$ rpki-client -vvf rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft File: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft (raw, json) Hash identifier: CVCOLYAtyq1NJykiIhvcjfHqOpAy6AhCo01lNRJiHHE= Subject key identifier: 83:D6:E1:05:2A:8B:E6:1D:77:91:67:6A:25:D8:8E:BF:BC:7B:6F:0F Authority key identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D Certificate issuer: /CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Certificate serial: 13C7FB53DB8E7F9041D0BCB95E2B3E21F3FF631B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:57:50 +0000 Manifest this update: Fri 24 Jul 2026 06:52:50 +0000 Manifest next update: Sat 25 Jul 2026 10:27:50 +0000 Files and hashes: 1: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl (hash: bGfj3fo/EquOTDg/jNVR/jz0uqjP57zpUj2BN8pCZBs=) 2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: fh+5nuvp9S/ilgcOVbVeGaQX4NU2xadlTipLtzuaNpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c7:fb:53:db:8e:7f:90:41:d0:bc:b9:5e:2b:3e:21:f3:ff:63:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Validity Not Before: Jul 24 06:52:50 2026 GMT Not After : Jul 25 10:27:50 2026 GMT Subject: CN=83D6E1052A8BE61D7791676A25D88EBFBC7B6F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:ad:66:7f:2e:d0:16:4e:83:4e:24:46:62: 75:48:35:ed:19:c1:3c:6e:0e:0c:35:cd:3c:17:ea: 0f:e0:65:8b:85:09:51:4c:f2:e5:4c:28:d7:d1:d1: 83:2b:c4:7d:f9:8f:dc:da:39:87:96:af:47:fe:f5: de:4b:ed:f1:98:95:bf:6a:96:2c:7e:e2:16:ee:ce: 9c:d0:9c:a1:cf:e4:62:bf:7a:29:8a:e0:34:24:6c: ae:20:47:9d:4a:40:0a:c2:5f:ca:49:73:49:d9:0f: 89:a3:3a:4a:f7:99:3a:00:4f:0e:78:bf:da:c6:9f: 10:04:44:8d:54:88:27:ee:12:eb:d1:41:cb:06:5e: 66:ab:21:65:76:93:b7:ff:12:10:6c:e5:83:24:43: 29:95:86:0d:22:81:b2:01:bd:ab:c6:8c:56:e4:dc: 30:e6:0e:10:52:68:00:57:64:ff:d0:07:03:27:4c: 7d:36:49:62:f6:81:1e:4b:00:87:44:3e:d4:bd:11: b5:a3:dc:62:9f:3d:cd:5f:ab:27:45:62:2d:b2:6b: 0b:ab:23:10:b6:63:a6:79:39:32:28:3c:55:c7:00: 58:ef:92:f2:63:f4:eb:e2:08:5e:8f:87:1f:70:ce: db:25:fd:f8:fe:8c:d1:39:54:7d:cd:7a:ef:25:42: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D6:E1:05:2A:8B:E6:1D:77:91:67:6A:25:D8:8E:BF:BC:7B:6F:0F X509v3 Authority Key Identifier: keyid:19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b3:4d:45:e9:65:67:ed:67:b8:9b:b9:3a:22:43:0f:c7:1e: 9a:bc:23:8e:46:6d:ae:0b:20:02:50:2d:b2:7c:32:c4:e7:e0: a1:7a:e8:01:73:33:a3:4b:bd:63:80:01:50:41:2b:15:2e:88: 88:25:be:1a:42:db:dc:e7:f0:36:b0:44:e5:9d:3d:b1:87:97: d7:39:ad:c1:ce:dc:17:23:4f:75:5e:25:77:e4:d5:9f:24:a2: e6:df:11:c2:81:64:1e:74:11:14:9f:14:48:83:2c:c8:53:8a: 5b:e4:d5:18:96:dc:31:ee:69:e1:e1:3c:46:62:ea:d4:d5:fb: 0d:14:50:37:67:b4:df:3c:28:c7:0e:d3:9e:bb:4c:b8:83:31: ee:70:1c:21:fb:78:a1:74:2e:8b:79:f7:4a:d4:94:99:d5:51: 4a:81:ec:f2:d7:b0:71:e2:bd:58:ae:e9:2e:28:ae:2b:f9:6f: 84:2d:ac:0c:54:03:2f:e9:09:ef:8d:30:09:2c:a1:6f:2d:18: 2e:23:8a:a6:51:7a:4d:a3:5d:ef:14:45:72:e3:02:e1:fc:3f: 8e:9c:56:b1:76:c8:48:9c:75:1f:a2:3a:ab:68:ff:22:8f:a3: c1:d9:93:ff:7d:fe:19:05:4d:dd:ee:7a:59:f3:8a:00:fc:d4: 92:26:b5:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8f7U9uOf5BB0Ly5Xis+IfP/YxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5RjRE MUFFNTA4RDAeFw0yNjA3MjQwNjUyNTBaFw0yNjA3MjUxMDI3NTBaMDMxMTAvBgNV BAMTKDgzRDZFMTA1MkE4QkU2MUQ3NzkxNjc2QTI1RDg4RUJGQkM3QjZGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMX61mfy7QFk6DTiRGYnVINe0Z wTxuDgw1zTwX6g/gZYuFCVFM8uVMKNfR0YMrxH35j9zaOYeWr0f+9d5L7fGYlb9q lix+4hbuzpzQnKHP5GK/eimK4DQkbK4gR51KQArCX8pJc0nZD4mjOkr3mToATw54 v9rGnxAERI1UiCfuEuvRQcsGXmarIWV2k7f/EhBs5YMkQymVhg0igbIBvavGjFbk 3DDmDhBSaABXZP/QBwMnTH02SWL2gR5LAIdEPtS9EbWj3GKfPc1fqydFYi2yawur IxC2Y6Z5OTIoPFXHAFjvkvJj9OviCF6Phx9wztsl/fj+jNE5VH3Neu8lQgXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg9bhBSqL5h13kWdqJdiOv7x7bw8wHwYDVR0j BBgwFoAUGZm7mN0yhtkuhNfCBsdJ9NGuUI0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY4YzdhMzQtYmEzMS00ZDI5LTgzODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThE RDMyODZEOTJFODREN0MyMDZDNzQ5RjREMUFFNTA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTk5QkI5OEREMzI4NkQ5MkU4NEQ3QzIwNkM3NDlGNEQxQUU1 MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5 RjREMUFFNTA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKzTUXpZWftZ7ibuToiQw/HHpq8I45Gba4L IAJQLbJ8MsTn4KF66AFzM6NLvWOAAVBBKxUuiIglvhpC29zn8DawROWdPbGHl9c5 rcHO3BcjT3VeJXfk1Z8koubfEcKBZB50ERSfFEiDLMhTilvk1RiW3DHuaeHhPEZi 6tTV+w0UUDdntN88KMcO0567TLiDMe5wHCH7eKF0Lot590rUlJnVUUqB7PLXsHHi vViu6S4oriv5b4QtrAxUAy/pCe+NMAksoW8tGC4jiqZRek2jXe8URXLjAuH8P46c VrF2yEicdR+iOqto/yKPo8HZk/99/hkFTd3uelnzigD81JImtRk= -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:43 2026 by rpki-client