$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft File: 98FBC9C110EF2F9B4553D613927F55774E076EA9.mft (raw, json) Hash identifier: vF0iweBJ9x/jxkVxrz8fIfHlqjZLlQIXZfxKJAYAv/4= Subject key identifier: C1:40:10:65:39:C3:DF:EB:1C:59:F3:EE:D1:EA:29:64:23:D2:6A:19 Authority key identifier: 98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9 Certificate issuer: /CN=98FBC9C110EF2F9B4553D613927F55774E076EA9 Certificate serial: 56F70F5220E37110B6BFBC0BA50862E5C6821261 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 06:25:36 +0000 Manifest this update: Mon 02 Nov 2026 06:20:36 +0000 Manifest next update: Tue 03 Nov 2026 08:37:36 +0000 Files and hashes: 1: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: PRQ0wyh257Ie4C2D9c8Ywf6UyKXsn9qs6MWo6/u5E68=) 2: 98FBC9C110EF2F9B4553D613927F55774E076EA9.crl (hash: MH77FDYWZ2z5dd8cPiXJVxvtI0SeAZ5eLUAgs6IEVTo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f7:0f:52:20:e3:71:10:b6:bf:bc:0b:a5:08:62:e5:c6:82:12:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FBC9C110EF2F9B4553D613927F55774E076EA9 Validity Not Before: Nov 2 06:20:36 2026 GMT Not After : Nov 3 08:37:36 2026 GMT Subject: CN=C140106539C3DFEB1C59F3EED1EA296423D26A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:f9:6b:cb:1d:6e:61:bb:42:e0:64:0e:b6: 2c:45:19:f8:d8:8b:e9:69:b3:cd:46:5b:ff:f6:3a: 51:fa:5a:bc:dd:68:42:02:8b:71:0d:f7:75:36:0d: a0:d3:c5:08:32:ab:67:63:4d:e1:40:73:28:90:04: 7b:83:46:4a:f0:23:f2:7b:75:80:43:e0:d3:6d:ca: 7c:16:2a:e2:9b:08:09:84:2b:b1:66:13:ea:cd:be: fd:87:47:f8:e3:ec:8a:4a:7e:09:3d:62:6d:46:7f: 8c:51:be:4d:5b:a9:c4:f7:56:69:00:83:54:03:a4: 91:69:5e:a2:1d:b8:8c:09:bb:50:e7:c7:d3:8d:e5: c3:7b:66:d2:eb:38:90:f1:b3:38:ad:7c:2d:9f:2d: 64:5a:16:1a:b6:92:ce:75:e3:5e:c8:39:01:e2:e7: 03:75:88:c3:13:db:10:6d:d5:87:db:c8:94:d4:92: 8e:21:12:49:8e:b4:ad:7e:17:ea:31:09:ea:fb:eb: fb:41:05:e5:c9:4c:4d:f2:80:7d:af:21:bb:3b:cf: a3:bc:10:4e:61:74:b7:26:1a:44:e3:06:15:9b:e1: c9:07:ea:54:60:1e:6e:eb:9b:48:cc:a8:3e:f9:01: ac:80:b8:1a:1e:08:f7:66:2f:53:d2:02:51:06:b7: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:10:65:39:C3:DF:EB:1C:59:F3:EE:D1:EA:29:64:23:D2:6A:19 X509v3 Authority Key Identifier: keyid:98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:43:d4:b9:16:04:4f:ad:9f:24:f6:84:6a:12:5a:a6:22:24: 5d:aa:c8:bc:4a:22:bb:ea:58:3c:ff:16:a5:ea:8b:64:1a:8a: 