
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
File: 98E2D88430E0F6BCECDC35B8596FF471265D238B.mft (raw, json)
Hash identifier: jiBmzBOkFMfFYeC2VawK0dSMhuIv7WNzcg9C28vgS/Q=
Subject key identifier: 76:2D:F3:7E:9C:58:38:32:75:D6:83:08:69:75:07:FA:1A:36:E2:0A
Authority key identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B
Certificate issuer: /CN=98E2D88430E0F6BCECDC35B8596FF471265D238B
Certificate serial: 35934E41219A30563BC65179D62F9915FDEA6A1E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 10:36:45 +0000
Manifest this update: Thu 17 Sep 2026 10:31:45 +0000
Manifest next update: Fri 18 Sep 2026 13:15:45 +0000
Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: H29DiGXAuolahNiG0w85WM8CZEw5FJ4zYtAOWOwpwGM=)
2: 98E2D88430E0F6BCECDC35B8596FF471265D238B.crl (hash: AdgRIdIDmbifztOCE9uJ8lsc12ukYQz3gcPkd/KU0UI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl
rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:93:4e:41:21:9a:30:56:3b:c6:51:79:d6:2f:99:15:fd:ea:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98E2D88430E0F6BCECDC35B8596FF471265D238B
Validity
Not Before: Sep 17 10:31:45 2026 GMT
Not After : Sep 18 13:15:45 2026 GMT
Subject: CN=762DF37E9C58383275D68308697507FA1A36E20A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:be:80:bd:a5:c6:81:cd:d5:13:1a:c4:d7:
2e:9e:c1:39:92:52:99:9e:16:8f:2a:49:a3:24:b4:
ce:c3:b3:11:61:d5:a5:8d:80:d5:7e:45:e5:85:09:
86:7b:fd:10:31:88:20:27:67:34:8f:24:1d:37:cf:
7c:e2:66:81:15:39:5a:ec:b0:58:b0:06:5c:ce:39:
c4:50:95:a3:04:e4:00:20:c8:27:5f:ae:5f:1c:5a:
ef:2f:e9:3b:41:c7:51:66:3c:25:f3:a0:21:0d:12:
66:11:4d:fe:2b:b6:c6:6f:c1:b6:7c:2d:4e:fc:eb:
fe:e9:16:e4:6b:45:5e:30:83:fa:2e:b8:69:72:ef:
77:4e:fd:49:62:58:6e:81:99:71:20:90:d6:3e:d1:
74:4a:71:f9:c5:bb:1b:92:af:15:0a:06:c9:b7:c8:
79:a7:16:69:5c:36:9a:0c:1a:41:cd:3a:aa:af:df:
41:5c:34:2d:cd:4a:f2:22:69:96:64:a7:d1:2e:a2:
5d:e5:a5:64:12:7e:d0:2d:ef:07:ef:dc:a1:a5:28:
c6:2f:f3:58:65:81:1a:f6:35:6e:a4:f1:f5:fa:b7:
71:36:32:0a:9a:32:7f:5e:0d:1e:2c:a9:c3:fd:75:
7f:ec:a9:b0:59:67:cb:d6:2b:63:29:50:73:3b:e2:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:F3:7E:9C:58:38:32:75:D6:83:08:69:75:07:FA:1A:36:E2:0A
X509v3 Authority Key Identifier:
keyid:98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9f:7c:30:0c:7b:88:98:da:6c:ae:37:1c:1c:c4:44:4a:d6:
12:a7:40:36:bb:86:4f:b4:71:93:42:9e:98:3b:55:32:ad:8c:
a1:9a:c7:4b:27:de:ef:c3:77:50:33:88:48:93:8e:24:9d:f9:
4e:fd:f9:b5:e1:f0:4f:42:0a:bc:80:fe:3f:28:87:7c:c1:fa:
ec:52:79:e8:be:ad:18:85:de:3c:22:ac:65:71:5e:c9:c3:42:
31:69:3e:4c:90:e1:b8:16:23:2d:c0:bc:6c:f3:0c:82:6f:64:
2e:f8:90:c6:39:70:e4:45:06:ef:75:b3:aa:37:21:ab:7d:ff:
06:43:c8:b8:c6:1b:f8:f1:ab:15:42:07:11:9d:89:ef:da:a4:
36:05:5c:d4:15:3f:a6:16:4b:82:d9:9a:dd:6c:f4:3d:74:b0:
89:f2:72:da:e5:48:3d:05:bf:26:33:d2:d6:a0:31:73:71:fd:
cf:03:42:01:37:57:65:0e:be:bb:5a:d9:61:42:80:0d:53:40:
50:58:35:0d:dc:4e:1c:b7:50:20:bd:7d:32:b2:83:8c:c1:66:
ff:32:b2:18:c6:8d:38:10:b7:c0:77:c4:84:00:1b:cd:7f:69:
d2:d6:2d:89:99:6b:0e:1b:1c:fe:b2:bc:4e:26:dd:b8:00:34:
d3:9e:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:59:31 2026 by rpki-client