
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft
File: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft (raw, json)
Hash identifier: 3OMevnPKCkOUyGJpe7oZfo44dFv163UYO9PeBFpSEqE=
Subject key identifier: A5:F8:53:AA:AF:64:F4:24:EB:E9:90:C6:D4:DB:1D:E8:EB:02:7D:92
Authority key identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D
Certificate issuer: /CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D
Certificate serial: 07C8AC40C5CFE643F2B63AB4516457DB37D8FA51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 10:37:17 +0000
Manifest this update: Sat 13 Jun 2026 10:32:17 +0000
Manifest next update: Sun 14 Jun 2026 14:23:17 +0000
Files and hashes: 1: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl (hash: Y7eSchqsjw4Yfb2t4dfRjv68aZ9OwOEmhgP811MI6k8=)
2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: fh+5nuvp9S/ilgcOVbVeGaQX4NU2xadlTipLtzuaNpA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl
rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c8:ac:40:c5:cf:e6:43:f2:b6:3a:b4:51:64:57:db:37:d8:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D
Validity
Not Before: Jun 13 10:32:17 2026 GMT
Not After : Jun 14 14:23:17 2026 GMT
Subject: CN=A5F853AAAF64F424EBE990C6D4DB1DE8EB027D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:7e:d2:f6:fd:17:bd:4f:6a:09:1a:9a:3a:
62:fb:29:c2:68:60:36:80:08:7b:e0:ac:bc:b8:b6:
36:a6:bf:fb:1a:f8:c8:5a:d2:d4:d8:3d:4e:48:55:
33:65:c2:72:e7:58:ee:ef:0b:1c:65:92:2c:92:61:
6e:55:a4:78:03:59:5b:41:83:58:40:d7:e5:77:ff:
23:df:00:46:12:7e:0b:23:a5:b2:12:d4:d5:fc:b3:
0c:19:74:7b:d3:fa:03:23:bd:e8:7e:3a:8b:f9:3d:
b3:ac:68:89:52:f0:36:38:c4:c4:97:dc:cf:3c:be:
a5:7a:6b:3b:a1:68:5a:85:97:cb:b0:57:fc:5a:93:
c3:d5:99:18:1f:6c:ec:71:62:7b:da:d3:a9:c6:97:
f2:a0:3c:b3:87:53:9a:1e:34:20:1c:a9:dd:b5:09:
2c:ba:0d:be:a4:a3:e6:bf:ea:98:fc:42:79:19:df:
a4:93:df:af:cd:e1:45:1a:01:26:45:a4:11:11:a0:
82:c0:ad:19:c8:43:f5:39:d1:ef:6d:d3:01:f4:fa:
64:31:19:b6:88:47:e5:94:aa:16:b5:ac:dd:3c:7e:
4b:24:cd:bd:41:b2:b2:b3:31:f2:75:e9:41:66:d9:
36:4a:96:bc:aa:57:44:50:2c:f0:77:05:54:33:b4:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F8:53:AA:AF:64:F4:24:EB:E9:90:C6:D4:DB:1D:E8:EB:02:7D:92
X509v3 Authority Key Identifier:
keyid:19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f5:23:02:ad:8e:fd:13:82:ae:9d:e3:67:46:79:70:91:d6:
f8:4f:b3:f0:95:00:a4:a2:d9:71:4d:1d:db:e1:18:92:21:e4:
f6:c7:94:97:26:fd:94:0f:fa:05:1c:97:b4:03:a5:07:25:22:
ab:39:02:45:86:3d:54:35:da:4f:06:95:b7:de:69:91:d4:3f:
cc:48:23:21:47:f8:d1:a1:b1:f7:5a:54:d3:71:8f:e7:45:15:
9e:7a:d6:f7:83:93:77:b6:68:9b:7a:2a:30:14:ce:07:cb:9e:
f7:39:0e:d2:88:8f:67:a1:2b:51:16:6c:1a:3b:17:6b:40:1b:
0f:e4:b9:bb:ba:81:51:e7:cf:f0:38:9b:28:2a:ea:36:ce:82:
84:f2:6a:43:a7:f0:e5:9f:f2:9f:ff:95:e4:4d:82:95:1c:ae:
76:89:14:57:46:74:89:fc:8b:23:55:e7:9c:81:a6:16:95:73:
9e:ce:dc:a2:11:94:9c:fc:93:fc:56:a7:3a:34:d9:ea:fa:29:
02:2c:29:f3:22:a5:db:b7:c7:a6:45:1c:8b:66:f9:8d:f4:43:
ea:f7:5c:ff:b6:75:be:0d:4b:12:23:5a:69:7f:92:7c:a8:ec:
6f:2e:ba:e2:ff:da:ec:0e:7c:75:1c:b6:1d:f0:e1:23:ae:c2:
12:94:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:47 2026 by rpki-client