$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: vJcMtfXnohoVjw+iRPvhKAn/beGUEo9Pym+R78FMZcY= Subject key identifier: 3E:BE:1B:64:13:0B:5E:35:31:19:9E:45:4B:E9:65:0F:F8:1D:AC:99 Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 21D253D118212A19E03C5F12677B39925B6646F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 0565 Signing time: Sat 18 Apr 2026 03:21:38 +0000 Manifest this update: Sat 18 Apr 2026 03:16:38 +0000 Manifest next update: Tue 21 Apr 2026 07:34:38 +0000 Files and hashes: 1: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: MtIYq3+RPGhxkk0ZnjejOe8IUWSNEG1SkceXnioJstM=) 2: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: xEl9WKNeil5vick+EZGgBmq+d9hvCJ6SFKXlmIh83hQ=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: pD/9ZN/LtEEVzbK2xymhrif8EXzbhQ+acqdIY2pf7Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d2:53:d1:18:21:2a:19:e0:3c:5f:12:67:7b:39:92:5b:66:46:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Apr 18 03:16:38 2026 GMT Not After : Apr 21 07:34:38 2026 GMT Subject: CN=3EBE1B64130B5E3531199E454BE9650FF81DAC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:0e:74:ca:ff:62:d0:f7:e6:10:5f:ea:f7: f8:b3:34:d8:95:4d:7d:ca:61:b3:fa:2c:db:53:5a: 8c:76:aa:22:7c:5e:8a:50:bb:13:eb:24:0c:55:4c: 87:a4:31:8a:91:24:fc:cc:0d:86:78:20:e9:67:9b: 3f:4c:32:b8:3e:2a:82:d6:b9:9c:d8:5b:54:d3:b0: 91:51:3c:5e:53:fc:5e:e8:d2:79:47:f2:2b:5c:20: 87:ff:8f:68:c2:49:34:cb:2b:c1:f4:4a:c6:db:e4: d3:50:a1:21:95:45:cf:b0:f4:ba:4c:4b:87:88:02: e7:82:6d:43:ed:02:0d:47:09:c8:15:5c:d4:5e:d0: e9:ed:09:c2:35:e3:8c:77:d3:4b:7b:60:67:fc:d9: a1:26:4f:c5:2a:b2:bb:88:b0:6b:33:dd:d5:08:fb: d5:e9:72:df:de:a8:39:dd:25:d8:51:89:c1:5a:09: da:62:26:31:2b:7d:83:7c:28:22:56:92:9a:a5:04: 4f:bd:a5:dc:c5:87:12:72:81:76:84:66:47:a1:80: d6:2b:8f:4a:0e:44:ff:aa:06:d1:52:93:95:df:d1: 0d:06:b6:12:a0:3b:a2:62:5d:56:11:32:b5:a4:96: 81:72:b8:d6:de:ec:c3:b4:75:5f:ad:ed:f4:db:b8: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BE:1B:64:13:0B:5E:35:31:19:9E:45:4B:E9:65:0F:F8:1D:AC:99 X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:74:ad:a6:04:f6:11:f6:93:b9:26:a7:bc:9d:ce:69:6e:a2: 53:ee:32:b2:d4:af:9a:51:e2:e2:7a:0d:b1:cd:93:70:f1:d1: f0:40:e2:ab:ad:9f:e8:eb:81:0e:81:64:40:f7:78:45:3e:13: 00:98:a6:8d:ec:cb:e8:9e:3a:6b:04:af:e1:e1:5b:58:6c:62: cd:64:65:fd:a1:d7:a8:c4:51:8b:47:3f:00:71:58:37:45:b3: d7:c5:52:fd:cd:e3:cb:fb:56:fe:c2:81:ed:12:3c:be:83:d8: 54:95:ba:64:8d:4e:7a:b4:8f:32:3a:66:d2:8d:57:b6:28:41: d9:28:1e:4e:72:71:1d:9b:30:76:37:ad:06:a4:5c:30:a3:b9: c9:55:70:f4:6b:5a:6e:5c:d0:45:7e:5e:2b:92:50:6e:52:e1: 25:3e:3d:b0:02:f3:86:b5:9c:51:38:a1:68:62:d4:8c:04:f3: 78:7e:f2:b9:d7:5a:4e:da:bf:8e:ec:72:3e:71:8c:c8:0a:76: 3d:6a:37:d7:70:39:3a:13:34:dc:1d:34:89:35:f5:78:94:68: c8:0a:65:ba:da:60:d9:aa:54:0e:22:a4:5c:24:a6:66:23:fd: 77:82:49:bc:47:cf:6d:34:b0:31:3b:2f:01:c4:88:17:35:f4: a7:1d:0f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdJT0RghKhngPF8SZ3s5kltmRvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNjA0MTgwMzE2MzhaFw0yNjA0MjEwNzM0MzhaMDMxMTAvBgNV BAMTKDNFQkUxQjY0MTMwQjVFMzUzMTE5OUU0NTRCRTk2NTBGRjgxREFDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8w50yv9i0PfmEF/q9/izNNiV TX3KYbP6LNtTWox2qiJ8XopQuxPrJAxVTIekMYqRJPzMDYZ4IOlnmz9MMrg+KoLW uZzYW1TTsJFRPF5T/F7o0nlH8itcIIf/j2jCSTTLK8H0Ssbb5NNQoSGVRc+w9LpM S4eIAueCbUPtAg1HCcgVXNRe0OntCcI144x300t7YGf82aEmT8UqsruIsGsz3dUI +9Xpct/eqDndJdhRicFaCdpiJjErfYN8KCJWkpqlBE+9pdzFhxJygXaEZkehgNYr j0oORP+qBtFSk5Xf0Q0GthKgO6JiXVYRMrWkloFyuNbe7MO0dV+t7fTbuFS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPr4bZBMLXjUxGZ5FS+llD/gdrJkwHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH50raYE9hH2k7kmp7ydzmluolPuMrLUr5pR 4uJ6DbHNk3Dx0fBA4qutn+jrgQ6BZED3eEU+EwCYpo3sy+ieOmsEr+HhW1hsYs1k Zf2h16jEUYtHPwBxWDdFs9fFUv3N48v7Vv7Cge0SPL6D2FSVumSNTnq0jzI6ZtKN V7YoQdkoHk5ycR2bMHY3rQakXDCjuclVcPRrWm5c0EV+XiuSUG5S4SU+PbAC84a1 nFE4oWhi1IwE83h+8rnXWk7av47scj5xjMgKdj1qN9dwOToTNNwdNIk19XiUaMgK ZbraYNmqVA4ipFwkpmYj/XeCSbxHz200sDE7LwHEiBc19KcdD4k= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:17 2026 by rpki-client