$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft File: 098D1D612D535CED249CDB01EC5565063EBACEEF.mft (raw, json) Hash identifier: Dnhv5WyR1G4tFzx/7kKS83cQUqjOLDATxXrn9AJ6di4= Subject key identifier: 90:14:B1:4C:C7:1A:AB:C1:B8:0A:05:FF:1D:83:3A:F4:56:FD:C4:F8 Authority key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF Certificate issuer: /CN=098D1D612D535CED249CDB01EC5565063EBACEEF Certificate serial: 043746AC8BD70FBEEA9BF2A1013C4A0886E8ADE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 14:19:26 +0000 Manifest this update: Thu 03 Sep 2026 14:14:26 +0000 Manifest next update: Fri 04 Sep 2026 17:56:26 +0000 Files and hashes: 1: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: Z0u7IGnQdxSwJ/3PUqshR32Mqm4mC19C1FEuu6LC8Ng=) 2: 098D1D612D535CED249CDB01EC5565063EBACEEF.crl (hash: uE/JqR49WlFZUOa8AWvagDO1Yl+BqpdRKuS1u1Ajc7g=) 3: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: CY1Z76P9Cm4XC+l2Gxs6pH2wrd99R/AKN3svNUGr+4E=) 4: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: 6BOi9a4QIn+pGYzRIaW0daSfHvcVflYv5ZBX0t+b6I0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:37:46:ac:8b:d7:0f:be:ea:9b:f2:a1:01:3c:4a:08:86:e8:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D1D612D535CED249CDB01EC5565063EBACEEF Validity Not Before: Sep 3 14:14:26 2026 GMT Not After : Sep 4 17:56:26 2026 GMT Subject: CN=9014B14CC71AABC1B80A05FF1D833AF456FDC4F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:32:38:27:8f:50:cf:18:7a:5a:da:42:8c: 3b:8f:6e:3a:f8:df:6f:64:77:47:e0:ef:28:1e:ef: 5c:e8:ed:99:03:62:ee:5b:b8:43:39:bc:3c:25:e3: 01:bd:8c:f8:39:bd:6b:b0:f0:58:6c:5f:cc:90:fa: d4:40:55:d0:9a:29:5c:2b:08:d4:d6:1c:b7:aa:34: a9:18:bc:e0:b5:f8:5c:f2:0c:d8:81:31:70:d0:30: 3a:24:13:0d:a1:c9:fa:6d:e7:e4:ba:e8:db:47:e6: c2:a9:f3:e7:37:d1:da:26:14:d7:ce:c7:e2:93:44: e8:48:26:51:b7:55:e4:d5:34:02:c1:99:2f:6c:28: d5:7d:26:39:73:c8:fe:63:9a:08:b5:dd:bb:19:9e: d8:cc:59:81:b2:f1:c3:d8:39:c7:4c:ae:bc:6d:3c: 5b:db:6b:e8:f0:f0:7e:ab:38:62:60:0f:34:05:d9: 36:b9:d2:1a:55:53:b9:99:04:65:a7:82:ff:7d:90: b0:e0:fb:04:33:50:43:8b:bf:93:45:25:e0:14:eb: de:7e:70:b1:db:de:79:54:f1:1d:d7:dd:aa:c6:9e: 5d:56:04:b0:fe:59:47:3c:26:98:ae:8e:e4:f0:52: 9d:e0:9c:49:7a:18:b1:f3:4e:25:de:dc:43:c2:92: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:14:B1:4C:C7:1A:AB:C1:B8:0A:05:FF:1D:83:3A:F4:56:FD:C4:F8 X509v3 Authority Key Identifier: keyid:09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d4:47:73:97:32:97:f4:63:46:34:4a:06:3f:4a:23:71:bf: