$ rpki-client -vvf rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft File: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft (raw, json) Hash identifier: xaGmz/MDlO+RHDYUNvNBdEpmQ8mQKkhEQZQra7TrQ9E= Subject key identifier: 15:A5:0F:09:65:32:AE:80:92:04:61:6F:0A:F9:F0:43:4E:24:6D:39 Authority key identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D Certificate issuer: /CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Certificate serial: 36791D7800641F4B8871E7EFC064D6D8D6C6C517 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:13:55 +0000 Manifest this update: Tue 02 Jun 2026 23:08:55 +0000 Manifest next update: Thu 04 Jun 2026 02:36:55 +0000 Files and hashes: 1: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: fh+5nuvp9S/ilgcOVbVeGaQX4NU2xadlTipLtzuaNpA=) 2: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl (hash: Gojsi5H0cWvC5uCOM2OvIeXfAmwmofbJjHmESePK5I8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:79:1d:78:00:64:1f:4b:88:71:e7:ef:c0:64:d6:d8:d6:c6:c5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Validity Not Before: Jun 2 23:08:55 2026 GMT Not After : Jun 4 02:36:55 2026 GMT Subject: CN=15A50F096532AE809204616F0AF9F0434E246D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:82:77:0b:a2:4f:fd:42:7b:cc:25:90:09:64: 68:b4:62:f0:e0:2f:08:31:a6:b9:10:2c:8a:6e:aa: 9b:79:55:d7:23:56:30:ef:6e:cc:59:cc:33:84:6e: 53:14:6f:35:bb:9b:c6:ce:5d:30:ab:b4:a6:a1:47: 75:88:28:ae:40:d7:7a:f2:71:79:24:62:92:f8:66: 0f:33:aa:b9:97:a1:ff:ea:03:4f:f6:76:31:0b:53: 2b:c7:8f:38:b1:51:9d:0e:a9:75:c3:ab:08:6c:41: 7a:fd:bc:8c:97:08:f9:d7:d1:30:7d:96:af:20:8b: 8e:ae:d6:06:9d:d2:76:d2:15:86:ae:c6:fa:c2:39: 0e:17:83:f3:8c:b3:ec:49:35:b8:55:a4:6c:01:a7: f0:83:16:ac:36:22:c9:22:1a:11:56:04:c4:f9:91: 07:fc:56:60:80:da:a0:5c:9e:d8:a9:75:51:83:e3: 44:53:00:69:49:1b:f0:d5:64:45:ef:24:0b:ec:17: 86:fb:15:41:12:36:13:02:3c:9c:5f:c6:4a:dd:8b: bb:28:e1:3a:7a:14:56:86:ea:7c:6a:57:1a:c5:56: 73:0f:35:15:a4:e4:dd:98:1c:35:58:9f:90:c0:af: 34:4f:73:87:63:22:3b:9e:14:d2:04:2a:5c:36:3c: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A5:0F:09:65:32:AE:80:92:04:61:6F:0A:F9:F0:43:4E:24:6D:39 X509v3 Authority Key Identifier: keyid:19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3c:b8:4d:fd:23:1e:55:74:af:da:ee:78:d6:1e:46:5a:62: 61:b5:04:c7:6f:7e:0e:b9:9a:7f:e3:00:8c:e6:59:3c:d5:45: b3:dd:be:db:89:b1:e6:41:c4:cc:cf:61:cd:88:17:da:f6:b0: bc:fc:04:e9:e8:77:26:73:87:c2:56:66:4d:d2:91:84:6d:62: 4a:22:af:31:25:2d:12:35:d4:f7:2e:87:13:e4:28:9e:e0:c2: 94:9d:23:4a:5c:28:ac:fa:f9:b7:08:13:d9:e0:c8:97:bc:90: c9:09:e2:ad:dc:bc:9a:f5:ac:9a:03:e6:6c:8e:1b:09:3f:f5: a6:96:5c:8d:ad:86:93:c8:b2:a3:0a:cc:75:d9:4c:a1:39:6c: 3d:26:6b:ac:8a:3e:a0:80:b8:66:e0:e6:97:91:48:38:8e:80: 6f:f0:f2:16:89:4b:b2:1d:88:a2:b6:bb:88:dc:bd:f4:fc:8e: 78:72:d9:e8:f2:3a:3e:f6:9b:2d:54:8b:3a:b1:40:66:d7:68: db:9c:90:a0:bf:6c:82:65:7b:30:27:c6:89:8c:ef:b5:22:5f: 75:3b:cf:e6:cc:d2:19:b0:ea:74:18:82:f0:f9:06:49:6e:35: 5f:4f:25:d2:e7:c2:bc:f1:4f:68:27:12:ce:c6:aa:53:76:5b: 15:9d:24:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnkdeABkH0uIcefvwGTW2NbGxRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5RjRE MUFFNTA4RDAeFw0yNjA2MDIyMzA4NTVaFw0yNjA2MDQwMjM2NTVaMDMxMTAvBgNV BAMTKDE1QTUwRjA5NjUzMkFFODA5MjA0NjE2RjBBRjlGMDQzNEUyNDZEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggncLok/9QnvMJZAJZGi0YvDg LwgxprkQLIpuqpt5VdcjVjDvbsxZzDOEblMUbzW7m8bOXTCrtKahR3WIKK5A13ry cXkkYpL4Zg8zqrmXof/qA0/2djELUyvHjzixUZ0OqXXDqwhsQXr9vIyXCPnX0TB9 lq8gi46u1gad0nbSFYauxvrCOQ4Xg/OMs+xJNbhVpGwBp/CDFqw2IskiGhFWBMT5 kQf8VmCA2qBcntipdVGD40RTAGlJG/DVZEXvJAvsF4b7FUESNhMCPJxfxkrdi7so 4Tp6FFaG6nxqVxrFVnMPNRWk5N2YHDVYn5DArzRPc4djIjueFNIEKlw2PCRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFaUPCWUyroCSBGFvCvnwQ04kbTkwHwYDVR0j BBgwFoAUGZm7mN0yhtkuhNfCBsdJ9NGuUI0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDY4YzdhMzQtYmEzMS00ZDI5LTgzODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThE RDMyODZEOTJFODREN0MyMDZDNzQ5RjREMUFFNTA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTk5QkI5OEREMzI4NkQ5MkU4NEQ3QzIwNkM3NDlGNEQxQUU1 MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvMTk5OUJCOThERDMyODZEOTJFODREN0MyMDZDNzQ5 RjREMUFFNTA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEc8uE39Ix5VdK/a7njWHkZaYmG1BMdvfg65 mn/jAIzmWTzVRbPdvtuJseZBxMzPYc2IF9r2sLz8BOnodyZzh8JWZk3SkYRtYkoi rzElLRI11PcuhxPkKJ7gwpSdI0pcKKz6+bcIE9ngyJe8kMkJ4q3cvJr1rJoD5myO Gwk/9aaWXI2thpPIsqMKzHXZTKE5bD0ma6yKPqCAuGbg5peRSDiOgG/w8haJS7Id iKK2u4jcvfT8jnhy2ejyOj72my1UizqxQGbXaNuckKC/bIJlezAnxomM77UiX3U7 z+bM0hmw6nQYgvD5BkluNV9PJdLnwrzxT2gnEs7GqlN2WxWdJBw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:27 2026 by rpki-client