45:45:95:d1:9e:69:a8:f4:c6:a2:b3:43:be:a9:8e:0e:99:74: a4:6b:0c:f7:67:44:5e:c6:d8:f0:c4:6f:a8:8a:5b:22:e0:4f: 44:07:65:d9:d4:1e:34:dc:24:b9:5f:d5:77:05:3a:3a:0d:52: bc:11:3e:5c:0c:f5:25:53:f3:d4:97:3d:75:e0:d8:6f:34:a7: 7e:ab:db:91:27:3f:6d:df:c3:91:80:26:ab:2a:15:4a:57:ef: 5f:57:0a:90:db:fe:5c:e3:d1:dc:95:16:b3:42:1c:6e:f1:4d: a3:6b:eb:0d:3f:92:4a:79:aa:01:ea:b5:27:58:85:38:23:0c: c7:60:c6:11:ce:0b:e3:df:f2:da:42:66:42:d1:11:ab:91:29: bc:f0:19:2b:ff:0d:a5:b6:aa:c3:51:e2:21:1e:62:22:0c:90: da:a3:9f:a4:2b:99:e3:f3:c5:ea:8c:62:bd:b1:bf:eb:cf:45: b9:06:ea:a6:a6:06:33:f6:4d:6c:14:b1:6e:37:ae:48:08:5c: 74:ae:d2:28:52:aa:aa:1e:43:e9:38:82:a3:db:f7:d8:a3:e2: 57:fc:a2:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvcPUiDjcRC2v7wLpQhi5caCEmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGQkM5QzExMEVGMkY5QjQ1NTNENjEzOTI3RjU1Nzc0 RTA3NkVBOTAeFw0yNjExMDIwNjIwMzZaFw0yNjExMDMwODM3MzZaMDMxMTAvBgNV BAMTKEMxNDAxMDY1MzlDM0RGRUIxQzU5RjNFRUQxRUEyOTY0MjNEMjZBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ePlryx1uYbtC4GQOtixFGfjY i+lps81GW//2OlH6WrzdaEICi3EN93U2DaDTxQgyq2djTeFAcyiQBHuDRkrwI/J7 dYBD4NNtynwWKuKbCAmEK7FmE+rNvv2HR/jj7IpKfgk9Ym1Gf4xRvk1bqcT3VmkA g1QDpJFpXqIduIwJu1Dnx9ON5cN7ZtLrOJDxszitfC2fLWRaFhq2ks51417IOQHi 5wN1iMMT2xBt1YfbyJTUko4hEkmOtK1+F+oxCer76/tBBeXJTE3ygH2vIbs7z6O8 EE5hdLcmGkTjBhWb4ckH6lRgHm7rm0jMqD75AayAuBoeCPdmL1PSAlEGt/UrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwUAQZTnD3+scWfPu0eopZCPSahkwHwYDVR0j BBgwFoAUmPvJwRDvL5tFU9YTkn9Vd04HbqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NmMGE3N2MtMzkyOC00MTMwLWEwOTgtYjQzNzU3MmQ3MjJjLzAvOThGQkM5QzEx MEVGMkY5QjQ1NTNENjEzOTI3RjU1Nzc0RTA3NkVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85OEZCQzlDMTEwRUYyRjlCNDU1M0Q2MTM5MjdGNTU3NzRFMDc2 RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw OTgtYjQzNzU3MmQ3MjJjLzAvOThGQkM5QzExMEVGMkY5QjQ1NTNENjEzOTI3RjU1 Nzc0RTA3NkVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVD1LkWBE+tnyT2hGoSWqYiJF2qyLxKIrvq WDz/FqXqi2QaikVFldGeaaj0xqKzQ76pjg6ZdKRrDPdnRF7G2PDEb6iKWyLgT0QH ZdnUHjTcJLlf1XcFOjoNUrwRPlwM9SVT89SXPXXg2G80p36r25EnP23fw5GAJqsq FUpX719XCpDb/lzj0dyVFrNCHG7xTaNr6w0/kkp5qgHqtSdYhTgjDMdgxhHOC+Pf 8tpCZkLREauRKbzwGSv/DaW2qsNR4iEeYiIMkNqjn6QrmePzxeqMYr2xv+vPRbkG 6qamBjP2TWwUsW43rkgIXHSu0ihSqqoeQ+k4gqPb99ij4lf8otQ= -----END CERTIFICATE-----Generated at Tue Nov 3 00:16:15 2026 by rpki-client