$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft (raw, json) Hash identifier: 14yWUAaCn4iZWvLwNDo1cfLIk4esVwJovx9eLyPONXg= Subject key identifier: A5:29:B3:59:F4:67:36:5D:49:E7:D9:DC:5E:15:17:87:4B:D6:B2:BB Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Certificate serial: 6E5F45258BC8CC1FB159642D0193867B738FFE96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:06:22 +0000 Manifest this update: Mon 20 Jul 2026 12:01:22 +0000 Manifest next update: Tue 21 Jul 2026 14:19:22 +0000 Files and hashes: 1: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl (hash: Fgch2vvOsB7QW8wDSI1JVGzRxH11ZWLKrd6NhI/Un0w=) 2: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=) 3: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=) 4: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: w40+4vjnbHq0TV83WSPBOHHWioBKVnOPxDYQ5jp0iE0=) 5: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: iZC63XKtQ4A+tLBPo00EIvl5gTnecWbM3wWVRgyRhoQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5f:45:25:8b:c8:cc:1f:b1:59:64:2d:01:93:86:7b:73:8f:fe:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Validity Not Before: Jul 20 12:01:22 2026 GMT Not After : Jul 21 14:19:22 2026 GMT Subject: CN=A529B359F467365D49E7D9DC5E1517874BD6B2BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:38:bb:d9:32:d2:0a:cd:4d:c2:aa:dc:b6: 94:ef:6b:b6:c9:d3:89:b0:d1:55:34:b8:3f:fe:7f: 31:82:d2:50:b0:09:1b:1b:15:90:7e:f0:45:2c:87: f7:c4:e5:f5:4f:5b:41:a0:4d:9f:d7:81:28:48:af: dd:8b:ad:79:83:d1:5a:28:89:d9:11:fb:e2:d0:64: b6:d9:10:be:59:3a:84:1e:b8:a6:cd:04:d4:02:9a: 2e:3d:09:10:5b:cd:06:02:69:4e:27:e4:61:3c:0d: 4b:d9:09:76:22:fa:97:6d:e2:d0:83:cd:aa:3c:52: 56:76:76:90:bd:23:c3:b7:18:a4:41:9b:51:5d:0e: d8:8e:68:9f:39:83:de:1c:28:bc:39:92:09:86:b5: c2:73:5f:3f:16:ef:a6:33:a5:b1:34:d5:fe:60:56: f6:0a:df:03:3b:4e:8e:d3:f6:5a:97:8a:8a:17:b3: f1:4a:cf:fd:2e:fe:f9:e6:8f:ce:1f:59:d8:0c:a7: ea:bd:3e:36:3b:1c:18:d6:2f:83:16:62:e3:2f:a9: 6b:da:33:d3:f1:f6:a7:0d:35:dc:24:fd:1e:79:71: 4f:c0:cc:6a:05:2f:82:9c:ab:8d:19:79:aa:69:1d: cf:7d:1d:fe:c3:65:1b:46:03:60:d6:f0:97:7f:bc: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:B3:59:F4:67:36:5D:49:E7:D9:DC:5E:15:17:87:4B:D6:B2:BB X509v3 Authority Key Identifier: keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e2:85:90:81:86:fc:79:3b:1d:af:09:31:28:fe:07:00:f3: 4e:ec:e1:c5:68:40:88:ed:85:1a:ca:50:0e:cc:da:a4:01:e7: fe:1f:f9:4f:67:e7:ca:9a:ea:c2:6e:d8:6c:5c:b7:a1:ec:85: f1:fb:32:22:87:a6:0f:8b:c1:81:3b:db:23:25:12:ce:dd:04: af:6c:ac:d8:0d:8f:cd:69:7b:27:74:83:17:a8:27:e5:15:de: 2e:50:3c:07:66:12:6f:04:15:3f:7c:6e:ab:24:7c:dc:a6:01: 28:5b:7e:ea:e8:4d:a2:2c:a5:59:23:67:dd:16:32:ee:db:e6: 81:01:97:ed:97:08:57:4f:93:27:56:b7:93:15:e4:c3:5a:ca: 5b:8b:f0:01:78:80:aa:1e:59:4d:fd:c6:18:a4:43:ff:44:3a: 51:43:04:d6:17:7b:8a:69:2f:56:69:9f:c6:ec:fd:ac:43:87: eb:a3:35:d3:c4:18:02:7b:42:07:ed:56:27:2c:38:5e:dd:af: 1b:38:49:df:e9:82:34:2b:4f:fb:03:96:09:af:a4:56:88:12: 26:49:7f:e1:4b:ce:a6:b6:e4:01:db:cb:27:90:79:87:ed:a6: f7:d7:b7:ca:2b:25:0c:9e:9d:35:ec:7b:b7:2d:47:9e:8a:b9: 34:14:cd:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbl9FJYvIzB+xWWQtAZOGe3OP/pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz RUZEOTU2OTAeFw0yNjA3MjAxMjAxMjJaFw0yNjA3MjExNDE5MjJaMDMxMTAvBgNV BAMTKEE1MjlCMzU5RjQ2NzM2NUQ0OUU3RDlEQzVFMTUxNzg3NEJENkIyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVzi72TLSCs1NwqrctpTva7bJ 04mw0VU0uD/+fzGC0lCwCRsbFZB+8EUsh/fE5fVPW0GgTZ/XgShIr92LrXmD0Voo idkR++LQZLbZEL5ZOoQeuKbNBNQCmi49CRBbzQYCaU4n5GE8DUvZCXYi+pdt4tCD zao8UlZ2dpC9I8O3GKRBm1FdDtiOaJ85g94cKLw5kgmGtcJzXz8W76YzpbE01f5g VvYK3wM7To7T9lqXiooXs/FKz/0u/vnmj84fWdgMp+q9PjY7HBjWL4MWYuMvqWva M9Px9qcNNdwk/R55cU/AzGoFL4Kcq40ZeappHc99Hf7DZRtGA2DW8Jd/vIXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpSmzWfRnNl1J59ncXhUXh0vWsrswHwYDVR0j BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5 NTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUw OEUzRUZEOTU2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7ihZCBhvx5Ox2vCTEo/gcA807s4cVoQIjt hRrKUA7M2qQB5/4f+U9n58qa6sJu2Gxct6HshfH7MiKHpg+LwYE72yMlEs7dBK9s rNgNj81peyd0gxeoJ+UV3i5QPAdmEm8EFT98bqskfNymAShbfuroTaIspVkjZ90W Mu7b5oEBl+2XCFdPkydWt5MV5MNayluL8AF4gKoeWU39xhikQ/9EOlFDBNYXe4pp L1Zpn8bs/axDh+ujNdPEGAJ7QgftVicsOF7drxs4Sd/pgjQrT/sDlgmvpFaIEiZJ f+FLzqa25AHbyyeQeYftpvfXt8orJQyenTXse7ctR56KuTQUzSk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:30:36 2026 by rpki-client