$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft File: 098D1D612D535CED249CDB01EC5565063EBACEEF.mft (raw, json) Hash identifier: kd29G7s9mcRBSVwS9XAuIkXjXqkaew5L1weeM2lLh6U= Subject key identifier: B8:10:FC:D6:26:63:F9:17:08:A8:EF:FA:1E:E8:1E:F8:04:5E:AD:15 Authority key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF Certificate issuer: /CN=098D1D612D535CED249CDB01EC5565063EBACEEF Certificate serial: 6490C397195DEF9945C9B1B27569B9D5A4EBD945 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft Manifest number: BB Signing time: Sun 20 Sep 2026 11:16:05 +0000 Manifest this update: Sun 20 Sep 2026 11:11:05 +0000 Manifest next update: Mon 21 Sep 2026 11:40:05 +0000 Files and hashes: 1: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: CY1Z76P9Cm4XC+l2Gxs6pH2wrd99R/AKN3svNUGr+4E=) 2: 098D1D612D535CED249CDB01EC5565063EBACEEF.crl (hash: 20r8nVMy8K3/U/bUdwRZ/pU9mSmXcFHVcYHvkwVbtqA=) 3: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: Z0u7IGnQdxSwJ/3PUqshR32Mqm4mC19C1FEuu6LC8Ng=) 4: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: 6BOi9a4QIn+pGYzRIaW0daSfHvcVflYv5ZBX0t+b6I0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:90:c3:97:19:5d:ef:99:45:c9:b1:b2:75:69:b9:d5:a4:eb:d9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D1D612D535CED249CDB01EC5565063EBACEEF Validity Not Before: Sep 20 11:11:05 2026 GMT Not After : Sep 21 11:40:05 2026 GMT Subject: CN=B810FCD62663F91708A8EFFA1EE81EF8045EAD15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:77:c4:99:22:cc:6d:a5:2b:6b:64:4e:67: 8e:8c:91:d0:a6:57:1e:92:22:98:03:94:08:30:b4: 12:1d:34:70:8d:e3:57:8a:6d:d8:53:9c:cd:4c:54: b6:bc:6b:f5:28:b2:b9:7c:0f:99:4e:44:3a:a2:11: 14:ca:eb:67:07:f4:bb:bf:0a:03:4e:d2:93:b8:32: 20:26:b5:b2:9c:d2:a1:dd:88:77:8f:f4:32:8d:0d: 9b:15:17:cd:ee:9b:41:d7:c9:3e:d1:5a:39:e3:36: 22:91:10:8f:45:c8:b8:81:85:1e:3b:35:b3:ca:d5: da:81:59:1e:00:e6:b7:8f:6f:72:5d:68:a5:c6:22: 42:7a:3d:fe:c0:99:9e:dc:73:aa:b9:cd:eb:d6:a3: 16:07:db:56:dd:d8:02:d3:39:ae:bd:82:dd:1c:d3: ad:41:eb:d3:ea:61:f8:1d:a9:cd:aa:d1:90:74:9b: 2a:4b:3c:24:ba:8c:0e:22:b6:7c:9b:20:b7:8e:4a: b1:46:b1:26:48:15:b2:96:fc:ef:46:84:ef:61:0f: 05:ef:4c:8d:68:4a:74:da:aa:b9:7a:bc:27:7b:fa: 74:bb:f2:b5:15:a2:6f:c8:0c:ec:ee:74:83:0d:6f: 8d:99:2c:0c:f3:1c:b8:0a:80:6b:92:f3:34:e6:8c: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:10:FC:D6:26:63:F9:17:08:A8:EF:FA:1E:E8:1E:F8:04:5E:AD:15 X509v3 Authority Key Identifier: