$ rpki-client -vvf rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft File: 98E2D88430E0F6BCECDC35B8596FF471265D238B.mft (raw, json) Hash identifier: BfnfRaeE9CKdOGW1HcFoHdQuQ9XCO51d/vqoMF2NjBc= Subject key identifier: 15:13:7A:46:20:0D:8A:AF:60:07:52:17:80:70:A1:68:52:00:A3:67 Authority key identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B Certificate issuer: /CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Certificate serial: 31B5E04367A67BADACB4082FECEC2B81EBC0E502 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:58:12 +0000 Manifest this update: Tue 21 Jul 2026 01:53:12 +0000 Manifest next update: Wed 22 Jul 2026 03:27:12 +0000 Files and hashes: 1: 98E2D88430E0F6BCECDC35B8596FF471265D238B.crl (hash: MQRn5NBxIBzrTXmhGqp/8K3mYZ8jZt/rlO3iJpc3GVk=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: H29DiGXAuolahNiG0w85WM8CZEw5FJ4zYtAOWOwpwGM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b5:e0:43:67:a6:7b:ad:ac:b4:08:2f:ec:ec:2b:81:eb:c0:e5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Validity Not Before: Jul 21 01:53:12 2026 GMT Not After : Jul 22 03:27:12 2026 GMT Subject: CN=15137A46200D8AAF600752178070A1685200A367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:67:61:09:f4:94:82:8a:1b:0f:6f:cc:04: 0a:52:e8:f3:0f:a0:5f:5d:3d:a2:e0:12:93:99:d3: fe:39:eb:77:46:f6:fc:08:9c:c4:93:44:16:44:87: 08:60:15:98:8c:cf:7b:f1:29:c7:1e:67:87:ab:ea: b9:58:2e:3a:45:47:e8:e4:22:9f:8c:d8:04:c5:c0: 71:8d:ce:66:6a:16:b9:3a:16:cd:ee:70:10:d1:cc: d2:06:91:a4:50:5c:a5:df:e9:c2:13:eb:e3:8c:6f: 0c:f3:6a:58:59:7a:f3:e6:11:0a:d2:de:58:85:a7: 53:61:13:0f:a9:fd:2c:dd:cc:05:52:b7:63:24:c8: e0:e8:79:8d:b8:72:e3:d2:a2:a0:7c:60:e6:4d:50: 9e:59:7f:60:55:70:4a:62:e2:b2:8e:a6:22:83:f1: 2b:8e:c0:88:77:09:eb:c6:ca:50:31:66:2a:7c:79: 31:87:31:7d:6f:c8:3f:48:74:66:5c:07:16:83:2c: d5:13:9d:c2:9a:57:c8:5f:29:dd:c7:ba:b6:b8:76: 74:dd:f7:e1:60:75:ef:ca:a9:d6:f0:bb:6d:1a:39: 50:13:22:a8:a9:78:f9:7f:67:48:60:9d:46:d1:f1: 4c:c0:ef:17:b4:21:99:85:27:0d:b1:20:f0:3c:9d: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:13:7A:46:20:0D:8A:AF:60:07:52:17:80:70:A1:68:52:00:A3:67 X509v3 Authority Key Identifier: keyid:98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:63:d0:94:ca:a1:a8:08:fe:87:3a:4c:84:d8:de:b2:2f:41: 82:f1:46:30:81:b1:c1:c5:b3:ae:80:b9:6b:53:3d:0f:14:23: 10:a7:8a:6e:5c:8f:9c:91:f8:f1:85:51:0b:f5:e0:1a:1c:51: 5e:ea:08:79:c6:f4:5d:74:32:b2:ca:8c:48:8d:cd:f0:3a:62: be:6b:0f:9f:e7:02:cf:42:00:62:70:a3:8a:30:b2:8a:62:74: 8f:61:0d:3a:b6:24:3c:81:53:84:eb:1c:8a:c6:0c:a1:c9:aa: 31:71:4c:8e:0b:3a:5c:b4:9e:57:30:f4:75:f3:46:8a:76:c3: 98:ab:a1:fd:97:67:6e:ce:b4:ab:e4:92:59:e6:21:e6:1e:e6: 3c:39:1a:ad:99:ad:52:94:5f:d3:64:2a:8b:ff:a5:11:19:91: fe:d0:9b:41:1e:c6:80:37:3b:bb:3d:28:5c:db:6c:aa:86:4f: f3:3e:51:11:47:32:31:63:c5:29:51:45:99:83:c7:92:62:d2: 6b:4e:c8:7d:44:2c:55:98:09:39:17:c5:d8:c3:10:6d:9d:c3: 20:d4:74:77:cf:0c:f0:f2:24:b3:8c:de:3f:e4:bc:e4:ef:e5: cf:62:cc:49:0a:21:0f:56:18:62:27:c9:1d:1b:8f:cd:59:76: 14:ea:65:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbXgQ2eme62stAgv7OwrgevA5QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEy NjVEMjM4QjAeFw0yNjA3MjEwMTUzMTJaFw0yNjA3MjIwMzI3MTJaMDMxMTAvBgNV BAMTKDE1MTM3QTQ2MjAwRDhBQUY2MDA3NTIxNzgwNzBBMTY4NTIwMEEzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuWdhCfSUgoobD2/MBApS6PMP oF9dPaLgEpOZ0/4563dG9vwInMSTRBZEhwhgFZiMz3vxKcceZ4er6rlYLjpFR+jk Ip+M2ATFwHGNzmZqFrk6Fs3ucBDRzNIGkaRQXKXf6cIT6+OMbwzzalhZevPmEQrS 3liFp1NhEw+p/SzdzAVSt2MkyODoeY24cuPSoqB8YOZNUJ5Zf2BVcEpi4rKOpiKD 8SuOwIh3CevGylAxZip8eTGHMX1vyD9IdGZcBxaDLNUTncKaV8hfKd3Hura4dnTd 9+Fgde/Kqdbwu20aOVATIqipePl/Z0hgnUbR8UzA7xe0IZmFJw2xIPA8ne/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFRN6RiANiq9gB1IXgHChaFIAo2cwHwYDVR0j BBgwFoAUmOLYhDDg9rzs3DW4WW/0cSZdI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg5YTA2NjEtMzFlZS00OWEyLWFlOWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQz MEUwRjZCQ0VDREMzNUI4NTk2RkY0NzEyNjVEMjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUyRDg4NDMwRTBGNkJDRUNEQzM1Qjg1OTZGRjQ3MTI2NUQy MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvOThFMkQ4ODQzMEUwRjZCQ0VDREMzNUI4NTk2RkY0 NzEyNjVEMjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlj0JTKoagI/oc6TITY3rIvQYLxRjCBscHF s66AuWtTPQ8UIxCnim5cj5yR+PGFUQv14BocUV7qCHnG9F10MrLKjEiNzfA6Yr5r D5/nAs9CAGJwo4owsopidI9hDTq2JDyBU4TrHIrGDKHJqjFxTI4LOly0nlcw9HXz Rop2w5irof2XZ27OtKvkklnmIeYe5jw5Gq2ZrVKUX9NkKov/pREZkf7Qm0EexoA3 O7s9KFzbbKqGT/M+URFHMjFjxSlRRZmDx5Ji0mtOyH1ELFWYCTkXxdjDEG2dwyDU dHfPDPDyJLOM3j/kvOTv5c9izEkKIQ9WGGInyR0bj81ZdhTqZds= -----END CERTIFICATE-----Generated at Tue Jul 21 08:48:50 2026 by rpki-client