$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: 5liLu36jcupTHaXFhpdDRVCrLm+xcUiex1WKncG6HEo= Subject key identifier: A3:29:A3:36:DE:4A:A8:59:A9:8B:8C:BB:35:89:F6:EA:5C:32:AD:C9 Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 2340E4F8FCDFB9C4B001DA5B4CD7776BAD25C88B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 0171 Signing time: Wed 25 Mar 2026 06:21:18 +0000 Manifest this update: Wed 25 Mar 2026 06:16:18 +0000 Manifest next update: Sat 28 Mar 2026 10:16:18 +0000 Files and hashes: 1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: QMlNnLhvEznWbs5/d0709Z/LyDG2p8DPhwpmQ0FqJdc=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: CADdODhlwrtv7aHSOcyvhK/IDuhX6EVBNzN87XcC7go=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:40:e4:f8:fc:df:b9:c4:b0:01:da:5b:4c:d7:77:6b:ad:25:c8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Mar 25 06:16:18 2026 GMT Not After : Mar 28 10:16:18 2026 GMT Subject: CN=A329A336DE4AA859A98B8CBB3589F6EA5C32ADC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:41:d7:63:b9:5f:88:71:a2:de:c1:f2:46: 35:7e:0f:87:67:27:84:f8:e2:91:61:be:7c:3d:b1: e8:9a:08:9b:8d:1d:31:a9:8f:51:a4:e7:64:eb:23: b7:50:df:70:6b:90:47:fb:ef:8f:ac:c6:d4:75:3e: d1:6b:85:41:a4:a2:5c:5a:50:b8:3e:c7:9e:9a:1f: 35:ac:ce:c2:b5:65:84:28:8d:6a:73:27:73:cc:a9: 47:ff:91:dd:6a:fb:0f:d7:33:8f:b0:c3:42:a3:aa: 26:b5:c6:60:09:28:5a:3a:c7:3c:3b:2d:72:c1:68: 96:36:e4:50:35:3d:98:34:0c:c8:b9:3d:48:0f:61: 59:2e:3d:25:f9:29:38:26:80:76:6d:f9:05:d9:83: 51:d7:2a:88:80:f2:24:67:27:3c:12:83:15:37:57: 38:cf:b6:61:87:0e:99:d3:1a:38:33:7a:42:77:99: 5a:64:5b:22:d4:5a:3b:0a:f0:6f:87:97:1c:35:ae: 95:93:7f:3b:2a:c2:ab:46:7f:fd:ab:08:b7:22:2d: 18:87:5c:b9:0c:e2:59:d1:68:14:15:d5:1d:2b:99: cd:43:3f:bd:c3:4c:d9:07:6c:a8:9d:0e:68:35:ba: 2d:a6:be:a7:8c:99:2e:ad:67:c5:6b:72:b5:a5:b0: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:29:A3:36:DE:4A:A8:59:A9:8B:8C:BB:35:89:F6:EA:5C:32:AD:C9 X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bd:84:7d:34:d3:81:a1:25:d6:c4:ea:15:89:86:bb:4a:a2: ef:40:0e:6b:1d:97:62:d5:45:de:cf:ad:16:7d:63:05:30:72: a0:66:7c:06:e4:66:8b:d3:53:53:79:3e:e5:bb:30:88:9c:06: 90:56:9f:f6:b8:20:69:dc:ec:3c:e5:94:6d:ad:b2:82:5d:32: eb:17:b9:11:a6:f7:9a:32:e4:37:27:0c:f5:e1:49:3a:1a:88: b2:c1:49:e3:53:1b:37:dc:73:14:69:05:81:d3:7c:57:47:6a: 19:b7:bf:bf:68:5b:92:37:dc:88:6b:c3:1d:ec:4e:ea:05:68: cc:ba:a1:75:72:e5:b8:11:a3:9f:b9:b6:b3:15:53:ed:f2:0c: 61:79:1c:13:a0:60:64:78:c5:29:a8:00:ea:87:18:d7:de:55: 74:9a:43:13:60:9a:9f:13:b1:88:43:79:79:79:6b:31:5a:61: 5c:62:a0:6a:07:55:f2:c8:e2:10:0f:ec:a0:e2:53:46:aa:4f: 0a:bf:22:c0:a5:af:2f:01:d4:e2:a0:cd:a9:a7:49:b9:56:84: ef:fc:72:38:31:58:8f:80:f9:c3:fa:9a:01:5f:6a:99:69:fc: f5:4a:e9:25:cc:96:3e:72:8e:44:14:00:20:aa:e2:3f:2c:eb: 59:ee:f6:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0Dk+PzfucSwAdpbTNd3a60lyIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNjAzMjUwNjE2MThaFw0yNjAzMjgxMDE2MThaMDMxMTAvBgNV BAMTKEEzMjlBMzM2REU0QUE4NTlBOThCOENCQjM1ODlGNkVBNUMzMkFEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOkHXY7lfiHGi3sHyRjV+D4dn J4T44pFhvnw9seiaCJuNHTGpj1Gk52TrI7dQ33BrkEf774+sxtR1PtFrhUGkolxa ULg+x56aHzWszsK1ZYQojWpzJ3PMqUf/kd1q+w/XM4+ww0Kjqia1xmAJKFo6xzw7 LXLBaJY25FA1PZg0DMi5PUgPYVkuPSX5KTgmgHZt+QXZg1HXKoiA8iRnJzwSgxU3 VzjPtmGHDpnTGjgzekJ3mVpkWyLUWjsK8G+Hlxw1rpWTfzsqwqtGf/2rCLciLRiH XLkM4lnRaBQV1R0rmc1DP73DTNkHbKidDmg1ui2mvqeMmS6tZ8VrcrWlsC1JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoymjNt5KqFmpi4y7NYn26lwyrckwHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG69hH0004GhJdbE6hWJhrtKou9ADmsdl2LV Rd7PrRZ9YwUwcqBmfAbkZovTU1N5PuW7MIicBpBWn/a4IGnc7DzllG2tsoJdMusX uRGm95oy5DcnDPXhSToaiLLBSeNTGzfccxRpBYHTfFdHahm3v79oW5I33Ihrwx3s TuoFaMy6oXVy5bgRo5+5trMVU+3yDGF5HBOgYGR4xSmoAOqHGNfeVXSaQxNgmp8T sYhDeXl5azFaYVxioGoHVfLI4hAP7KDiU0aqTwq/IsClry8B1OKgzamnSblWhO/8 cjgxWI+A+cP6mgFfaplp/PVK6SXMlj5yjkQUACCq4j8s61nu9o4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:57 2026 by rpki-client