$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft File: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft (raw, json) Hash identifier: t3D0+s9lcdizqU7Dpd+vjRy8mJkk1rUlJzyy8SLYQ3c= Subject key identifier: 71:8F:8B:89:63:51:CC:68:CA:CA:25:CE:10:CE:B0:B6:17:B2:26:0D Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Certificate serial: 61818CBD5C6BAA21E5F5925446EFAD4F19022F14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft Manifest number: BF Signing time: Wed 23 Sep 2026 05:37:57 +0000 Manifest this update: Wed 23 Sep 2026 05:32:57 +0000 Manifest next update: Thu 24 Sep 2026 07:40:57 +0000 Files and hashes: 1: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl (hash: zyzBUu5giwbll8D8D72drs53ENVEfM8z2upmwpb76Hc=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po=) 3: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:81:8c:bd:5c:6b:aa:21:e5:f5:92:54:46:ef:ad:4f:19:02:2f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Validity Not Before: Sep 23 05:32:57 2026 GMT Not After : Sep 24 07:40:57 2026 GMT Subject: CN=718F8B896351CC68CACA25CE10CEB0B617B2260D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:90:ab:e3:0b:fd:7a:6d:7d:bb:75:41:bc: 4c:16:bc:79:c8:95:49:3d:1c:d4:a0:09:df:e0:a4: bb:97:96:e4:87:f6:8e:ce:ab:17:4c:1b:d4:b1:87: 7a:1c:00:6d:44:d0:e8:11:e8:f3:68:e1:5c:8a:58: 7f:ae:a8:64:71:0a:a1:11:a6:3c:d4:8c:a8:f7:a3: 3a:c7:c3:05:c8:7a:e5:66:29:14:fa:f2:28:fa:54: d2:12:bc:36:86:c4:66:a6:76:b4:a8:21:a8:c9:11: ef:89:e7:b4:57:2a:36:24:af:53:bb:c0:9b:17:05: a9:7b:59:b3:28:ce:7f:77:2a:82:8f:c9:12:57:ee: ef:da:4f:73:24:b7:10:0d:37:0c:b0:47:01:94:ec: 4f:43:44:c6:11:4b:a1:ac:8f:d7:d1:b8:99:52:f7: 50:e7:84:75:f1:88:52:06:7c:b3:75:db:57:16:98: f5:23:60:28:5b:e8:15:43:6c:89:6f:58:bd:f8:d3: 76:93:30:53:d3:97:b1:03:2c:3e:0d:80:bd:6b:0c: cb:d4:91:81:ad:8c:18:b7:fe:cc:12:53:a4:fc:2d: 23:15:5c:cb:cd:49:76:b2:06:fb:aa:ef:60:1d:b3: 76:81:c6:43:7c:41:3e:85:9a:1a:56:2e:86:dd:3d: 74:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8F:8B:89:63:51:CC:68:CA:CA:25:CE:10:CE:B0:B6:17:B2:26:0D X509v3 Authority Key Identifier: keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a4:b6:56:a7:d7:09:29:99:1d:de:3b:4c:49:da:68:cf:42: 61:cc:9c:be:99:96:a5:e5:7e:36:36:77:1a:7d:4f:cc:c6:23: 09:68:36:3c:a9:3a:d7:82:1d:78:63:65:db:8e:9c:1c:10:f1: 69:84:67:27:ad:9a:69:52:17:6e:19:11:e0:61:3e:06:c3:5a: 23:0b:8b:b9:4b:fc:61:bf:b0:98:79:ca:e1:62:0b:ec:bf:b8: 63:fc:0f:e4:0d:3f:01:40:4d:c5:49:53:76:c6:cd:46:22:bc: 5f:cc:81:3c:c3:4b:22:4a:18:da:de:72:f9:d2:ec:5a:d0:e0: 46:20:c8:f0:45:39:4b:53:99:4c:78:1e:3e:d1:fb:01:4c:b3: fb:d9:e6:a7:bb:52:b8:96:42:8a:38:9a:ee:14:08:f5:a6:b7: 65:4d:3d:18:68:ba:78:37:09:f8:dc:a2:b2:74:04:fa:18:eb: 84:da:02:35:79:5a:a8:47:64:56:fa:0d:59:d4:83:63:14:47: 60:c1:76:5d:2c:6b:e1:9f:20:50:eb:0b:5c:4c:c1:f1:48:67: 51:79:dc:c5:7a:00:04:63:40:cc:32:da:8f:a9:0f:7a:d8:c6: 8e:16:d4:97:3b:c6:5e:e2:40:d2:da:7b:c4:cd:20:88:4c:7d: d1:f6:6b:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYGMvVxrqiHl9ZJURu+tTxkCLxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2 MjdBRTExNDAeFw0yNjA5MjMwNTMyNTdaFw0yNjA5MjQwNzQwNTdaMDMxMTAvBgNV BAMTKDcxOEY4Qjg5NjM1MUNDNjhDQUNBMjVDRTEwQ0VCMEI2MTdCMjI2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXpCr4wv9em19u3VBvEwWvHnI lUk9HNSgCd/gpLuXluSH9o7OqxdMG9Sxh3ocAG1E0OgR6PNo4VyKWH+uqGRxCqER pjzUjKj3ozrHwwXIeuVmKRT68ij6VNISvDaGxGamdrSoIajJEe+J57RXKjYkr1O7 wJsXBal7WbMozn93KoKPyRJX7u/aT3MktxANNwywRwGU7E9DRMYRS6Gsj9fRuJlS 91DnhHXxiFIGfLN121cWmPUjYChb6BVDbIlvWL3403aTMFPTl7EDLD4NgL1rDMvU kYGtjBi3/swSU6T8LSMVXMvNSXayBvuq72Ads3aBxkN8QT6FmhpWLobdPXRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcY+LiWNRzGjKyiXOEM6wtheyJg0wHwYDVR0j BBgwFoAUmcFY2NudEoZFa97++7OeUmJ64RQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVlMTQzODItZDU4Ny00ZTg2LThlN2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhE QjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2MjdBRTExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxNThEOERCOUQxMjg2NDU2QkRFRkVGQkIzOUU1MjYyN0FF MTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlF NTI2MjdBRTExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGktlan1wkpmR3eO0xJ2mjPQmHMnL6ZlqXl fjY2dxp9T8zGIwloNjypOteCHXhjZduOnBwQ8WmEZyetmmlSF24ZEeBhPgbDWiML i7lL/GG/sJh5yuFiC+y/uGP8D+QNPwFATcVJU3bGzUYivF/MgTzDSyJKGNrecvnS 7FrQ4EYgyPBFOUtTmUx4Hj7R+wFMs/vZ5qe7UriWQoo4mu4UCPWmt2VNPRhoung3 CfjcorJ0BPoY64TaAjV5WqhHZFb6DVnUg2MUR2DBdl0sa+GfIFDrC1xMwfFIZ1F5 3MV6AARjQMwy2o+pD3rYxo4W1Jc7xl7iQNLae8TNIIhMfdH2a70= -----END CERTIFICATE-----Generated at Wed Sep 23 22:33:19 2026 by rpki-client