$ rpki-client -vvf rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft File: 99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft (raw, json) Hash identifier: VacOx7MhGJRZENAvx6yKBQfcPcTHUej0EwxwN4OkU3w= Subject key identifier: D1:B1:58:04:03:3C:F2:BD:FB:6C:9B:C9:50:15:62:68:54:E7:06:BA Authority key identifier: 99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56 Certificate issuer: /CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56 Certificate serial: 2F282290D9DD9F39A56F1AF1A60938572DD7C91E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:37:50 +0000 Manifest this update: Tue 16 Jun 2026 19:32:50 +0000 Manifest next update: Wed 17 Jun 2026 21:09:50 +0000 Files and hashes: 1: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: zPofqUyIbcND+D2D0o7JYniZDgxYX06gor3Wb3n4ltM=) 2: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: mJNCgdN/KYV4aqOGqcU3FG9C+9F17HUrX/9pj0TLKOE=) 3: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: o0zOCwKMV8jU5a7SbQORjfO9m38/31ZTy9sJntqLIvE=) 4: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: t9EEqIdAzyyLBFGBhm/G7abK4Gf89A/VkBJhBveYp8o=) 5: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: TnnimCiJNEI3YZmDLBfCPDrxGGuhDFX5yXiQDusUYTc=) 6: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: Oro/PlzrcwhR+DRRwBnJ1PRk7SRQNnxZIcnkIGvWHPE=) 7: 99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl (hash: DZfBR5V2i5sg9vyvstk7dQLVjW1dMLc2UlRmb4b10e0=) 8: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: SADYGPYv67q+O3OfpXqESLXHQd4oPs/38N8rfvjf/1w=) 9: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: 6bIg58V+S6s6w2BVuCVhFWMhoAtGZP/B+0ZE/bwD8i8=) 10: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: PSuRmEPi8uUru97FfcCOeTvVbgMQrGuLQwDV3VMgdz8=) 11: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: VQVxXRTp2UzotluVMgSddd9dhfBUX5L5ITtJ9nJBxE0=) 12: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: Z1Kw+kT+8xUFn3ucef081YHiJ/yp5vqEe94k0y4NufM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:28:22:90:d9:dd:9f:39:a5:6f:1a:f1:a6:09:38:57:2d:d7:c9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56 Validity Not Before: Jun 16 19:32:50 2026 GMT Not After : Jun 17 21:09:50 2026 GMT Subject: CN=D1B15804033CF2BDFB6C9BC95015626854E706BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:d5:86:13:0f:48:fd:c7:c5:1c:5f:b0:54: a0:87:33:a7:04:18:23:04:09:9c:6f:d0:4f:b3:e1: ee:0e:8d:76:76:5d:f3:a6:99:3f:2b:c2:a0:9c:f9: 95:7f:81:38:d4:00:9d:b3:05:33:32:a5:37:8a:b4: 96:86:94:35:3e:9c:96:f6:07:ab:ff:e1:18:da:c4: 0b:1f:a9:6a:8b:b9:47:69:96:2f:d8:20:af:0a:0c: 57:90:5d:d2:bb:31:c6:fb:ae:8f:bd:c7:b7:3a:e7: 55:b0:9b:3c:ac:75:02:90:77:3d:bd:e8:cd:fa:fc: 1a:ca:37:07:b7:f1:af:b9:20:ad:ec:83:3a:fe:53: ad:84:04:c8:26:54:ad:9f:3c:5b:e9:86:b5:12:9b: 73:b1:af:f3:17:77:b4:1b:88:2a:e1:54:1c:b5:f1: cf:0f:00:5a:3d:ef:a8:b4:9e:6a:13:f1:b8:84:1e: 32:52:30:d5:ce:c3:a2:98:28:10:f7:7e:c6:ec:8b: d6:06:cc:d3:f6:49:ce:9b:89:c4:e1:78:f3:bd:57: