$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft File: 99F644C407D1C8C133A923CC84619FC228E767AC.mft (raw, json) Hash identifier: Xf+PCYh4poaeUEuzipGv4IXGhOqlL0qB7J97gds4lfE= Subject key identifier: 92:FA:B5:9C:A1:15:30:49:A5:0A:4D:D0:F3:EE:4B:72:AF:14:6B:65 Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 594EBEC8EC8A7A11AFA307B8761E6B07CEF63222 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft Manifest number: 02E9 Signing time: Tue 28 Apr 2026 10:42:17 +0000 Manifest this update: Tue 28 Apr 2026 10:37:17 +0000 Manifest next update: Fri 01 May 2026 21:31:17 +0000 Files and hashes: 1: 99F644C407D1C8C133A923CC84619FC228E767AC.crl (hash: CV3QFf8+f08xe/nId475Xqqpi3evMrtI46w/Jpczo30=) 2: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: 4BHdCYqlJBbs7oaN7Hdy9PDCOH2HYrL7cOj61277Yu8=) 3: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: GwLSbTnQeuh0a53ovkV2iGQ8IVBTUAVLDO4WWZFmNyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 May 2026 21:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4e:be:c8:ec:8a:7a:11:af:a3:07:b8:76:1e:6b:07:ce:f6:32:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: Apr 28 10:37:17 2026 GMT Not After : May 1 21:31:17 2026 GMT Subject: CN=92FAB59CA1153049A50A4DD0F3EE4B72AF146B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f8:d5:76:13:27:03:de:8b:20:88:7c:e2:d6: 00:15:ef:4f:f5:a2:ba:a1:79:97:f6:bc:7a:e9:08: 4d:4e:e6:75:e7:7b:70:f3:68:37:55:a3:7a:76:7a: 06:c8:f2:ed:27:11:52:a7:b3:16:a2:34:34:78:e9: 71:85:fe:ed:36:16:d4:4b:cd:2c:43:a9:93:6f:e0: 27:47:88:1a:8d:c2:31:b3:61:7c:9c:4d:cd:de:e5: 4e:9d:f3:28:57:d2:7e:93:6b:52:37:71:91:a4:57: 8e:83:9c:a2:2a:9f:cc:52:42:81:7b:7b:93:4f:27: 87:ae:f6:d2:35:eb:95:2c:b4:e1:4c:bd:b2:b4:5b: 39:a4:6d:e9:c7:f6:19:f0:bd:19:99:a8:d9:01:bf: a9:ea:b3:5f:61:21:94:de:27:06:f8:52:ae:01:e1: 64:f9:4b:2a:20:37:36:39:41:c1:80:2b:55:ea:65: dd:a4:6d:27:1e:31:20:e1:57:3d:9e:88:d2:97:9f: 18:e9:cd:8b:4d:f2:b3:8f:72:9b:2a:65:8e:77:b1: 13:b1:0d:0e:cd:b1:cc:32:59:05:e6:2b:5c:64:18: 68:b9:07:7b:9d:3d:dd:e2:98:96:89:c5:e9:65:60: ef:e5:c9:d2:ab:62:06:6d:f8:24:f1:03:f9:5f:c8: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FA:B5:9C:A1:15:30:49:A5:0A:4D:D0:F3:EE:4B:72:AF:14:6B:65 X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ae:79:b4:bb:ba:6d:38:0d:62:9c:e9:35:62:9c:1f:f4:20: cb:dd:86:45:bd:af:25:85:73:13:06:d3:65:53:c0:50:25:83: 6d:43:19:e9:fb:c6:02:07:0c:87:21:f3:c7:bc:60:62:c5:75: 61:93:4c:95:77:bb:39:46:2e:d1:0d:cc:1b:a5:2d:c9:32:b8: 94:93:10:cf:47:c1:d9:97:21:7e:80:c0:ae:e5:ec:fd:f4:c1: f8:3f:76:bd:11:cb:2e:9a:ef:04:59:4e:f9:74:ee:5d:b0:c5: 1a:37:72:7b:e2:1f:c7:06:70:51:4e:3b:f5:37:b4:c3:02:90: b8:dd:02:03:ce:ad:d6:8b:bf:03:42:86:dd:80:da:a4:0b:bd: f2:a5:2a:19:32:2b:9a:83:24:2f:4a:35:da:ad:1c:03:6f:c7: 23:c1:f7:56:7f:f1:bb:20:b6:2e:48:14:5c:0d:b8:e2:3b:ed: b6:a1:d7:65:a3:77:c2:56:61:37:4d:70:6a:6c:ea:94:11:a6: ab:a0:72:69:24:6c:f6:ef:80:77:f0:40:d3:71:c8:ff:17:0c: f8:b8:5c:04:d2:e0:db:1e:ef:0a:2c:37:f2:28:4e:9a:de:10: 42:91:fc:ff:d9:fa:30:09:ac:12:44:de:8a:61:43:5e:76:01: be:0c:2f:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWU6+yOyKehGvowe4dh5rB872MiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNjA0MjgxMDM3MTdaFw0yNjA1MDEyMTMxMTdaMDMxMTAvBgNV BAMTKDkyRkFCNTlDQTExNTMwNDlBNTBBNEREMEYzRUU0QjcyQUYxNDZCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+NV2EycD3osgiHzi1gAV70/1 orqheZf2vHrpCE1O5nXne3DzaDdVo3p2egbI8u0nEVKnsxaiNDR46XGF/u02FtRL zSxDqZNv4CdHiBqNwjGzYXycTc3e5U6d8yhX0n6Ta1I3cZGkV46DnKIqn8xSQoF7 e5NPJ4eu9tI165UstOFMvbK0WzmkbenH9hnwvRmZqNkBv6nqs19hIZTeJwb4Uq4B 4WT5SyogNzY5QcGAK1XqZd2kbSceMSDhVz2eiNKXnxjpzYtN8rOPcpsqZY53sROx DQ7NscwyWQXmK1xkGGi5B3udPd3imJaJxellYO/lydKrYgZt+CTxA/lfyNStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkvq1nKEVMEmlCk3Q8+5Lcq8Ua2UwHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlG QzIyOEU3NjdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOuebS7um04DWKc6TVinB/0IMvdhkW9ryWF cxMG02VTwFAlg21DGen7xgIHDIch88e8YGLFdWGTTJV3uzlGLtENzBulLckyuJST EM9HwdmXIX6AwK7l7P30wfg/dr0Ryy6a7wRZTvl07l2wxRo3cnviH8cGcFFOO/U3 tMMCkLjdAgPOrdaLvwNCht2A2qQLvfKlKhkyK5qDJC9KNdqtHANvxyPB91Z/8bsg ti5IFFwNuOI77bah12Wjd8JWYTdNcGps6pQRpqugcmkkbPbvgHfwQNNxyP8XDPi4 XATS4Nse7wosN/IoTpreEEKR/P/Z+jAJrBJE3ophQ152Ab4ML5w= -----END CERTIFICATE-----Generated at Wed Apr 29 00:04:41 2026 by rpki-client