$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft File: 99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft (raw, json) Hash identifier: KELPnH+uB2+7mkoleW5q+/f+EzU7Zh5qcyd1Gc/1h4g= Subject key identifier: 28:9B:DA:D8:E8:0B:BD:FF:77:7B:BA:C4:12:92:F4:8E:2A:67:C8:8D Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56 Certificate issuer: /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56 Certificate serial: 47E482FEF726975956DBFF3B5AF15C2529634AD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:01:38 +0000 Manifest this update: Tue 12 May 2026 16:56:38 +0000 Manifest next update: Wed 13 May 2026 19:18:38 +0000 Files and hashes: 1: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: SADYGPYv67q+O3OfpXqESLXHQd4oPs/38N8rfvjf/1w=) 2: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: PSuRmEPi8uUru97FfcCOeTvVbgMQrGuLQwDV3VMgdz8=) 3: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: VQVxXRTp2UzotluVMgSddd9dhfBUX5L5ITtJ9nJBxE0=) 4: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: mJNCgdN/KYV4aqOGqcU3FG9C+9F17HUrX/9pj0TLKOE=) 5: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: Oro/PlzrcwhR+DRRwBnJ1PRk7SRQNnxZIcnkIGvWHPE=) 6: 99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl (hash: 5bGUUAKtHIZToSgJH9Lcwn90XbFhdpV9AYCu1HOhWz4=) 7: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: o0zOCwKMV8jU5a7SbQORjfO9m38/31ZTy9sJntqLIvE=) 8: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: zPofqUyIbcND+D2D0o7JYniZDgxYX06gor3Wb3n4ltM=) 9: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: t9EEqIdAzyyLBFGBhm/G7abK4Gf89A/VkBJhBveYp8o=) 10: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: TnnimCiJNEI3YZmDLBfCPDrxGGuhDFX5yXiQDusUYTc=) 11: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: Z1Kw+kT+8xUFn3ucef081YHiJ/yp5vqEe94k0y4NufM=) 12: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: 6bIg58V+S6s6w2BVuCVhFWMhoAtGZP/B+0ZE/bwD8i8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e4:82:fe:f7:26:97:59:56:db:ff:3b:5a:f1:5c:25:29:63:4a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56 Validity Not Before: May 12 16:56:38 2026 GMT Not After : May 13 19:18:38 2026 GMT Subject: CN=289BDAD8E80BBDFF777BBAC41292F48E2A67C88D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:35:53:e1:15:5a:e7:56:25:10:03:c9:c5: 50:56:d4:5e:f0:01:1c:97:33:3f:de:cf:18:ae:04: 3e:65:af:c3:55:57:d8:49:8d:94:9e:10:1c:00:be: 4f:14:33:95:79:77:23:3b:b9:5a:cc:57:f0:5b:20: 76:db:a1:50:12:9f:e3:b7:0c:4c:34:96:09:58:c9: c3:cc:aa:88:11:35:f9:8a:e2:05:40:54:72:3a:61: 1f:4c:be:53:a2:1b:83:d8:d3:c3:05:2f:49:d3:91: be:47:40:fb:ed:ab:6c:a1:c3:12:d8:ae:0e:77:57: cd:d0:be:4f:60:ec:85:c8:d1:1f:19:5f:1e:aa:48: 53:93:2f:1d:5e:6d:50:e1:3a:3d:94:16:9b:f6:09: f7:9d:41:b2:ef:a6:1b:21:48:f3:9f:30:3b:da:11: 64:73:78:3b:87:b8:56:33:6d:f3:b3:2c:7e:fd:5c: b0:3a:cc:f2:04:ce:a0:db:b8:61:df:ef:4a:26:e5: