$ rpki-client -vvf rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft File: 98E2D88430E0F6BCECDC35B8596FF471265D238B.mft (raw, json) Hash identifier: XtfWNNsGgHUBP4N/CJg9g7GO6QoPk9CN7ub2HWb4qaI= Subject key identifier: B5:31:E0:1C:41:A7:64:7F:5A:D6:E3:3F:6B:A0:2D:88:06:81:1C:11 Authority key identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B Certificate issuer: /CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Certificate serial: 5C85B43EB6879779F888A0AE3B01127D075BB76D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:44:37 +0000 Manifest this update: Tue 02 Jun 2026 23:39:37 +0000 Manifest next update: Thu 04 Jun 2026 00:08:37 +0000 Files and hashes: 1: 98E2D88430E0F6BCECDC35B8596FF471265D238B.crl (hash: ImnaQ5H+Z6wvflU/M3WfIZtvZlZ88EuvBrIiZcn2Wos=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: H29DiGXAuolahNiG0w85WM8CZEw5FJ4zYtAOWOwpwGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:85:b4:3e:b6:87:97:79:f8:88:a0:ae:3b:01:12:7d:07:5b:b7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Validity Not Before: Jun 2 23:39:37 2026 GMT Not After : Jun 4 00:08:37 2026 GMT Subject: CN=B531E01C41A7647F5AD6E33F6BA02D8806811C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:0d:82:a0:54:4b:6e:d5:72:cf:3f:ce:55: a9:d0:ca:8b:75:e1:b2:f2:e8:13:72:d0:fe:35:9d: ed:2f:1b:a5:cf:e0:f4:37:42:d1:71:13:90:ca:3f: 53:f1:3f:c2:ea:73:3a:1a:24:71:33:33:49:cd:c5: ea:e3:a8:bc:b5:79:0e:bd:d0:91:0b:f6:7f:ac:84: ca:4c:32:02:3d:25:94:a4:29:5c:fb:73:22:7d:2c: 51:52:da:4e:02:5f:31:7c:e4:8c:3d:5b:6e:c3:64: 9b:a1:8e:de:5f:a2:e9:8a:fc:20:ea:c9:48:0a:ed: 1c:9c:27:dc:37:de:fd:44:fc:6c:fb:ce:74:49:86: 9c:58:30:6c:3b:3e:ca:f8:31:b9:94:bd:4d:52:45: 1d:07:29:aa:76:94:c2:c5:19:6f:65:d7:e7:7d:0d: fe:2b:e8:a4:c9:cc:ed:e7:f4:d4:cf:e2:8d:1b:e3: b5:fe:bc:b2:48:59:5a:37:ae:9f:15:8b:85:80:f6: 8c:d6:69:0c:60:08:df:36:50:5b:2d:d2:bf:96:83: 53:8e:e8:9d:c1:59:38:83:1d:b8:dc:54:08:b6:ea: f0:ad:85:ec:01:b3:15:9c:3f:be:94:e1:63:18:aa: 49:31:c0:af:64:48:7b:80:84:d4:32:d7:66:8a:a4: 58:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:E0:1C:41:A7:64:7F:5A:D6:E3:3F:6B:A0:2D:88:06:81:1C:11 X509v3 Authority Key Identifier: keyid:98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:34:a8:ac:6f:aa:ff:7f:6f:48:86:af:9b:13:82:c4:a0:60: e0:17:97:4a:69:98:df:26:3b:26:91:97:e0:7d:89:a7:b1:89: 3d:4d:79:ea:25:bf:4a:01:d8:c4:32:f5:9b:6a:e7:cc:95:ff: 63:c5:98:2d:09:90:12:06:33:3a:55:d3:4b:44:20:72:d1:c1: 29:a1:01:d5:54:5b:82:da:82:91:a1:54:ce:d1:ec:d9:f1:11: c0:21:f6:d8:0c:28:50:42:f1:21:ef:17:d4:50:cd:5d:f8:d8: 9c:8b:21:e7:4f:a0:56:46:c6:20:72:6f:71:91:29:50:d9:18: cb:82:7d:63:34:36:5c:79:22:78:a2:cd:44:71:69:c7:20:f0: 7d:69:a9:70:6f:32:8b:25:3f:14:55:c2:5d:8c:d1:18:37:76: e7:da:0c:8a:4d:11:9d:53:e2:cc:0e:38:97:d9:46:50:bc:4c: 4c:ce:f2:88:51:62:65:fc:f2:c4:4a:c6:39:da:05:32:e3:f0: 8a:d4:d2:5d:e0:8e:90:bf:29:ff:65:a2:30:49:ed:f0:7b:59: 97:54:9a:6c:c1:51:33:34:68:ba:4c:d5:7b:b1:e5:f3:91:8f: a2:12:40:2f:c5:63:8c:40:58:d2:28:30:7c:72:58:43:89:29: 0a:88:80:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIW0PraHl3n4iKCuOwESfQdbt20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEy NjVEMjM4QjAeFw0yNjA2MDIyMzM5MzdaFw0yNjA2MDQwMDA4MzdaMDMxMTAvBgNV BAMTKEI1MzFFMDFDNDFBNzY0N0Y1QUQ2RTMzRjZCQTAyRDg4MDY4MTFDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmdg2CoFRLbtVyzz/OVanQyot1 4bLy6BNy0P41ne0vG6XP4PQ3QtFxE5DKP1PxP8LqczoaJHEzM0nNxerjqLy1eQ69 0JEL9n+shMpMMgI9JZSkKVz7cyJ9LFFS2k4CXzF85Iw9W27DZJuhjt5foumK/CDq yUgK7RycJ9w33v1E/Gz7znRJhpxYMGw7Psr4MbmUvU1SRR0HKap2lMLFGW9l1+d9 Df4r6KTJzO3n9NTP4o0b47X+vLJIWVo3rp8Vi4WA9ozWaQxgCN82UFst0r+Wg1OO 6J3BWTiDHbjcVAi26vCthewBsxWcP76U4WMYqkkxwK9kSHuAhNQy12aKpFjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtTHgHEGnZH9a1uM/a6AtiAaBHBEwHwYDVR0j BBgwFoAUmOLYhDDg9rzs3DW4WW/0cSZdI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg5YTA2NjEtMzFlZS00OWEyLWFlOWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQz MEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEyNjVEMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUyRDg4NDMwRTBGNkJDRUNEQzM1Qjg1OTZGRjQ3MTI2NUQy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0 NzEyNjVEMjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKI0qKxvqv9/b0iGr5sTgsSgYOAXl0ppmN8m OyaRl+B9iaexiT1Neeolv0oB2MQy9Ztq58yV/2PFmC0JkBIGMzpV00tEIHLRwSmh AdVUW4LagpGhVM7R7NnxEcAh9tgMKFBC8SHvF9RQzV342JyLIedPoFZGxiByb3GR KVDZGMuCfWM0Nlx5IniizURxaccg8H1pqXBvMoslPxRVwl2M0Rg3dufaDIpNEZ1T 4swOOJfZRlC8TEzO8ohRYmX88sRKxjnaBTLj8IrU0l3gjpC/Kf9lojBJ7fB7WZdU mmzBUTM0aLpM1Xux5fORj6ISQC/FY4xAWNIoMHxyWEOJKQqIgPs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:57 2026 by rpki-client