$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft File: 99C1A17781B55BFD6418159CE683ACEFEFF42976.mft (raw, json) Hash identifier: EZgJFV/gAxAG5a2669gDGgVD93NaFKJBvBtsscSGdjI= Subject key identifier: B8:A7:58:7D:CA:92:89:F9:43:54:9E:D7:22:07:C6:91:85:A1:CC:31 Authority key identifier: 99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 Certificate issuer: /CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Certificate serial: 62A75F18718489F247445B643FB0C6D2F834A208 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:19:20 +0000 Manifest this update: Tue 22 Sep 2026 06:14:20 +0000 Manifest next update: Wed 23 Sep 2026 09:46:20 +0000 Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: MEpg6TQLHOe6wNvKYskGTniS7fA9et24LWdfA9YCFzI=) 2: 99C1A17781B55BFD6418159CE683ACEFEFF42976.crl (hash: SBKzx/O8ppSrMlylUFXeT167q23ZenfBKMdbyoyreW4=) 3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: jDm3YL8LmYdXFmywG3aQllmAgON/4+BpPxjQxeXq58Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a7:5f:18:71:84:89:f2:47:44:5b:64:3f:b0:c6:d2:f8:34:a2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Validity Not Before: Sep 22 06:14:20 2026 GMT Not After : Sep 23 09:46:20 2026 GMT Subject: CN=B8A7587DCA9289F943549ED72207C69185A1CC31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:6c:a5:eb:49:e8:63:ae:6e:5e:66:dd:46: a5:fb:ae:6e:1f:26:b8:d0:7a:d8:6e:23:6b:72:1a: 02:1f:2e:dd:83:1a:51:1b:10:09:37:96:08:56:db: 7a:15:1c:0a:34:2b:70:0a:61:10:28:bf:49:bf:50: fd:db:82:dd:40:5a:89:e3:77:13:a1:35:79:3c:29: 5b:8f:30:ab:cb:e9:ee:40:b9:5e:01:81:ed:f2:dc: 8c:1b:12:62:17:d0:2f:c7:32:58:86:ec:f6:75:0a: 23:d1:79:7a:89:10:2e:74:ea:1f:e2:24:d6:6c:0c: 89:c8:9d:b8:d1:9f:ac:48:75:cb:9e:42:47:b3:43: aa:57:49:55:15:29:7d:d2:cb:5b:a1:80:15:46:2d: c2:af:15:f9:44:f9:5a:7a:28:e4:c3:aa:0f:a6:d6: 17:90:47:3a:56:c6:a5:86:03:a3:0c:a5:d3:f7:ca: e3:14:9c:52:f4:92:91:1d:f8:fc:8d:5d:02:5d:bc: 51:ca:3a:2c:56:55:86:c1:06:7e:02:2b:b9:3b:5f: cb:c6:8f:b1:4f:57:83:13:0c:4f:ad:f7:90:7c:df: 11:27:04:3f:3c:be:13:98:8f:f2:d5:18:fb:35:da: 1f:35:1c:53:78:26:2b:27:f8:9a:e2:4c:60:fc:19: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A7:58:7D:CA:92:89:F9:43:54:9E:D7:22:07:C6:91:85:A1:CC:31 X509v3 Authority Key Identifier: keyid:99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:66:d1:50:7b:83:1a:65:84:7e:0b:c2:36:31:62:c6:7e:86: 87:11:bc:a5:f8:22:7c:2f:75:53:41:97:4c:70:52:fb:0c:63: db:30:92:58:20:70:2e:dc:b1:d9:d4:da:39:27:98:97:37:73: 37:02:29:ba:0c:b3:f3:97:a0:e8:ce:a9:33:2c:48:16:93:21: 01:6e:d6:2d:f4:b3:26:d4:0a:3c:be:1f:d9:6b:15:68:8d:ae: a8:5a:5f:a7:d4:cb:c8:59:13:65:14:60:75:6e:1d:6c:3f:d3: ad:b6:76:e8:63:61:4d:11:d2:33:19:5d:37:3e:f6:f6:86:7f: 44:bd:e4:30:60:9c:1d:11:bc:01:68:e6:1d:81:5e:d4:69:99: a9:67:ed:33:0f:47:e9:ff:9b:b7:48:3b:c4:52:db:52:93:5a: 6e:3c:00:3a:f7:cf:77:a0:0f:67:8e:e3:da:46:71:32:50:e9: bf:c8:20:4f:43:4a:68:a0:80:d8:d8:fe:11:de:5f:13:a3:89: 9e:04:68:29:a3:bd:86:b3:76:bf:69:ca:4c:98:0a:ea:57:0d: ef:b1:c0:cc:75:88:53:ba:b8:a3:71:7e:78:9c:a4:b2:82:ab: 2a:96:21:f1:f7:17:fd:9e:a8:6d:a1:5f:c8:a0:07:21:37:2f: d6:b4:09:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqdfGHGEifJHRFtkP7DG0vg0oggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZF RkY0Mjk3NjAeFw0yNjA5MjIwNjE0MjBaFw0yNjA5MjMwOTQ2MjBaMDMxMTAvBgNV BAMTKEI4QTc1ODdEQ0E5Mjg5Rjk0MzU0OUVENzIyMDdDNjkxODVBMUNDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTWGyl60noY65uXmbdRqX7rm4f JrjQethuI2tyGgIfLt2DGlEbEAk3lghW23oVHAo0K3AKYRAov0m/UP3bgt1AWonj dxOhNXk8KVuPMKvL6e5AuV4Bge3y3IwbEmIX0C/HMliG7PZ1CiPReXqJEC506h/i JNZsDInInbjRn6xIdcueQkezQ6pXSVUVKX3Sy1uhgBVGLcKvFflE+Vp6KOTDqg+m 1heQRzpWxqWGA6MMpdP3yuMUnFL0kpEd+PyNXQJdvFHKOixWVYbBBn4CK7k7X8vG j7FPV4MTDE+t95B83xEnBD88vhOYj/LVGPs12h81HFN4Jisn+JriTGD8GS79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuKdYfcqSiflDVJ7XIgfGkYWhzDEwHwYDVR0j BBgwFoAUmcGhd4G1W/1kGBWc5oOs7+/0KXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Q3YTcxYmMtZjkxMC00YjhjLTljZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4 MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZFRkY0Mjk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxQTE3NzgxQjU1QkZENjQxODE1OUNFNjgzQUNFRkVGRjQy OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FD RUZFRkY0Mjk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJm0VB7gxplhH4LwjYxYsZ+hocRvKX4Inwv dVNBl0xwUvsMY9swklggcC7csdnU2jknmJc3czcCKboMs/OXoOjOqTMsSBaTIQFu 1i30sybUCjy+H9lrFWiNrqhaX6fUy8hZE2UUYHVuHWw/0622duhjYU0R0jMZXTc+ 9vaGf0S95DBgnB0RvAFo5h2BXtRpmaln7TMPR+n/m7dIO8RS21KTWm48ADr3z3eg D2eO49pGcTJQ6b/IIE9DSmiggNjY/hHeXxOjiZ4EaCmjvYazdr9pykyYCupXDe+x wMx1iFO6uKNxfnicpLKCqyqWIfH3F/2eqG2hX8igByE3L9a0Ca0= -----END CERTIFICATE-----Generated at Tue Sep 22 17:18:44 2026 by rpki-client