$ rpki-client -vvvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json) Hash identifier: KVXpH/PNfIeahb6KeKyGBXZY5zEJ3hGsyTopdfRuQyI= Subject key identifier: 74:12:04:C2:AF:DF:30:C6:B2:58:26:77:D5:F4:3A:AD:89:CE:06:62 Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Certificate serial: 7F022F0FB5AD984A0BAD8B010952F6951F1246A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft Manifest number: EC Signing time: Sun 25 Oct 2026 14:14:23 +0000 Manifest this update: Sun 25 Oct 2026 14:09:23 +0000 Manifest next update: Mon 26 Oct 2026 16:55:23 +0000 Files and hashes: 1: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=) 2: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=) 3: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: qbfJtPJNXv+wPW8I8A1Gj8ZjcdudBEGkUKkiykx/WiU=) 4: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:02:2f:0f:b5:ad:98:4a:0b:ad:8b:01:09:52:f6:95:1f:12:46:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Validity Not Before: Oct 25 14:09:23 2026 GMT Not After : Oct 26 16:55:23 2026 GMT Subject: CN=741204C2AFDF30C6B2582677D5F43AAD89CE0662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:45:9a:3f:b3:b5:01:8c:52:5f:0b:4b:74: 1b:4f:53:0c:a0:18:6b:3e:74:45:8d:74:2b:90:18: b6:10:55:49:46:81:df:cb:ed:30:60:55:83:16:8a: c6:8e:df:e4:f8:f0:82:1c:44:dc:1f:58:0c:94:7a: 13:bd:ad:05:c5:66:b5:33:5f:c5:b5:c9:2a:95:54: 10:3f:61:b8:ad:56:cb:cd:18:f9:56:48:f7:4d:48: 95:7b:7a:3e:8a:06:85:dc:50:a4:b1:74:26:5f:40: 62:eb:01:6e:4b:83:06:95:c8:42:c9:57:59:3a:2e: fe:28:e8:39:1c:f7:e8:b6:ed:35:27:f7:34:a7:1c: a6:f6:bd:3a:35:e3:3e:64:37:b2:72:d5:24:dd:af: d2:fd:81:66:b8:c8:56:f6:9d:6a:42:d9:7d:30:69: 21:b4:21:16:28:de:5c:a4:e5:19:be:f3:8f:9e:e6: 32:89:af:cd:f2:84:f9:c4:c4:00:90:a6:fa:2b:cd: 04:4e:08:b3:45:5b:80:51:f3:45:26:9a:28:91:38: ef:dc:14:58:31:27:13:c5:b2:62:e8:48:73:2d:cf: d8:04:e6:10:9f:3a:51:a1:9c:e7:04:9c:e9:bf:90: 43:3e:c9:05:b4:e4:3c:1e:19:fa:d9:55:a6:59:5c: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:12:04:C2:AF:DF:30:C6:B2:58:26:77:D5:F4:3A:AD:89:CE:06:62 X509v3 Authority Key Identifier: keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e1:9a:32:07:2b:87:80:e1:9a:1c:4d:e6:2d:e8:64:7e:a8: b5:33:56:97:3d:ac:2f:ef:8f:33:e6:2a:e4:44:66:28:d2:11: 2a:29:12:0f:73:f5:19:65:da:a0:38:9c:36:5b:4b:fc:b4:d1: 8b:5d:ce:83:c7:af:1a:dd:e2:6e:0d:44:2a:5f:30:f2:20:67: ca:27:cd:8d:8b:d8:7d:91:49:01:f0:71:77:6a:bd:a2:b7:79: d0:19:dc:4b:b9:18:88:6b:6d:b1:8d:da:f6:d3:7c:fe:68:88: bb:4e:d1:e1:62:fc:f0:f2:1a:ea:5e:93:a1:35:eb:04:26:e3: 4f:c0:66:6d:12:9a:9f:75:73:ac:ea:08:49:3a:68:21:44:c3: c5:b1:d8:1d:9e:b1:a4:08:26:1c:0a:fe:be:86:de:d2:e9:70: 6d:7f:ea:e9:4f:7f:27:b7:b2:35:af:2c:27:42:84:69:de:de: 8b:7f:89:d9:bf:78:3f:52:c2:56:61:6f:ec:7d:9b:67:42:3e: 73:ed:5d:62:f9:16:d1:19:55:1f:bd:02:d8:fb:a4:ef:6f:0c: 34:52:39:ec:9b:16:1a:6a:a4:24:48:5a:95:f5:de:ff:f6:cf: 4b:8a:02:e1:ba:c7:6b:b2:8f:e1:0d:3c:28:84:7a:c4:1b:07: 0b:57:99:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwIvD7WtmEoLrYsBCVL2lR8SRqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0 OEIwNDdFMzAeFw0yNjEwMjUxNDA5MjNaFw0yNjEwMjYxNjU1MjNaMDMxMTAvBgNV BAMTKDc0MTIwNEMyQUZERjMwQzZCMjU4MjY3N0Q1RjQzQUFEODlDRTA2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JEWaP7O1AYxSXwtLdBtPUwyg GGs+dEWNdCuQGLYQVUlGgd/L7TBgVYMWisaO3+T48IIcRNwfWAyUehO9rQXFZrUz X8W1ySqVVBA/YbitVsvNGPlWSPdNSJV7ej6KBoXcUKSxdCZfQGLrAW5LgwaVyELJ V1k6Lv4o6Dkc9+i27TUn9zSnHKb2vTo14z5kN7Jy1STdr9L9gWa4yFb2nWpC2X0w aSG0IRYo3lyk5Rm+84+e5jKJr83yhPnExACQpvorzQROCLNFW4BR80UmmiiROO/c FFgxJxPFsmLoSHMtz9gE5hCfOlGhnOcEnOm/kEM+yQW05DweGfrZVaZZXFALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdBIEwq/fMMayWCZ31fQ6rYnOBmIwHwYDVR0j BBgwFoAUmLFuyIQwDH8unlOkpkesZ0iwR+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJjYWVhM2ItYmQ3Zi00ODFhLTliYzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4 NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0OEIwNDdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEIxNkVDODg0MzAwQzdGMkU5RTUzQTRBNjQ3QUM2NzQ4QjA0 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FD Njc0OEIwNDdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfhmjIHK4eA4ZocTeYt6GR+qLUzVpc9rC/v jzPmKuREZijSESopEg9z9Rll2qA4nDZbS/y00YtdzoPHrxrd4m4NRCpfMPIgZ8on zY2L2H2RSQHwcXdqvaK3edAZ3Eu5GIhrbbGN2vbTfP5oiLtO0eFi/PDyGupek6E1 6wQm40/AZm0Smp91c6zqCEk6aCFEw8Wx2B2esaQIJhwK/r6G3tLpcG1/6ulPfye3 sjWvLCdChGne3ot/idm/eD9SwlZhb+x9m2dCPnPtXWL5FtEZVR+9Atj7pO9vDDRS OeybFhpqpCRIWpX13v/2z0uKAuG6x2uyj+ENPCiEesQbBwtXmQw= -----END CERTIFICATE-----Generated at Sun Oct 25 19:12:54 2026 by rpki-client