
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
File: 98FBC9C110EF2F9B4553D613927F55774E076EA9.mft (raw, json)
Hash identifier: BsQCWNzVJ9BXlQ3cGQhCQUr0kzrqFql8scOREvMBgno=
Subject key identifier: C0:0C:DF:30:D1:41:01:82:F3:E1:79:24:E4:35:32:DF:A5:71:B7:7E
Authority key identifier: 98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9
Certificate issuer: /CN=98FBC9C110EF2F9B4553D613927F55774E076EA9
Certificate serial: 39D7B953ADBF6CB8145E0677B3FAF71D0DD234A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 19:00:27 +0000
Manifest this update: Sun 02 Aug 2026 18:55:27 +0000
Manifest next update: Mon 03 Aug 2026 19:06:27 +0000
Files and hashes: 1: 98FBC9C110EF2F9B4553D613927F55774E076EA9.crl (hash: rlO+WTeN2hE72XySeEg+mqKouNEqfCfyLie4kSEedtM=)
2: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: PRQ0wyh257Ie4C2D9c8Ywf6UyKXsn9qs6MWo6/u5E68=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl
rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 17:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d7:b9:53:ad:bf:6c:b8:14:5e:06:77:b3:fa:f7:1d:0d:d2:34:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98FBC9C110EF2F9B4553D613927F55774E076EA9
Validity
Not Before: Aug 2 18:55:27 2026 GMT
Not After : Aug 3 19:06:27 2026 GMT
Subject: CN=C00CDF30D1410182F3E17924E43532DFA571B77E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:02:b5:97:81:07:11:c6:01:df:5f:58:50:
c3:96:2b:87:e4:6c:d2:19:59:e1:f0:f6:f5:8e:9b:
26:db:ca:58:0f:ff:24:2f:dd:9e:1e:de:31:46:a3:
91:34:3a:d9:5f:d1:72:81:a2:72:af:4d:e6:0e:53:
33:d9:87:8e:c6:fe:c3:db:6a:78:76:28:ff:5f:e0:
35:b2:4f:70:1f:c5:56:6b:35:0c:01:6c:a2:41:45:
7c:33:90:47:1b:e1:fa:51:21:88:86:e3:8a:21:f7:
83:77:1d:8c:d7:93:d6:7b:4f:25:db:51:d0:86:e3:
e7:97:e3:7e:af:a7:4f:51:52:e3:7f:97:d1:7a:bb:
b2:42:cd:b1:79:95:cd:07:9c:4d:b7:f8:e1:e5:c9:
4f:4f:bb:c0:53:ab:9d:81:52:4a:c5:c3:b2:aa:c7:
ec:f3:fa:ee:b6:7c:c4:ed:c5:36:54:75:fc:41:27:
7c:1d:6e:7f:09:86:6f:52:63:44:02:ca:c2:e3:58:
11:70:67:84:11:6e:2a:56:04:76:4c:29:1f:ff:19:
ca:2e:2d:a5:0d:e3:73:21:ae:50:94:bb:46:34:d5:
59:a5:1f:6e:c2:92:87:20:34:5e:56:9f:3a:82:ef:
03:c2:8f:a1:f9:f7:53:0c:a7:1a:4d:5e:c4:bd:7f:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0C:DF:30:D1:41:01:82:F3:E1:79:24:E4:35:32:DF:A5:71:B7:7E
X509v3 Authority Key Identifier:
keyid:98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c7:e0:fb:74:06:76:a6:03:78:5a:0b:16:5c:b0:9a:58:c4:
c0:dc:b4:bf:5d:10:b1:f0:60:1b:50:45:cd:46:9e:45:c6:f4:
ef:68:be:c4:8e:2d:e4:ed:d1:e5:bc:1d:44:17:5f:81:ce:29:
bb:d3:b2:32:68:2b:3e:bc:64:66:83:31:ac:07:00:c5:0d:c7:
ea:98:72:52:09:a7:bb:93:cd:35:1b:9a:c5:21:37:87:0c:87:
b5:39:91:1c:c1:ee:75:bc:a3:0b:27:41:4c:93:33:89:1b:bc:
39:99:8c:bc:58:98:b8:38:f9:30:25:04:c0:31:f7:c7:92:a1:
b9:e8:e9:d4:b5:8e:83:e3:0f:7e:e2:1e:33:24:2c:f4:59:e3:
ee:29:dc:1a:16:b4:7b:b6:aa:e4:1f:87:72:94:59:ad:63:97:
a2:82:ec:1e:5a:d6:a8:9b:ad:f8:b9:b9:fb:00:c0:d8:23:cc:
04:66:73:a3:c1:c3:95:01:20:4c:d1:20:34:03:0f:ca:ae:03:
84:79:e9:8b:bb:cd:bd:ec:f4:8b:77:d9:19:ab:4c:a2:d5:d0:
95:17:29:39:89:5e:0f:b8:88:ea:2a:de:eb:52:46:da:d0:57:
77:26:5c:55:de:b6:8d:e4:4c:c2:8c:e9:0b:d2:d2:fa:37:62:
89:ba:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:42 2026 by rpki-client