$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: AHHLik8cs4eYSMp+lh/rVQrhU8pFrrfHQKdnOW7m5S8= Subject key identifier: 12:34:9A:F5:CD:A9:63:AE:1A:2C:BD:31:7E:85:64:55:80:D5:98:A4 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 7B3A5648F722652506564211770795131B50497F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 056B Signing time: Thu 16 Apr 2026 16:40:02 +0000 Manifest this update: Thu 16 Apr 2026 16:35:02 +0000 Manifest next update: Sun 19 Apr 2026 23:08:02 +0000 Files and hashes: 1: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 2: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) 4: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: rCd9xadfHdAEIMcefizZnWhCX2e/h5vpD2A45W1F3Zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3a:56:48:f7:22:65:25:06:56:42:11:77:07:95:13:1b:50:49:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Apr 16 16:35:02 2026 GMT Not After : Apr 19 23:08:02 2026 GMT Subject: CN=12349AF5CDA963AE1A2CBD317E85645580D598A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:6c:8c:1d:39:f4:98:99:9e:2f:ea:03:8a: 9d:ff:ac:c9:79:71:45:63:ed:43:30:4d:d8:04:e3: 63:2d:18:06:1a:03:17:71:c2:a6:a4:64:a1:0c:06: 5f:49:8c:49:ad:28:72:76:f5:d8:10:c1:c5:da:d2: bc:26:b5:65:b4:64:e7:f1:86:b2:af:a2:4a:e1:7b: 4d:04:be:8a:cd:c4:d5:0d:c5:b0:90:72:30:37:15: f4:f8:20:22:d6:17:4c:78:20:85:eb:5b:dd:5b:48: 65:57:c5:30:e9:bb:91:2f:d5:3b:90:48:73:1d:c6: 4f:fa:be:ab:0f:08:d9:de:84:59:7f:17:f5:fa:cb: f3:bc:f4:c8:7d:2e:40:e5:b8:85:73:ed:b5:0d:a5: 24:77:60:5a:f5:bb:b0:64:b0:0d:0f:ef:69:1c:e9: 1e:aa:08:c3:04:52:57:79:1a:b4:fd:97:1c:bf:d2: 86:ce:1c:ad:66:9f:d8:50:c4:8f:1e:f2:7a:0f:43: 38:03:05:ac:55:15:53:fb:88:c9:05:5c:91:33:13: bf:e5:f4:ed:65:86:c3:b3:c8:1c:f9:dd:c2:df:d3: 8e:17:0c:3d:c6:d2:e2:31:e6:47:23:53:f1:67:15: 81:c6:ce:4f:8e:c2:14:c5:70:c0:d9:71:77:06:bf: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:34:9A:F5:CD:A9:63:AE:1A:2C:BD:31:7E:85:64:55:80:D5:98:A4 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b1:06:5e:56:65:84:46:71:30:93:c7:f8:74:9a:eb:09:82: de:be:ff:0a:f4:97:31:97:cd:5d:7d:11:85:f0:c6:d0:a8:af: 1e:f3:20:81:53:d2:de:4b:30:87:a1:92:e2:41:0f:02:12:eb: 78:c4:8d:42:cc:6f:f0:59:b8:37:fc:f7:53:0f:cf:4e:6e:31: b6:05:2f:b3:52:0c:e2:dc:27:f6:12:1e:7d:67:a1:f0:09:21: df:6d:27:6a:35:fd:1f:9e:b5:2a:ed:dd:f9:39:ae:11:71:38: d0:0b:29:05:cf:0d:5f:e4:07:d9:6c:1d:9b:35:3d:a6:dc:5f: be:67:d1:32:e1:80:ba:c7:d4:af:b7:44:a1:67:aa:40:c4:b3: 38:11:3a:99:c1:eb:01:f7:37:d4:33:a4:57:ae:43:a2:0a:08: f6:9a:20:fe:65:d3:3f:61:4b:89:46:e4:e3:ac:3a:2e:b8:64: f2:35:20:6d:d9:9a:78:68:54:48:80:05:1f:ec:4e:7f:d9:fa: 14:34:f7:7b:22:f6:e1:68:70:ba:c9:e5:21:26:1c:bb:1a:e5: f5:74:15:dd:b0:50:f9:ce:c6:83:2e:9a:05:33:83:2d:e7:dd: 0e:b1:a3:3e:c8:bb:98:9a:c0:1e:ea:6e:43:85:61:00:b9:04: 2d:6f:79:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezpWSPciZSUGVkIRdweVExtQSX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNjA0MTYxNjM1MDJaFw0yNjA0MTkyMzA4MDJaMDMxMTAvBgNV BAMTKDEyMzQ5QUY1Q0RBOTYzQUUxQTJDQkQzMTdFODU2NDU1ODBENTk4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeq2yMHTn0mJmeL+oDip3/rMl5 cUVj7UMwTdgE42MtGAYaAxdxwqakZKEMBl9JjEmtKHJ29dgQwcXa0rwmtWW0ZOfx hrKvokrhe00EvorNxNUNxbCQcjA3FfT4ICLWF0x4IIXrW91bSGVXxTDpu5Ev1TuQ SHMdxk/6vqsPCNnehFl/F/X6y/O89Mh9LkDluIVz7bUNpSR3YFr1u7BksA0P72kc 6R6qCMMEUld5GrT9lxy/0obOHK1mn9hQxI8e8noPQzgDBaxVFVP7iMkFXJEzE7/l 9O1lhsOzyBz53cLf044XDD3G0uIx5kcjU/FnFYHGzk+OwhTFcMDZcXcGv72vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEjSa9c2pY64aLL0xfoVkVYDVmKQwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKxBl5WZYRGcTCTx/h0musJgt6+/wr0lzGX zV19EYXwxtCorx7zIIFT0t5LMIehkuJBDwIS63jEjULMb/BZuDf891MPz05uMbYF L7NSDOLcJ/YSHn1nofAJId9tJ2o1/R+etSrt3fk5rhFxONALKQXPDV/kB9lsHZs1 PabcX75n0TLhgLrH1K+3RKFnqkDEszgROpnB6wH3N9QzpFeuQ6IKCPaaIP5l0z9h S4lG5OOsOi64ZPI1IG3ZmnhoVEiABR/sTn/Z+hQ093si9uFocLrJ5SEmHLsa5fV0 Fd2wUPnOxoMumgUzgy3n3Q6xoz7Iu5iawB7qbkOFYQC5BC1veak= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:24 2026 by rpki-client