$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft File: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft (raw, json) Hash identifier: t0eH6cWQieypOLeHj9CWuov0JJ4kY768mje7KashsQs= Subject key identifier: 69:71:A6:FC:30:5E:A2:C9:64:EB:A8:28:86:41:EA:F8:11:5B:06:8C Authority key identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D Certificate issuer: /CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Certificate serial: 17E3E81116A71686EEBE5B3517251DCC446DB507 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft Manifest number: BF Signing time: Mon 21 Sep 2026 08:16:46 +0000 Manifest this update: Mon 21 Sep 2026 08:11:46 +0000 Manifest next update: Tue 22 Sep 2026 09:08:46 +0000 Files and hashes: 1: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: fh+5nuvp9S/ilgcOVbVeGaQX4NU2xadlTipLtzuaNpA=) 2: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl (hash: ZK85S4IqAoEn06Guoe+d4xybfCukc3l6KT7mMLvSVlg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e3:e8:11:16:a7:16:86:ee:be:5b:35:17:25:1d:cc:44:6d:b5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Validity Not Before: Sep 21 08:11:46 2026 GMT Not After : Sep 22 09:08:46 2026 GMT Subject: CN=6971A6FC305EA2C964EBA8288641EAF8115B068C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:4e:11:b0:d7:9d:1b:87:a9:14:c5:60:8f: cc:c8:81:33:fb:68:31:12:0a:ed:8d:a2:cf:4b:df: 6e:47:62:a9:87:46:15:0b:96:fc:43:cb:da:76:50: f0:6b:a0:e4:ad:e4:45:0a:37:4b:8e:27:99:24:6a: b5:4b:4d:ef:9a:3c:12:eb:a1:c1:db:66:46:1e:07: 2e:92:d4:1b:7a:b5:7f:79:2e:79:e3:06:cf:c7:9a: 0b:f7:55:09:de:7b:d3:d6:5f:f8:31:59:e9:bb:08: 77:7d:d7:8c:b8:08:f7:1e:1c:55:8e:a6:08:6b:82: cb:55:0f:9e:57:61:d4:ff:a1:e7:d6:c7:e6:dc:68: e8:42:23:4b:ba:6d:eb:ff:f4:f1:43:5c:72:d6:e0: 39:73:6b:56:3d:68:83:0b:45:cf:f3:ab:67:13:3a: e0:1b:8e:83:77:63:46:d7:5e:13:46:b3:9c:e5:6a: fe:d1:ae:64:08:e4:1d:a0:cf:4a:31:ff:bc:6b:20: 41:91:2d:2a:2f:26:7c:b3:8a:50:32:6c:d2:cb:a6: 7f:4b:a5:79:10:69:84:37:52:25:f2:a2:2a:db:e5: f9:dd:26:34:4f:34:ec:30:ee:33:fb:99:29:54:73: 3a:c8:14:19:40:d8:f8:3e:36:f7:8e:fc:6d:4d:40: 61:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:71:A6:FC:30:5E:A2:C9:64:EB:A8:28:86:41:EA:F8:11:5B:06:8C X509v3 Authority Key Identifier: keyid:19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8a:73:e6:fe:90:a9:03:89:33:4f:52:e9:58:81:2f:4f:51: 39:70:87:1a:24:66:ba:30:43:c3:07:15:85:b2:c3:95:d0:06: c2:13:37:6f:2f:59:a4:f6:d9:4c:f2:0b:19:d3:ad:9c:cf:52: 48:87:5c:bd:83:8f:61:ee:79:ed:31:b2:1e:b6:ac:15:d4:ed: c1:21:b7:97:37:73:85:a2:e5:63:0a:50:45:2f:d8:e1:e4:9c: eb:23:dc:31:bb:52:6b:d8:86:d7:14:9a:dd:78:d7:4b:2d:be: 79:ea:94:ab:c0:50:78:00:04:fa:5c:e8:6d:79:19:99:4e:d0: 4a:b6:26:cf:0d:ff:5c:13:fb:bd:9a:69:0f:7e:2b:6f:20:44: 5d:51:49:ad:44:97:15:9a:01:6b:16:22:8e:6e:c4:d3:39:95: dc:3c:b1:7a:e2:ed:25:bd:52:f3:55:6b:a0:a3:6e:c1:e7:65: 1f:21:68:c1:ad:77:ec:a0:e8:67:0c:fb:ea:0f:8c:57:81:e8: 89:0c:2f:02:15:0d:0f:ea:23:3f:8e:70:1a:32:02:a1:cb:f2: 44:32:62:eb:36:a8:e6:97:1e:1a:c9:77:05:48:34:ff:41:10: 63:07:c5:1a:a7:46:63:12:ce:6a:74:ba:a2:39:6c:5f:37:f9: 85:5c:90:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+PoERanFobuvls1FyUdzERttQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5RjRE MUFFNTA4RDAeFw0yNjA5MjEwODExNDZaFw0yNjA5MjIwOTA4NDZaMDMxMTAvBgNV BAMTKDY5NzFBNkZDMzA1RUEyQzk2NEVCQTgyODg2NDFFQUY4MTE1QjA2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwE4RsNedG4epFMVgj8zIgTP7 aDESCu2Nos9L325HYqmHRhULlvxDy9p2UPBroOSt5EUKN0uOJ5kkarVLTe+aPBLr ocHbZkYeBy6S1Bt6tX95LnnjBs/Hmgv3VQnee9PWX/gxWem7CHd914y4CPceHFWO pghrgstVD55XYdT/oefWx+bcaOhCI0u6bev/9PFDXHLW4Dlza1Y9aIMLRc/zq2cT OuAbjoN3Y0bXXhNGs5zlav7RrmQI5B2gz0ox/7xrIEGRLSovJnyzilAybNLLpn9L pXkQaYQ3UiXyoirb5fndJjRPNOww7jP7mSlUczrIFBlA2Pg+NveO/G1NQGFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaXGm/DBeoslk66gohkHq+BFbBowwHwYDVR0j BBgwFoAUGZm7mN0yhtkuhNfCBsdJ9NGuUI0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY4YzdhMzQtYmEzMS00ZDI5LTgzODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThE RDMyODZEOTJFODREN0MyMDZDNzQ5RjREMUFFNTA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTk5QkI5OEREMzI4NkQ5MkU4NEQ3QzIwNkM3NDlGNEQxQUU1 MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5 RjREMUFFNTA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiKc+b+kKkDiTNPUulYgS9PUTlwhxokZrow Q8MHFYWyw5XQBsITN28vWaT22UzyCxnTrZzPUkiHXL2Dj2Huee0xsh62rBXU7cEh t5c3c4Wi5WMKUEUv2OHknOsj3DG7UmvYhtcUmt1410stvnnqlKvAUHgABPpc6G15 GZlO0Eq2Js8N/1wT+72aaQ9+K28gRF1RSa1ElxWaAWsWIo5uxNM5ldw8sXri7SW9 UvNVa6CjbsHnZR8haMGtd+yg6GcM++oPjFeB6IkMLwIVDQ/qIz+OcBoyAqHL8kQy Yus2qOaXHhrJdwVINP9BEGMHxRqnRmMSzmp0uqI5bF83+YVckEk= -----END CERTIFICATE-----Generated at Mon Sep 21 20:19:28 2026 by rpki-client