
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json)
Hash identifier: 7d/leztTMo7ldl0oGIupmo+PJ0Rf5gMBqZgpS+zEfYw=
Subject key identifier: BD:8E:7D:B1:1F:E0:7E:40:5C:FD:2E:9C:2E:F8:46:5D:00:9B:82:CF
Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3
Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3
Certificate serial: 776DEE2E43AE10A5D4FDA879111D5A55D79F0F0A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 06:15:27 +0000
Manifest this update: Thu 03 Sep 2026 06:10:27 +0000
Manifest next update: Fri 04 Sep 2026 07:12:27 +0000
Files and hashes: 1: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=)
2: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: yZ3gMsl45BSeirB2v1M+PukxwM3QNWD4Njhpw6z9Imo=)
3: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=)
4: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl
rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 07:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6d:ee:2e:43:ae:10:a5:d4:fd:a8:79:11:1d:5a:55:d7:9f:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3
Validity
Not Before: Sep 3 06:10:27 2026 GMT
Not After : Sep 4 07:12:27 2026 GMT
Subject: CN=BD8E7DB11FE07E405CFD2E9C2EF8465D009B82CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:d1:e0:5a:61:2c:04:81:1c:79:26:00:22:
01:f4:a5:c7:f7:fb:c3:f8:1a:84:f2:ca:f7:06:9b:
49:45:25:34:34:85:e2:fd:74:38:f9:f6:74:6c:13:
90:76:c9:0e:a4:39:15:18:f6:4d:2c:20:df:0c:ef:
19:f0:f5:9a:94:ce:f4:0a:0b:57:a3:99:3b:48:29:
f4:e1:b5:16:f4:21:4b:ef:44:ed:95:e7:a2:cc:58:
2b:43:e6:d6:fd:94:7c:90:67:38:78:e8:cd:eb:20:
0d:09:fb:e4:d2:53:19:0c:90:1c:6f:89:ba:71:dc:
a9:8b:1b:82:cf:39:fe:fd:07:40:40:27:4d:69:b0:
b0:fa:7c:c1:92:32:5d:2d:06:0e:4c:00:f0:ef:f5:
ca:38:07:be:d9:92:1e:df:ab:ca:32:15:bb:c3:6e:
78:eb:2b:ab:8d:01:81:2b:83:04:c5:6a:2d:18:82:
f5:ad:cb:77:ac:12:f3:7a:7e:db:19:95:d3:51:38:
1e:d4:4e:4f:cf:11:8f:26:55:5a:b8:27:af:c6:14:
c3:d9:16:32:2c:67:9c:f1:b0:0c:eb:88:d5:ec:ab:
1c:0f:04:d1:3e:e9:51:7b:f5:0b:56:6f:1c:7a:e1:
1c:1a:2a:bc:94:9b:0f:40:0a:b3:d2:c8:15:4c:99:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8E:7D:B1:1F:E0:7E:40:5C:FD:2E:9C:2E:F8:46:5D:00:9B:82:CF
X509v3 Authority Key Identifier:
keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:65:4b:72:06:46:30:ed:e0:9c:86:a2:49:bc:cf:db:57:
3b:c2:9a:87:e3:70:5f:48:0e:30:c3:b7:f6:2e:4d:c9:41:e0:
e7:7d:06:de:f8:72:c4:b1:b4:f8:31:4b:a0:37:e8:ec:70:39:
f1:61:f2:53:43:20:65:17:16:82:ba:c9:ff:28:d9:f4:6f:f8:
5e:f9:01:35:13:f3:4c:8b:c2:af:4f:08:0d:60:e2:ae:a5:b5:
82:64:2c:29:f6:44:11:eb:3b:1a:c0:4f:a3:74:b4:2d:67:90:
b7:2e:94:a9:1a:e3:bc:9a:84:92:8d:ac:b5:9c:99:11:61:f0:
ae:58:b2:3f:4e:da:9f:20:54:87:a1:15:29:20:52:c1:09:a3:
84:31:28:ad:a2:6c:25:1f:9d:04:10:3a:a5:0a:fd:69:b2:ce:
24:c7:84:91:8f:65:d9:0a:b2:70:cd:d8:40:39:d3:f2:ea:1b:
48:2f:b4:35:97:ab:b8:0f:b9:e1:4c:70:db:68:ef:45:03:c4:
2c:57:ad:85:60:c0:d1:43:de:a5:cf:32:a6:98:11:50:92:3a:
4f:c6:8d:8c:99:e4:92:66:3f:60:62:75:ee:07:9f:4f:d0:b9:
9f:70:80:19:6c:c2:8e:28:a0:9e:1a:de:7f:e5:fa:b3:e6:04:
09:d1:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:11:19 2026 by rpki-client