$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: 5ASHGMER4ABGDtr+cLHR1DgrmFt12kF2KaWYLr6tk+g= Subject key identifier: 4C:56:9D:90:03:69:BF:E6:B5:E1:16:57:76:6B:80:B6:38:9D:35:55 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 56ECB91688840345E117E021B3C787B282A8F75F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: FB Signing time: Tue 21 Apr 2026 06:40:44 +0000 Manifest this update: Tue 21 Apr 2026 06:35:44 +0000 Manifest next update: Fri 24 Apr 2026 14:00:44 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) 2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: IwNTZzomNjDQnO+BIHBa+FNh+KEQ/D6POL8Adzz8qlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ec:b9:16:88:84:03:45:e1:17:e0:21:b3:c7:87:b2:82:a8:f7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Apr 21 06:35:44 2026 GMT Not After : Apr 24 14:00:44 2026 GMT Subject: CN=4C569D900369BFE6B5E11657766B80B6389D3555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ea:79:0e:04:c8:c9:6b:52:f4:54:20:ce:7b: a4:df:a7:2c:a0:65:72:14:ae:e4:9a:a3:6b:d8:3d: 40:75:24:33:dc:cf:d1:55:f3:63:e1:cb:ef:ff:54: 90:eb:c3:9d:90:dc:58:a9:07:d2:be:01:21:81:d8: 3e:83:5f:23:e3:a2:97:8f:57:ee:81:82:8b:60:ca: 29:0b:28:36:93:c8:b2:48:6b:93:cf:83:ff:ae:79: 63:95:68:bb:d9:99:02:8e:04:64:3f:d0:8f:48:3d: 9c:21:fa:33:4b:82:c6:fa:c9:f9:cc:16:92:45:25: 3e:be:a3:00:d3:13:3a:4d:8a:02:cf:d7:98:7c:0c: 83:10:df:25:b6:6c:1a:66:00:fe:66:42:de:f6:4d: 08:71:37:17:f0:d1:56:d4:24:b4:72:60:37:0d:8b: e8:4c:b0:26:21:d3:79:e9:40:bc:4b:75:fb:bc:1e: 9b:bb:09:cb:c9:f3:29:e5:9e:d6:df:7e:56:2d:d3: 56:20:7b:b2:f0:7b:11:b3:14:40:3c:d7:66:57:c9: 63:0b:8c:c9:f9:d9:3b:03:ec:a2:d2:db:0a:63:2c: 9f:6e:50:d3:80:68:b6:c8:cc:4d:b5:b7:10:21:80: 53:55:e7:81:1a:8a:e6:c3:f8:63:b3:e0:32:c5:0a: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:56:9D:90:03:69:BF:E6:B5:E1:16:57:76:6B:80:B6:38:9D:35:55 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:27:50:b0:7f:1a:73:b5:51:d8:d1:6f:87:84:51:14:fd:64: bd:dc:9a:38:44:6b:43:5c:d0:61:dc:b8:df:1e:7e:99:9e:53: f7:7c:b4:7c:38:0b:88:eb:5e:64:d3:3b:5c:03:c4:45:62:ec: 75:ba:0b:0e:e3:7f:f2:56:f6:bc:f9:55:62:03:60:e0:18:01: 46:5e:6d:ab:6f:bf:76:ab:3c:f8:9f:51:46:d7:f8:fe:eb:ec: 38:bf:46:20:59:25:05:6c:ca:67:93:92:23:dc:76:81:50:7e: e5:89:17:76:4a:4b:7f:4c:aa:8d:d3:22:7a:80:15:19:32:6b: cc:d5:1b:47:e6:df:f5:e4:7d:00:ca:81:48:f9:e4:6a:71:2d: 3d:48:05:0a:cb:af:2e:5a:09:51:2f:ae:cb:1a:6a:70:4a:3e: 2e:47:b8:c2:1c:35:f4:3a:ad:ce:4a:a7:d5:71:0f:04:b2:e8: bc:03:47:55:ff:f3:37:7a:3e:de:dd:a1:bc:87:a9:89:2b:e3: 75:18:0e:72:fd:fc:84:04:07:b0:f6:47:d3:a1:61:5b:4c:e4: ea:86:58:f3:2b:b9:4d:41:e7:77:80:38:b8:3e:8a:b8:c4:5b: 61:42:d3:c9:17:bc:70:df:09:0f:84:8c:b2:fa:63:e5:b3:cd: 84:a6:21:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuy5FoiEA0XhF+Ahs8eHsoKo918wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNjA0MjEwNjM1NDRaFw0yNjA0MjQxNDAwNDRaMDMxMTAvBgNV BAMTKDRDNTY5RDkwMDM2OUJGRTZCNUUxMTY1Nzc2NkI4MEI2Mzg5RDM1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6nkOBMjJa1L0VCDOe6Tfpyyg ZXIUruSao2vYPUB1JDPcz9FV82Phy+//VJDrw52Q3FipB9K+ASGB2D6DXyPjopeP V+6BgotgyikLKDaTyLJIa5PPg/+ueWOVaLvZmQKOBGQ/0I9IPZwh+jNLgsb6yfnM FpJFJT6+owDTEzpNigLP15h8DIMQ3yW2bBpmAP5mQt72TQhxNxfw0VbUJLRyYDcN i+hMsCYh03npQLxLdfu8Hpu7CcvJ8ynlntbfflYt01Yge7LwexGzFEA812ZXyWML jMn52TsD7KLS2wpjLJ9uUNOAaLbIzE21txAhgFNV54EaiubD+GOz4DLFCnc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTFadkANpv+a14RZXdmuAtjidNVUwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4nULB/GnO1UdjRb4eEURT9ZL3cmjhEa0Nc 0GHcuN8efpmeU/d8tHw4C4jrXmTTO1wDxEVi7HW6Cw7jf/JW9rz5VWIDYOAYAUZe batvv3arPPifUUbX+P7r7Di/RiBZJQVsymeTkiPcdoFQfuWJF3ZKS39Mqo3TInqA FRkya8zVG0fm3/XkfQDKgUj55GpxLT1IBQrLry5aCVEvrssaanBKPi5HuMIcNfQ6 rc5Kp9VxDwSy6LwDR1X/8zd6Pt7dobyHqYkr43UYDnL9/IQEB7D2R9OhYVtM5OqG WPMruU1B53eAOLg+irjEW2FC08kXvHDfCQ+EjLL6Y+WzzYSmIVE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:43 2026 by rpki-client