$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft File: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft (raw, json) Hash identifier: SjI/2cu/3z+ipzVMMCyCsZUbyrkYXdPG6Xi5/S8evTM= Subject key identifier: 20:68:A1:50:5A:24:AF:75:3A:4F:63:A6:9A:11:A8:00:1F:76:9C:00 Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Certificate serial: 1955B8D0A29487B8F983C21AFDDE8D909CE09FCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 00:52:36 +0000 Manifest this update: Tue 22 Sep 2026 00:47:36 +0000 Manifest next update: Wed 23 Sep 2026 02:12:36 +0000 Files and hashes: 1: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=) 2: 3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (hash: 9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=) 3: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: MlpXJYuG8TKs4UXbWN+4r8Aq3XSuZvsK0qVMIYngvjU=) 4: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: AzT5TPIp9fZ7Lzw08VDmHNbwLWKNghx+Y7H+VOnzBzQ=) 5: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=) 6: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I=) 7: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: JSpaszPWtP5AqDUfpY+T4zXizj7Q33fbh+pedpw+rSQ=) 8: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=) 9: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl (hash: /Pyu7xKY8msq8sthA/6C8E2e+f0c0YG0bGZ5sHeBRhw=) 10: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (hash: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc=) 11: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (hash: /g2f6okgGj8HKNPWnvqkUbF7FmFrL81D5X1Q6gvNPZk=) 12: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: jzsgtTn7mipYVhReFlEPzAsVetPtmxUsBitMhsGc8oI=) 13: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=) 14: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=) 15: 323430343a3838303a31323a3a2f34382d3438203d3e203338373530.roa (hash: QNrAoCsUOKZCnY1N/fc3km7EG9A1f+dPgBphZu0nJbw=) 16: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: PRboNqucT4aVoRVOc4nRu3lOYaSHw3BpjErOfcflPnE=) 17: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=) 18: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (hash: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:55:b8:d0:a2:94:87:b8:f9:83:c2:1a:fd:de:8d:90:9c:e0:9f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Validity Not Before: Sep 22 00:47:36 2026 GMT Not After : Sep 23 02:12:36 2026 GMT Subject: CN=2068A1505A24AF753A4F63A69A11A8001F769C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:5c:e7:9e:5d:11:61:79:e8:6d:e0:f3:65: 5d:19:19:21:50:97:a1:e2:f0:39:d2:e5:2c:f7:ac: 30:6b:b4:56:83:de:8b:e2:26:2d:e0:d6:97:80:d1: 8e:14:18:e4:d7:8b:64:97:3c:bf:f7:78:3b:b2:26: 47:87:19:68:f3:75:a1:d5:ab:77:43:76:a0:5c:3f: 49:18:ec:91:33:6e:98:30:2a:ed:6a:c1:54:cc:72: 88:37:15:d1:1f:52:8e:ec:71:e7:77:d8:52:ef:a5: 8b:e0:53:49:f2:7e:fd:81:c1:f3:c2:57:14:f0:06: 76:44:d2:e6:a5:a3:f0:f4:92:4c:e8:19:c2:bf:40: d3:89:ce:ac:80:b2:0f:cf:2c:12:7b:e5:64:63:0d: 89:11:12:f7:42:7f:20:91:ab:27:38:0c:aa:f0:a1: 