
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft
File: 99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft (raw, json)
Hash identifier: R0dKYSDYzqV9wzcA+we99ZZ4eXtEBcqeZ/p4S6JfP34=
Subject key identifier: 79:54:BB:74:2C:01:77:C3:43:61:30:48:FA:7D:50:9D:A2:B5:38:8A
Authority key identifier: 99:BA:BE:71:7C:FE:78:82:76:D1:7F:95:FE:9B:0F:FC:FE:07:B3:F0
Certificate issuer: /CN=99BABE717CFE788276D17F95FE9B0FFCFE07B3F0
Certificate serial: 69189C5CB7D47E70683670313D18627912A8F92F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft
Manifest number: 2D
Signing time: Sun 15 Nov 2026 01:46:22 +0000
Manifest this update: Sun 15 Nov 2026 01:41:22 +0000
Manifest next update: Mon 16 Nov 2026 03:36:22 +0000
Files and hashes: 1: 3136332e35322e3138312e302f32342d3234203d3e20313534393139.roa (hash: BqGxiUgZJ1DM+eDB8yM7SgcgG2GT5XaPf4Fxm2AFLPc=)
2: 99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.crl (hash: Urp58pfWcvZP/pSTS0EkPCldn6gfz4DL43igT5WnmI0=)
3: 3136332e35322e3138302e302f32342d3234203d3e20313534393139.roa (hash: 8tkXKrrxyXHeGT+R72qB6l4khle3i37l4L9Q43+ntbg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.crl
rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 03:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:18:9c:5c:b7:d4:7e:70:68:36:70:31:3d:18:62:79:12:a8:f9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99BABE717CFE788276D17F95FE9B0FFCFE07B3F0
Validity
Not Before: Nov 15 01:41:22 2026 GMT
Not After : Nov 16 03:36:22 2026 GMT
Subject: CN=7954BB742C0177C343613048FA7D509DA2B5388A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:4d:23:f4:b4:54:1c:f2:b4:fe:e3:3b:3a:
82:68:00:e9:44:b1:bb:a8:d1:8b:b9:a0:96:8e:16:
18:e1:36:32:c4:72:41:6d:9f:7d:96:0f:a7:6a:ab:
a5:6d:6a:bc:14:c4:3d:a7:a9:47:dd:4e:7e:81:aa:
c9:9c:b2:13:47:61:2f:39:56:3a:3f:d9:81:6b:00:
fe:32:27:b2:f9:e6:d2:86:43:8c:0e:f8:52:07:a4:
42:7e:3f:ff:2a:3d:7f:80:66:a7:d2:80:42:d1:60:
3b:80:0d:ee:b4:87:3d:ad:01:00:86:1b:a4:4a:6c:
04:fa:3b:0c:59:22:f5:2d:f6:cf:fe:de:83:b5:04:
68:12:4e:2f:aa:91:d6:a4:be:f4:bc:0e:26:7d:53:
31:d8:4d:29:df:a5:82:3e:f9:8f:c0:dc:86:28:0d:
8e:07:65:95:53:84:1f:0f:5f:2b:c3:ce:a0:d1:c6:
2f:54:a3:10:64:21:c8:0f:e8:e8:b4:ed:74:aa:ef:
8a:29:6b:1c:e6:33:4f:36:ef:20:2b:f4:7a:9e:6f:
0c:30:62:1e:cb:82:ce:b7:48:bd:1f:4c:61:6c:d0:
96:27:3a:0c:41:bd:7a:7c:85:60:f8:75:c1:30:23:
9f:3a:7f:91:02:c7:a3:eb:68:bf:43:7d:74:10:20:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:BB:74:2C:01:77:C3:43:61:30:48:FA:7D:50:9D:A2:B5:38:8A
X509v3 Authority Key Identifier:
keyid:99:BA:BE:71:7C:FE:78:82:76:D1:7F:95:FE:9B:0F:FC:FE:07:B3:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13467636-b721-496f-8e99-8368c0ee27f7/0/99BABE717CFE788276D17F95FE9B0FFCFE07B3F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:24:d7:af:76:f8:86:72:e0:42:af:83:c2:b0:08:df:57:bf:
7e:20:a0:45:5e:df:7b:ac:38:3b:17:d5:b1:4d:9e:b4:76:90:
f2:0b:1b:da:a7:63:5f:36:b9:b6:4d:cd:2a:c2:69:7c:2c:3d:
11:dd:d3:d6:18:10:f2:74:64:7f:c6:76:d9:a5:28:a8:6a:c7:
21:aa:27:64:80:96:07:7f:d7:d7:e4:8d:8f:fd:40:18:23:51:
84:2e:15:fc:00:4c:ea:a3:63:30:d4:16:cc:b0:7e:35:3a:88:
96:49:05:67:fa:fa:56:fd:f5:eb:7f:ac:a8:0e:22:85:8a:d5:
bc:78:3f:8e:59:22:35:85:67:66:df:97:cf:eb:68:dd:51:04:
03:6f:0e:24:b4:0c:45:f8:55:6a:c7:36:cb:87:2e:17:a9:81:
43:79:cb:d9:58:31:31:b7:ae:b0:c9:fc:87:ae:28:86:2e:63:
2e:65:c7:ca:75:89:ec:18:81:71:7b:fd:7d:fe:78:0e:7c:03:
0c:05:9a:c8:35:d3:22:93:40:51:21:dd:90:92:b0:69:86:aa:
5a:c4:86:8e:0f:39:1a:ae:f0:46:45:d9:95:e4:5d:d5:3e:c7:
40:78:26:39:6f:72:2a:99:0b:fb:4f:13:26:57:b7:b2:f6:5c:
7a:b9:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:11:35 2026 by rpki-client