$ rpki-client -vvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json) Hash identifier: 9wd/O1D1dsvC1QHi126xV9updG2a0/p6Q8NKT3FfBpk= Subject key identifier: A1:EA:6E:72:A7:DD:B3:51:34:D4:7C:D6:A1:FA:7B:B8:16:B9:10:53 Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Certificate serial: 68BD6AE8A8BA6C0F5E108794281499681311026B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:36:42 +0000 Manifest this update: Tue 02 Jun 2026 13:31:42 +0000 Manifest next update: Wed 03 Jun 2026 14:34:42 +0000 Files and hashes: 1: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=) 2: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=) 3: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: 5ikERCyAkz2e1RQSupuJ7SGMWWygbJIepW1TpEhc94I=) 4: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bd:6a:e8:a8:ba:6c:0f:5e:10:87:94:28:14:99:68:13:11:02:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Validity Not Before: Jun 2 13:31:42 2026 GMT Not After : Jun 3 14:34:42 2026 GMT Subject: CN=A1EA6E72A7DDB35134D47CD6A1FA7BB816B91053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ff:6c:cb:eb:33:ce:31:f6:2b:20:4d:0d:4f: 20:4d:ef:dd:51:9e:42:cf:9b:ee:fb:ef:e7:de:a1: d7:25:c6:25:36:17:8a:0d:3f:39:70:3d:da:22:10: 0b:80:29:4a:c0:e0:85:0a:2d:89:b9:ff:69:6f:8d: f3:78:71:51:8a:0a:ca:b5:d3:59:ba:2c:1f:4c:2e: ae:f8:ef:52:9d:59:ec:96:a7:6e:24:6d:83:5f:58: 32:fb:e0:f1:60:99:12:98:bb:37:24:55:3a:68:ae: e2:ad:17:39:6b:84:44:34:24:32:ad:78:4c:65:ae: c6:f0:6d:69:55:5c:f9:ba:d0:b9:b4:22:be:c7:85: 71:9a:13:84:a6:78:ab:26:ad:66:80:18:d7:68:42: 75:3d:1e:4c:3b:f5:f0:93:31:80:7b:c3:46:e1:b1: b4:84:64:5b:20:c3:c6:86:5d:bd:52:12:e7:65:4a: f8:19:4e:11:95:16:7f:95:a7:cd:83:ee:54:01:f2: bb:56:50:57:de:a1:3c:80:e4:57:f1:33:e6:c1:d6: cd:09:36:d7:46:1a:aa:47:f8:d4:94:aa:86:0a:52: b9:e5:54:7c:e8:d1:44:3a:66:38:86:a7:30:82:0f: 2a:cf:9e:84:8e:82:bd:2e:dd:91:c3:f6:81:d8:2e: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EA:6E:72:A7:DD:B3:51:34:D4:7C:D6:A1:FA:7B:B8:16:B9:10:53 X509v3 Authority Key Identifier: keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:31:44:dd:4a:7d:9e:1e:0d:ce:42:7c:80:da:8c:45:a4:27: 21:ac:ab:e9:36:e9:6c:e9:f4:79:9d:d2:04:57:72:93:7d:bc: 88:10:d0:4b:7d:06:9e:4b:d8:59:2e:17:38:35:95:e4:dd:f5: c0:e6:d9:5a:64:02:ea:ca:e8:c1:65:4a:89:f8:c4:cd:dc:71: ca:0b:12:d4:30:36:06:0c:ad:4d:77:50:e9:e1:bd:8a:21:cf: 49:83:2b:ca:d9:c6:08:db:c3:d2:13:b4:6e:5d:8f:16:0e:c6: d3:59:c2:01:b7:96:53:86:e7:8e:9a:eb:3b:d8:62:43:57:2f: 33:ae:22:c9:2e:69:e7:5d:37:a0:c3:d7:38:28:37:65:dd:5c: 15:ff:a9:0d:d3:9b:e9:dd:9b:45:72:35:c1:9d:ef:ec:02:77: 30:d7:63:31:12:ae:c6:07:47:20:9d:a6:20:e3:a4:24:58:39: 50:50:1a:ca:b4:8f:41:b2:76:b0:dc:7a:79:c0:c1:89:f5:c7: 9f:eb:97:8c:d3:50:4b:c8:e2:34:53:26:19:dc:6e:84:4e:f7: b8:7c:59:fd:45:25:1b:f0:58:12:ff:5a:d3:87:17:ed:0c:10: ed:b0:ab:e6:1f:3b:8d:ad:e6:d8:1e:51:9d:a4:17:5c:b9:bb: d3:9c:a4:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaL1q6Ki6bA9eEIeUKBSZaBMRAmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0 OEIwNDdFMzAeFw0yNjA2MDIxMzMxNDJaFw0yNjA2MDMxNDM0NDJaMDMxMTAvBgNV BAMTKEExRUE2RTcyQTdEREIzNTEzNEQ0N0NENkExRkE3QkI4MTZCOTEwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/2zL6zPOMfYrIE0NTyBN791R nkLPm+777+feodclxiU2F4oNPzlwPdoiEAuAKUrA4IUKLYm5/2lvjfN4cVGKCsq1 01m6LB9MLq7471KdWeyWp24kbYNfWDL74PFgmRKYuzckVTporuKtFzlrhEQ0JDKt eExlrsbwbWlVXPm60Lm0Ir7HhXGaE4SmeKsmrWaAGNdoQnU9Hkw79fCTMYB7w0bh sbSEZFsgw8aGXb1SEudlSvgZThGVFn+Vp82D7lQB8rtWUFfeoTyA5FfxM+bB1s0J NtdGGqpH+NSUqoYKUrnlVHzo0UQ6ZjiGpzCCDyrPnoSOgr0u3ZHD9oHYLqpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoepucqfds1E01HzWofp7uBa5EFMwHwYDVR0j BBgwFoAUmLFuyIQwDH8unlOkpkesZ0iwR+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJjYWVhM2ItYmQ3Zi00ODFhLTliYzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4 NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0OEIwNDdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEIxNkVDODg0MzAwQzdGMkU5RTUzQTRBNjQ3QUM2NzQ4QjA0 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FD Njc0OEIwNDdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUxRN1KfZ4eDc5CfIDajEWkJyGsq+k26Wzp 9Hmd0gRXcpN9vIgQ0Et9Bp5L2FkuFzg1leTd9cDm2VpkAurK6MFlSon4xM3cccoL EtQwNgYMrU13UOnhvYohz0mDK8rZxgjbw9ITtG5djxYOxtNZwgG3llOG546a6zvY YkNXLzOuIskuaeddN6DD1zgoN2XdXBX/qQ3Tm+ndm0VyNcGd7+wCdzDXYzESrsYH RyCdpiDjpCRYOVBQGsq0j0GydrDcennAwYn1x5/rl4zTUEvI4jRTJhncboRO97h8 Wf1FJRvwWBL/WtOHF+0MEO2wq+YfO42t5tgeUZ2kF1y5u9OcpBw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:50 2026 by rpki-client