$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft File: 98FBC9C110EF2F9B4553D613927F55774E076EA9.mft (raw, json) Hash identifier: GAl9BnGdHKmMpwltNwWgCBnVRi15tiO6jhXxQpU+16Y= Subject key identifier: 59:69:3B:CD:7C:8A:92:1B:73:9A:CB:C5:4D:59:E1:F2:5E:B9:64:43 Authority key identifier: 98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9 Certificate issuer: /CN=98FBC9C110EF2F9B4553D613927F55774E076EA9 Certificate serial: 4BE71BF4F4DFF89E8ADF8D81940483496302BD2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 07:10:54 +0000 Manifest this update: Thu 18 Jun 2026 07:05:54 +0000 Manifest next update: Fri 19 Jun 2026 08:51:54 +0000 Files and hashes: 1: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: PRQ0wyh257Ie4C2D9c8Ywf6UyKXsn9qs6MWo6/u5E68=) 2: 98FBC9C110EF2F9B4553D613927F55774E076EA9.crl (hash: ZCxfqOtiY500+ZH7mO+JF/9zHRacAGP8IYL+t7Rkxdw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e7:1b:f4:f4:df:f8:9e:8a:df:8d:81:94:04:83:49:63:02:bd:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FBC9C110EF2F9B4553D613927F55774E076EA9 Validity Not Before: Jun 18 07:05:54 2026 GMT Not After : Jun 19 08:51:54 2026 GMT Subject: CN=59693BCD7C8A921B739ACBC54D59E1F25EB96443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:3a:86:97:16:c1:1f:1b:59:f5:c4:8e:2e: 3c:5f:c2:b4:d0:85:41:a8:2d:01:ca:49:4b:81:d3: b2:0e:9b:b3:91:04:6a:4c:76:cd:e6:9a:51:c3:aa: 1d:66:21:11:8b:08:1c:07:dd:67:67:c8:b0:ee:26: 92:8f:2a:f9:24:dc:6c:aa:7f:3e:56:e5:21:f1:ae: 47:bb:46:c3:7f:2f:b0:10:a8:e6:16:70:98:32:17: 4d:de:ed:7a:f7:8c:f4:21:5c:27:42:c2:a7:dc:97: 64:08:ca:a4:b7:cb:69:6d:94:fa:1e:52:6c:5f:ff: de:de:21:96:82:fe:e5:43:c3:4c:22:bf:91:17:48: dd:4c:b4:a2:af:14:61:cf:fd:4b:52:22:d4:6c:c6: de:a8:81:22:84:cc:12:ea:d2:3f:6b:6c:bf:09:a9: d1:90:51:ec:06:c5:5e:81:71:b7:99:03:e4:fd:fe: 97:17:52:d5:a2:e2:cb:0c:bb:6b:93:9b:87:ad:c9: c1:3b:a0:73:50:be:29:f6:dc:a4:06:dc:8a:dd:53: 05:bd:b5:0b:08:00:cd:aa:7a:cc:80:99:c4:4b:25: f2:23:e3:01:b8:f4:cc:23:6d:ec:f1:7d:f2:54:a5: b3:f5:93:34:64:37:85:17:0b:47:a8:d6:12:a5:02: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:69:3B:CD:7C:8A:92:1B:73:9A:CB:C5:4D:59:E1:F2:5E:B9:64:43 X509v3 Authority Key Identifier: keyid:98:FB:C9:C1:10:EF:2F:9B:45:53:D6:13:92:7F:55:77:4E:07:6E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/98FBC9C110EF2F9B4553D613927F55774E076EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:88:bf:e0:6d:e9:9b:25:32:5c:23:11:87:18:13:21:ff:ae: f2:ef:a6:17:02:4f:1f:04:6e:2a:8c:d2:a3:d2:bd:fb:8c:cf: 9d:3c:fe:9d:55:b9:2b:b2:e1:df:b1:f6:6c:48:0d:23:df:1d: c1:92:69:9c:d7:dc:09:5d:3c:ae:b6:73:76:56:e4:eb:fe:c4: 0a:8a:e8:f8:cb:24:83:34:51:e5:c2:eb:fc:6f:97:d3:94:57: ed:01:27:96:56:90:af:0b:58:6c:31:90:6d:5e:8c:35:8f:86: de:54:e3:50:75:41:3f:aa:e6:78:02:2e:d0:fc:7c:48:8a:f9: 7b:54:f4:c6:43:31:a7:05:24:2e:4a:b1:a2:0f:f3:06:bf:9f: a5:42:3a:60:92:93:8c:0d:af:c6:63:b6:05:83:20:98:c9:65: 09:48:fa:58:c2:ea:f0:fa:ba:72:c0:2b:1b:e6:05:d3:6c:82: db:11:24:09:25:c5:73:5b:64:95:18:bd:e4:8c:bc:49:b1:cb: 78:f9:2e:f5:69:1c:59:d5:23:d9:35:1a:7f:18:41:3e:d1:bc: 4d:a0:bd:7d:c6:7e:d5:60:86:18:35:8a:20:36:29:d1:3f:03: fd:63:29:d3:9e:2b:b6:08:18:dd:4d:91:64:eb:09:13:3c:f1: 1c:22:27:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+cb9PTf+J6K342BlASDSWMCvS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGQkM5QzExMEVGMkY5QjQ1NTNENjEzOTI3RjU1Nzc0 RTA3NkVBOTAeFw0yNjA2MTgwNzA1NTRaFw0yNjA2MTkwODUxNTRaMDMxMTAvBgNV BAMTKDU5NjkzQkNEN0M4QTkyMUI3MzlBQ0JDNTRENTlFMUYyNUVCOTY0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrjqGlxbBHxtZ9cSOLjxfwrTQ hUGoLQHKSUuB07IOm7ORBGpMds3mmlHDqh1mIRGLCBwH3WdnyLDuJpKPKvkk3Gyq fz5W5SHxrke7RsN/L7AQqOYWcJgyF03e7Xr3jPQhXCdCwqfcl2QIyqS3y2ltlPoe Umxf/97eIZaC/uVDw0wiv5EXSN1MtKKvFGHP/UtSItRsxt6ogSKEzBLq0j9rbL8J qdGQUewGxV6BcbeZA+T9/pcXUtWi4ssMu2uTm4etycE7oHNQvin23KQG3IrdUwW9 tQsIAM2qesyAmcRLJfIj4wG49MwjbezxffJUpbP1kzRkN4UXC0eo1hKlAsXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWWk7zXyKkhtzmsvFTVnh8l65ZEMwHwYDVR0j BBgwFoAUmPvJwRDvL5tFU9YTkn9Vd04HbqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NmMGE3N2MtMzkyOC00MTMwLWEwOTgtYjQzNzU3MmQ3MjJjLzAvOThGQkM5QzEx MEVGMkY5QjQ1NTNENjEzOTI3RjU1Nzc0RTA3NkVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85OEZCQzlDMTEwRUYyRjlCNDU1M0Q2MTM5MjdGNTU3NzRFMDc2 RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NmMGE3N2MtMzkyOC00MTMwLWEw OTgtYjQzNzU3MmQ3MjJjLzAvOThGQkM5QzExMEVGMkY5QjQ1NTNENjEzOTI3RjU1 Nzc0RTA3NkVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyIv+Bt6ZslMlwjEYcYEyH/rvLvphcCTx8E biqM0qPSvfuMz508/p1VuSuy4d+x9mxIDSPfHcGSaZzX3AldPK62c3ZW5Ov+xAqK 6PjLJIM0UeXC6/xvl9OUV+0BJ5ZWkK8LWGwxkG1ejDWPht5U41B1QT+q5ngCLtD8 fEiK+XtU9MZDMacFJC5KsaIP8wa/n6VCOmCSk4wNr8ZjtgWDIJjJZQlI+ljC6vD6 unLAKxvmBdNsgtsRJAklxXNbZJUYveSMvEmxy3j5LvVpHFnVI9k1Gn8YQT7RvE2g vX3GftVghhg1iiA2KdE/A/1jKdOeK7YIGN1NkWTrCRM88RwiJ14= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:39 2026 by rpki-client