$ rpki-client -vvf rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft File: 99C1A17781B55BFD6418159CE683ACEFEFF42976.mft (raw, json) Hash identifier: b0QYtWOj3iLSJ1VKsqyPa2BWnKiQOq2e6126rjRrPJc= Subject key identifier: 49:93:89:96:C4:F1:4C:53:60:CE:EF:C4:18:63:AD:54:E0:0B:B7:EA Authority key identifier: 99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 Certificate issuer: /CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Certificate serial: 5E4D5839E0203BA68E276A0517C0E3EE270D6163 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:17:55 +0000 Manifest this update: Fri 19 Jun 2026 22:12:55 +0000 Manifest next update: Sat 20 Jun 2026 23:43:55 +0000 Files and hashes: 1: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: jDm3YL8LmYdXFmywG3aQllmAgON/4+BpPxjQxeXq58Y=) 2: 99C1A17781B55BFD6418159CE683ACEFEFF42976.crl (hash: U8rGdXBeg9wJ6TyylvfMbOKvl/jmojXGJS3tQ3s97VQ=) 3: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: MEpg6TQLHOe6wNvKYskGTniS7fA9et24LWdfA9YCFzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4d:58:39:e0:20:3b:a6:8e:27:6a:05:17:c0:e3:ee:27:0d:61:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Validity Not Before: Jun 19 22:12:55 2026 GMT Not After : Jun 20 23:43:55 2026 GMT Subject: CN=49938996C4F14C5360CEEFC41863AD54E00BB7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:dd:46:30:a4:e0:27:98:b5:3b:2d:f6:fe: 6d:42:17:75:29:c5:dd:1a:df:a4:23:90:31:4f:b7: 5b:cb:40:78:2e:ac:1d:d2:76:69:10:51:f8:1a:70: 62:20:13:87:f6:e8:03:02:91:dc:18:2e:58:fc:c4: 35:50:7f:28:e3:0d:3d:65:e7:cd:bb:60:4b:28:1c: 88:1e:b6:cb:f0:ce:b2:4e:7a:1b:36:bc:17:4a:4e: 29:3c:e1:d6:f1:02:3e:4a:c8:62:89:29:7a:d4:67: b6:db:ff:ef:b5:a1:e8:06:18:79:4d:7e:b3:30:28: f0:d4:83:94:85:33:ad:bb:20:9d:e9:59:54:89:80: b7:93:03:f2:82:1a:70:15:70:f3:d1:d0:24:4e:be: 30:8c:aa:20:59:b8:ec:0d:0f:0f:f8:ff:d4:5f:ae: 1d:03:e4:90:73:92:aa:c5:6a:c1:01:1d:6d:3a:73: bb:60:b6:c4:95:5c:ea:73:9d:cc:0f:75:90:af:73: df:68:2b:cf:27:62:dd:37:c5:39:f8:75:79:05:5a: c1:a1:8c:41:9a:00:f9:1b:f4:15:25:3a:b6:9e:57: 7e:2e:58:07:31:78:f7:34:78:60:83:3c:99:ce:5d: aa:d6:3c:f2:91:c5:80:5d:2e:f9:91:be:37:52:c4: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:93:89:96:C4:F1:4C:53:60:CE:EF:C4:18:63:AD:54:E0:0B:B7:EA X509v3 Authority Key Identifier: keyid:99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a6:c5:e7:7a:8c:b2:f2:06:65:cf:7d:8c:a1:1e:3b:35:b1: 82:a9:29:3f:30:98:c5:ae:36:70:7f:46:2a:71:bf:3d:eb:9b: 45:cf:2c:bd:3c:eb:77:43:76:70:ac:fe:13:3c:23:c6:5d:aa: 04:1a:68:76:68:d8:e7:07:ae:6c:11:8c:1e:6c:e2:a2:1e:c4: 78:4e:f8:00:f7:90:43:01:9b:03:56:23:ef:bf:56:84:7d:e8: 7a:1c:f2:5b:54:cf:24:dc:fc:86:49:3c:24:7a:0d:06:00:54: 1a:0a:21:68:59:06:24:29:e7:b4:25:0b:2e:aa:c3:8a:09:5e: 16:fa:e0:72:56:e7:47:47:26:e0:71:20:b3:0e:61:59:6a:d5: 6d:fb:68:04:48:f5:ad:58:38:f8:73:52:be:12:01:82:71:0b: 53:df:7b:c2:5a:2b:29:3d:0b:42:d8:8f:d9:e0:61:55:f7:73: 71:12:90:9c:75:ab:fb:26:3c:5a:8e:26:bb:8e:b0:a5:8d:6e: 57:85:3f:84:7d:d3:33:cb:c4:9e:db:da:eb:7f:d7:93:e8:c4: 55:23:54:ce:08:4f:7a:8c:46:3e:e7:ed:9d:c1:45:8e:e8:9e: 08:9d:18:01:2e:29:6a:67:e8:72:7a:2a:67:d2:bb:55:2c:a2: 33:e7:de:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXk1YOeAgO6aOJ2oFF8Dj7icNYWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZF RkY0Mjk3NjAeFw0yNjA2MTkyMjEyNTVaFw0yNjA2MjAyMzQzNTVaMDMxMTAvBgNV BAMTKDQ5OTM4OTk2QzRGMTRDNTM2MENFRUZDNDE4NjNBRDU0RTAwQkI3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzN1GMKTgJ5i1Oy32/m1CF3Up xd0a36QjkDFPt1vLQHgurB3SdmkQUfgacGIgE4f26AMCkdwYLlj8xDVQfyjjDT1l 5827YEsoHIgetsvwzrJOehs2vBdKTik84dbxAj5KyGKJKXrUZ7bb/++1oegGGHlN frMwKPDUg5SFM627IJ3pWVSJgLeTA/KCGnAVcPPR0CROvjCMqiBZuOwNDw/4/9Rf rh0D5JBzkqrFasEBHW06c7tgtsSVXOpzncwPdZCvc99oK88nYt03xTn4dXkFWsGh jEGaAPkb9BUlOraeV34uWAcxePc0eGCDPJnOXarWPPKRxYBdLvmRvjdSxOMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSZOJlsTxTFNgzu/EGGOtVOALt+owHwYDVR0j BBgwFoAUmcGhd4G1W/1kGBWc5oOs7+/0KXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Q3YTcxYmMtZjkxMC00YjhjLTljZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4 MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZFRkY0Mjk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxQTE3NzgxQjU1QkZENjQxODE1OUNFNjgzQUNFRkVGRjQy OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FD RUZFRkY0Mjk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAimxed6jLLyBmXPfYyhHjs1sYKpKT8wmMWu NnB/Ripxvz3rm0XPLL0863dDdnCs/hM8I8ZdqgQaaHZo2OcHrmwRjB5s4qIexHhO +AD3kEMBmwNWI++/VoR96Hoc8ltUzyTc/IZJPCR6DQYAVBoKIWhZBiQp57QlCy6q w4oJXhb64HJW50dHJuBxILMOYVlq1W37aARI9a1YOPhzUr4SAYJxC1Pfe8JaKyk9 C0LYj9ngYVX3c3ESkJx1q/smPFqOJruOsKWNbleFP4R90zPLxJ7b2ut/15PoxFUj VM4IT3qMRj7n7Z3BRY7ongidGAEuKWpn6HJ6KmfSu1UsojPn3t4= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:17 2026 by rpki-client