
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft
File: 99C1A17781B55BFD6418159CE683ACEFEFF42976.mft (raw, json)
Hash identifier: j047mi/ApzUOVVgS66ycGOYhZxLquP+tWk6F29Q5Q5E=
Subject key identifier: 2D:C5:62:BF:D3:26:37:F7:1A:3A:4E:78:A3:36:AC:86:D7:73:17:F2
Authority key identifier: 99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76
Certificate issuer: /CN=99C1A17781B55BFD6418159CE683ACEFEFF42976
Certificate serial: 59A1AD6638687E5E1CE40E18403379AFCE443243
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 17:00:49 +0000
Manifest this update: Thu 23 Jul 2026 16:55:49 +0000
Manifest next update: Fri 24 Jul 2026 17:38:49 +0000
Files and hashes: 1: 99C1A17781B55BFD6418159CE683ACEFEFF42976.crl (hash: G+ueQ3Q7zldjtWdEGSyCV2eYLPZu4cSYH5cpj9tFUlQ=)
2: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: MEpg6TQLHOe6wNvKYskGTniS7fA9et24LWdfA9YCFzI=)
3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: jDm3YL8LmYdXFmywG3aQllmAgON/4+BpPxjQxeXq58Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl
rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a1:ad:66:38:68:7e:5e:1c:e4:0e:18:40:33:79:af:ce:44:32:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99C1A17781B55BFD6418159CE683ACEFEFF42976
Validity
Not Before: Jul 23 16:55:49 2026 GMT
Not After : Jul 24 17:38:49 2026 GMT
Subject: CN=2DC562BFD32637F71A3A4E78A336AC86D77317F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:c4:37:3f:a1:5a:2f:b7:9d:03:8b:a4:ff:
19:cb:e7:88:9a:da:ba:10:b4:ac:46:ab:ad:c3:aa:
ad:0f:72:e1:69:76:9d:58:3d:17:2c:ae:a9:c0:32:
5d:fa:0a:dc:1c:15:75:59:38:1f:93:e4:b1:8d:d5:
0f:2a:55:7e:3a:6d:bb:bf:ba:8e:83:ce:45:7f:d8:
cc:cd:68:d6:e7:57:d0:4c:47:6d:70:20:e5:f0:a3:
9c:96:08:fe:24:b2:49:6e:32:50:50:72:65:fd:6e:
5b:e1:f4:95:80:d4:95:29:f6:d0:49:b9:38:7a:92:
6b:74:be:0f:a8:f6:ca:94:ef:34:98:65:83:78:cf:
d2:f4:0d:be:a3:3f:91:b0:d7:19:88:aa:63:b8:80:
24:09:8c:36:56:26:87:c0:72:79:44:1d:9a:ce:fd:
6f:72:3d:3b:1a:da:38:4e:40:f7:d6:27:76:13:10:
d5:f1:55:1c:89:8f:8d:1b:f8:f4:9f:03:82:1e:04:
84:33:92:ef:4a:77:65:80:01:56:2c:b1:41:53:fc:
69:ba:61:fd:13:8a:5b:29:49:56:0e:80:24:46:42:
62:00:48:3c:41:3d:db:e7:cd:f9:ac:c2:b9:f3:25:
4a:e3:e9:0d:c2:17:ad:11:71:76:3e:ba:2a:3e:51:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:62:BF:D3:26:37:F7:1A:3A:4E:78:A3:36:AC:86:D7:73:17:F2
X509v3 Authority Key Identifier:
keyid:99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:63:fb:89:75:b2:4a:be:a6:1e:2b:2f:3b:1a:3e:97:75:cf:
05:f1:69:5d:07:62:b4:d5:02:99:e3:72:6b:f4:18:b1:ab:ca:
0e:a9:1a:0e:b0:49:e6:5e:34:37:43:66:01:4b:3c:35:7d:bd:
33:71:7d:b8:4e:9d:3d:28:06:0a:5f:f6:e1:81:5e:cb:e7:7c:
7d:b1:56:dc:3a:a8:e5:20:c3:3b:8b:f5:d4:02:e2:2f:32:49:
f2:05:80:12:a1:b2:6f:a1:50:44:22:3c:dc:6b:9c:f1:57:f1:
32:3c:78:27:91:ed:f4:96:9d:da:a5:e1:3a:c1:1d:62:c5:a6:
98:ec:ab:22:2e:22:5c:ee:a8:da:d5:3c:a2:27:76:7c:5e:45:
03:0f:7e:77:b5:9c:28:1e:3d:39:bf:d9:61:84:08:30:cd:dd:
25:64:f9:34:12:5b:0f:6e:f8:90:22:12:54:9b:ee:5d:59:f7:
a4:e7:31:00:c3:29:74:46:08:b9:83:8b:30:4b:54:15:7c:16:
e3:2f:18:82:90:63:37:b2:95:42:67:8c:5b:87:39:9d:c9:75:
48:2d:94:34:04:d4:4f:9f:cb:95:1e:6f:d6:33:cd:34:c0:ce:
63:c7:e9:30:14:2d:8e:44:4c:83:31:88:40:9e:41:df:50:12:
c1:0b:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:07 2026 by rpki-client