$ rpki-client -vvf rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft File: 098D1D612D535CED249CDB01EC5565063EBACEEF.mft (raw, json) Hash identifier: rXbFqTQcSw623t9A3yCRi2C18pmFuQmeT2MynPN60Vw= Subject key identifier: FB:42:4F:A5:4C:5E:72:9E:12:78:0F:A3:4D:D4:1F:EB:17:12:B2:3E Authority key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF Certificate issuer: /CN=098D1D612D535CED249CDB01EC5565063EBACEEF Certificate serial: 55AE8E3E5D270754343F9EAC8518F457DD7B502E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:13:43 +0000 Manifest this update: Sat 20 Jun 2026 03:08:43 +0000 Manifest next update: Sun 21 Jun 2026 05:57:43 +0000 Files and hashes: 1: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: CY1Z76P9Cm4XC+l2Gxs6pH2wrd99R/AKN3svNUGr+4E=) 2: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: 6BOi9a4QIn+pGYzRIaW0daSfHvcVflYv5ZBX0t+b6I0=) 3: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: Z0u7IGnQdxSwJ/3PUqshR32Mqm4mC19C1FEuu6LC8Ng=) 4: 098D1D612D535CED249CDB01EC5565063EBACEEF.crl (hash: JzHlX8pjn6KovrMLj3xGe/EAKzs1yyFVHMzTuBtOgdQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ae:8e:3e:5d:27:07:54:34:3f:9e:ac:85:18:f4:57:dd:7b:50:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D1D612D535CED249CDB01EC5565063EBACEEF Validity Not Before: Jun 20 03:08:43 2026 GMT Not After : Jun 21 05:57:43 2026 GMT Subject: CN=FB424FA54C5E729E12780FA34DD41FEB1712B23E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ed:01:5a:a0:87:a0:43:a5:fa:97:9b:a0:24: 47:18:4a:50:07:b8:53:54:ae:e0:fb:56:52:ed:3a: f8:75:e5:05:98:74:f1:cd:79:43:e7:d2:35:3a:75: 55:1b:f5:2b:51:b1:f8:0c:5b:9b:f3:ca:ee:0b:7c: 50:10:5d:36:aa:f5:b3:e3:76:11:b2:1f:b8:4b:b3: 68:0f:5a:38:9a:54:a2:0e:4a:d8:a0:26:04:3a:66: 07:e7:a5:f0:a2:40:c1:9e:e2:f0:a9:f7:c4:84:30: ee:74:15:d8:06:70:ad:ea:ea:b7:64:9f:77:a8:2b: 19:23:01:d5:7f:64:07:01:d5:cc:94:0c:b0:81:49: 6c:e7:29:4f:7a:4a:8b:88:f3:f2:c6:66:e9:43:5e: 38:d9:96:3e:8a:a4:cb:a7:25:09:1d:78:20:91:9d: b9:5c:4c:cf:6d:46:fa:ec:e8:97:76:06:9c:15:30: a6:14:af:5a:08:9e:ac:dd:23:98:ac:a6:94:db:97: 13:3c:0c:43:23:b0:17:ef:91:bb:75:0b:b6:ae:c8: 28:22:c2:cb:94:c5:37:23:44:d9:1f:dd:87:08:93: 81:31:c5:d6:bb:56:67:b9:46:ac:a4:45:da:71:40: 25:91:78:3e:9e:06:bd:a4:12:6a:99:a9:c4:48:b8: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:42:4F:A5:4C:5E:72:9E:12:78:0F:A3:4D:D4:1F:EB:17:12:B2:3E X509v3 Authority Key Identifier: keyid:09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:64:fa:ee:a8:c1:88:04:34:74:b3:b7:59:cc:08:31:99:42: 