$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft (raw, json) Hash identifier: gjGk8pXe3uEIWkYUWV9LdxXz4lHbWBZdD+gMAmhcYqU= Subject key identifier: 10:AA:1D:6C:12:9C:47:E3:2D:9E:9F:00:D9:DE:53:AF:CD:D9:3C:13 Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Certificate serial: 332620F05F1E338A86126858EA8359DC02F6C671 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:55:59 +0000 Manifest this update: Tue 02 Jun 2026 12:50:59 +0000 Manifest next update: Wed 03 Jun 2026 16:19:59 +0000 Files and hashes: 1: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl (hash: 2JvkJuQOWhZ9Zwybasq/lt9GYl82cWfGtw4WdaJ7zPk=) 2: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: iZC63XKtQ4A+tLBPo00EIvl5gTnecWbM3wWVRgyRhoQ=) 3: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=) 4: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: w40+4vjnbHq0TV83WSPBOHHWioBKVnOPxDYQ5jp0iE0=) 5: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:26:20:f0:5f:1e:33:8a:86:12:68:58:ea:83:59:dc:02:f6:c6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Validity Not Before: Jun 2 12:50:59 2026 GMT Not After : Jun 3 16:19:59 2026 GMT Subject: CN=10AA1D6C129C47E32D9E9F00D9DE53AFCDD93C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:57:a4:37:60:8e:f8:27:69:d7:5a:00:50: 36:eb:c5:68:54:67:73:20:bb:86:06:07:d0:3f:b8: f3:1b:ee:00:3d:d5:02:c1:f2:d6:3e:ee:45:3d:af: 59:42:8f:e5:89:69:fe:db:e7:53:c1:c8:b1:80:9d: 26:69:cb:4c:f2:50:49:07:b3:33:b3:b8:d4:7f:73: 7d:98:e4:63:6a:69:d5:be:e5:dc:a3:43:66:8d:80: 7a:8f:45:cd:7e:21:11:e6:f3:98:4b:91:17:fd:e6: 2b:4c:4c:47:a2:c6:76:6f:7f:e8:f9:09:3f:57:0b: 51:22:e7:f8:18:ec:41:20:06:18:6b:f3:be:be:01: 1d:f0:1e:cd:6e:e7:f9:68:9d:5a:67:05:8d:e3:99: 53:b9:b4:5d:8c:55:07:37:f9:e7:a9:93:8f:11:59: c3:c2:6f:49:1f:38:d2:23:06:98:16:e9:a0:e6:29: 01:41:ff:df:2e:f2:39:a7:2b:fe:3c:ad:7c:b9:bd: be:40:41:2c:69:fa:82:ea:3f:2b:33:2d:bc:ae:cc: 0b:a4:2c:82:d9:89:e0:a3:9d:c0:98:63:52:c1:d9: 23:03:f1:aa:e6:34:07:b3:53:12:2d:f3:b4:dc:73: 0d:a0:39:a8:75:2e:33:f7:53:77:2d:26:9b:90:5b: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:1D:6C:12:9C:47:E3:2D:9E:9F:00:D9:DE:53:AF:CD:D9:3C:13 X509v3 Authority Key Identifier: keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1e:3b:80:98:7d:bc:d2:98:41:3b:db:09:b9:f5:f8:f2:06: cc:40:ef:f9:38:f8:96:0c:4d:26:9b:fc:cb:b4:33:fe:5c:44: b5:11:6d:1c:e3:b8:a8:b3:cb:61:36:bc:ca:c9:67:0d:b0:dd: 6c:0d:9c:23:04:82:e0:16:4a:67:e2:3f:f5:59:e0:85:ed:7a: 50:6b:bc:e1:ae:f3:c3:8e:91:a6:ae:00:39:cf:bd:fa:e6:10: 1e:60:d1:96:23:90:3f:1a:25:24:ac:e9:c8:40:c0:7e:71:ed: 74:62:23:1f:a2:a3:37:b0:d6:fb:4e:f2:c6:e7:44:f5:a3:de: a5:9a:d9:c5:80:cc:ba:10:ad:0b:f4:0a:0a:09:8a:ba:e5:72: 9d:86:6b:22:11:90:0c:cb:b5:dc:6e:dd:12:97:02:e7:3e:62: c1:b9:e7:91:65:b9:d9:e1:94:20:df:3d:55:43:33:0c:0c:98: 4b:a4:ff:96:49:87:41:07:be:84:ff:8e:46:8a:05:1c:10:42: a0:a5:b8:b8:1a:f7:93:26:8a:0f:a1:95:b9:ef:11:60:14:f1: c6:1e:97:23:6e:e5:e1:fa:55:7b:c6:78:52:d2:f5:13:af:2f: c6:af:7f:d6:1b:0f:bd:ab:06:8f:6d:44:20:94:19:15:9d:6d: 56:fd:4e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyYg8F8eM4qGEmhY6oNZ3AL2xnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz RUZEOTU2OTAeFw0yNjA2MDIxMjUwNTlaFw0yNjA2MDMxNjE5NTlaMDMxMTAvBgNV BAMTKDEwQUExRDZDMTI5QzQ3RTMyRDlFOUYwMEQ5REU1M0FGQ0REOTNDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioFekN2CO+Cdp11oAUDbrxWhU Z3Mgu4YGB9A/uPMb7gA91QLB8tY+7kU9r1lCj+WJaf7b51PByLGAnSZpy0zyUEkH szOzuNR/c32Y5GNqadW+5dyjQ2aNgHqPRc1+IRHm85hLkRf95itMTEeixnZvf+j5 CT9XC1Ei5/gY7EEgBhhr876+AR3wHs1u5/lonVpnBY3jmVO5tF2MVQc3+eepk48R WcPCb0kfONIjBpgW6aDmKQFB/98u8jmnK/48rXy5vb5AQSxp+oLqPyszLbyuzAuk LILZieCjncCYY1LB2SMD8armNAezUxIt87Tccw2gOah1LjP3U3ctJpuQW2uLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKodbBKcR+Mtnp8A2d5Tr83ZPBMwHwYDVR0j BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5 NTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUw OEUzRUZEOTU2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQeO4CYfbzSmEE72wm59fjyBsxA7/k4+JYM TSab/Mu0M/5cRLURbRzjuKizy2E2vMrJZw2w3WwNnCMEguAWSmfiP/VZ4IXtelBr vOGu88OOkaauADnPvfrmEB5g0ZYjkD8aJSSs6chAwH5x7XRiIx+iozew1vtO8sbn RPWj3qWa2cWAzLoQrQv0CgoJirrlcp2GayIRkAzLtdxu3RKXAuc+YsG555Fludnh lCDfPVVDMwwMmEuk/5ZJh0EHvoT/jkaKBRwQQqCluLga95Mmig+hlbnvEWAU8cYe lyNu5eH6VXvGeFLS9ROvL8avf9YbD72rBo9tRCCUGRWdbVb9Tj4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:14 2026 by rpki-client