$ rpki-client -vvf rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft File: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft (raw, json) Hash identifier: LS5QSCjvkoOFUxjnY0Jv5vaNzJi6rdmTpEni3i7BJkc= Subject key identifier: 18:F1:9D:E7:9A:BD:B0:7A:D1:5B:D5:BD:A5:28:E9:95:B7:DA:01:BE Authority key identifier: 98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 Certificate issuer: /CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Certificate serial: 7A377160F2EE4479B1C033D9883CBAB18959F21E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft Manifest number: 67 Signing time: Sat 18 Jul 2026 04:43:08 +0000 Manifest this update: Sat 18 Jul 2026 04:38:08 +0000 Manifest next update: Sun 19 Jul 2026 07:48:08 +0000 Files and hashes: 1: 3130332e37392e35302e302f32342d3234203d3e20313337323839.roa (hash: vl3Emqkjtd6ndSnBzqWJ95j0y+vZlAJrL/62drSE1YQ=) 2: 98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl (hash: MnP0iUvKo+7imOBfnDwe9BUAwrwIqgUgclK6AGMZMhc=) 3: 3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (hash: 2Sa+VpcgAu1ED28T8S94NumzPQwrwE0lWLElCOSFbwc=) 4: 3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (hash: kUZZosFP9nYdopwU7PPB09tgiMtPpaPx4zKEOVzD238=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:37:71:60:f2:ee:44:79:b1:c0:33:d9:88:3c:ba:b1:89:59:f2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98B16EC884300C7F2E9E53A4A647AC6748B047E3 Validity Not Before: Jul 18 04:38:08 2026 GMT Not After : Jul 19 07:48:08 2026 GMT Subject: CN=18F19DE79ABDB07AD15BD5BDA528E995B7DA01BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:2d:94:91:68:cb:e2:19:b8:56:32:95:7a: 9c:70:6f:9a:5c:de:2f:a5:46:52:ef:c2:4f:7c:a0: e0:76:4e:7d:ec:1c:67:27:fb:dc:72:4a:5e:81:0f: b4:d2:46:1f:85:50:1d:d7:06:54:e8:a2:70:17:5b: b8:6b:e0:d0:78:84:94:ee:3b:af:38:f5:06:76:69: 35:4e:0f:65:a9:04:ac:52:4a:b0:3c:6e:4b:96:14: 64:88:00:74:07:d1:df:2c:4a:46:4f:c7:c6:42:80: ce:15:5a:5d:fe:44:81:31:8a:94:ac:9b:53:16:ca: b1:65:52:d4:b2:fc:6d:6e:54:ea:21:d8:5c:d5:11: 54:ab:dd:da:cb:72:69:3a:a0:a4:52:84:c5:32:9d: 21:cb:d2:62:23:f0:c2:27:2a:44:ad:31:c6:60:fb: 65:6a:06:80:a6:9d:0d:45:a9:98:33:aa:32:cd:49: 95:a6:bd:7a:f6:ba:81:04:f3:3b:3d:39:2a:8c:ac: ba:c6:44:50:f0:77:6d:29:11:88:67:fb:ba:a9:79: 42:60:59:93:fa:ca:3e:d3:68:08:1f:a4:fe:2a:96: 1d:20:f7:16:72:a0:7c:a8:31:ee:4e:06:60:c4:bf: 58:1b:5d:96:17:eb:52:00:0c:f3:5f:4d:9c:81:84: ed:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F1:9D:E7:9A:BD:B0:7A:D1:5B:D5:BD:A5:28:E9:95:B7:DA:01:BE X509v3 Authority Key Identifier: