
$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
File: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft (raw, json)
Hash identifier: GFRhq/SLAYIO8e12B4m4/2o/9AsgulTCG0mm2CnfMsA=
Subject key identifier: D4:30:19:2C:84:E5:2D:BB:58:49:DA:EE:D2:92:88:5D:9E:4B:99:A0
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial: 5F002A5D626A9D9B8ADD24F4B13CB6CEF13A1180
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 01:46:24 +0000
Manifest this update: Fri 24 Jul 2026 01:41:24 +0000
Manifest next update: Sat 25 Jul 2026 04:29:24 +0000
Files and hashes: 1: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: jzsgtTn7mipYVhReFlEPzAsVetPtmxUsBitMhsGc8oI=)
2: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=)
3: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=)
4: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl (hash: jpRKnfQjTsjdl50TzgCNBdpWCGnuXTqISdSPcAMRgkk=)
5: 323430343a3838303a31323a3a2f34382d3438203d3e203338373530.roa (hash: QNrAoCsUOKZCnY1N/fc3km7EG9A1f+dPgBphZu0nJbw=)
6: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I=)
7: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=)
8: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=)
9: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: JSpaszPWtP5AqDUfpY+T4zXizj7Q33fbh+pedpw+rSQ=)
10: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=)
11: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (hash: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc=)
12: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (hash: /g2f6okgGj8HKNPWnvqkUbF7FmFrL81D5X1Q6gvNPZk=)
13: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: MlpXJYuG8TKs4UXbWN+4r8Aq3XSuZvsK0qVMIYngvjU=)
14: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=)
15: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: AzT5TPIp9fZ7Lzw08VDmHNbwLWKNghx+Y7H+VOnzBzQ=)
16: 3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (hash: 9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=)
17: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: PRboNqucT4aVoRVOc4nRu3lOYaSHw3BpjErOfcflPnE=)
18: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (hash: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:00:2a:5d:62:6a:9d:9b:8a:dd:24:f4:b1:3c:b6:ce:f1:3a:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Validity
Not Before: Jul 24 01:41:24 2026 GMT
Not After : Jul 25 04:29:24 2026 GMT
Subject: CN=D430192C84E52DBB5849DAEED292885D9E4B99A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:af:29:e2:90:a6:0b:e2:c8:87:ac:5f:4b:
21:59:5d:a1:92:cf:54:a3:da:6f:5c:4e:6b:23:b0:
6a:db:89:0b:eb:ca:df:97:d2:36:90:dc:6c:0b:9c:
a5:ae:54:33:70:bb:46:90:3a:21:a2:79:de:c2:aa:
b7:7a:1b:b8:49:be:99:5f:fe:f1:68:a6:8e:3b:de:
fd:d2:f0:d7:71:8a:74:cd:d5:99:aa:b1:8b:ea:a2:
81:c1:1b:8b:c6:81:87:6c:bd:7e:ff:0e:c8:92:e4:
21:5f:a8:67:d3:65:ae:3f:67:45:e9:f3:ea:7f:88:
c4:b4:37:62:c1:15:09:8a:b9:dc:36:e8:5c:82:64:
c4:ed:be:ff:06:68:98:3f:d5:86:cc:fe:07:8b:1a:
a8:c5:06:34:5f:8d:3d:49:8b:6e:83:11:f9:77:a3:
db:fc:74:42:3d:70:2b:c7:f0:c2:bd:c0:56:37:95:
69:a3:4f:a6:37:7d:45:93:a0:df:62:ed:ba:81:3b:
21:1a:5a:d0:07:78:8a:2f:6c:4a:a1:1b:a3:03:5e:
5d:6b:68:46:b0:85:37:87:ef:3d:f2:96:0f:5a:00:
10:06:04:b6:6b:84:44:15:4c:41:2d:96:5b:aa:f1:
bb:10:4b:3a:9f:2c:9b:a2:a7:16:22:97:9c:70:17:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:19:2C:84:E5:2D:BB:58:49:DA:EE:D2:92:88:5D:9E:4B:99:A0
X509v3 Authority Key Identifier:
keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:34:e5:38:95:25:a0:c8:d1:01:20:0e:69:fb:25:ba:90:76:
e8:bc:c8:f6:4a:8b:1c:cd:42:d2:fb:7a:60:48:07:26:9c:77:
12:02:d7:d6:c3:1f:c8:66:0d:5e:3f:2f:13:48:f0:e0:f4:5f:
be:12:94:07:a8:5f:27:02:31:ca:90:7b:a9:b3:15:82:4c:6a:
ba:05:1b:5b:14:82:33:0b:d2:06:01:7d:81:fd:86:4d:07:5f:
90:b1:2e:c7:c7:3b:38:87:e8:f6:02:a1:0d:97:94:13:85:f6:
3e:be:a5:90:ae:89:bf:9d:bf:37:ad:8a:66:0d:29:9e:f3:f6:
bf:1b:90:fe:89:6f:90:ef:f7:d3:a9:b4:7c:cf:ac:37:87:ec:
46:8d:8a:05:23:d4:80:d5:1e:e5:8e:5f:49:3a:7d:66:de:53:
8e:50:c1:92:a9:bb:ed:0d:a1:4d:64:60:44:ad:4a:b5:9b:25:
2d:e0:69:1d:a2:f0:86:bd:e0:bd:70:90:65:ab:6f:60:54:c3:
47:cf:3e:47:db:bc:1f:dc:00:e8:05:52:55:7f:91:a5:94:7d:
7d:b7:e0:23:d2:26:88:61:6f:2b:1c:92:b2:63:63:30:3d:1c:
e4:b0:4f:7c:3b:85:e6:c2:e1:de:0e:13:0d:84:d0:07:57:91:
2e:8e:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:24 2026 by rpki-client