$ rpki-client -vvf rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft File: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft (raw, json) Hash identifier: 8tCOwNGUX9E4kaVv974AGrDXUs/9OrDjXmIxFwvnsks= Subject key identifier: 40:E4:0C:78:DB:CC:14:40:D6:89:A9:16:6E:F8:E5:BE:C3:43:6A:56 Authority key identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D Certificate issuer: /CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Certificate serial: 756D930C2FAC61F5BC9DA5908F3B429CDB2D5F5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:11:29 +0000 Manifest this update: Mon 20 Jul 2026 16:06:29 +0000 Manifest next update: Tue 21 Jul 2026 17:51:29 +0000 Files and hashes: 1: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl (hash: aXk6bAdAbVwrkR7xudv/xuxWv0K+YueiAN7Jzl0jwRM=) 2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: fh+5nuvp9S/ilgcOVbVeGaQX4NU2xadlTipLtzuaNpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6d:93:0c:2f:ac:61:f5:bc:9d:a5:90:8f:3b:42:9c:db:2d:5f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Validity Not Before: Jul 20 16:06:29 2026 GMT Not After : Jul 21 17:51:29 2026 GMT Subject: CN=40E40C78DBCC1440D689A9166EF8E5BEC3436A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:2c:b4:24:6d:d2:11:49:29:53:b7:14:02: 52:ab:c5:e3:6f:56:e6:09:eb:39:b7:60:fa:13:ae: 62:08:7f:fb:ce:c1:a5:e2:37:52:5d:f8:ea:40:1a: 07:bd:13:be:41:88:7b:13:a0:0f:d5:45:8d:a7:13: 6c:07:72:4b:44:b2:9a:03:15:d5:24:85:8f:fa:ac: 8c:59:66:d5:64:da:a2:ef:74:2e:5e:3e:46:01:18: ba:99:44:36:e0:46:4c:72:d0:93:b4:44:e4:f3:5c: eb:72:a7:64:f9:15:ca:e9:39:05:4d:76:71:a1:61: 19:f3:c6:7f:a4:c5:91:6f:4a:6f:ac:b8:11:4f:e7: 87:9b:4e:a0:0e:f8:8e:6a:d7:a0:33:40:e9:f0:cd: bf:f4:64:33:3a:2e:1e:b7:5c:96:13:91:5a:32:b5: 00:6c:62:97:75:62:a9:d2:bf:65:80:73:7f:a0:6d: b1:72:5a:80:fb:11:9e:f5:4a:e0:b4:7c:cb:55:c5: 23:54:aa:d7:3d:a2:53:99:59:0a:35:df:bf:f0:0e: 45:5a:98:ed:91:15:0c:ce:d8:c8:b3:32:83:8d:85: 94:42:07:a1:81:ce:4f:4a:48:f2:71:f1:f5:cc:16: d5:a8:07:63:42:4c:87:13:2d:e3:c9:68:1d:9b:33: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:0C:78:DB:CC:14:40:D6:89:A9:16:6E:F8:E5:BE:C3:43:6A:56 X509v3 Authority Key Identifier: keyid:19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a9:83:05:37:5b:9b:8e:1d:0c:ab:24:0e:42:95:ee:a8:f6: 6f:bc:c3:92:39:9e:65:e8:e8:9e:58:06:cc:2c:70:96:c6:74: e8:04:2d:a5:af:0c:47:99:58:95:da:6b:48:96:49:36:e6:f2: cb:44:c2:af:0b:46:1e:c6:6b:e9:4a:1f:0a:92:a9:5a:71:ad: 1a:98:fe:27:22:f0:f4:2f:ae:6d:af:13:26:1e:3f:b0:11:0f: 59:f6:60:dd:68:9b:0f:f0:1a:6f:53:2a:49:ec:40:4a:70:23: ff:84:ed:d1:64:2f:2d:0e:b3:74:cd:17:d2:30:99:6c:0c:2b: c5:42:e7:40:1d:95:46:59:87:10:6a:52:1b:93:ab:d2:5d:74: 30:02:05:ca:6e:10:c4:53:f2:ad:ed:c3:39:5c:06:e1:6d:ff: de:ef:b7:29:9a:f2:54:18:6c:0d:2a:15:71:d7:c1:7b:76:ec: bf:43:a6:93:01:2a:62:19:5e:88:06:fe:13:4f:c2:7b:da:cc: 97:25:93:a1:3d:3c:70:6a:c0:53:dd:f8:6e:5c:0d:53:82:cf: b7:f3:cc:dd:f7:a2:2c:8e:ba:bf:f4:20:f3:38:25:63:5e:01: 2c:3b:6e:e9:f2:af:38:c9:07:20:7e:1c:1f:ef:80:95:42:be: 98:b2:c3:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdW2TDC+sYfW8naWQjztCnNstX10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5RjRE MUFFNTA4RDAeFw0yNjA3MjAxNjA2MjlaFw0yNjA3MjExNzUxMjlaMDMxMTAvBgNV BAMTKDQwRTQwQzc4REJDQzE0NDBENjg5QTkxNjZFRjhFNUJFQzM0MzZBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhCy0JG3SEUkpU7cUAlKrxeNv VuYJ6zm3YPoTrmIIf/vOwaXiN1Jd+OpAGge9E75BiHsToA/VRY2nE2wHcktEspoD FdUkhY/6rIxZZtVk2qLvdC5ePkYBGLqZRDbgRkxy0JO0ROTzXOtyp2T5FcrpOQVN dnGhYRnzxn+kxZFvSm+suBFP54ebTqAO+I5q16AzQOnwzb/0ZDM6Lh63XJYTkVoy tQBsYpd1YqnSv2WAc3+gbbFyWoD7EZ71SuC0fMtVxSNUqtc9olOZWQo137/wDkVa mO2RFQzO2MizMoONhZRCB6GBzk9KSPJx8fXMFtWoB2NCTIcTLePJaB2bM0SlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQOQMeNvMFEDWiakWbvjlvsNDalYwHwYDVR0j BBgwFoAUGZm7mN0yhtkuhNfCBsdJ9NGuUI0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY4YzdhMzQtYmEzMS00ZDI5LTgzODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThE RDMyODZEOTJFODREN0MyMDZDNzQ5RjREMUFFNTA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTk5QkI5OEREMzI4NkQ5MkU4NEQ3QzIwNkM3NDlGNEQxQUU1 MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5 RjREMUFFNTA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOpgwU3W5uOHQyrJA5Cle6o9m+8w5I5nmXo 6J5YBswscJbGdOgELaWvDEeZWJXaa0iWSTbm8stEwq8LRh7Ga+lKHwqSqVpxrRqY /ici8PQvrm2vEyYeP7ARD1n2YN1omw/wGm9TKknsQEpwI/+E7dFkLy0Os3TNF9Iw mWwMK8VC50AdlUZZhxBqUhuTq9JddDACBcpuEMRT8q3twzlcBuFt/97vtyma8lQY bA0qFXHXwXt27L9DppMBKmIZXogG/hNPwnvazJclk6E9PHBqwFPd+G5cDVOCz7fz zN33oiyOur/0IPM4JWNeASw7bunyrzjJByB+HB/vgJVCvpiyw0A= -----END CERTIFICATE-----Generated at Tue Jul 21 06:37:13 2026 by rpki-client