$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft File: 99C1A17781B55BFD6418159CE683ACEFEFF42976.mft (raw, json) Hash identifier: aiK+1PeHofDMXDk/+Fm1wsDoHDwmTEWEW69+y3d+q3w= Subject key identifier: 26:B4:BE:20:0A:96:28:67:EF:C7:1D:B2:60:AC:CC:C9:FA:9A:90:DD Authority key identifier: 99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 Certificate issuer: /CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Certificate serial: 762996A163403A37B1E37DB92BB908980EF5B7F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 10:09:40 +0000 Manifest this update: Thu 03 Sep 2026 10:04:40 +0000 Manifest next update: Fri 04 Sep 2026 12:00:40 +0000 Files and hashes: 1: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: jDm3YL8LmYdXFmywG3aQllmAgON/4+BpPxjQxeXq58Y=) 2: 99C1A17781B55BFD6418159CE683ACEFEFF42976.crl (hash: G8ovhBvT9ytGumbUURipqyHFst/3jD+B2VEsXzYKrLs=) 3: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: MEpg6TQLHOe6wNvKYskGTniS7fA9et24LWdfA9YCFzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:29:96:a1:63:40:3a:37:b1:e3:7d:b9:2b:b9:08:98:0e:f5:b7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Validity Not Before: Sep 3 10:04:40 2026 GMT Not After : Sep 4 12:00:40 2026 GMT Subject: CN=26B4BE200A962867EFC71DB260ACCCC9FA9A90DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:a1:67:01:3c:fa:2c:84:c0:c0:79:20:71: c4:0b:c1:71:a7:73:29:37:eb:c3:3c:ab:b3:57:97: d1:20:56:65:33:d1:9b:b8:a1:f2:e4:f7:72:f2:79: 40:0c:45:ac:22:67:5d:c3:36:eb:3e:47:40:d4:ab: 93:ad:42:d2:5c:6c:45:c9:d2:8d:50:a5:8f:33:5a: 71:d4:60:82:03:ff:78:56:8e:18:7f:b9:21:22:24: aa:b2:b9:eb:b3:08:c9:c9:f8:b8:70:89:0c:d1:20: 9f:7b:81:21:4d:e9:1f:44:55:60:be:5f:76:f0:d8: 03:39:34:cd:40:0d:03:e1:cf:98:53:72:fa:c5:da: 95:b0:ed:e8:10:6f:86:c7:cf:23:8c:0f:5e:8b:92: 6a:1f:3e:80:82:c2:d9:33:b7:b2:c7:17:bf:0d:0b: eb:2a:6e:12:8a:0a:41:14:e1:de:b5:e9:e6:10:b1: 49:da:dc:78:10:b7:95:c0:36:50:e6:cd:cf:8d:19: 21:1a:5a:eb:55:bc:6f:be:e8:ed:7c:33:45:13:f9: 78:dd:55:f9:4c:74:fe:4e:ce:29:04:6b:bb:58:bb: 0a:0c:0f:98:34:6b:bb:7b:29:ca:dd:71:a4:b3:b8: 25:75:67:b4:fe:e4:c5:3e:08:a2:72:32:a1:67:23: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B4:BE:20:0A:96:28:67:EF:C7:1D:B2:60:AC:CC:C9:FA:9A:90:DD X509v3 Authority Key Identifier: keyid:99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9a:f3:87:fb:57:96:44:13:cd:3c:c1:37:b7:ba:48:24:53: e5:3e:56:90:47:1e:5d:9e:3c:47:72:2e:b0:28:c7:e6:b2:dd: 4a:75:0a:f6:f1:17:56:ee:37:a7:e4:f7:73:f3:3b:e7:7f:c6: f8:37:ba:32:4f:8c:8d:e3:9e:49:4e:52:42:74:de:55:f9:6b: 32:9c:e9:63:8b:5b:b5:ac:89:89:36:3a:80:50:aa:38:07:7a: 46:4b:13:b5:31:ef:6c:df:c9:a2:c2:f0:2f:8c:2a:9c:e2:42: a6:94:ee:44:64:e3:ae:4f:3a:42:bc:75:9e:ff:23:ff:6f:a9: 87:95:c0:cf:3c:80:48:22:96:9f:94:f7:fb:34:78:c8:51:fa: 14:9a:53:3c:0b:81:9c:bb:69:94:a8:e1:d8:02:c8:83:8c:ed: d8:3b:5f:3b:b8:59:14:c1:05:50:d0:66:3c:fd:26:87:1e:a0: 68:91:08:c1:61:9e:d2:77:4c:6c:8b:27:5e:08:bc:49:55:7f: 65:48:96:43:02:1e:94:69:4a:d2:fd:6d:5c:dc:82:c2:58:c0: da:20:25:c9:7e:16:3c:bf:3b:39:58:7a:c9:67:4e:f5:7d:2d: 44:01:48:80:f7:79:a1:29:68:b5:dd:2c:e9:24:a7:1c:25:5e: cf:f8:6a:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdimWoWNAOjex4325K7kImA71t/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZF RkY0Mjk3NjAeFw0yNjA5MDMxMDA0NDBaFw0yNjA5MDQxMjAwNDBaMDMxMTAvBgNV BAMTKDI2QjRCRTIwMEE5NjI4NjdFRkM3MURCMjYwQUNDQ0M5RkE5QTkwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLqFnATz6LITAwHkgccQLwXGn cyk368M8q7NXl9EgVmUz0Zu4ofLk93LyeUAMRawiZ13DNus+R0DUq5OtQtJcbEXJ 0o1QpY8zWnHUYIID/3hWjhh/uSEiJKqyueuzCMnJ+LhwiQzRIJ97gSFN6R9EVWC+ X3bw2AM5NM1ADQPhz5hTcvrF2pWw7egQb4bHzyOMD16LkmofPoCCwtkzt7LHF78N C+sqbhKKCkEU4d616eYQsUna3HgQt5XANlDmzc+NGSEaWutVvG++6O18M0UT+Xjd VflMdP5OzikEa7tYuwoMD5g0a7t7KcrdcaSzuCV1Z7T+5MU+CKJyMqFnI4qlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJrS+IAqWKGfvxx2yYKzMyfqakN0wHwYDVR0j BBgwFoAUmcGhd4G1W/1kGBWc5oOs7+/0KXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Q3YTcxYmMtZjkxMC00YjhjLTljZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4 MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZFRkY0Mjk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxQTE3NzgxQjU1QkZENjQxODE1OUNFNjgzQUNFRkVGRjQy OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FD RUZFRkY0Mjk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGa84f7V5ZEE808wTe3ukgkU+U+VpBHHl2e PEdyLrAox+ay3Up1CvbxF1buN6fk93PzO+d/xvg3ujJPjI3jnklOUkJ03lX5azKc 6WOLW7WsiYk2OoBQqjgHekZLE7Ux72zfyaLC8C+MKpziQqaU7kRk465POkK8dZ7/ I/9vqYeVwM88gEgilp+U9/s0eMhR+hSaUzwLgZy7aZSo4dgCyIOM7dg7Xzu4WRTB BVDQZjz9JoceoGiRCMFhntJ3TGyLJ14IvElVf2VIlkMCHpRpStL9bVzcgsJYwNog Jcl+Fjy/OzlYeslnTvV9LUQBSID3eaEpaLXdLOkkpxwlXs/4ajk= -----END CERTIFICATE-----Generated at Thu Sep 3 20:43:07 2026 by rpki-client