$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft (raw, json) Hash identifier: P/UcvzJO7m93Zj9JTwiF25nr+oTOa7ljrbH/thW7lmg= Subject key identifier: 8C:C3:20:94:E8:6A:F7:46:4A:05:39:98:24:27:0D:0D:8B:A8:E4:AF Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Certificate serial: 1276EF28C4D918082059E6AA341048A64C39029E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:38:24 +0000 Manifest this update: Wed 16 Sep 2026 19:33:24 +0000 Manifest next update: Thu 17 Sep 2026 22:10:24 +0000 Files and hashes: 1: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=) 2: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: w40+4vjnbHq0TV83WSPBOHHWioBKVnOPxDYQ5jp0iE0=) 3: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl (hash: KM9hDqWYNDnNyOm5hif3PNyG2p+NFbyW7USCrjSVLXw=) 4: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: iZC63XKtQ4A+tLBPo00EIvl5gTnecWbM3wWVRgyRhoQ=) 5: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:76:ef:28:c4:d9:18:08:20:59:e6:aa:34:10:48:a6:4c:39:02:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Validity Not Before: Sep 16 19:33:24 2026 GMT Not After : Sep 17 22:10:24 2026 GMT Subject: CN=8CC32094E86AF7464A05399824270D0D8BA8E4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:f7:36:eb:69:04:3c:b2:fc:3f:13:de:34: d3:00:bc:72:5d:db:de:0c:f2:dd:7d:33:7c:d1:bb: 35:20:2f:53:c2:ed:d3:e3:6b:14:12:ee:b6:22:d2: 43:53:0a:e1:82:0f:2c:a6:a3:af:dd:ab:ee:d7:da: fc:9c:a2:2b:95:a6:d8:c3:08:fc:ee:65:5f:78:93: bc:b9:f6:b5:16:0a:ad:3e:49:ec:42:32:b2:23:a0: 5b:95:7f:14:44:ef:00:f6:a9:5c:e4:4e:9d:76:ef: b2:30:0f:9a:5e:16:16:a9:88:23:4b:64:2f:57:b2: 67:e0:9c:10:d2:3a:8e:33:26:55:09:e4:23:8d:da: 60:55:bd:49:d5:86:6f:59:8b:33:02:a8:a0:fb:8c: d1:22:9f:67:73:a3:39:d7:7e:04:14:d1:b0:f9:03: 81:a1:7e:ee:45:1f:c9:15:90:26:d3:15:97:29:68: 90:31:92:59:4b:e2:f4:bf:0a:00:84:91:f5:83:23: 51:86:a1:4c:7f:d5:a2:fd:aa:4c:97:e2:b2:4d:ec: f5:8f:15:e0:2b:02:8c:7e:bb:8c:86:21:ca:bf:32: b5:35:91:04:d4:aa:3c:03:c1:10:bb:d3:c4:32:2f: 60:8b:3e:e7:c0:c6:8e:25:2b:78:e9:67:b2:ed:74: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C3:20:94:E8:6A:F7:46:4A:05:39:98:24:27:0D:0D:8B:A8:E4:AF X509v3 Authority Key Identifier: keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:eb:50:1d:b6:bc:fe:43:6a:5a:3f:b8:55:3b:b7:38:21:f3: d1:f4:e4:39:f5:d6:a1:d9:63:0b:90:42:32:29:52:d8:00:49: 0f:a0:12:4d:06:a8:7f:40:d8:bc:43:38:37:5b:d6:ef:ba:11: f2:88:03:75:5f:45:6f:4f:4f:14:c3:7e:d6:95:db:1c:8c:91: c7:0f:92:3d:ca:b5:68:50:d3:0b:7c:a2:6d:79:7d:df:38:c4: 4d:55:de:54:bd:a4:e2:86:b3:2d:7e:0b:2a:0f:41:e1:dd:49: 21:1c:f4:e8:45:3b:d6:a1:f0:5a:47:d3:41:46:ce:f7:c5:06: 41:50:fc:6d:f5:af:b4:23:2f:52:1e:46:a6:a2:57:bb:e0:53: bc:84:71:e8:2a:ee:af:9f:81:95:2a:6d:09:be:a5:24:4b:be: 61:8c:16:75:61:51:30:18:d0:b2:3d:1d:ef:8a:9b:74:ac:bd: 04:23:7b:c3:31:96:8c:42:dc:e5:89:5c:e7:07:ae:06:17:1f: 6c:f2:51:a7:fb:cb:f5:73:2c:49:95:aa:4b:f2:4e:53:e1:c6: 7e:40:30:a9:ec:41:4e:e3:0b:71:82:7b:c3:8b:9c:45:cf:de: 33:d9:23:16:b3:4b:ef:a1:32:37:2a:45:75:84:4c:a9:65:9f: 63:51:6b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnbvKMTZGAggWeaqNBBIpkw5Ap4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz RUZEOTU2OTAeFw0yNjA5MTYxOTMzMjRaFw0yNjA5MTcyMjEwMjRaMDMxMTAvBgNV BAMTKDhDQzMyMDk0RTg2QUY3NDY0QTA1Mzk5ODI0MjcwRDBEOEJBOEU0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbO/c262kEPLL8PxPeNNMAvHJd 294M8t19M3zRuzUgL1PC7dPjaxQS7rYi0kNTCuGCDyymo6/dq+7X2vycoiuVptjD CPzuZV94k7y59rUWCq0+SexCMrIjoFuVfxRE7wD2qVzkTp1277IwD5peFhapiCNL ZC9XsmfgnBDSOo4zJlUJ5CON2mBVvUnVhm9ZizMCqKD7jNEin2dzoznXfgQU0bD5 A4Ghfu5FH8kVkCbTFZcpaJAxkllL4vS/CgCEkfWDI1GGoUx/1aL9qkyX4rJN7PWP FeArAox+u4yGIcq/MrU1kQTUqjwDwRC708QyL2CLPufAxo4lK3jpZ7LtdI8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjMMglOhq90ZKBTmYJCcNDYuo5K8wHwYDVR0j BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5 NTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUw OEUzRUZEOTU2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHrUB22vP5Dalo/uFU7tzgh89H05Dn11qHZ YwuQQjIpUtgASQ+gEk0GqH9A2LxDODdb1u+6EfKIA3VfRW9PTxTDftaV2xyMkccP kj3KtWhQ0wt8om15fd84xE1V3lS9pOKGsy1+CyoPQeHdSSEc9OhFO9ah8FpH00FG zvfFBkFQ/G31r7QjL1IeRqaiV7vgU7yEcegq7q+fgZUqbQm+pSRLvmGMFnVhUTAY 0LI9He+Km3SsvQQje8MxloxC3OWJXOcHrgYXH2zyUaf7y/VzLEmVqkvyTlPhxn5A MKnsQU7jC3GCe8OLnEXP3jPZIxazS++hMjcqRXWETKlln2NRa8A= -----END CERTIFICATE-----Generated at Thu Sep 17 14:47:25 2026 by rpki-client