$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft File: 99F644C407D1C8C133A923CC84619FC228E767AC.mft (raw, json) Hash identifier: iWaXuibBTVqxwfBB3sChhYy3q1OWP7/3yXPoGlPLyuQ= Subject key identifier: 11:70:D3:56:DB:01:00:23:F3:35:FD:AD:DF:02:92:6F:42:E9:C1:D9 Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 5F1A36B810A21586DB7244FB45FA830F9BBA5156 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft Manifest number: 02DA Signing time: Thu 26 Mar 2026 09:31:38 +0000 Manifest this update: Thu 26 Mar 2026 09:26:38 +0000 Manifest next update: Sun 29 Mar 2026 15:13:38 +0000 Files and hashes: 1: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: GwLSbTnQeuh0a53ovkV2iGQ8IVBTUAVLDO4WWZFmNyc=) 2: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: 4BHdCYqlJBbs7oaN7Hdy9PDCOH2HYrL7cOj61277Yu8=) 3: 99F644C407D1C8C133A923CC84619FC228E767AC.crl (hash: EVk7/9kzzNdt1hXx+H+L+xDBzdfuzUgLb0hIaCyalsI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1a:36:b8:10:a2:15:86:db:72:44:fb:45:fa:83:0f:9b:ba:51:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: Mar 26 09:26:38 2026 GMT Not After : Mar 29 15:13:38 2026 GMT Subject: CN=1170D356DB010023F335FDADDF02926F42E9C1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:5f:5a:f7:a8:27:da:06:6b:b4:60:fb:0d: 53:cd:bd:39:b3:d5:50:df:0e:74:bb:75:77:fb:52: 93:ad:b3:e2:9f:89:d9:a5:65:1d:81:0e:c7:e1:e5: b6:9a:1b:71:7c:00:69:7f:09:f6:4a:e6:0b:cf:d4: 74:8d:1d:43:5a:f0:49:66:08:7b:a0:fa:ea:30:63: 5e:06:5f:f5:ea:f3:f4:eb:50:8d:b1:1a:42:fa:36: 8c:6a:ef:ce:fc:7e:79:04:27:af:df:38:8d:9b:34: e9:d8:74:d1:2d:99:e2:03:6a:76:31:f0:e9:af:c5: 84:f5:9e:d9:b3:ef:4f:1a:c2:c8:0b:81:96:c5:cc: 5d:17:c3:bd:0a:a6:9b:b2:0d:f8:25:2e:c6:59:3a: 08:15:fc:2b:ab:50:12:51:a0:bb:06:5c:c1:8a:72: f2:8f:5b:eb:d3:4e:df:96:e5:e2:f5:a8:fc:48:3f: 0f:d2:2e:22:46:1e:49:11:8b:d4:64:9e:5b:1c:a0: 51:63:dd:fc:76:6b:37:c8:9d:89:54:c5:c8:f5:4a: 4a:05:c4:e0:9a:8f:a4:ad:bc:41:1c:c3:28:62:e4: 46:e0:bf:b5:26:70:29:10:ae:db:fb:db:bd:8d:d1: ad:86:e4:51:88:3a:20:a5:25:08:12:10:62:32:90: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:70:D3:56:DB:01:00:23:F3:35:FD:AD:DF:02:92:6F:42:E9:C1:D9 X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e7:38:27:05:cb:fd:be:2d:5f:59:7f:8a:b1:a7:c0:e8:4d: 90:8b:a6:4b:0e:7e:ee:90:b3:41:92:cc:f9:5e:b3:58:7d:56: a8:e9:32:ea:e4:1b:8c:1f:da:d9:e7:22:17:83:de:25:f5:bb: fa:22:94:02:38:99:45:05:36:27:c7:e3:2c:0f:32:22:a1:10: 7b:73:ff:34:03:26:c6:a5:c2:08:0c:cb:76:d0:3c:42:29:3f: aa:35:ce:01:4e:e3:04:78:76:25:8f:85:d1:04:4e:80:7e:35: 01:87:61:04:fc:aa:34:20:d5:f6:72:97:e6:85:77:f1:de:84: 68:f7:c3:cf:0e:79:ce:30:a5:b2:47:5c:8a:b0:fe:b4:01:d6: ed:72:dd:71:73:04:d3:e6:c6:3c:20:ce:f5:21:7f:3e:02:c7: a9:e0:9a:ad:aa:e6:3a:68:41:f0:68:7e:a2:dc:81:42:42:61: 6c:a8:72:6c:38:1c:ed:9a:9c:a5:75:ae:94:5e:3b:6f:17:2b: 7c:55:8c:2f:b0:a8:af:68:2c:de:9d:37:9d:0c:11:9e:4b:04: 3b:c2:df:ab:66:10:3f:dc:2f:27:14:77:c0:ce:f9:59:c3:e8: e8:a7:a6:0b:02:2f:a8:a9:b9:a6:76:08:90:52:05:39:85:87: fc:64:79:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxo2uBCiFYbbckT7RfqDD5u6UVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNjAzMjYwOTI2MzhaFw0yNjAzMjkxNTEzMzhaMDMxMTAvBgNV BAMTKDExNzBEMzU2REIwMTAwMjNGMzM1RkRBRERGMDI5MjZGNDJFOUMxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCut19a96gn2gZrtGD7DVPNvTmz 1VDfDnS7dXf7UpOts+KfidmlZR2BDsfh5baaG3F8AGl/CfZK5gvP1HSNHUNa8Elm CHug+uowY14GX/Xq8/TrUI2xGkL6Noxq7878fnkEJ6/fOI2bNOnYdNEtmeIDanYx 8OmvxYT1ntmz708awsgLgZbFzF0Xw70KppuyDfglLsZZOggV/CurUBJRoLsGXMGK cvKPW+vTTt+W5eL1qPxIPw/SLiJGHkkRi9RknlscoFFj3fx2azfInYlUxcj1SkoF xOCaj6StvEEcwyhi5Ebgv7UmcCkQrtv7272N0a2G5FGIOiClJQgSEGIykJUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEXDTVtsBACPzNf2t3wKSb0LpwdkwHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlG QzIyOEU3NjdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfnOCcFy/2+LV9Zf4qxp8DoTZCLpksOfu6Q s0GSzPles1h9VqjpMurkG4wf2tnnIheD3iX1u/oilAI4mUUFNifH4ywPMiKhEHtz /zQDJsalwggMy3bQPEIpP6o1zgFO4wR4diWPhdEEToB+NQGHYQT8qjQg1fZyl+aF d/HehGj3w88Oec4wpbJHXIqw/rQB1u1y3XFzBNPmxjwgzvUhfz4Cx6ngmq2q5jpo QfBofqLcgUJCYWyocmw4HO2anKV1rpReO28XK3xVjC+wqK9oLN6dN50MEZ5LBDvC 36tmED/cLycUd8DO+VnD6OinpgsCL6ipuaZ2CJBSBTmFh/xkeW4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:33 2026 by rpki-client