$ rpki-client -vvf rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft File: 99C1A17781B55BFD6418159CE683ACEFEFF42976.mft (raw, json) Hash identifier: XEjz2keoLJtEIGMfYmJ1JMx6Ff1bpn01ITk/Na+pfDs= Subject key identifier: 90:0E:6D:F6:A4:92:5C:6C:06:22:0D:C4:A1:73:FA:93:67:FD:51:C0 Authority key identifier: 99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 Certificate issuer: /CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Certificate serial: 495A640A15B36000EE18A94BDDA4592D10EB2949 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:27:43 +0000 Manifest this update: Tue 12 May 2026 03:22:43 +0000 Manifest next update: Wed 13 May 2026 07:18:43 +0000 Files and hashes: 1: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: jDm3YL8LmYdXFmywG3aQllmAgON/4+BpPxjQxeXq58Y=) 2: 99C1A17781B55BFD6418159CE683ACEFEFF42976.crl (hash: +iBZBrhcHYZniCXO3GxS9QifKD3AYqScoPWqgkE4PZw=) 3: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: MEpg6TQLHOe6wNvKYskGTniS7fA9et24LWdfA9YCFzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5a:64:0a:15:b3:60:00:ee:18:a9:4b:dd:a4:59:2d:10:eb:29:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Validity Not Before: May 12 03:22:43 2026 GMT Not After : May 13 07:18:43 2026 GMT Subject: CN=900E6DF6A4925C6C06220DC4A173FA9367FD51C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:3e:ff:90:51:05:44:e7:5c:6e:bb:30:47: f0:93:ab:30:da:f0:36:73:e7:5f:f8:3a:32:d4:cf: 28:ab:b2:2d:b2:5f:ac:a2:4b:4b:76:3d:2d:e8:52: 17:98:c0:ec:e7:60:2d:9f:a5:61:da:42:5e:b9:01: 17:2a:72:99:2b:7b:4e:87:90:0f:b0:bb:e0:ce:7f: 62:ed:cf:2c:11:2d:be:ae:f8:f0:04:d3:fd:33:ec: 84:47:8e:8b:db:e7:67:28:82:7e:8e:40:92:93:1f: 5d:af:ab:ec:06:6a:50:19:52:31:4f:cd:10:c0:ee: 4b:0b:8f:98:1e:7f:ef:1b:c3:d9:cc:df:70:18:b4: 5f:bc:09:93:df:30:ee:f4:a7:90:a7:0d:e4:18:44: 4f:02:3e:62:33:5f:6f:e4:4a:bd:92:eb:7b:43:46: 6d:1a:29:cb:16:5c:e3:10:8b:9e:40:1d:cb:ef:98: 1f:3c:8a:15:2c:13:35:00:23:3e:94:0b:37:75:9c: 62:88:d5:fa:5c:f3:f5:4e:f3:c8:3c:66:a1:07:59: 19:9b:4c:9e:44:c0:38:5f:c8:e3:f4:98:8a:af:e9: bd:ae:96:1c:c6:64:02:44:c8:24:32:cd:0c:24:8a: e7:25:40:b4:25:50:a5:14:8c:79:28:a8:65:35:62: 44:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0E:6D:F6:A4:92:5C:6C:06:22:0D:C4:A1:73:FA:93:67:FD:51:C0 X509v3 Authority Key Identifier: keyid:99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2f:bc:7e:ea:4b:90:e2:4b:c1:c3:55:c6:48:f4:3f:9f:29: 50:36:86:0a:fd:b0:91:a2:3d:b4:a0:65:86:4e:4f:6b:02:df: a9:2d:47:d5:d1:75:52:eb:71:d7:bd:c5:95:e0:ac:cf:c9:8e: 03:89:47:9a:52:61:96:fe:43:ac:87:4a:0a:17:ce:f3:79:08: 19:3b:c6:8d:a1:6f:3f:d1:e5:74:af:32:ef:f2:05:0c:4a:a7: 5c:f4:15:fc:54:8e:19:83:e5:44:69:ba:b5:0d:9b:be:11:66: b7:69:86:c8:e4:5b:3c:19:9c:57:9c:3d:96:5c:6e:30:be:24: 98:b2:6f:82:65:0d:ee:66:a1:8b:79:6c:71:89:80:eb:98:dd: 36:3b:c5:e6:e7:23:4a:fb:37:3e:9b:1d:a1:d1:2a:bc:17:f4: 0a:2f:a5:62:09:da:dc:e6:06:7d:5c:5e:f3:db:5b:69:ef:60: d2:c2:67:43:87:91:2e:68:e4:ac:03:08:ef:fc:4a:9f:6d:1e: 98:2b:3c:41:dc:d2:05:d0:e5:4a:8a:7d:8e:94:8c:88:5c:b6: 8d:50:76:d2:31:3c:60:09:15:11:2a:dc:4b:e9:8d:95:ac:ba: 58:8c:08:8a:0f:06:1b:e4:bd:bb:78:b2:5a:74:4e:76:e4:fb: e4:ca:e7:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVpkChWzYADuGKlL3aRZLRDrKUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZF RkY0Mjk3NjAeFw0yNjA1MTIwMzIyNDNaFw0yNjA1MTMwNzE4NDNaMDMxMTAvBgNV BAMTKDkwMEU2REY2QTQ5MjVDNkMwNjIyMERDNEExNzNGQTkzNjdGRDUxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCusD7/kFEFROdcbrswR/CTqzDa 8DZz51/4OjLUzyirsi2yX6yiS0t2PS3oUheYwOznYC2fpWHaQl65ARcqcpkre06H kA+wu+DOf2LtzywRLb6u+PAE0/0z7IRHjovb52cogn6OQJKTH12vq+wGalAZUjFP zRDA7ksLj5gef+8bw9nM33AYtF+8CZPfMO70p5CnDeQYRE8CPmIzX2/kSr2S63tD Rm0aKcsWXOMQi55AHcvvmB88ihUsEzUAIz6UCzd1nGKI1fpc8/VO88g8ZqEHWRmb TJ5EwDhfyOP0mIqv6b2ulhzGZAJEyCQyzQwkiuclQLQlUKUUjHkoqGU1YkSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkA5t9qSSXGwGIg3EoXP6k2f9UcAwHwYDVR0j BBgwFoAUmcGhd4G1W/1kGBWc5oOs7+/0KXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Q3YTcxYmMtZjkxMC00YjhjLTljZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4 MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZFRkY0Mjk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxQTE3NzgxQjU1QkZENjQxODE1OUNFNjgzQUNFRkVGRjQy OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FD RUZFRkY0Mjk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkvvH7qS5DiS8HDVcZI9D+fKVA2hgr9sJGi PbSgZYZOT2sC36ktR9XRdVLrcde9xZXgrM/JjgOJR5pSYZb+Q6yHSgoXzvN5CBk7 xo2hbz/R5XSvMu/yBQxKp1z0FfxUjhmD5URpurUNm74RZrdphsjkWzwZnFecPZZc bjC+JJiyb4JlDe5moYt5bHGJgOuY3TY7xebnI0r7Nz6bHaHRKrwX9AovpWIJ2tzm Bn1cXvPbW2nvYNLCZ0OHkS5o5KwDCO/8Sp9tHpgrPEHc0gXQ5UqKfY6UjIhcto1Q dtIxPGAJFREq3EvpjZWsuliMCIoPBhvkvbt4slp0Tnbk++TK5/o= -----END CERTIFICATE-----Generated at Wed May 13 00:44:11 2026 by rpki-client