
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
File: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft (raw, json)
Hash identifier: jLpqErFueZAiJ1KlT26dwa4EIr4EtHobeu8raNJM/78=
Subject key identifier: 88:BB:5A:5D:BA:19:D6:AA:87:E9:91:3D:CC:6C:9D:95:03:48:8C:2C
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial: 35D958846A842212849E99A80E48DA2E73D694DD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 23:09:11 +0000
Manifest this update: Thu 24 Sep 2026 23:04:11 +0000
Manifest next update: Sat 26 Sep 2026 00:58:11 +0000
Files and hashes: 1: 3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (hash: 9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=)
2: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: JSpaszPWtP5AqDUfpY+T4zXizj7Q33fbh+pedpw+rSQ=)
3: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=)
4: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=)
5: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: AzT5TPIp9fZ7Lzw08VDmHNbwLWKNghx+Y7H+VOnzBzQ=)
6: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (hash: /g2f6okgGj8HKNPWnvqkUbF7FmFrL81D5X1Q6gvNPZk=)
7: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: MlpXJYuG8TKs4UXbWN+4r8Aq3XSuZvsK0qVMIYngvjU=)
8: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=)
9: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: jzsgtTn7mipYVhReFlEPzAsVetPtmxUsBitMhsGc8oI=)
10: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: PRboNqucT4aVoRVOc4nRu3lOYaSHw3BpjErOfcflPnE=)
11: 323430343a3838303a31323a3a2f34382d3438203d3e203338373530.roa (hash: QNrAoCsUOKZCnY1N/fc3km7EG9A1f+dPgBphZu0nJbw=)
12: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=)
13: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I=)
14: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (hash: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw=)
15: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=)
16: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=)
17: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl (hash: p7xIs+kFGZ+5qimUWEIQfFu1Y+MQvacFCVvdwLNrWMc=)
18: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (hash: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 00:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d9:58:84:6a:84:22:12:84:9e:99:a8:0e:48:da:2e:73:d6:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Validity
Not Before: Sep 24 23:04:11 2026 GMT
Not After : Sep 26 00:58:11 2026 GMT
Subject: CN=88BB5A5DBA19D6AA87E9913DCC6C9D9503488C2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:d1:a5:84:3d:d8:50:79:b5:0f:2a:89:45:
52:4b:2d:43:4d:b6:ca:1a:34:da:26:ae:09:2c:1b:
ab:fd:ff:0c:e6:68:1b:78:5b:db:6a:fb:fa:86:23:
0c:be:86:df:69:80:86:b6:db:3e:34:40:04:df:8f:
44:70:d0:99:51:91:76:d9:b4:e8:a8:9c:e3:cc:5f:
d9:b0:f3:f4:f3:94:90:9e:53:0c:a1:20:dd:f8:1f:
56:96:b1:bc:e2:4d:61:1c:34:be:ab:a4:7a:00:8a:
af:a9:20:9b:d0:2d:af:91:9c:3a:93:24:60:95:79:
5c:f8:09:e0:93:89:b0:68:99:7c:f1:73:c8:35:78:
4b:4f:ba:9e:3f:26:95:73:82:95:42:8f:59:0b:93:
a4:c6:d8:68:93:fc:b6:25:d6:be:61:ab:6a:b7:01:
c7:b4:a6:dc:34:da:b0:8d:9a:b4:0a:63:a2:8b:75:
b9:39:29:09:2b:d9:10:c0:7b:7a:a4:0a:65:ef:3f:
c3:d3:23:32:d0:7e:48:d4:79:0d:96:f8:8c:9d:a2:
b5:5a:26:46:aa:a2:63:f0:c7:73:42:0d:30:6f:18:
a2:17:25:ce:d6:20:7d:ff:b9:5f:03:73:aa:9a:ed:
9e:cf:d7:bb:2b:3c:4c:e6:c1:64:3f:d1:11:55:fe:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:5A:5D:BA:19:D6:AA:87:E9:91:3D:CC:6C:9D:95:03:48:8C:2C
X509v3 Authority Key Identifier:
keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:62:1c:02:3b:5c:f2:38:72:a1:50:ed:c0:a7:86:b0:dc:ba:
04:0d:67:7d:93:c4:39:8c:8a:ad:3d:75:47:69:50:41:97:b4:
74:f6:2c:06:c0:56:3c:dc:10:bb:36:1e:47:02:51:1e:7d:77:
35:e4:00:6d:c8:9b:7d:12:91:d4:ea:d6:a0:c9:23:c6:70:3e:
62:71:87:9e:19:2e:8d:7e:89:15:fc:8f:48:a4:81:c6:e8:7e:
1b:40:41:f4:11:e5:8e:97:1e:3c:25:4f:23:ac:bf:d4:74:a0:
f7:d1:6b:71:d5:89:cc:d6:b6:b6:2f:e1:83:35:3d:5f:aa:8a:
00:7b:b9:06:e2:cc:42:52:3c:fd:c6:aa:87:67:c9:50:ad:59:
55:80:69:3f:01:66:80:e7:c1:38:50:80:80:bc:13:37:a1:af:
74:b8:91:c2:c0:2f:4c:50:57:6d:74:a2:32:45:fd:b4:0e:6d:
79:a9:2f:0d:0b:94:e6:db:d4:6a:d9:b1:ce:e1:f1:85:23:b4:
88:98:09:dc:61:cf:f4:2b:e8:e5:dc:2a:1f:5a:d3:bd:8a:c0:
23:24:5a:65:dc:db:a6:11:4e:68:9f:48:08:9a:05:5a:5e:ca:
d1:43:73:7a:1c:05:21:28:ff:e9:ef:be:a4:7c:c3:d6:89:21:
47:5c:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:32:18 2026 by rpki-client