keyid:09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d3:eb:30:38:36:1f:5c:48:0f:1e:ee:86:c1:e2:1b:41:0b: 44:5b:82:c6:03:09:8c:e3:f7:1d:46:ec:56:48:06:ee:f0:e4: 39:a5:83:ca:a6:cc:b4:a7:36:89:02:c3:6f:e0:ef:6c:b9:94: 74:3e:11:52:ee:a2:6d:62:be:66:66:64:15:08:76:3e:4a:cc: 5f:a1:cc:2b:d7:a4:3a:73:b3:9a:e6:57:c0:10:ee:f8:30:49: 8d:4b:5b:d9:1c:a8:ac:b4:86:f0:f9:cb:d4:c4:81:d2:ca:f6: ef:49:3e:c9:24:06:ab:68:84:76:92:09:df:34:78:8c:81:56: 1d:67:c6:3c:43:f3:4a:37:dc:d7:75:d2:41:f2:3c:bb:43:12: 3f:0d:77:50:69:bb:53:79:d9:7f:86:d5:59:d0:e9:1b:c8:2c: 7a:89:bd:43:5e:9c:5f:63:6f:61:16:95:2c:fa:b0:53:67:84: 07:81:9f:9c:4a:56:9d:6f:1f:3f:be:d2:7e:8d:da:d7:67:2f: 4b:cc:8c:0e:01:60:43:91:e4:db:1f:66:a0:e5:86:94:37:9a: b7:3f:6e:cb:99:4b:ab:42:b9:8f:82:24:07:a9:05:b5:a3:58: 89:a3:ed:ec:84:bd:35:9d:a5:59:33:d5:d6:2d:6f:35:ca:ca: 7a:b6:12:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJDDlxld75lFybGydWm51aTr2UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDFENjEyRDUzNUNFRDI0OUNEQjAxRUM1NTY1MDYz RUJBQ0VFRjAeFw0yNjA5MjAxMTExMDVaFw0yNjA5MjExMTQwMDVaMDMxMTAvBgNV BAMTKEI4MTBGQ0Q2MjY2M0Y5MTcwOEE4RUZGQTFFRTgxRUY4MDQ1RUFEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+XfEmSLMbaUra2ROZ46MkdCm Vx6SIpgDlAgwtBIdNHCN41eKbdhTnM1MVLa8a/Uosrl8D5lORDqiERTK62cH9Lu/ CgNO0pO4MiAmtbKc0qHdiHeP9DKNDZsVF83um0HXyT7RWjnjNiKREI9FyLiBhR47 NbPK1dqBWR4A5rePb3JdaKXGIkJ6Pf7AmZ7cc6q5zevWoxYH21bd2ALTOa69gt0c 061B69PqYfgdqc2q0ZB0mypLPCS6jA4itnybILeOSrFGsSZIFbKW/O9GhO9hDwXv TI1oSnTaqrl6vCd7+nS78rUVom/IDOzudIMNb42ZLAzzHLgKgGuS8zTmjIz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBD81iZj+RcIqO/6Huge+ARerRUwHwYDVR0j BBgwFoAUCY0dYS1TXO0knNsB7FVlBj66zu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjk2NDAxZTMtOWY2Mi00YjNjLWJmZmItNzgzMzU1YWU2NzcwLzAvMDk4RDFENjEy RDUzNUNFRDI0OUNEQjAxRUM1NTY1MDYzRUJBQ0VFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOThEMUQ2MTJENTM1Q0VEMjQ5Q0RCMDFFQzU1NjUwNjNFQkFD RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvMDk4RDFENjEyRDUzNUNFRDI0OUNEQjAxRUM1NTY1 MDYzRUJBQ0VFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjT6zA4Nh9cSA8e7obB4htBC0RbgsYDCYzj 9x1G7FZIBu7w5Dmlg8qmzLSnNokCw2/g72y5lHQ+EVLuom1ivmZmZBUIdj5KzF+h zCvXpDpzs5rmV8AQ7vgwSY1LW9kcqKy0hvD5y9TEgdLK9u9JPskkBqtohHaSCd80 eIyBVh1nxjxD80o33Nd10kHyPLtDEj8Nd1Bpu1N52X+G1VnQ6RvILHqJvUNenF9j b2EWlSz6sFNnhAeBn5xKVp1vHz++0n6N2tdnL0vMjA4BYEOR5NsfZqDlhpQ3mrc/ bsuZS6tCuY+CJAepBbWjWImj7eyEvTWdpVkz1dYtbzXKynq2EqU= -----END CERTIFICATE-----Generated at Sun Sep 20 23:13:33 2026 by rpki-client