
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
File: 98FBC9C110EF2F9B4553D613927F55774E076EA9.mft (raw, json)
Hash identifier: y9sCPFLStRMfVglYWmob70jyqV69Xsk9YPv7hxiuXf4=
Subject key identifier: B2:E9:4E:52:A5:44:84:4C:81:A7:D6:37:C8:DD:E1:75:91:2A:F3:39
Authority key identifier: 98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9
Certificate issuer: /CN=98FBC9C110EF2F9B4553D613927F55774E076EA9
Certificate serial: 67FD51A2056D6C043F97206C93F197B834EEAB6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 07:37:55 +0000
Manifest this update: Thu 17 Sep 2026 07:32:55 +0000
Manifest next update: Fri 18 Sep 2026 07:45:55 +0000
Files and hashes: 1: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: PRQ0wyh257Ie4C2D9c8Ywf6UyKXsn9qs6MWo6/u5E68=)
2: 98FBC9C110EF2F9B4553D613927F55774E076EA9.crl (hash: pLhH1+pd2IYBnAH3r5RoGNkuRDUPK4HwqwXi5iqUB4Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl
rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fd:51:a2:05:6d:6c:04:3f:97:20:6c:93:f1:97:b8:34:ee:ab:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98FBC9C110EF2F9B4553D613927F55774E076EA9
Validity
Not Before: Sep 17 07:32:55 2026 GMT
Not After : Sep 18 07:45:55 2026 GMT
Subject: CN=B2E94E52A544844C81A7D637C8DDE175912AF339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:0d:62:ad:f0:67:79:f4:1d:34:ea:55:15:
14:e1:94:71:f8:de:fb:e6:a2:46:8b:4e:73:72:1e:
27:aa:92:b1:0d:8c:8d:dc:71:06:74:6d:86:56:c7:
8c:b0:2c:b8:f2:7c:a1:89:96:9e:25:b3:ba:f0:93:
b4:e6:90:88:14:12:6f:b0:b1:92:14:71:0a:23:4c:
fb:ad:b5:23:b8:10:90:2a:d3:58:2b:96:7b:be:35:
30:15:70:37:5e:9d:4e:2e:05:04:6a:fb:a6:b3:0f:
f0:b6:ee:89:21:58:60:23:17:f5:32:9b:22:33:7d:
8a:ec:55:3a:3c:e5:c1:df:81:76:73:c6:bc:c8:5c:
64:46:96:13:36:f6:89:cc:02:e4:ec:04:d0:58:b7:
59:49:6b:2f:e4:15:30:c8:12:9a:a4:26:f0:d0:15:
3f:f4:df:84:61:af:cf:50:d8:01:ec:28:e3:aa:5c:
1b:7b:01:06:fe:f8:47:b1:d6:28:79:6f:59:ce:32:
11:09:1f:88:9f:98:50:e6:6a:0a:2c:e9:c1:ab:36:
11:f6:0e:9c:4e:f7:1f:75:e7:d5:e5:39:54:22:29:
ca:a7:2c:45:71:2e:7b:ef:51:13:56:99:ca:d5:bc:
d7:9f:78:1f:2c:b5:df:40:70:0e:db:07:dc:5b:0f:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:4E:52:A5:44:84:4C:81:A7:D6:37:C8:DD:E1:75:91:2A:F3:39
X509v3 Authority Key Identifier:
keyid:98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:d4:e6:5c:93:dc:81:47:81:c1:40:ff:a4:9f:19:97:b6:
2f:27:3e:5b:ce:45:f1:8e:ca:4f:73:d7:c3:09:e8:19:a3:a1:
