$ rpki-client -vvf rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft File: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft (raw, json) Hash identifier: KDUGpgSsD7aImLs0I2KMMVVv9uaI1EuROMj9t86zpnI= Subject key identifier: 80:BA:76:5B:2F:6A:5A:E7:8A:42:0F:C2:45:79:36:6A:52:C6:BB:AE Authority key identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D Certificate issuer: /CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Certificate serial: 72E254FCC290A8A410CD72CC2BF2332FADF386EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:47:57 +0000 Manifest this update: Tue 12 May 2026 20:42:57 +0000 Manifest next update: Thu 14 May 2026 00:23:57 +0000 Files and hashes: 1: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: fh+5nuvp9S/ilgcOVbVeGaQX4NU2xadlTipLtzuaNpA=) 2: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl (hash: DvDUCKPi9LsfV3om5IF6FNzKHy63T1ORfndCTuwJpKA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e2:54:fc:c2:90:a8:a4:10:cd:72:cc:2b:f2:33:2f:ad:f3:86:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Validity Not Before: May 12 20:42:57 2026 GMT Not After : May 14 00:23:57 2026 GMT Subject: CN=80BA765B2F6A5AE78A420FC24579366A52C6BBAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:ae:1a:00:50:94:ab:dc:86:49:ff:da:d5: 37:2d:aa:7d:48:ac:33:f2:51:2a:09:48:63:6c:88: 55:80:8b:7f:80:69:51:2d:61:ef:af:00:9d:ca:9d: 9e:3a:7c:39:6b:5f:81:40:f5:00:74:02:59:81:54: 46:52:6e:a5:40:88:12:7f:1c:71:8b:ce:6e:14:fc: c2:54:44:f4:15:27:ff:b4:5b:1c:84:d0:8d:08:e2: 6a:28:fd:33:ec:8e:12:ea:53:6a:1f:63:08:9c:b9: a3:2e:c3:d0:0b:b7:36:b7:67:c7:12:d7:ac:33:34: f2:a2:30:11:02:69:00:76:20:7b:bd:00:e7:33:9a: 8f:37:63:75:ab:a9:f6:1d:17:5b:0c:4d:25:54:ef: 37:3d:9e:52:e8:e9:15:dc:8b:a6:0a:37:a0:94:66: 82:4e:a2:d4:a0:8b:8d:54:32:5e:c7:42:73:42:8b: 84:83:3c:b4:c0:7f:53:52:68:f2:d6:f0:e8:42:12: 26:45:b9:77:e6:3b:f9:eb:7a:85:4d:d4:c5:ba:32: 67:61:29:e5:79:a6:12:d9:e8:97:72:2e:e4:a4:4e: 76:47:6a:37:e6:dd:9d:93:a2:fc:2d:3e:37:e6:d5: b3:8b:0d:1b:90:26:d8:41:80:e3:00:c5:9f:e5:e1: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:76:5B:2F:6A:5A:E7:8A:42:0F:C2:45:79:36:6A:52:C6:BB:AE X509v3 Authority Key Identifier: keyid:19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a4:04:e5:25:e1:a8:3b:24:45:ac:05:40:63:bb:88:5a:9f: 0f:75:03:91:ff:df:60:6b:b3:9c:2a:ef:4e:d2:91:a6:63:8e: d0:3e:c1:10:4d:e6:13:b0:90:69:d0:83:bf:23:ca:7f:22:c5: aa:ce:a6:ae:71:57:7b:fc:53:53:76:52:60:30:32:2e:5c:cd: 0e:74:6a:32:e1:c8:c7:a1:47:09:eb:be:07:89:c4:bc:98:87: af:b1:ce:c5:d1:bd:bf:f5:05:65:cf:c6:ab:16:63:28:4c:ee: 31:0f:9c:7d:50:6e:4e:01:0f:dd:34:11:b5:fd:c4:d4:90:73: 2a:33:f8:5a:31:ac:c8:09:c7:f6:73:fe:59:f5:65:7e:7a:39: d2:7c:84:75:3c:d7:8e:6c:56:d2:e3:c5:0e:66:e4:0c:8b:bc: a1:5d:fa:85:ea:6d:19:71:85:c7:45:ab:88:2f:7d:b2:df:7e: 29:5f:22:bf:f6:65:81:37:40:55:b2:5d:8f:f4:9b:df:15:7d: 32:8e:04:43:42:d1:52:c2:6f:f6:70:f6:4c:8e:10:53:13:e2: 69:67:ac:50:2a:95:e9:b2:ae:4a:0a:b2:1d:8d:bb:97:0e:59: 35:90:dd:b0:14:18:33:d0:be:73:c3:c8:8a:ad:7b:6e:c5:d4: 29:75:04:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuJU/MKQqKQQzXLMK/IzL63zhu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5RjRE MUFFNTA4RDAeFw0yNjA1MTIyMDQyNTdaFw0yNjA1MTQwMDIzNTdaMDMxMTAvBgNV BAMTKDgwQkE3NjVCMkY2QTVBRTc4QTQyMEZDMjQ1NzkzNjZBNTJDNkJCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDm64aAFCUq9yGSf/a1Tctqn1I rDPyUSoJSGNsiFWAi3+AaVEtYe+vAJ3KnZ46fDlrX4FA9QB0AlmBVEZSbqVAiBJ/ HHGLzm4U/MJURPQVJ/+0WxyE0I0I4moo/TPsjhLqU2ofYwicuaMuw9ALtza3Z8cS 16wzNPKiMBECaQB2IHu9AOczmo83Y3WrqfYdF1sMTSVU7zc9nlLo6RXci6YKN6CU ZoJOotSgi41UMl7HQnNCi4SDPLTAf1NSaPLW8OhCEiZFuXfmO/nreoVN1MW6Mmdh KeV5phLZ6JdyLuSkTnZHajfm3Z2TovwtPjfm1bOLDRuQJthBgOMAxZ/l4amtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLp2Wy9qWueKQg/CRXk2alLGu64wHwYDVR0j BBgwFoAUGZm7mN0yhtkuhNfCBsdJ9NGuUI0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY4YzdhMzQtYmEzMS00ZDI5LTgzODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThE RDMyODZEOTJFODREN0MyMDZDNzQ5RjREMUFFNTA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTk5QkI5OEREMzI4NkQ5MkU4NEQ3QzIwNkM3NDlGNEQxQUU1 MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5 RjREMUFFNTA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGkBOUl4ag7JEWsBUBju4hanw91A5H/32Br s5wq707SkaZjjtA+wRBN5hOwkGnQg78jyn8ixarOpq5xV3v8U1N2UmAwMi5czQ50 ajLhyMehRwnrvgeJxLyYh6+xzsXRvb/1BWXPxqsWYyhM7jEPnH1Qbk4BD900EbX9 xNSQcyoz+FoxrMgJx/Zz/ln1ZX56OdJ8hHU8145sVtLjxQ5m5AyLvKFd+oXqbRlx hcdFq4gvfbLffilfIr/2ZYE3QFWyXY/0m98VfTKOBENC0VLCb/Zw9kyOEFMT4mln rFAqlemyrkoKsh2Nu5cOWTWQ3bAUGDPQvnPDyIqte27F1Cl1BPU= -----END CERTIFICATE-----Generated at Wed May 13 04:16:14 2026 by rpki-client