$ rpki-client -vvf rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft File: 98EC8965126CEAAF07DB20456F30ADDA7E619614.mft (raw, json) Hash identifier: 6u3TKwqtRt/bbukDFqzMTN2/ZO8KhNIl2/RTxe1NFak= Subject key identifier: 20:56:40:AD:CE:33:44:CA:68:F0:CD:A9:5B:B3:40:F2:E2:7F:64:BA Authority key identifier: 98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14 Certificate issuer: /CN=98EC8965126CEAAF07DB20456F30ADDA7E619614 Certificate serial: 32EAFE8508B3E10BAF1D19B4AFC06AE0F7D0CEF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft Manifest number: 1A Signing time: Wed 20 May 2026 19:09:10 +0000 Manifest this update: Wed 20 May 2026 19:04:10 +0000 Manifest next update: Thu 21 May 2026 22:29:10 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: H5sSyPFigguVE/vHzW6P4HgP+k0uALrlMtr/Qk6iyOw=) 2: 98EC8965126CEAAF07DB20456F30ADDA7E619614.crl (hash: cIiYLIHkV8Xwokvqz/aLsu1aDmLOu1II0dszl3Ec3x8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 09:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ea:fe:85:08:b3:e1:0b:af:1d:19:b4:af:c0:6a:e0:f7:d0:ce:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98EC8965126CEAAF07DB20456F30ADDA7E619614 Validity Not Before: May 20 19:04:10 2026 GMT Not After : May 21 22:29:10 2026 GMT Subject: CN=205640ADCE3344CA68F0CDA95BB340F2E27F64BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:a7:ba:3d:12:3d:41:03:4b:40:f6:a3:e1: 3d:7e:89:0c:73:65:b5:ac:cb:33:f6:17:2d:56:8a: f4:14:2b:c6:fa:7d:14:3d:9f:2a:aa:ee:47:d4:e3: 53:26:bf:c5:78:76:bd:09:d7:47:82:ec:05:8a:b2: 90:a1:66:ab:ba:1d:1c:f9:a2:e7:fd:c3:96:40:29: a6:fb:e6:6d:b1:5c:08:10:0f:f8:c2:f0:eb:a4:79: bf:6c:11:1f:fc:6f:23:ba:82:e1:3a:bb:41:41:cc: a9:e4:14:eb:55:c8:81:ba:2a:61:2e:bd:c8:c0:1b: 1c:76:ae:b4:2a:5a:1e:be:16:18:d1:e5:45:0f:ed: 3b:47:52:c7:c8:98:42:35:cf:e3:82:fa:c9:de:17: 54:2e:3c:e5:a1:12:5f:ca:02:c6:c0:45:8d:18:aa: 49:64:bb:82:7b:c8:da:62:17:f8:be:cd:93:81:44: 51:a1:ff:09:e0:42:03:67:b1:a2:94:78:0b:14:45: f8:81:17:db:bc:e9:b5:7f:60:7c:23:ab:eb:23:b4: 49:e6:df:97:f3:e1:dd:b6:1d:5e:fa:6c:7e:d7:f6: 73:c3:19:18:49:0a:0d:5a:d2:ba:1a:42:d2:ad:c1: 59:4c:b0:56:b8:76:fb:0b:63:e4:98:15:c8:0f:38: f8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:56:40:AD:CE:33:44:CA:68:F0:CD:A9:5B:B3:40:F2:E2:7F:64:BA X509v3 Authority Key Identifier: keyid:98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a9:ac:bd:3c:ee:6a:87:77:0e:4b:a7:55:49:e8:0e:7d:a5: