
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
File: 98831B982341FB41F283DADC573DB0C97F4466FD.mft (raw, json)
Hash identifier: fJ1xkn6dwjjEVltk1uWMDnCb4Sspbqe8hfNah1NHVXU=
Subject key identifier: 71:F2:A6:51:19:8A:95:16:2D:9C:07:EE:9C:E5:9D:18:CF:23:95:12
Authority key identifier: 98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD
Certificate issuer: /CN=98831B982341FB41F283DADC573DB0C97F4466FD
Certificate serial: 1F8686B0FB6BE0CD580AAC0FCE9F53A8DA2C0987
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 14:16:45 +0000
Manifest this update: Wed 16 Sep 2026 14:11:45 +0000
Manifest next update: Thu 17 Sep 2026 17:21:45 +0000
Files and hashes: 1: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: /utHY3poH+nHQdYeC9echv8o+Q3cSPrnCccodiG1uEM=)
2: 98831B982341FB41F283DADC573DB0C97F4466FD.crl (hash: 0BMB7o+JOBjlCQjxDBHUaYEOXIgzbFYSoTgpi6qGzF8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.crl
rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:86:86:b0:fb:6b:e0:cd:58:0a:ac:0f:ce:9f:53:a8:da:2c:09:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98831B982341FB41F283DADC573DB0C97F4466FD
Validity
Not Before: Sep 16 14:11:45 2026 GMT
Not After : Sep 17 17:21:45 2026 GMT
Subject: CN=71F2A651198A95162D9C07EE9CE59D18CF239512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:2a:40:a8:f1:1f:a6:53:a1:01:e1:91:41:
ce:f9:b5:7a:b7:89:30:6f:8f:df:60:a0:79:4b:47:
35:6d:c7:9a:02:ef:b8:04:f6:16:6b:a4:2e:4e:95:
c3:88:67:4a:c8:79:85:25:c1:f5:8c:1a:c2:98:9a:
93:40:36:9a:5c:9e:be:bd:f4:b2:52:68:83:53:90:
76:0a:cf:22:49:2d:47:f0:8e:af:28:be:79:e1:53:
0a:6d:6c:51:54:84:71:62:00:d1:bb:ef:b2:88:36:
13:fd:15:b6:c9:d0:3d:7b:4a:77:c1:25:3d:c1:b9:
49:63:de:d0:c8:cf:e7:68:c0:43:02:52:10:db:7c:
a9:91:b1:67:d3:25:73:b5:6e:01:d1:9a:69:7b:59:
e0:82:57:9b:1a:bd:a6:3e:00:12:fc:9c:2b:fc:9d:
c5:da:8a:32:dd:dc:73:90:9f:76:d5:1b:fe:b2:db:
cb:e1:01:04:93:69:c2:d5:7e:7f:2d:ec:db:8e:df:
cb:67:1d:1f:7e:fb:b9:61:6e:df:50:41:d4:45:31:
45:9b:33:83:05:e1:cc:66:74:0e:4b:66:16:e0:34:
28:fd:b1:17:94:14:40:40:db:6f:76:02:a3:91:3a:
04:23:89:f0:3c:49:12:6a:90:ee:1d:ad:68:87:e7:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F2:A6:51:19:8A:95:16:2D:9C:07:EE:9C:E5:9D:18:CF:23:95:12
X509v3 Authority Key Identifier:
keyid:98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:77:53:4e:59:05:a3:02:4c:41:2b:70:48:03:c3:2b:06:ba:
fd:5c:84:c1:d6:43:18:aa:21:b5:96:09:18:4d:71:d1:13:46:
6e:9e:ef:ce:e5:7e:a3:ed:1f:0e:a1:02:ba:11:ed:e9:94:22:
84:85:92:96:14:14:f5:7d:f6:53:f5:b2:44:2f:c8:04:c9:e5:
d2:6e:b4:96:a1:fc:bc:3f:bd:b3:77:15:8f:cf:5e:a2:1d:c0:
37:00:a4:7d:c8:d3:7f:e4:a8:50:1b:d0:da:35:83:b0:8b:15:
6b:60:10:49:06:0f:cc:42:7d:68:85:00:6c:2b:8a:9d:35:c4:
f6:59:29:2f:00:ad:64:9a:a4:c6:b6:4f:d0:a8:5c:49:d2:50:
03:5e:b5:18:20:28:26:15:ee:1d:6c:3f:57:0c:6c:ab:82:cf:
3f:6b:61:68:52:8e:fd:cb:35:17:bd:96:54:c0:5e:61:e2:21:
8e:0f:33:85:9e:64:7f:d9:4c:10:87:09:52:88:58:97:27:ad:
07:4e:5a:de:99:ba:cc:b5:9c:c0:de:22:d5:55:7c:f2:d8:12:
4a:82:37:45:54:a6:f1:97:b8:7a:a6:2d:cc:13:b7:e9:19:42:
8d:f7:e3:fa:47:49:d1:38:cd:ea:52:1f:2a:1d:6a:47:d7:6e:
b7:22:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:46:24 2026 by rpki-client