
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
File: 99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft (raw, json)
Hash identifier: QDoADWfUCJkrLY7NuhOkddaBLUUfz7nAvPKn/nMEXhk=
Subject key identifier: B0:A9:A6:51:DB:FD:1E:D7:48:EB:B6:47:AF:73:0E:70:06:55:C9:09
Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
Certificate issuer: /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Certificate serial: 0F1D2D3BCF3B3C7D1AE7C0AF72E031A8E1625A6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 07:20:38 +0000
Manifest this update: Mon 21 Sep 2026 07:15:38 +0000
Manifest next update: Tue 22 Sep 2026 07:25:38 +0000
Files and hashes: 1: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: SADYGPYv67q+O3OfpXqESLXHQd4oPs/38N8rfvjf/1w=)
2: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: Oro/PlzrcwhR+DRRwBnJ1PRk7SRQNnxZIcnkIGvWHPE=)
3: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: PSuRmEPi8uUru97FfcCOeTvVbgMQrGuLQwDV3VMgdz8=)
4: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: t9EEqIdAzyyLBFGBhm/G7abK4Gf89A/VkBJhBveYp8o=)
5: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: VQVxXRTp2UzotluVMgSddd9dhfBUX5L5ITtJ9nJBxE0=)
6: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: o0zOCwKMV8jU5a7SbQORjfO9m38/31ZTy9sJntqLIvE=)
7: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: zPofqUyIbcND+D2D0o7JYniZDgxYX06gor3Wb3n4ltM=)
8: 99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl (hash: f1j9fVoTejXKHeM7Pc/jQb2i/KKWRa4deIxXAH3zVTA=)
9: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: TnnimCiJNEI3YZmDLBfCPDrxGGuhDFX5yXiQDusUYTc=)
10: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: mJNCgdN/KYV4aqOGqcU3FG9C+9F17HUrX/9pj0TLKOE=)
11: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: Z1Kw+kT+8xUFn3ucef081YHiJ/yp5vqEe94k0y4NufM=)
12: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: 6bIg58V+S6s6w2BVuCVhFWMhoAtGZP/B+0ZE/bwD8i8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1d:2d:3b:cf:3b:3c:7d:1a:e7:c0:af:72:e0:31:a8:e1:62:5a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56
Validity
Not Before: Sep 21 07:15:38 2026 GMT
Not After : Sep 22 07:25:38 2026 GMT
Subject: CN=B0A9A651DBFD1ED748EBB647AF730E700655C909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:1e:87:ce:9c:34:65:27:ad:1c:68:fa:93:
70:27:92:ab:4c:3d:94:66:2d:2f:3f:bb:f6:7f:c6:
7d:75:17:a4:66:89:20:d2:be:6d:76:45:f7:ea:63:
3e:89:cd:d8:4d:8e:f4:3d:95:a1:d0:78:cf:1d:9c:
fe:cc:7a:a9:be:33:73:e3:05:e6:11:d1:07:5a:2c:
62:08:2b:cb:7b:cb:3b:64:02:01:b9:c4:29:ee:33:
10:bd:26:4e:c6:91:5d:e1:ee:48:06:ab:ba:41:95:
e6:02:e9:7b:b0:4a:f4:11:3b:6a:63:ae:61:d5:d4:
bd:da:b6:23:59:40:e1:00:68:32:1f:92:20:11:fb:
cd:77:72:da:cf:6f:3c:dc:e6:1f:f2:11:3d:12:2e:
7e:d6:de:9a:19:57:39:3f:b8:c0:b0:b4:42:94:ee:
d5:ff:68:4d:bb:f8:16:fe:a0:c3:5c:40:b6:ad:e6:
83:67:ec:dd:1c:af:88:f5:7c:95:75:d3:d5:51:7f:
8f:90:1a:a3:fa:4c:9f:46:59:ae:4b:da:c9:e7:22:
2d:1c:91:5d:f2:ae:ec:6f:98:88:f5:df:06:38:db:
42:bb:eb:ff:b2:ca:cd:1b:8c:24:b5:ab:8f:a9:b9:
e6:82:c9:ac:14:f6:86:32:3a:7d:a0:e6:1a:12:e2:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:A6:51:DB:FD:1E:D7:48:EB:B6:47:AF:73:0E:70:06:55:C9:09
X509v3 Authority Key Identifier:
keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:78:81:7a:bf:a9:ac:17:18:b0:39:d4:f4:79:aa:95:c3:57:
0c:7b:66:95:aa:37:76:35:d6:be:ec:30:25:f3:7a:96:1e:1c:
07:99:f8:9c:c8:e6:2d:40:7a:20:f4:bc:47:00:d3:0f:79:68:
53:30:f8:e4:b6:70:4e:de:d9:34:4f:e9:a1:7f:5f:d1:a3:8b:
5e:d2:9e:c8:8e:d9:68:dd:95:d1:d8:13:6e:19:65:f9:ae:4c:
83:e6:c1:a9:60:d1:7f:9a:79:fe:67:2c:02:0c:04:2d:70:33:
3e:b0:73:dd:ab:f9:f5:ec:ac:10:11:9c:07:ba:08:93:2c:26:
50:3f:b7:54:9c:fc:31:0e:16:42:fd:53:c3:a2:c6:ff:88:bf:
a2:d1:df:35:a5:d1:40:3a:07:61:a1:5f:11:2b:d9:5a:89:12:
0c:91:eb:dc:34:f4:1b:e8:5c:53:d6:34:6e:7a:fc:bc:f6:74:
91:f1:19:17:f2:1e:61:b5:d8:6b:b1:30:a9:a5:33:0b:5c:ad:
32:82:a1:a3:28:64:1b:16:cb:57:78:f9:ff:64:e5:72:3c:e8:
12:ad:17:ad:2f:6b:77:fb:3d:35:13:d1:f8:3a:12:dc:c1:86:
66:f0:21:af:b5:11:84:5a:7a:38:cd:4b:69:aa:4f:70:b1:da:
2a:35:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:22:50 2026 by rpki-client