a3:62:23:9f:7e:95:28:83:82:82:aa:b3:d5:47:f6:fa:25:f2: 7d:3b:99:22:2e:21:cc:97:ab:1e:d2:e8:a5:bb:74:09:a3:85: c6:c7:67:71:dc:c7:85:7a:b7:47:dc:8b:03:96:bb:10:6a:63: f5:9e:13:e2:d0:a7:ca:ea:9f:e4:ce:e1:29:7f:a6:d5:98:74: e8:5a:96:b6:87:5f:a8:c2:13:e1:b2:38:83:a0:73:be:69:0d: 9d:04:59:f9:02:f9:f5:63:f5:e6:b4:f5:42:35:f4:bc:f6:93: 9d:8c:a4:1b:a5:db:81:64:95:c0:54:de:2a:b5:33:b1:2e:66: 9f:5d:13:1e:94:68:89:80:ba:4e:ea:0d:97:15:4e:9d:19:a5: 24:bc:80:b1:30:37:1f:2b:82:55:cd:b4:23:dc:e2:08:88:bf: 63:02:a2:6c:2d:38:03:a3:cb:1e:8f:bc:38:66:08:39:15:85: 32:66:2b:47:a1:6e:8d:30:54:26:a3:89:53:28:d8:61:0d:01: 02:8d:d2:d0:1d:6e:2b:98:7e:69:94:fb:70:f8:80:03:a5:24: cd:e1:d5:47:46:8d:fa:f3:db:68:d9:cb:b1:29:4f:4d:f5:67: d3:95:8f:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDdGrIvXD77qm/KhATxKCIboreAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDFENjEyRDUzNUNFRDI0OUNEQjAxRUM1NTY1MDYz RUJBQ0VFRjAeFw0yNjA5MDMxNDE0MjZaFw0yNjA5MDQxNzU2MjZaMDMxMTAvBgNV BAMTKDkwMTRCMTRDQzcxQUFCQzFCODBBMDVGRjFEODMzQUY0NTZGREM0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiDI4J49Qzxh6WtpCjDuPbjr4 329kd0fg7yge71zo7ZkDYu5buEM5vDwl4wG9jPg5vWuw8FhsX8yQ+tRAVdCaKVwr CNTWHLeqNKkYvOC1+FzyDNiBMXDQMDokEw2hyfpt5+S66NtH5sKp8+c30domFNfO x+KTROhIJlG3VeTVNALBmS9sKNV9JjlzyP5jmgi13bsZntjMWYGy8cPYOcdMrrxt PFvba+jw8H6rOGJgDzQF2Ta50hpVU7mZBGWngv99kLDg+wQzUEOLv5NFJeAU695+ cLHb3nlU8R3X3arGnl1WBLD+WUc8JpiujuTwUp3gnEl6GLHzTiXe3EPCkhStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBSxTMcaq8G4CgX/HYM69Fb9xPgwHwYDVR0j BBgwFoAUCY0dYS1TXO0knNsB7FVlBj66zu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjk2NDAxZTMtOWY2Mi00YjNjLWJmZmItNzgzMzU1YWU2NzcwLzAvMDk4RDFENjEy RDUzNUNFRDI0OUNEQjAxRUM1NTY1MDYzRUJBQ0VFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOThEMUQ2MTJENTM1Q0VEMjQ5Q0RCMDFFQzU1NjUwNjNFQkFD RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvMDk4RDFENjEyRDUzNUNFRDI0OUNEQjAxRUM1NTY1 MDYzRUJBQ0VFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrUR3OXMpf0Y0Y0SgY/SiNxv6NiI59+lSiD goKqs9VH9vol8n07mSIuIcyXqx7S6KW7dAmjhcbHZ3Hcx4V6t0fciwOWuxBqY/We E+LQp8rqn+TO4Sl/ptWYdOhalraHX6jCE+GyOIOgc75pDZ0EWfkC+fVj9ea09UI1 9Lz2k52MpBul24FklcBU3iq1M7EuZp9dEx6UaImAuk7qDZcVTp0ZpSS8gLEwNx8r glXNtCPc4giIv2MComwtOAOjyx6PvDhmCDkVhTJmK0ehbo0wVCajiVMo2GENAQKN 0tAdbiuYfmmU+3D4gAOlJM3h1UdGjfrz22jZy7EpT031Z9OVj7s= -----END CERTIFICATE-----Generated at Thu Sep 3 20:56:48 2026 by rpki-client