9a:d1:2c:5d:7d:33:7b:27:8e:2a:fc:1d:c8:dd:98:a3:f3:72: f0:8f:c5:69:a0:9e:64:9e:a0:f3:78:83:01:f6:eb:60:5b:5d: be:99:41:1f:50:5b:9e:4c:a6:1d:5c:5f:21:66:b4:20:6a:43: 71:56:ff:00:84:47:1a:ef:74:2e:00:b7:14:e6:09:c4:ca:26: be:49:65:cb:b3:73:7d:35:f5:08:5d:90:91:be:80:0f:ff:57: de:c3:f4:e4:5c:c4:b8:d5:b6:a1:05:bd:26:3b:c3:34:00:f6: 71:27:bd:8d:71:3f:bc:97:36:08:86:0a:89:5c:cb:57:3c:ed: fe:6b:bd:32:34:a7:c6:8a:c0:c7:20:7d:f4:d7:93:86:d9:bf: da:1e:33:3e:04:6e:8a:25:59:1b:84:d8:01:c4:ae:b5:e4:79: 5b:77:b2:c6:17:c7:f7:6c:b1:f0:0e:95:98:5c:3a:bd:fe:da: 36:32:43:85:37:f1:6f:61:c3:4e:dd:64:82:51:bc:d2:70:f1: 15:c0:4e:78:6f:39:b0:ca:71:db:23:d5:48:ec:15:eb:b8:e6: 5d:21:98:34:05:ec:2a:bc:41:b0:ce:e3:c4:00:1e:42:60:e8: 63:a7:55:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVa6OPl0nB1Q0P56shRj0V917UC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDFENjEyRDUzNUNFRDI0OUNEQjAxRUM1NTY1MDYz RUJBQ0VFRjAeFw0yNjA2MjAwMzA4NDNaFw0yNjA2MjEwNTU3NDNaMDMxMTAvBgNV BAMTKEZCNDI0RkE1NEM1RTcyOUUxMjc4MEZBMzRERDQxRkVCMTcxMkIyM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz7QFaoIegQ6X6l5ugJEcYSlAH uFNUruD7VlLtOvh15QWYdPHNeUPn0jU6dVUb9StRsfgMW5vzyu4LfFAQXTaq9bPj dhGyH7hLs2gPWjiaVKIOStigJgQ6ZgfnpfCiQMGe4vCp98SEMO50FdgGcK3q6rdk n3eoKxkjAdV/ZAcB1cyUDLCBSWznKU96SouI8/LGZulDXjjZlj6KpMunJQkdeCCR nblcTM9tRvrs6Jd2BpwVMKYUr1oInqzdI5isppTblxM8DEMjsBfvkbt1C7auyCgi wsuUxTcjRNkf3YcIk4Exxda7Vme5RqykRdpxQCWReD6eBr2kEmqZqcRIuCkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+0JPpUxecp4SeA+jTdQf6xcSsj4wHwYDVR0j BBgwFoAUCY0dYS1TXO0knNsB7FVlBj66zu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjk2NDAxZTMtOWY2Mi00YjNjLWJmZmItNzgzMzU1YWU2NzcwLzAvMDk4RDFENjEy RDUzNUNFRDI0OUNEQjAxRUM1NTY1MDYzRUJBQ0VFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOThEMUQ2MTJENTM1Q0VEMjQ5Q0RCMDFFQzU1NjUwNjNFQkFD RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvMDk4RDFENjEyRDUzNUNFRDI0OUNEQjAxRUM1NTY1 MDYzRUJBQ0VFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9k+u6owYgENHSzt1nMCDGZQprRLF19M3sn jir8HcjdmKPzcvCPxWmgnmSeoPN4gwH262BbXb6ZQR9QW55Mph1cXyFmtCBqQ3FW /wCERxrvdC4AtxTmCcTKJr5JZcuzc3019QhdkJG+gA//V97D9ORcxLjVtqEFvSY7 wzQA9nEnvY1xP7yXNgiGColcy1c87f5rvTI0p8aKwMcgffTXk4bZv9oeMz4Ebool WRuE2AHErrXkeVt3ssYXx/dssfAOlZhcOr3+2jYyQ4U38W9hw07dZIJRvNJw8RXA TnhvObDKcdsj1UjsFeu45l0hmDQF7Cq8QbDO48QAHkJg6GOnVfQ= -----END CERTIFICATE-----Generated at Sat Jun 20 08:56:45 2026 by rpki-client