$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: FHEokqWYHF9ziOe1SliPNMcbUu+ObMcQK8wQQE6GbyA= Subject key identifier: 2A:8D:23:1F:10:A2:FE:47:04:D6:52:F3:B5:AE:88:8E:D3:7A:A6:12 Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 5C419CCCF2CBDA5C6B616B48C5F60033E447895C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 0550 Signing time: Mon 02 Mar 2026 03:41:33 +0000 Manifest this update: Mon 02 Mar 2026 03:36:33 +0000 Manifest next update: Thu 05 Mar 2026 12:19:33 +0000 Files and hashes: 1: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: pD/9ZN/LtEEVzbK2xymhrif8EXzbhQ+acqdIY2pf7Sw=) 2: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: xEl9WKNeil5vick+EZGgBmq+d9hvCJ6SFKXlmIh83hQ=) 3: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: +8D/0QzjPMaL4cFKrbZjKNbrIjmkRYGYXbwKYuQPiWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:41:9c:cc:f2:cb:da:5c:6b:61:6b:48:c5:f6:00:33:e4:47:89:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Mar 2 03:36:33 2026 GMT Not After : Mar 5 12:19:33 2026 GMT Subject: CN=2A8D231F10A2FE4704D652F3B5AE888ED37AA612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:75:63:2d:7e:cb:4a:68:d7:53:c6:7a:c5: eb:81:e5:08:51:f0:df:b3:df:ee:c6:c4:76:6d:51: c5:4d:4e:f6:76:77:37:e8:88:eb:b8:b5:5b:8a:73: f4:fe:e6:50:da:cd:a4:90:d0:2f:6f:e5:81:d4:3e: c8:e4:44:ee:48:b9:f3:a3:78:96:5d:5b:5f:40:33: 67:07:ed:e8:2a:7f:57:ae:92:22:02:43:d5:06:dd: 96:49:44:82:a9:f8:3b:a4:5c:d0:d2:5d:84:c2:37: 84:32:26:d6:9c:26:8c:4d:06:a3:69:7e:0a:a7:69: 1b:c1:a1:2f:f4:31:cb:33:05:c3:2b:f6:cd:52:fb: d6:e9:4a:0e:fa:9b:d3:77:66:e2:bf:bc:12:44:ee: e0:bc:53:a2:11:d8:d7:61:a7:2f:13:ac:44:0f:f5: 87:67:18:4c:b9:d5:7c:d1:f5:34:04:41:49:f9:2c: ed:6d:1f:e8:0e:ba:87:49:1b:cd:0c:a6:5d:4a:c9: da:20:47:92:49:dc:23:de:0e:26:c1:7e:f7:24:e8: 39:ab:e2:dd:b5:d2:ea:2b:f9:af:bf:25:75:ac:44: 87:3d:78:fe:8b:88:37:84:b9:6d:1f:2f:97:b1:ef: 47:75:30:b9:cc:19:bf:83:27:0d:61:83:09:d9:27: 2b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8D:23:1F:10:A2:FE:47:04:D6:52:F3:B5:AE:88:8E:D3:7A:A6:12 X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0c:0d:29:32:69:96:3c:e2:f8:cd:e6:08:f0:dd:9b:bc:2c: b6:20:db:3e:0c:17:6b:14:19:4c:7b:0e:26:79:ce:ab:93:34: 40:bf:55:f5:cf:d6:42:1b:70:60:e9:f8:8c:5e:58:fb:22:c7: 5d:28:3c:85:ee:21:b4:b4:e7:4c:59:34:c2:73:e5:9b:e4:a7: 61:a6:4d:93:37:53:dd:89:b3:7c:8c:aa:35:6a:54:2f:e6:f2: 6e:ec:55:96:53:44:d3:70:d9:5b:42:6e:f7:3e:5b:51:1f:17: e5:13:36:7a:18:74:29:8f:a5:6a:a7:80:b5:64:2b:15:5d:9d: c5:02:4b:50:c3:6f:03:85:c0:79:3f:08:43:cd:85:52:6a:ab: a6:de:fd:35:fb:8e:f1:4d:4d:30:ae:81:f3:a7:5a:c6:7f:c6: aa:65:8f:67:3f:f6:2e:11:2c:c2:1d:12:4b:6d:3e:32:ee:59: 4b:7f:7f:2b:ff:a4:dd:2d:de:f5:c8:93:64:36:71:b7:b4:2f: b0:d2:e3:df:de:52:d1:08:3e:40:76:1f:26:b1:2a:6d:a3:9e: 37:9c:2a:df:00:8e:e8:fc:87:f3:ca:4d:42:d6:56:5f:6a:d0: 75:43:99:1f:7c:87:0a:7c:92:2c:71:2d:8d:6a:f4:2d:56:f3: ff:b7:5a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEGczPLL2lxrYWtIxfYAM+RHiVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNjAzMDIwMzM2MzNaFw0yNjAzMDUxMjE5MzNaMDMxMTAvBgNV BAMTKDJBOEQyMzFGMTBBMkZFNDcwNEQ2NTJGM0I1QUU4ODhFRDM3QUE2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6IHVjLX7LSmjXU8Z6xeuB5QhR 8N+z3+7GxHZtUcVNTvZ2dzfoiOu4tVuKc/T+5lDazaSQ0C9v5YHUPsjkRO5IufOj eJZdW19AM2cH7egqf1eukiICQ9UG3ZZJRIKp+DukXNDSXYTCN4QyJtacJoxNBqNp fgqnaRvBoS/0McszBcMr9s1S+9bpSg76m9N3ZuK/vBJE7uC8U6IR2Ndhpy8TrEQP 9YdnGEy51XzR9TQEQUn5LO1tH+gOuodJG80Mpl1KydogR5JJ3CPeDibBfvck6Dmr 4t210uor+a+/JXWsRIc9eP6LiDeEuW0fL5ex70d1MLnMGb+DJw1hgwnZJytPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKo0jHxCi/kcE1lLzta6IjtN6phIwHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoMDSkyaZY84vjN5gjw3Zu8LLYg2z4MF2sU GUx7DiZ5zquTNEC/VfXP1kIbcGDp+IxeWPsix10oPIXuIbS050xZNMJz5Zvkp2Gm TZM3U92Js3yMqjVqVC/m8m7sVZZTRNNw2VtCbvc+W1EfF+UTNnoYdCmPpWqngLVk KxVdncUCS1DDbwOFwHk/CEPNhVJqq6be/TX7jvFNTTCugfOnWsZ/xqplj2c/9i4R LMIdEkttPjLuWUt/fyv/pN0t3vXIk2Q2cbe0L7DS49/eUtEIPkB2HyaxKm2jnjec Kt8Ajuj8h/PKTULWVl9q0HVDmR98hwp8kixxLY1q9C1W8/+3Wqs= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:56 2026 by rpki-client