$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json) Hash identifier: HL1LiKZONSnKKDIlR3jzciA/LQQO1SLLFKTy+09bZCs= Subject key identifier: D6:F2:17:71:4B:B2:97:5E:46:EE:2E:71:00:5E:BC:1A:76:16:E7:4D Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 Certificate issuer: /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Certificate serial: 7507C4F867078EF40066526032627401B29E27D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:44:21 +0000 Manifest this update: Thu 17 Sep 2026 08:39:21 +0000 Manifest next update: Fri 18 Sep 2026 12:16:21 +0000 Files and hashes: 1: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: Hy0vrJuSr/qMpXA6WYU2nS4pc8y6CNMk5x9k+EfuWrg=) 2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:07:c4:f8:67:07:8e:f4:00:66:52:60:32:62:74:01:b2:9e:27:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Validity Not Before: Sep 17 08:39:21 2026 GMT Not After : Sep 18 12:16:21 2026 GMT Subject: CN=D6F217714BB2975E46EE2E71005EBC1A7616E74D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:de:97:41:31:d2:95:3d:c3:f4:ea:4a:20: 3c:02:58:03:0c:9f:99:c2:9a:ea:07:0f:d1:48:d4: a9:e5:2b:a1:3c:7c:3f:d0:6e:27:c8:3f:27:e3:fe: 6a:15:12:7d:0b:82:59:ba:18:d0:ee:c2:19:20:32: ea:12:0f:c9:37:65:ad:c4:6e:fd:31:30:1e:82:e4: dc:13:0b:2c:2f:6e:c3:db:aa:f9:e9:0d:02:1f:d5: be:9a:98:98:35:da:a8:5d:99:18:7a:79:0c:d4:cd: 79:4d:f4:84:e3:92:0e:2c:6f:bc:ec:e0:6c:4a:21: 80:1d:4d:f3:ec:36:f2:71:32:8b:1b:41:9b:f4:4e: c6:3a:49:7d:3b:7b:8e:62:b2:64:a1:ce:c9:ba:45: 1f:3e:89:99:24:5a:33:a3:67:40:66:0e:4d:a9:6d: 98:72:cf:c7:fa:ca:a7:d2:56:df:d5:de:37:d6:81: 4e:0e:f5:a8:c6:2e:6b:68:d4:61:77:83:94:a9:f3: 34:68:ab:4c:f9:e5:04:b2:8b:ae:07:00:af:a7:d4: 79:67:55:77:1d:e6:ac:7d:bb:bd:7c:36:e8:51:29: cd:62:72:58:a5:fb:72:36:e5:4b:ed:21:ac:da:b4: 07:d6:25:c2:47:04:d2:b0:d7:ab:01:07:e3:ed:53: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F2:17:71:4B:B2:97:5E:46:EE:2E:71:00:5E:BC:1A:76:16:E7:4D X509v3 Authority Key Identifier: keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:72:c4:f8:89:b5:65:93:02:94:0d:6d:18:ff:95:9c:d2:7f: 4b:7a:77:37:1b:f6:ce:a0:1c:3c:2f:8a:13:d9:2e:33:92:f0: fa:7c:b0:ba:ec:66:59:da:e1:9c:e1:eb:77:d1:14:c8:7a:a1: 87:48:4e:13:cf:fd:b3:6f:9e:95:20:85:93:18:0e:33:be:74: f7:ea:c6:ab:9f:3b:ed:20:c7:de:3d:98:2c:48:e2:5d:35:a3: 40:f8:fc:f1:82:b0:1c:ae:fc:5a:7d:25:2f:88:e6:85:de:b0: f1:20:a1:d4:c9:b0:d9:1c:23:01:03:94:5e:dd:92:1d:6c:0c: 4c:1c:76:16:39:07:80:d3:d4:fc:1b:ab:e8:74:98:c4:87:6f: 9a:31:36:33:14:ec:3c:da:66:a0:fa:30:cb:e3:cd:c7:e4:1c: 7b:0f:19:68:0b:93:68:d9:98:f6:6d:4c:10:c2:71:36:27:6c: 5b:03:cd:37:8c:42:b0:13:bb:43:9c:22:59:95:bf:9b:8b:d7: 2c:39:9f:42:7f:de:ff:23:bd:9a:ea:8e:6e:34:19:6b:7b:d7: 25:4f:cd:a2:7f:cc:11:18:ca:3e:ee:1e:9d:f4:d7:a6:75:ca: 81:17:60:a4:2f:69:be:21:ed:a8:41:98:d4:1d:80:90:37:16: 51:14:12:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQfE+GcHjvQAZlJgMmJ0AbKeJ9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFG RUJENUI4MjAeFw0yNjA5MTcwODM5MjFaFw0yNjA5MTgxMjE2MjFaMDMxMTAvBgNV BAMTKEQ2RjIxNzcxNEJCMjk3NUU0NkVFMkU3MTAwNUVCQzFBNzYxNkU3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWN6XQTHSlT3D9OpKIDwCWAMM n5nCmuoHD9FI1KnlK6E8fD/QbifIPyfj/moVEn0Lglm6GNDuwhkgMuoSD8k3Za3E bv0xMB6C5NwTCywvbsPbqvnpDQIf1b6amJg12qhdmRh6eQzUzXlN9ITjkg4sb7zs 4GxKIYAdTfPsNvJxMosbQZv0TsY6SX07e45ismShzsm6RR8+iZkkWjOjZ0BmDk2p bZhyz8f6yqfSVt/V3jfWgU4O9ajGLmto1GF3g5Sp8zRoq0z55QSyi64HAK+n1Hln VXcd5qx9u718NuhRKc1iclil+3I25UvtIazatAfWJcJHBNKw16sBB+PtU0ApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1vIXcUuyl15G7i5xAF68GnYW500wHwYDVR0j BBgwFoAUmOGMV894S17LZHb/2jQDof69W4IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY5YzQ0NmYtZDk3MS00YjVlLWIyNjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdD Rjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFGRUJENUI4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEUxOEM1N0NGNzg0QjVFQ0I2NDc2RkZEQTM0MDNBMUZFQkQ1 QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAz QTFGRUJENUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERyxPiJtWWTApQNbRj/lZzSf0t6dzcb9s6g HDwvihPZLjOS8Pp8sLrsZlna4Zzh63fRFMh6oYdIThPP/bNvnpUghZMYDjO+dPfq xqufO+0gx949mCxI4l01o0D4/PGCsByu/Fp9JS+I5oXesPEgodTJsNkcIwEDlF7d kh1sDEwcdhY5B4DT1Pwbq+h0mMSHb5oxNjMU7DzaZqD6MMvjzcfkHHsPGWgLk2jZ mPZtTBDCcTYnbFsDzTeMQrATu0OcIlmVv5uL1yw5n0J/3v8jvZrqjm40GWt71yVP zaJ/zBEYyj7uHp3016Z1yoEXYKQvab4h7ahBmNQdgJA3FlEUEks= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:38 2026 by rpki-client