$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: XmvnLPX71bk+iwm4qYnQiclpPLzKD7bt0sf2VBp/+Hc= Subject key identifier: 05:1C:BE:AC:06:CC:C2:FF:A0:69:6B:88:56:47:01:24:03:CA:74:98 Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 5C3D0226DC3BB151E085308858D11523E03AF8E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 017B Signing time: Thu 16 Apr 2026 17:51:18 +0000 Manifest this update: Thu 16 Apr 2026 17:46:18 +0000 Manifest next update: Mon 20 Apr 2026 01:20:18 +0000 Files and hashes: 1: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: CADdODhlwrtv7aHSOcyvhK/IDuhX6EVBNzN87XcC7go=) 2: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: 3URaScN3kID+K83xfIJVwGwnSlladGLqoy/QNOYNuEw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3d:02:26:dc:3b:b1:51:e0:85:30:88:58:d1:15:23:e0:3a:f8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Apr 16 17:46:18 2026 GMT Not After : Apr 20 01:20:18 2026 GMT Subject: CN=051CBEAC06CCC2FFA0696B885647012403CA7498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:90:c1:8c:38:61:cf:58:1a:9f:7c:9c:d0: 43:bb:54:95:ce:6a:e2:8d:81:20:08:07:1a:49:2f: 1a:19:c7:f2:23:80:63:3a:77:3e:86:ae:b4:b1:d0: fc:27:14:f9:31:b7:59:69:70:3c:53:27:2a:38:2f: 29:d1:09:4d:cc:9c:b6:1e:8d:8c:d9:dd:e7:2d:c9: 70:57:6a:d1:b9:42:b7:c4:3d:27:79:2a:82:60:0a: 6f:81:42:de:c8:7d:a5:82:f7:2f:ee:48:26:e3:f3: 62:32:b8:a3:42:c2:19:3a:fe:84:30:d2:d9:1c:8b: 83:0f:9c:2d:ff:84:0d:1e:cf:fd:40:79:51:21:46: c5:89:bb:2f:ac:2f:4b:61:1d:ff:0a:ff:53:c2:cb: 38:e0:da:80:54:68:d5:5a:6e:b1:37:66:24:b0:c4: aa:ba:fe:a0:7f:fc:12:ad:3b:c3:f2:7c:a0:11:40: 86:cf:6b:40:22:92:ce:3d:02:08:e0:c4:9a:db:e4: ca:30:e0:f6:1a:a7:22:a5:69:6f:8b:a6:aa:f4:d5: d9:a5:02:36:00:e2:e2:e2:1a:e0:da:50:e8:67:fb: fa:6c:32:8e:ad:58:db:15:d4:ba:a7:4b:e8:84:8a: fb:b9:c6:20:e2:01:8f:55:1f:33:a5:16:c4:52:23: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:BE:AC:06:CC:C2:FF:A0:69:6B:88:56:47:01:24:03:CA:74:98 X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:12:bc:7c:90:99:54:f7:74:35:66:b0:2d:1f:15:52:0b:86: c7:48:b9:54:e0:02:92:a7:47:6a:94:3b:68:d0:df:cb:76:86: 24:9d:8d:04:ae:d6:4c:91:dc:80:6f:df:86:a7:33:e5:be:5c: 5a:8a:aa:b1:ca:ad:21:f0:82:ec:85:43:ad:9c:5d:e8:9b:5d: 54:38:8a:b0:a3:6c:ac:66:78:7a:89:62:bc:2a:eb:f9:ff:76: 7e:15:c7:e0:eb:26:69:38:33:a8:d3:66:05:89:2e:80:37:e4: 07:38:cd:78:af:31:09:cd:79:a4:53:a3:06:2a:cc:2d:90:1c: 32:65:bc:6b:be:ab:00:1c:36:74:6d:df:23:87:82:1d:ce:6f: f8:10:94:eb:f5:9c:a4:52:72:3f:dd:73:97:2f:89:60:50:4a: b4:60:8a:65:b2:f1:07:23:3c:81:96:39:a1:36:8a:d1:02:2b: 7d:f4:6e:a0:a7:c4:71:44:73:aa:73:b5:ec:8c:20:9c:eb:9b: c9:09:9f:1f:12:3b:90:99:33:6a:15:9f:15:3d:c2:f3:83:eb: 4b:f4:5a:e0:3e:c4:5c:d7:20:8d:2e:84:b2:f2:4c:55:ae:9d: 83:d9:5a:69:fb:45:5e:7b:54:f2:a7:e2:14:64:d4:bd:99:18: 4b:d1:94:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXD0CJtw7sVHghTCIWNEVI+A6+OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNjA0MTYxNzQ2MThaFw0yNjA0MjAwMTIwMThaMDMxMTAvBgNV BAMTKDA1MUNCRUFDMDZDQ0MyRkZBMDY5NkI4ODU2NDcwMTI0MDNDQTc0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzJDBjDhhz1gan3yc0EO7VJXO auKNgSAIBxpJLxoZx/IjgGM6dz6GrrSx0PwnFPkxt1lpcDxTJyo4LynRCU3MnLYe jYzZ3ectyXBXatG5QrfEPSd5KoJgCm+BQt7IfaWC9y/uSCbj82IyuKNCwhk6/oQw 0tkci4MPnC3/hA0ez/1AeVEhRsWJuy+sL0thHf8K/1PCyzjg2oBUaNVabrE3ZiSw xKq6/qB//BKtO8PyfKARQIbPa0Aiks49AgjgxJrb5Mow4PYapyKlaW+Lpqr01dml AjYA4uLiGuDaUOhn+/psMo6tWNsV1LqnS+iEivu5xiDiAY9VHzOlFsRSI7itAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRy+rAbMwv+gaWuIVkcBJAPKdJgwHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsSvHyQmVT3dDVmsC0fFVILhsdIuVTgApKn R2qUO2jQ38t2hiSdjQSu1kyR3IBv34anM+W+XFqKqrHKrSHwguyFQ62cXeibXVQ4 irCjbKxmeHqJYrwq6/n/dn4Vx+DrJmk4M6jTZgWJLoA35Ac4zXivMQnNeaRTowYq zC2QHDJlvGu+qwAcNnRt3yOHgh3Ob/gQlOv1nKRScj/dc5cviWBQSrRgimWy8Qcj PIGWOaE2itECK330bqCnxHFEc6pzteyMIJzrm8kJnx8SO5CZM2oVnxU9wvOD60v0 WuA+xFzXII0uhLLyTFWunYPZWmn7RV57VPKn4hRk1L2ZGEvRlD4= -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:36 2026 by rpki-client