keyid:98:B1:6E:C8:84:30:0C:7F:2E:9E:53:A4:A6:47:AC:67:48:B0:47:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98B16EC884300C7F2E9E53A4A647AC6748B047E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/98B16EC884300C7F2E9E53A4A647AC6748B047E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:e2:bf:b3:56:d1:94:a9:a4:e7:1b:9b:b2:9b:7c:fc:62: 9d:c6:17:98:8d:8f:85:9a:ed:81:d3:eb:1d:1b:09:a1:23:62: 8b:d0:e8:5e:d1:a1:79:2b:b4:fa:e2:90:04:86:b1:7c:be:14: 28:1a:3f:b3:58:e3:a6:93:82:5a:60:4d:e9:ec:03:75:92:19: 35:51:8a:79:d0:4b:80:c1:c2:d1:8c:12:1d:b8:86:bf:56:58: 4d:25:1a:23:ad:7a:e5:2a:ca:ac:8f:e9:f1:1b:34:d6:81:8b: e2:31:c3:77:93:ce:fb:d7:1d:5e:2d:ea:be:f5:ab:56:86:b0: a3:95:03:a8:b5:c0:87:fd:71:ec:2d:6a:ce:5f:3e:de:40:28: 0b:0c:1d:62:a4:45:d0:7d:b3:87:5a:91:70:98:ac:e9:c0:00: 85:27:4c:a3:f9:d3:b8:54:bc:76:05:82:82:3f:d9:9f:f6:03: 6a:b4:f4:4d:e3:7a:4c:96:d1:f5:fc:1a:d0:03:be:d1:80:fa: a9:39:5d:91:47:a6:e0:49:10:6e:cb:c5:0b:6a:03:27:54:18: 40:5a:8c:eb:5c:1a:b2:50:54:31:46:5f:8d:78:bc:c9:70:fd: 49:8e:17:15:d1:63:21:5f:c1:58:22:a0:70:43:aa:4b:d4:02: 48:4b:f6:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejdxYPLuRHmxwDPZiDy6sYlZ8h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0 OEIwNDdFMzAeFw0yNjA3MTgwNDM4MDhaFw0yNjA3MTkwNzQ4MDhaMDMxMTAvBgNV BAMTKDE4RjE5REU3OUFCREIwN0FEMTVCRDVCREE1MjhFOTk1QjdEQTAxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWy2UkWjL4hm4VjKVepxwb5pc 3i+lRlLvwk98oOB2Tn3sHGcn+9xySl6BD7TSRh+FUB3XBlToonAXW7hr4NB4hJTu O6849QZ2aTVOD2WpBKxSSrA8bkuWFGSIAHQH0d8sSkZPx8ZCgM4VWl3+RIExipSs m1MWyrFlUtSy/G1uVOoh2FzVEVSr3drLcmk6oKRShMUynSHL0mIj8MInKkStMcZg +2VqBoCmnQ1FqZgzqjLNSZWmvXr2uoEE8zs9OSqMrLrGRFDwd20pEYhn+7qpeUJg WZP6yj7TaAgfpP4qlh0g9xZyoHyoMe5OBmDEv1gbXZYX61IADPNfTZyBhO3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGPGd55q9sHrRW9W9pSjplbfaAb4wHwYDVR0j BBgwFoAUmLFuyIQwDH8unlOkpkesZ0iwR+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJjYWVhM2ItYmQ3Zi00ODFhLTliYzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4 NDMwMEM3RjJFOUU1M0E0QTY0N0FDNjc0OEIwNDdFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OEIxNkVDODg0MzAwQzdGMkU5RTUzQTRBNjQ3QUM2NzQ4QjA0 N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvOThCMTZFQzg4NDMwMEM3RjJFOUU1M0E0QTY0N0FD Njc0OEIwNDdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFto4r+zVtGUqaTnG5uym3z8Yp3GF5iNj4Wa 7YHT6x0bCaEjYovQ6F7RoXkrtPrikASGsXy+FCgaP7NY46aTglpgTensA3WSGTVR innQS4DBwtGMEh24hr9WWE0lGiOteuUqyqyP6fEbNNaBi+Ixw3eTzvvXHV4t6r71 q1aGsKOVA6i1wIf9cewtas5fPt5AKAsMHWKkRdB9s4dakXCYrOnAAIUnTKP507hU vHYFgoI/2Z/2A2q09E3jekyW0fX8GtADvtGA+qk5XZFHpuBJEG7LxQtqAydUGEBa jOtcGrJQVDFGX414vMlw/UmOFxXRYyFfwVgioHBDqkvUAkhL9tM= -----END CERTIFICATE-----Generated at Sat Jul 18 12:19:33 2026 by rpki-client