
03:9e:0b:a1:84:48:3b:c6:d8:20:cb:e4:37:90:64:
6b:6a:43:23:7c:97:c2:9f:5a:c6:2f:c1:92:fb:bb:
b6:33:ee:c7:84:5f:87:77:57:93:d5:c0:36:38:46:
ab:23:8c:83:0a:97:61:2c:33:31:74:1e:02:d6:0c:
f2:72:c8:71:b0:dd:ad:75:4c:e1:03:85:4a:4d:1d:
86:9f:86:c1:ff:02:f0:7b:46:48:fe:24:ea:1a:8a:
43:80:83:2b:b5:59:91:72:b3:67:06:aa:7e:2d:d3:
d1:ac:02:01:9e:bb:54:32:cf:db:27:7d:ea:3c:d1:
2c:2e:55:aa:b7:f6:4f:dd:e7:ce:0f:57:65:f7:2f:
fc:93:e9:0c:c9:57:28:d4:2b:ae:d4:32:df:b3:32:
d2:f6:b4:30:e4:bc:e8:7f:90:1e:2c:df:5d:0f:35:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:75:BD:0D:89:FD:90:58:6C:8D:2B:A7:48:70:EF:F5:B2:69:0B
X509v3 Authority Key Identifier:
keyid:98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:23:0a:e1:a3:98:87:e2:1e:8e:19:ec:53:d0:01:8a:5c:8d:
3c:32:95:27:92:85:f1:d9:c3:63:00:6a:cf:20:69:4d:d1:67:
5a:19:88:4e:33:b3:8d:e9:e5:aa:65:5a:fe:48:a5:66:a8:a6:
2b:31:44:cb:af:5a:40:2d:c9:e4:c0:76:58:47:5f:c0:54:15:
2b:db:ac:2c:8f:cb:2c:16:e3:46:9a:e4:fc:ce:98:98:0b:a8:
eb:69:2d:93:b1:82:02:2c:c4:e6:9c:2d:9f:5b:36:d0:3f:86:
03:d0:a2:08:2b:86:52:30:6c:60:9d:47:f8:7e:40:95:75:1c:
74:0d:73:bc:d4:a3:f5:d5:46:2d:e9:b6:f6:b1:b3:88:23:a6:
ce:4e:02:af:40:68:8d:f2:8a:05:e7:6a:7f:4b:9a:b3:1a:eb:
2c:70:a4:b4:3f:53:e9:8f:06:8a:79:1a:58:39:0a:42:19:e9:
3f:3e:b2:df:09:c4:f4:90:a2:75:0d:cb:23:33:17:56:0c:c9:
cb:57:0e:d6:18:a4:f5:29:ce:f6:03:b3:ce:54:30:27:bf:57:
39:56:ad:44:98:d7:71:91:c8:e9:b5:65:87:12:e9:3a:04:9b:
7b:be:9b:16:fe:d1:30:ec:2c:61:8c:7b:19:45:cc:95:bc:49:
13:c8:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:26 2026 by rpki-client