0f:81:77:c0:ef:04:e1:f2:9e:98:5d:fb:48:93:a0:2d:ff:8f:
c2:a9:b0:71:59:d7:21:3b:25:03:55:e2:7a:17:48:7f:82:2d:
10:62:38:fd:ba:3b:91:ce:09:c6:78:a6:5a:e6:ec:4a:94:b2:
2c:f3:d3:dc:42:47:de:c1:6c:93:23:45:b0:ad:b9:c8:c9:a4:
a4:5b:38:23:1d:70:d9:07:4f:81:a0:a7:ab:c0:d9:76:f6:22:
98:e3:ab:83:d1:62:42:e5:31:82:f6:5d:d4:7c:37:c7:58:2d:
67:79:30:30:c0:9d:4d:0c:e9:2d:17:2f:c8:50:8d:ad:dc:47:
bd:6b:98:6f:64:e6:5e:8b:0e:cd:37:c4:be:dd:4a:fa:e7:9d:
40:44:97:ab:de:7d:a8:f0:2f:70:34:fb:34:2a:52:13:46:aa:
ad:49:91:c3:2e:40:15:92:ad:06:ea:dc:da:2f:35:20:6b:08:
0f:07:fb:d9:03:43:98:b3:22:96:48:9b:51:f7:25:1b:ef:b1:
f8:7f:17:68:10:ab:72:f7:b3:f7:5d:f8:e7:59:32:07:2c:20:
50:a8:3e:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ/1RogVtbAQ/lyBsk/GXuDTuq24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThGQkM5QzExMEVGMkY5QjQ1NTNENjEzOTI3RjU1Nzc0
RTA3NkVBOTAeFw0yNjA5MTcwNzMyNTVaFw0yNjA5MTgwNzQ1NTVaMDMxMTAvBgNV
BAMTKEIyRTk0RTUyQTU0NDg0NEM4MUE3RDYzN0M4RERFMTc1OTEyQUYzMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXw1irfBnefQdNOpVFRThlHH4
3vvmokaLTnNyHieqkrENjI3ccQZ0bYZWx4ywLLjyfKGJlp4ls7rwk7TmkIgUEm+w
sZIUcQojTPuttSO4EJAq01grlnu+NTAVcDdenU4uBQRq+6azD/C27okhWGAjF/Uy
myIzfYrsVTo85cHfgXZzxrzIXGRGlhM29onMAuTsBNBYt1lJay/kFTDIEpqkJvDQ
FT/034Rhr89Q2AHsKOOqXBt7AQb++Eex1ih5b1nOMhEJH4ifmFDmagos6cGrNhH2
DpxO9x9159XlOVQiKcqnLEVxLnvvURNWmcrVvNefeB8std9AcA7bB9xbD6xRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsulOUqVEhEyBp9Y3yN3hdZEq8zkwHwYDVR0j
BBgwFoAUmPvJwRDvL5tFU9YTkn9Vd04HbqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2NmMGE3N2MtMzkyOC00MTMwLWEwOTgtYjQzNzU3MmQ3MjJjLzAvOThGQkM5QzEx
MEVGMkY5QjQ1NTNENjEzOTI3RjU1Nzc0RTA3NkVBOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC85OEZCQzlDMTEwRUYyRjlCNDU1M0Q2MTM5MjdGNTU3NzRFMDc2
RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw
OTgtYjQzNzU3MmQ3MjJjLzAvOThGQkM5QzExMEVGMkY5QjQ1NTNENjEzOTI3RjU1
Nzc0RTA3NkVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFqh1OZck9yBR4HBQP+knxmXti8nPlvORfGO
yk9z18MJ6BmjoQ+Bd8DvBOHynphd+0iToC3/j8KpsHFZ1yE7JQNV4noXSH+CLRBi
OP26O5HOCcZ4plrm7EqUsizz09xCR97BbJMjRbCtucjJpKRbOCMdcNkHT4Ggp6vA
2Xb2Ipjjq4PRYkLlMYL2XdR8N8dYLWd5MDDAnU0M6S0XL8hQja3cR71rmG9k5l6L
Ds03xL7dSvrnnUBEl6vefajwL3A0+zQqUhNGqq1JkcMuQBWSrQbq3NovNSBrCA8H
+9kDQ5izIpZIm1H3JRvvsfh/F2gQq3L3s/dd+OdZMgcsIFCoPmE=
-----END CERTIFICATE-----
Generated at Thu Sep 17 15:53:46 2026 by rpki-client