50:10:51:42:71:17:c1:73:5d:c9:69:d7:6d:74:ad: a8:62:22:32:99:0e:ac:ef:b1:04:f0:ae:f9:26:8f: 83:ed:14:f9:19:4d:ba:50:e2:a8:10:d4:32:df:ad: 91:1f:2c:e4:ba:70:82:9d:d2:5d:79:6b:c3:16:ee: f7:42:db:4f:91:09:ab:c4:13:c4:83:68:8b:db:1f: aa:bf:ec:c2:3f:52:74:35:56:a7:35:08:56:27:bc: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:68:A1:50:5A:24:AF:75:3A:4F:63:A6:9A:11:A8:00:1F:76:9C:00 X509v3 Authority Key Identifier: keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:51:89:cf:4b:8c:9f:9c:f6:b9:6b:07:db:55:a7:6d:37:6b: 9b:1e:21:82:d2:ca:19:48:a5:a1:a7:fc:36:b6:b4:27:09:f6: 19:02:c8:c0:a2:c1:88:96:a5:41:1d:f2:56:b4:60:94:44:38: c6:a3:bd:69:35:69:23:43:ba:44:d4:02:4a:7e:a8:06:8d:4f: e1:c4:f3:3f:53:6f:ff:5e:39:d3:c1:a5:59:95:53:38:c3:8e: 1f:fa:99:72:d4:36:99:0a:d2:b2:a9:5a:d8:da:7f:79:2a:21: 48:44:4f:6c:61:f8:c9:4d:d3:c7:cd:a8:1e:f6:76:54:fd:d6: 9c:1a:23:60:b4:69:77:d9:e9:f6:b5:4f:f7:21:08:e6:de:45: 86:92:2b:e4:3a:53:3b:d6:15:09:a1:9f:7d:87:ea:d9:ec:fa: 32:44:e4:71:73:60:59:6c:e2:95:d8:41:56:44:d0:6c:09:d9: dd:34:8c:b0:81:f7:c3:59:8c:1c:e7:7c:9b:da:b3:1d:5b:84: 5a:22:6f:52:20:b3:2c:a6:66:dc:72:52:a6:6c:55:d5:36:c6: 48:e4:77:fa:b0:fb:b2:c9:e9:c4:38:d7:6c:9c:a2:32:90:b1: 79:c3:e1:e8:2c:2d:78:87:79:17:e2:aa:da:ef:fa:00:d9:92: 43:e1:b1:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVW40KKUh7j5g8Ia/d6NkJzgn80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGMEU2REUwMkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIw N0QyRDdGODAeFw0yNjA5MjIwMDQ3MzZaFw0yNjA5MjMwMjEyMzZaMDMxMTAvBgNV BAMTKDIwNjhBMTUwNUEyNEFGNzUzQTRGNjNBNjlBMTFBODAwMUY3NjlDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIr1znnl0RYXnobeDzZV0ZGSFQ l6Hi8DnS5Sz3rDBrtFaD3oviJi3g1peA0Y4UGOTXi2SXPL/3eDuyJkeHGWjzdaHV q3dDdqBcP0kY7JEzbpgwKu1qwVTMcog3FdEfUo7sced32FLvpYvgU0nyfv2BwfPC VxTwBnZE0ualo/D0kkzoGcK/QNOJzqyAsg/PLBJ75WRjDYkREvdCfyCRqyc4DKrw oVAQUUJxF8FzXclp1210rahiIjKZDqzvsQTwrvkmj4PtFPkZTbpQ4qgQ1DLfrZEf LOS6cIKd0l15a8MW7vdC20+RCavEE8SDaIvbH6q/7MI/UnQ1Vqc1CFYnvINnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIGihUFokr3U6T2OmmhGoAB92nAAwHwYDVR0j BBgwFoAUmfDm3gLGAtHkhUVUdPSyEgfS1/gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBmNWNmZGItNzk4Ny00MzUxLWJjMmUtNjZjMjRmNDlmNDQwLzAvOTlGMEU2REUw MkM2MDJEMUU0ODU0NTU0NzRGNEIyMTIwN0QyRDdGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUYwRTZERTAyQzYwMkQxRTQ4NTQ1NTQ3NEY0QjIxMjA3RDJE N0Y4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBmNWNmZGItNzk4Ny00MzUxLWJj MmUtNjZjMjRmNDlmNDQwLzAvOTlGMEU2REUwMkM2MDJEMUU0ODU0NTU0NzRGNEIy MTIwN0QyRDdGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5Ric9LjJ+c9rlrB9tVp203a5seIYLSyhlI paGn/Da2tCcJ9hkCyMCiwYiWpUEd8la0YJREOMajvWk1aSNDukTUAkp+qAaNT+HE 8z9Tb/9eOdPBpVmVUzjDjh/6mXLUNpkK0rKpWtjaf3kqIUhET2xh+MlN08fNqB72 dlT91pwaI2C0aXfZ6fa1T/chCObeRYaSK+Q6UzvWFQmhn32H6tns+jJE5HFzYFls 4pXYQVZE0GwJ2d00jLCB98NZjBznfJvasx1bhFoib1IgsyymZtxyUqZsVdU2xkjk d/qw+7LJ6cQ412ycojKQsXnD4egsLXiHeRfiqtrv+gDZkkPhsdE= -----END CERTIFICATE-----Generated at Tue Sep 22 10:24:54 2026 by rpki-client