
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
File: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft (raw, json)
Hash identifier: c554OBiykwq/uwkGqVcZbheEWIkNaUmHfQF8iciYCWc=
Subject key identifier: E1:B5:6A:40:06:2E:9A:1F:77:45:36:E1:99:CB:40:00:F5:1C:9B:79
Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14
Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114
Certificate serial: 6C045EB524E3E8B275C5E77B9E930F22B08E807C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 01:24:31 +0000
Manifest this update: Wed 17 Jun 2026 01:19:31 +0000
Manifest next update: Thu 18 Jun 2026 04:31:31 +0000
Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4=)
2: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl (hash: hXPVW8iVljLuN4M+TYlfCdK43eJwiZAdSa/qLqq6vBo=)
3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl
rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:04:5e:b5:24:e3:e8:b2:75:c5:e7:7b:9e:93:0f:22:b0:8e:80:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114
Validity
Not Before: Jun 17 01:19:31 2026 GMT
Not After : Jun 18 04:31:31 2026 GMT
Subject: CN=E1B56A40062E9A1F774536E199CB4000F51C9B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:c9:b8:83:6e:d7:89:01:c8:f2:a8:ad:c2:
68:cb:fe:dc:a6:18:2b:82:f5:4d:e9:82:15:a2:11:
85:d2:bd:68:71:39:6c:78:94:39:00:57:e4:d5:04:
46:54:a9:34:7b:09:e0:cb:e6:65:64:2d:97:8e:af:
cb:b1:28:8e:4e:7d:55:49:5f:8f:1f:c3:3d:ee:4d:
59:96:35:71:a3:89:34:48:16:1b:ff:34:73:ba:1b:
e3:4a:da:62:66:43:01:4a:70:98:1d:6f:60:f4:6a:
7e:e5:58:eb:96:51:52:2d:c6:eb:8a:22:03:d5:39:
74:21:e6:0e:3d:62:f8:e6:2b:5d:33:39:9b:9e:67:
4a:cc:db:03:14:7b:06:67:8e:68:bb:4e:c5:d9:9f:
10:ac:3c:ff:18:73:16:4a:5d:1e:d5:f5:ce:20:c8:
d3:5f:0c:05:3d:6f:a1:64:e9:15:86:8d:32:4b:6c:
52:df:44:ca:a5:ad:9d:70:af:30:c8:fe:7c:df:fb:
8b:ac:33:f3:1f:8b:54:0b:ac:57:1a:28:36:7e:b7:
97:a7:d1:80:b5:74:14:c4:53:e3:ea:df:93:84:b0:
07:0f:ea:89:93:be:2c:e4:14:ff:d4:c4:6c:4d:be:
96:fc:54:bd:d2:3d:a0:86:23:ca:b3:34:69:3e:42:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:6A:40:06:2E:9A:1F:77:45:36:E1:99:CB:40:00:F5:1C:9B:79
X509v3 Authority Key Identifier:
keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d6:55:55:4d:40:aa:03:1c:78:87:f5:95:2e:d5:1a:cf:19:
78:24:32:be:52:76:fd:9c:ad:8c:31:2a:83:e3:3b:d2:8e:1b:
d4:b6:87:df:68:5c:04:a3:3a:51:39:ca:d2:b1:68:ef:19:ed:
b6:ac:83:f4:53:42:dd:71:ae:30:3e:1d:a2:0a:eb:3b:39:c7:
a7:c6:e2:0e:64:cb:ee:85:65:ae:53:6c:bd:cb:4d:d8:85:ce:
50:3a:dd:18:a0:74:19:f3:ac:ec:5a:5f:0f:5c:83:c3:9d:fb:
10:e4:4c:1e:2c:6c:a2:86:ee:dd:2b:f0:ce:5e:aa:42:c5:7f:
32:2d:8c:d4:20:94:2c:95:32:f3:ae:74:50:fb:15:36:87:de:
62:fd:eb:8d:f0:d6:8b:b5:bf:74:80:b7:7f:d5:f2:a9:61:56:
db:2e:38:a5:12:7c:8f:b6:02:fc:5d:e3:01:d4:d7:95:5c:d2:
a6:ed:8f:a5:f1:4f:4c:07:b3:99:87:77:30:7f:21:78:cb:6d:
45:11:ae:06:0c:15:78:c5:bc:99:ee:64:7f:1d:e8:a5:47:e9:
23:4b:2c:e2:3c:8f:6f:92:ef:4c:b4:c2:39:ae:43:94:64:e8:
d2:30:7e:86:93:bd:43:f2:4d:c8:20:bd:f9:cf:c8:58:2e:7c:
2d:52:be:18
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbARetSTj6LJ1xed7npMPIrCOgHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2
MjdBRTExNDAeFw0yNjA2MTcwMTE5MzFaFw0yNjA2MTgwNDMxMzFaMDMxMTAvBgNV
BAMTKEUxQjU2QTQwMDYyRTlBMUY3NzQ1MzZFMTk5Q0I0MDAwRjUxQzlCNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykcm4g27XiQHI8qitwmjL/tym
GCuC9U3pghWiEYXSvWhxOWx4lDkAV+TVBEZUqTR7CeDL5mVkLZeOr8uxKI5OfVVJ
X48fwz3uTVmWNXGjiTRIFhv/NHO6G+NK2mJmQwFKcJgdb2D0an7lWOuWUVItxuuK
IgPVOXQh5g49YvjmK10zOZueZ0rM2wMUewZnjmi7TsXZnxCsPP8YcxZKXR7V9c4g
yNNfDAU9b6Fk6RWGjTJLbFLfRMqlrZ1wrzDI/nzf+4usM/Mfi1QLrFcaKDZ+t5en
0YC1dBTEU+Pq35OEsAcP6omTvizkFP/UxGxNvpb8VL3SPaCGI8qzNGk+QgUpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4bVqQAYumh93RTbhmctAAPUcm3kwHwYDVR0j
BBgwFoAUmcFY2NudEoZFa97++7OeUmJ64RQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmVlMTQzODItZDU4Ny00ZTg2LThlN2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhE
QjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2MjdBRTExNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OUMxNThEOERCOUQxMjg2NDU2QkRFRkVGQkIzOUU1MjYyN0FF
MTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl
N2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlF
NTI2MjdBRTExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACPWVVVNQKoDHHiH9ZUu1RrPGXgkMr5Sdv2c
rYwxKoPjO9KOG9S2h99oXASjOlE5ytKxaO8Z7basg/RTQt1xrjA+HaIK6zs5x6fG
4g5ky+6FZa5TbL3LTdiFzlA63RigdBnzrOxaXw9cg8Od+xDkTB4sbKKG7t0r8M5e
qkLFfzItjNQglCyVMvOudFD7FTaH3mL9643w1ou1v3SAt3/V8qlhVtsuOKUSfI+2
Avxd4wHU15Vc0qbtj6XxT0wHs5mHdzB/IXjLbUURrgYMFXjFvJnuZH8d6KVH6SNL
LOI8j2+S70y0wjmuQ5Rk6NIwfoaTvUPyTcggvfnPyFgufC1Svhg=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:44 2026 by rpki-client