ed:b7:5d:1f:9b:5f:ce:e2:58:e2:22:95:32:42:3d:e5:27:b1: bd:24:7e:cd:a1:00:b5:ec:d9:75:20:e3:1c:bb:19:90:e4:b5: fc:61:2d:1e:34:7f:0d:96:f8:6f:7a:6e:dd:4c:6c:f9:0c:f8: 84:2b:6e:0d:77:a3:99:df:bc:2c:35:26:3c:38:1f:2b:5a:3f: ba:ff:36:75:21:46:27:bb:eb:fb:6d:6e:92:e9:9f:7d:8f:7b: 70:d5:fe:9b:4c:d3:db:22:e1:6e:01:e8:09:d2:11:36:68:00: dd:9b:24:9e:7e:d7:2a:8b:41:64:ad:d8:28:10:63:ee:d9:1a: f4:73:0c:74:64:89:75:85:70:6c:6d:ea:32:b2:82:69:34:ca: 33:01:48:6b:14:af:c2:32:a3:3e:c2:ae:b6:08:de:d0:b0:b9: 5c:e3:60:4f:0b:24:5f:8b:14:9f:72:46:f8:19:be:3a:92:6f: 46:a2:ed:ac:b9:d6:28:e2:1b:cf:c6:53:80:14:1a:05:cf:ec: 9e:ff:14:a9:d3:88:5e:35:76:a2:1f:59:0a:2a:ea:6e:3a:17: 97:ee:e0:f0:d3:aa:66:66:b6:d2:86:86:db:e2:ac:39:7d:f1: b0:bb:20:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMur+hQiz4QuvHRm0r8Bq4PfQzvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFQzg5NjUxMjZDRUFBRjA3REIyMDQ1NkYzMEFEREE3 RTYxOTYxNDAeFw0yNjA1MjAxOTA0MTBaFw0yNjA1MjEyMjI5MTBaMDMxMTAvBgNV BAMTKDIwNTY0MEFEQ0UzMzQ0Q0E2OEYwQ0RBOTVCQjM0MEYyRTI3RjY0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDae6PRI9QQNLQPaj4T1+iQxz ZbWsyzP2Fy1WivQUK8b6fRQ9nyqq7kfU41Mmv8V4dr0J10eC7AWKspChZqu6HRz5 ouf9w5ZAKab75m2xXAgQD/jC8Oukeb9sER/8byO6guE6u0FBzKnkFOtVyIG6KmEu vcjAGxx2rrQqWh6+FhjR5UUP7TtHUsfImEI1z+OC+sneF1QuPOWhEl/KAsbARY0Y qklku4J7yNpiF/i+zZOBRFGh/wngQgNnsaKUeAsURfiBF9u86bV/YHwjq+sjtEnm 35fz4d22HV76bH7X9nPDGRhJCg1a0roaQtKtwVlMsFa4dvsLY+SYFcgPOPgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIFZArc4zRMpo8M2pW7NA8uJ/ZLowHwYDVR0j BBgwFoAUmOyJZRJs6q8H2yBFbzCt2n5hlhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjY2ODg1NGEtM2YyNC00MGIxLTgwY2QtZTYzNmFhN2U4YjFjLzAvOThFQzg5NjUx MjZDRUFBRjA3REIyMDQ1NkYzMEFEREE3RTYxOTYxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEVDODk2NTEyNkNFQUFGMDdEQjIwNDU2RjMwQUREQTdFNjE5 NjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvOThFQzg5NjUxMjZDRUFBRjA3REIyMDQ1NkYzMEFE REE3RTYxOTYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKprL087mqHdw5Lp1VJ6A59pe23XR+bX87i WOIilTJCPeUnsb0kfs2hALXs2XUg4xy7GZDktfxhLR40fw2W+G96bt1MbPkM+IQr bg13o5nfvCw1Jjw4HytaP7r/NnUhRie76/ttbpLpn32Pe3DV/ptM09si4W4B6AnS ETZoAN2bJJ5+1yqLQWSt2CgQY+7ZGvRzDHRkiXWFcGxt6jKygmk0yjMBSGsUr8Iy oz7CrrYI3tCwuVzjYE8LJF+LFJ9yRvgZvjqSb0ai7ay51ijiG8/GU4AUGgXP7J7/ FKnTiF41dqIfWQoq6m46F5fu4PDTqmZmttKGhtvirDl98bC7IME= -----END CERTIFICATE-----Generated at Wed May 20 22:45:01 2026 by rpki-client