e9:a6:67:4b:85:b5:66:64:05:bb:cb:09:05:ff:30: 23:bb:d0:4c:84:40:90:81:92:f6:8d:0d:1e:d3:2b: 37:05:33:66:52:fb:62:dd:27:15:9b:2a:f4:79:2a: e9:49:2e:9a:5b:a6:78:42:c2:e4:dd:fc:d6:14:26: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9B:DA:D8:E8:0B:BD:FF:77:7B:BA:C4:12:92:F4:8E:2A:67:C8:8D X509v3 Authority Key Identifier: keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b4:94:2c:c6:f5:fd:bb:f1:72:22:ea:fd:64:5f:0a:bf:43: aa:d2:c0:78:2a:f1:6a:93:5f:23:ad:63:d1:6b:1a:42:e7:4e: 85:5e:01:c0:a5:e7:1c:07:4a:96:e7:7d:11:e9:ac:00:de:04: cb:86:aa:9d:50:5e:0b:a0:04:50:a3:7f:07:c0:91:70:f4:15: aa:1e:21:e1:8d:28:a6:d3:b0:04:c2:c8:61:bf:34:27:c6:ae: c8:4d:19:f5:34:8a:52:9d:20:71:a8:3a:54:67:92:5b:de:69: c9:8b:f3:b8:a9:47:0b:01:53:3f:31:31:3d:8f:66:80:a7:b6: 96:34:13:8c:36:70:f1:58:9c:76:8a:23:c6:19:da:1d:45:eb: 45:a2:ce:b2:68:77:03:e1:89:6b:a9:c0:16:45:72:8b:56:61: 8c:11:0d:58:e0:10:10:9c:00:d7:5e:6d:af:8d:eb:a1:36:1b: 42:de:a3:2b:c3:61:7a:d6:3b:48:14:89:4e:d4:6c:21:e5:0f: 01:d9:55:4e:d4:0f:7f:9a:8d:78:86:71:38:4c:49:e1:16:0c: 93:4e:78:35:59:77:de:ef:a3:83:50:83:85:3b:89:ce:a8:43: c3:be:2b:5e:08:bb:51:68:8e:1c:a6:22:67:1c:e6:3c:b4:b8: 58:7a:37:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR+SC/vcml1lW2/87WvFcJSljStcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBRDIzOUE2QzU4QkRDMzY1MERCMkJFODE3RjJFOUEz OUFCQ0I1NjAeFw0yNjA1MTIxNjU2MzhaFw0yNjA1MTMxOTE4MzhaMDMxMTAvBgNV BAMTKDI4OUJEQUQ4RTgwQkJERkY3NzdCQkFDNDEyOTJGNDhFMkE2N0M4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZDVT4RVa51YlEAPJxVBW1F7w ARyXMz/ezxiuBD5lr8NVV9hJjZSeEBwAvk8UM5V5dyM7uVrMV/BbIHbboVASn+O3 DEw0lglYycPMqogRNfmK4gVAVHI6YR9MvlOiG4PY08MFL0nTkb5HQPvtq2yhwxLY rg53V83Qvk9g7IXI0R8ZXx6qSFOTLx1ebVDhOj2UFpv2CfedQbLvphshSPOfMDva EWRzeDuHuFYzbfOzLH79XLA6zPIEzqDbuGHf70om5emmZ0uFtWZkBbvLCQX/MCO7 0EyEQJCBkvaNDR7TKzcFM2ZS+2LdJxWbKvR5KulJLppbpnhCwuTd/NYUJrLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJva2OgLvf93e7rEEpL0jipnyI0wHwYDVR0j BBgwFoAUma0jmmxYvcNlDbK+gX8umjmry1YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRlMmJmMDktNWY0Mi00YjY1LWE0MmQtNjNkMDc5NmQyMDZjLzAvOTlBRDIzOUE2 QzU4QkRDMzY1MERCMkJFODE3RjJFOUEzOUFCQ0I1Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUFEMjM5QTZDNThCREMzNjUwREIyQkU4MTdGMkU5QTM5QUJD QjU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOTlBRDIzOUE2QzU4QkRDMzY1MERCMkJFODE3RjJF OUEzOUFCQ0I1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK0lCzG9f278XIi6v1kXwq/Q6rSwHgq8WqT XyOtY9FrGkLnToVeAcCl5xwHSpbnfRHprADeBMuGqp1QXgugBFCjfwfAkXD0Faoe IeGNKKbTsATCyGG/NCfGrshNGfU0ilKdIHGoOlRnklveacmL87ipRwsBUz8xMT2P ZoCntpY0E4w2cPFYnHaKI8YZ2h1F60WizrJodwPhiWupwBZFcotWYYwRDVjgEBCc ANdeba+N66E2G0LeoyvDYXrWO0gUiU7UbCHlDwHZVU7UD3+ajXiGcThMSeEWDJNO eDVZd97vo4NQg4U7ic6oQ8O+K14Iu1FojhymImcc5jy0uFh6N28= -----END CERTIFICATE-----Generated at Wed May 13 00:31:28 2026 by rpki-client