
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
File: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft (raw, json)
Hash identifier: b28vYtvR5Cwb6HNBL6HfR0SOxNN568DVDZeCmM9dxHQ=
Subject key identifier: 21:3F:48:02:E8:C1:AF:D1:E6:FF:77:4B:CE:18:EF:35:1A:2E:5C:4B
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial: 5F6B86B16594EB1A5B1CB4E50FC45F24DCD64CC7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 16:33:08 +0000
Manifest this update: Wed 02 Sep 2026 16:28:08 +0000
Manifest next update: Thu 03 Sep 2026 17:57:08 +0000
Files and hashes: 1: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: s0tvtnOzBx2wg+4vUHWBA8KcfOBbxN88qTxKuGgJguU=)
2: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: P+T4tPAca5KIeh3NpH+v8b7bFtAY7StYgksmfQ3/9cM=)
3: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: MlpXJYuG8TKs4UXbWN+4r8Aq3XSuZvsK0qVMIYngvjU=)
4: 323430343a3838303a31323a3a2f34382d3438203d3e203338373530.roa (hash: QNrAoCsUOKZCnY1N/fc3km7EG9A1f+dPgBphZu0nJbw=)
5: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl (hash: BIpDprE6MVi+M9iDL7DCiG2qEJHeHE0sK2pE8xYJM6Q=)
6: 3230322e3137392e3139302e302f32332d3233203d3e203338373530.roa (hash: /g2f6okgGj8HKNPWnvqkUbF7FmFrL81D5X1Q6gvNPZk=)
7: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=)
8: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: wtJefws1IQawoe8yb4jVgj5X5P3cewMGRSuqKr8w5/I=)
9: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=)
10: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: AzT5TPIp9fZ7Lzw08VDmHNbwLWKNghx+Y7H+VOnzBzQ=)
11: 3130332e3231332e3131382e302f32332d3233203d3e203338373530.roa (hash: 9TeQcqWDARNn53jqbj5jMqu8OaGQOBp3BzElbwHdS0o=)
12: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: Aetna6+21CQMAQqjAiUJIu47yG7i7XqoQJ5+dzrZLGg=)
13: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: PRboNqucT4aVoRVOc4nRu3lOYaSHw3BpjErOfcflPnE=)
14: 323430343a3838303a3a2f34382d3438203d3e203338373530.roa (hash: VgQXPBS32nNSzlwVl57OwsniexA2zZE5SydGF9v31zc=)
15: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: jzsgtTn7mipYVhReFlEPzAsVetPtmxUsBitMhsGc8oI=)
16: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: JSpaszPWtP5AqDUfpY+T4zXizj7Q33fbh+pedpw+rSQ=)
17: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: REpKs/RXrD6+kSVY+pi8I08ad5JiVlI+VsKG+qhKX6I=)
18: 323430343a3838303a31303a3a2f34382d3438203d3e203338373530.roa (hash: YRbfvStJ8Xz50EBiTCoGlectFVsjTE1eI7CsInhJEBw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 17:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6b:86:b1:65:94:eb:1a:5b:1c:b4:e5:0f:c4:5f:24:dc:d6:4c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Validity
Not Before: Sep 2 16:28:08 2026 GMT
Not After : Sep 3 17:57:08 2026 GMT
Subject: CN=213F4802E8C1AFD1E6FF774BCE18EF351A2E5C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:4c:83:2e:9d:f8:da:7e:20:cc:00:22:d6:
a0:03:34:39:29:90:5a:df:34:c8:82:c3:1a:90:cb:
db:48:92:9b:05:0f:ef:86:1f:cc:71:f6:6e:70:fd:
25:9b:d2:83:13:c7:eb:84:cb:ee:68:19:9f:ad:fa:
c0:6e:37:b4:85:38:36:b8:f9:f5:dc:d8:5c:66:3a:
bc:41:9a:a5:bc:e1:f8:1f:66:00:22:e1:19:fc:50:
60:c3:03:ec:1c:dd:e8:6a:86:1f:e9:2b:e1:80:b4:
93:81:9d:bf:be:92:f1:a0:43:d3:3d:f5:1c:2b:19:
ff:c7:53:cd:9f:04:f6:33:e1:73:0a:0f:4d:d2:9d:
c3:bd:81:96:39:27:f0:4f:51:a3:c6:f1:6b:96:d9:
1d:1a:eb:5e:40:db:d2:26:d8:5b:e8:19:7b:e0:91:
79:17:cc:20:ac:72:6e:36:bb:48:09:53:07:74:17:
0e:c5:35:1b:83:22:c2:dc:de:39:49:10:8b:23:ba:
41:f4:7d:8b:49:08:44:d4:e6:4f:6a:11:2c:6a:35:
86:6e:45:96:30:d7:d8:2c:53:b4:10:03:16:2e:bd:
0d:2d:2e:6f:68:21:ae:5b:6d:a1:06:93:eb:db:a6:
5b:ff:33:ad:f5:41:98:bb:84:6b:92:28:23:df:41:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:48:02:E8:C1:AF:D1:E6:FF:77:4B:CE:18:EF:35:1A:2E:5C:4B
X509v3 Authority Key Identifier:
keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a7:da:0d:7a:aa:68:80:ea:85:53:3e:55:7d:d1:f3:22:55:
37:d2:6e:95:27:d4:7e:48:3d:52:f5:e8:e1:67:29:7e:39:9e:
bc:03:68:65:00:9d:01:05:d0:4b:f2:70:05:0b:9f:42:d0:6d:
73:67:f0:e2:c8:39:4b:b6:49:00:13:69:2d:e5:a7:c7:b0:57:
6f:e5:45:a1:e6:3a:ba:47:95:36:71:cf:d4:6b:80:12:e0:4a:
c6:66:e1:92:47:da:43:4b:3e:6a:ec:61:e5:1c:45:d0:ba:32:
0b:c8:6b:64:3b:a2:d3:87:f5:7a:53:94:4c:77:a6:39:3a:71:
f3:7c:f0:c9:98:c7:34:93:f8:ac:9b:3e:f2:b9:ec:80:a1:bc:
57:df:ca:05:fb:cf:4b:af:9f:63:74:0f:fb:69:e7:d2:dd:4b:
75:85:54:e5:92:4f:a8:d4:76:5f:2c:18:42:f7:1e:81:2e:c9:
2a:03:68:b1:d6:9c:dc:87:67:99:84:4e:f0:78:94:dc:68:08:
5e:ea:d5:c3:45:08:8a:1b:c6:12:24:3c:7f:f3:f2:5f:0b:c9:
05:2a:b2:9d:ff:06:54:4b:84:60:fa:b3:d6:f9:e8:cc:88:62:
f7:6a:d4:66:98:2e:93:88:13:28:af:e4:1e:ab:7b:a4:5a:79:
6a:cf:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:58:27 2026 by rpki-client