
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json)
Hash identifier: veTNP/SUKm9qiKmTPMGKse2TcvCN5iS4aN76iiumUfw=
Subject key identifier: EF:B6:B4:9F:27:8F:A4:08:31:A5:97:B7:85:73:F4:8A:E2:A4:B6:43
Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Certificate serial: 63789E8DADF7F4F18515AAF43CAB7ED4BA60A3D6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 16:06:25 +0000
Manifest this update: Mon 20 Jul 2026 16:01:25 +0000
Manifest next update: Tue 21 Jul 2026 17:06:25 +0000
Files and hashes: 1: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: lCCNz4j3ZBs81whs2EsnZUD0UShQZEtivNW547nzt50=)
2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 17:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:78:9e:8d:ad:f7:f4:f1:85:15:aa:f4:3c:ab:7e:d4:ba:60:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Validity
Not Before: Jul 20 16:01:25 2026 GMT
Not After : Jul 21 17:06:25 2026 GMT
Subject: CN=EFB6B49F278FA40831A597B78573F48AE2A4B643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:ee:01:a0:7e:b9:12:72:85:84:61:fc:7d:
fb:fb:a1:a2:e3:fd:83:36:4f:a7:5f:87:7b:fd:c1:
ac:ee:c9:a9:3f:11:2d:51:15:12:e6:ca:7c:71:fd:
4f:fa:10:fc:95:12:2a:e5:55:c6:1e:03:3f:8e:9b:
2d:9e:ed:5d:71:32:bb:98:0a:5b:bc:3b:f3:52:9c:
e2:0b:8e:ef:54:cc:a1:9e:e3:87:d2:0e:f3:b1:b1:
60:9c:15:3d:45:7f:ad:67:a0:5a:5b:e0:06:56:60:
87:58:b5:b6:da:24:57:53:c6:89:33:45:1c:1e:67:
33:14:00:63:54:5a:3f:07:66:5c:1c:4e:c5:4e:3a:
6c:d4:42:4b:6c:94:c1:77:a2:f4:8a:01:6e:13:ba:
bb:b5:30:84:11:5b:48:62:ff:7d:42:ec:3c:bd:32:
df:a1:f1:40:cc:66:57:88:f0:aa:bf:32:35:38:50:
b9:ac:fe:07:04:b4:bb:89:b2:57:10:88:41:66:a4:
07:bb:c8:6e:5a:1e:09:6c:33:f7:b5:1e:71:dc:be:
fe:c0:97:87:86:c2:79:51:b5:03:1c:0a:13:b2:09:
88:6b:4a:06:59:08:30:a2:43:83:a9:5b:22:63:6c:
cb:d6:9d:4f:ef:08:49:04:40:2b:b2:39:4c:39:81:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B6:B4:9F:27:8F:A4:08:31:A5:97:B7:85:73:F4:8A:E2:A4:B6:43
X509v3 Authority Key Identifier:
keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:df:ed:5d:23:b9:2a:9a:6b:39:30:3e:71:22:a5:c4:09:db:
34:bf:38:9f:cc:52:58:93:56:0e:9e:5c:02:bd:5b:8c:6f:c4:
32:82:d2:a8:2f:b7:89:fd:48:75:29:b6:c8:9c:99:9a:c8:15:
65:90:42:13:07:40:36:50:b7:04:a4:4a:08:de:b2:cc:0b:69:
a4:60:0a:d0:ed:48:57:20:4a:b1:a4:4b:6c:88:cf:14:e8:b3:
53:f9:63:23:fd:85:90:fe:28:5e:8e:18:3e:ce:ac:35:3c:5f:
e3:c1:c4:ec:96:ee:e5:52:a3:74:7b:32:cb:4a:4c:05:0f:8a:
db:4a:05:65:76:b8:dd:a2:6e:93:dc:4e:7b:ce:01:90:7e:26:
5e:77:c7:5f:87:61:95:83:c4:37:b3:03:dd:85:37:a8:0b:e5:
d6:3f:0a:eb:89:34:96:15:62:86:a8:68:cd:6e:ca:e8:06:f0:
ed:f7:5c:24:f2:df:c5:88:04:79:5e:11:06:61:dc:55:21:64:
ec:d6:93:c1:93:36:34:c3:a9:35:9c:65:0a:81:39:ec:81:06:
65:e8:f4:17:8a:ec:af:f7:52:c7:ea:06:d6:da:e4:70:cf:fe:
a7:1f:9b:85:e1:3e:5f:b9:58:4b:96:24:12:99:b9:86:87:5e:
b9:bf:1a:da
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY3ieja339PGFFar0PKt+1Lpgo9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFG
RUJENUI4MjAeFw0yNjA3MjAxNjAxMjVaFw0yNjA3MjExNzA2MjVaMDMxMTAvBgNV
BAMTKEVGQjZCNDlGMjc4RkE0MDgzMUE1OTdCNzg1NzNGNDhBRTJBNEI2NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Iu4BoH65EnKFhGH8ffv7oaLj
/YM2T6dfh3v9wazuyak/ES1RFRLmynxx/U/6EPyVEirlVcYeAz+Omy2e7V1xMruY
Clu8O/NSnOILju9UzKGe44fSDvOxsWCcFT1Ff61noFpb4AZWYIdYtbbaJFdTxokz
RRweZzMUAGNUWj8HZlwcTsVOOmzUQktslMF3ovSKAW4Turu1MIQRW0hi/31C7Dy9
Mt+h8UDMZleI8Kq/MjU4ULms/gcEtLuJslcQiEFmpAe7yG5aHglsM/e1HnHcvv7A
l4eGwnlRtQMcChOyCYhrSgZZCDCiQ4OpWyJjbMvWnU/vCEkEQCuyOUw5gW4NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU77a0nyePpAgxpZe3hXP0iuKktkMwHwYDVR0j
BBgwFoAUmOGMV894S17LZHb/2jQDof69W4IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWY5YzQ0NmYtZDk3MS00YjVlLWIyNjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdD
Rjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFGRUJENUI4Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OEUxOEM1N0NGNzg0QjVFQ0I2NDc2RkZEQTM0MDNBMUZFQkQ1
QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy
NjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAz
QTFGRUJENUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGPf7V0juSqaazkwPnEipcQJ2zS/OJ/MUliT
Vg6eXAK9W4xvxDKC0qgvt4n9SHUptsicmZrIFWWQQhMHQDZQtwSkSgjesswLaaRg
CtDtSFcgSrGkS2yIzxTos1P5YyP9hZD+KF6OGD7OrDU8X+PBxOyW7uVSo3R7MstK
TAUPittKBWV2uN2ibpPcTnvOAZB+Jl53x1+HYZWDxDezA92FN6gL5dY/CuuJNJYV
YoaoaM1uyugG8O33XCTy38WIBHleEQZh3FUhZOzWk8GTNjTDqTWcZQqBOeyBBmXo
9BeK7K/3UsfqBtba5HDP/qcfm4XhPl+5WEuWJBKZuYaHXrm/Gto=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:25 2026 by rpki-client