fa:da:0b:93:32:18:47:62:47:5a:04:bd:a6:20:11: 37:04:e9:f4:3c:5a:ef:20:ff:32:ff:8d:8c:5b:c1: c4:a9:f2:d0:78:3d:06:c4:e7:26:78:9b:f1:69:2f: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B1:58:04:03:3C:F2:BD:FB:6C:9B:C9:50:15:62:68:54:E7:06:BA X509v3 Authority Key Identifier: keyid:99:AD:23:9A:6C:58:BD:C3:65:0D:B2:BE:81:7F:2E:9A:39:AB:CB:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/99AD239A6C58BDC3650DB2BE817F2E9A39ABCB56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e8:34:eb:e7:06:f5:e0:79:af:5e:5e:c3:da:d4:24:d7:e0: f3:37:24:db:b4:25:a5:40:2b:45:df:1c:e1:80:3f:f5:9d:15: 2a:c0:29:f5:f7:7d:93:77:1a:3a:a5:c2:07:c2:46:51:ce:1c: 47:a3:70:1a:9c:69:d1:01:63:96:9a:b8:c3:66:d9:f2:a5:bd: 9d:bf:7f:d4:72:c8:74:62:f6:0e:29:68:ed:04:f6:52:35:44: ea:26:0b:2d:c9:ea:cb:0a:46:20:db:77:33:e2:72:c1:e2:63: 76:43:3b:1d:c5:ea:40:60:2d:46:70:74:78:42:05:1d:4d:70: b5:83:ef:27:72:8a:09:f8:ab:b8:5a:90:a8:a8:cd:e4:af:36: e6:ce:24:e5:ae:f3:3a:fe:df:0a:1e:2a:ef:62:1c:04:2c:7a: 84:e0:38:b4:8e:0f:e0:93:c8:f7:38:4e:3a:b1:fc:69:21:d6: d9:b5:64:8b:0a:6c:63:9a:2b:db:1f:81:b5:95:36:9d:f1:be: 75:0e:b4:be:a2:a1:1a:28:47:98:3e:9e:bf:fe:8a:7c:23:a1: 6f:4e:95:0a:40:46:ca:49:18:58:a0:b3:ce:50:2a:8c:88:1e: 36:54:16:cd:4d:30:a4:b5:74:84:8b:ff:86:0b:cf:bc:23:db: 15:c3:21:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULygikNndnzmlbxrxpgk4Vy3XyR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBRDIzOUE2QzU4QkRDMzY1MERCMkJFODE3RjJFOUEz OUFCQ0I1NjAeFw0yNjA2MTYxOTMyNTBaFw0yNjA2MTcyMTA5NTBaMDMxMTAvBgNV BAMTKEQxQjE1ODA0MDMzQ0YyQkRGQjZDOUJDOTUwMTU2MjY4NTRFNzA2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNz9WGEw9I/cfFHF+wVKCHM6cE GCMECZxv0E+z4e4OjXZ2XfOmmT8rwqCc+ZV/gTjUAJ2zBTMypTeKtJaGlDU+nJb2 B6v/4RjaxAsfqWqLuUdpli/YIK8KDFeQXdK7Mcb7ro+9x7c651WwmzysdQKQdz29 6M36/BrKNwe38a+5IK3sgzr+U62EBMgmVK2fPFvphrUSm3Oxr/MXd7QbiCrhVBy1 8c8PAFo976i0nmoT8biEHjJSMNXOw6KYKBD3fsbsi9YGzNP2Sc6bicThePO9V/ra C5MyGEdiR1oEvaYgETcE6fQ8Wu8g/zL/jYxbwcSp8tB4PQbE5yZ4m/FpLwcpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0bFYBAM88r37bJvJUBViaFTnBrowHwYDVR0j BBgwFoAUma0jmmxYvcNlDbK+gX8umjmry1YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRlMmJmMDktNWY0Mi00YjY1LWE0MmQtNjNkMDc5NmQyMDZjLzAvOTlBRDIzOUE2 QzU4QkRDMzY1MERCMkJFODE3RjJFOUEzOUFCQ0I1Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUFEMjM5QTZDNThCREMzNjUwREIyQkU4MTdGMkU5QTM5QUJD QjU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOTlBRDIzOUE2QzU4QkRDMzY1MERCMkJFODE3RjJF OUEzOUFCQ0I1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/oNOvnBvXgea9eXsPa1CTX4PM3JNu0JaVA K0XfHOGAP/WdFSrAKfX3fZN3GjqlwgfCRlHOHEejcBqcadEBY5aauMNm2fKlvZ2/ f9RyyHRi9g4paO0E9lI1ROomCy3J6ssKRiDbdzPicsHiY3ZDOx3F6kBgLUZwdHhC BR1NcLWD7ydyign4q7hakKiozeSvNubOJOWu8zr+3woeKu9iHAQseoTgOLSOD+CT yPc4Tjqx/Gkh1tm1ZIsKbGOaK9sfgbWVNp3xvnUOtL6ioRooR5g+nr/+inwjoW9O lQpARspJGFigs85QKoyIHjZUFs1NMKS1dISL/4YLz7wj2xXDIQ8= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:24 2026 by rpki-client