$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft File: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft (raw, json) Hash identifier: EEidJyd23e6tjCz+xnV2WG4pzyKw/AWCu8fljzgc8Aw= Subject key identifier: 35:AF:F9:45:6B:9D:7A:BC:78:31:DE:04:12:34:B7:E3:EA:62:67:7A Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Certificate serial: A06494996C334FB233B463D550063DC5FB27C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft Manifest number: BC Signing time: Sun 20 Sep 2026 22:55:14 +0000 Manifest this update: Sun 20 Sep 2026 22:50:14 +0000 Manifest next update: Tue 22 Sep 2026 00:04:14 +0000 Files and hashes: 1: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po=) 2: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4=) 3: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl (hash: Hf7VhUSVm6ww3bm0PLtP0LWCa/gpFsL0lHCOpplsv6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a0:64:94:99:6c:33:4f:b2:33:b4:63:d5:50:06:3d:c5:fb:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Validity Not Before: Sep 20 22:50:14 2026 GMT Not After : Sep 22 00:04:14 2026 GMT Subject: CN=35AFF9456B9D7ABC7831DE041234B7E3EA62677A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6b:de:ed:58:4a:25:2a:b8:e5:92:62:f6:43: 78:a2:b2:ff:2c:91:a9:62:08:08:d2:73:f9:e2:9e: e5:97:a0:e2:cb:5c:18:5e:1c:8a:5b:78:e3:58:7f: 4a:84:65:cd:a1:59:e1:5e:b8:cf:b5:5d:f3:07:8f: fe:4b:91:a1:35:b8:21:39:25:da:45:e0:52:e2:ed: 2a:cc:33:2a:71:16:59:75:21:a7:e6:32:71:e9:63: 54:5e:9f:0e:90:7d:dd:23:7f:da:6b:96:f1:97:02: 53:3a:e5:eb:b2:19:66:93:79:21:b0:96:63:68:5e: e6:49:99:22:e7:50:03:81:bf:ec:ba:2f:09:6b:f7: 9e:30:ce:66:ff:eb:d7:74:ca:f6:b1:bb:08:2b:c3: 50:dc:b7:47:5e:5b:df:83:32:64:66:de:2e:80:f0: f2:e5:8f:80:88:80:f1:3e:e7:3f:c1:29:c0:c2:06: 0a:42:f1:66:0e:19:39:eb:16:91:e2:2b:b0:18:a3: 03:e8:47:4c:51:3b:1c:d1:10:23:f9:7d:02:93:22: 81:41:23:11:49:15:43:2a:7c:c6:41:9f:65:54:78: d7:1c:de:f9:8c:45:dc:e0:ff:cb:77:e3:f0:ef:c4: 10:d6:c3:20:10:ee:d3:01:c9:12:b9:94:06:8f:05: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AF:F9:45:6B:9D:7A:BC:78:31:DE:04:12:34:B7:E3:EA:62:67:7A X509v3 Authority Key Identifier: keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e5:b0:ad:8a:6f:98:c0:25:05:e6:dc:52:89:1c:07:a1:8d: 01:8c:14:41:6d:b9:09:07:0d:55:e5:3b:10:e0:fc:0f:9f:4c: 43:79:46:40:3c:c2:7b:6a:b3:4c:5e:f7:f0:7b:82:00:ba:9b: 17:2c:33:79:68:76:32:82:95:d3:25:be:06:99:39:db:4b:c5: 7d:23:14:3b:a9:0f:b0:c1:c6:24:a7:22:36:e3:f8:11:0c:e4: 77:59:c7:53:47:a1:34:41:e8:63:cf:56:da:14:83:67:39:67: 96:61:9a:24:ed:9f:23:ed:c7:c9:7b:de:cc:b1:46:4f:21:59: e1:4e:61:b4:fd:7f:7e:9c:4a:54:85:22:0d:e3:b2:1d:6e:8e: 1a:0a:5a:6a:fc:d5:f4:14:27:b6:1f:ad:a3:8f:2b:aa:f7:cf: b7:64:e4:aa:38:61:db:a2:bb:dd:7d:06:7d:ee:57:b9:78:1e: 0c:3c:bb:36:60:ab:01:15:e5:47:67:5f:3a:83:21:d1:2d:28: 99:09:17:4d:2c:5b:88:6d:5e:5d:e7:7d:cb:ea:b7:14:f3:30: fb:7f:6d:2d:c8:3a:39:58:2b:26:79:04:b5:ae:ed:05:a7:3d: a5:b9:ad:a1:51:8b:13:cd:3e:dc:80:16:99:ec:3f:6d:0c:78: 92:45:6d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKBklJlsM0+yM7Rj1VAGPcX7J8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2 MjdBRTExNDAeFw0yNjA5MjAyMjUwMTRaFw0yNjA5MjIwMDA0MTRaMDMxMTAvBgNV BAMTKDM1QUZGOTQ1NkI5RDdBQkM3ODMxREUwNDEyMzRCN0UzRUE2MjY3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDca97tWEolKrjlkmL2Q3iisv8s kaliCAjSc/ninuWXoOLLXBheHIpbeONYf0qEZc2hWeFeuM+1XfMHj/5LkaE1uCE5 JdpF4FLi7SrMMypxFll1IafmMnHpY1Renw6Qfd0jf9prlvGXAlM65euyGWaTeSGw lmNoXuZJmSLnUAOBv+y6Lwlr954wzmb/69d0yvaxuwgrw1Dct0deW9+DMmRm3i6A 8PLlj4CIgPE+5z/BKcDCBgpC8WYOGTnrFpHiK7AYowPoR0xROxzRECP5fQKTIoFB IxFJFUMqfMZBn2VUeNcc3vmMRdzg/8t34/DvxBDWwyAQ7tMByRK5lAaPBWkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNa/5RWuderx4Md4EEjS34+piZ3owHwYDVR0j BBgwFoAUmcFY2NudEoZFa97++7OeUmJ64RQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVlMTQzODItZDU4Ny00ZTg2LThlN2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhE QjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2MjdBRTExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxNThEOERCOUQxMjg2NDU2QkRFRkVGQkIzOUU1MjYyN0FF MTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlF NTI2MjdBRTExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3lsK2Kb5jAJQXm3FKJHAehjQGMFEFtuQkH DVXlOxDg/A+fTEN5RkA8wntqs0xe9/B7ggC6mxcsM3lodjKCldMlvgaZOdtLxX0j FDupD7DBxiSnIjbj+BEM5HdZx1NHoTRB6GPPVtoUg2c5Z5ZhmiTtnyPtx8l73syx Rk8hWeFOYbT9f36cSlSFIg3jsh1ujhoKWmr81fQUJ7YfraOPK6r3z7dk5Ko4Ydui u919Bn3uV7l4Hgw8uzZgqwEV5UdnXzqDIdEtKJkJF00sW4htXl3nfcvqtxTzMPt/ bS3IOjlYKyZ5BLWu7QWnPaW5raFRixPNPtyAFpnsP20MeJJFbcw= -----END CERTIFICATE-----Generated at Mon Sep 21 16:19:32 2026 by rpki-client