$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft File: 99C1A17781B55BFD6418159CE683ACEFEFF42976.mft (raw, json) Hash identifier: T1DusKHCcbSzUOTAGD3Hy82FvoZPheyM2KYjYoW1apc= Subject key identifier: 22:30:DA:5A:54:D3:CC:5E:90:0D:4B:97:EA:E8:66:FA:8A:28:59:99 Authority key identifier: 99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 Certificate issuer: /CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Certificate serial: 37588F26BDE33C2FD5EDF05B67426A64046E4754 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft Manifest number: EC Signing time: Mon 26 Oct 2026 04:27:30 +0000 Manifest this update: Mon 26 Oct 2026 04:22:30 +0000 Manifest next update: Tue 27 Oct 2026 08:13:30 +0000 Files and hashes: 1: 99C1A17781B55BFD6418159CE683ACEFEFF42976.crl (hash: AqN2I+XWfPDuiQrhdKsxiPIQijnrb+m1Y71LMIsN9hM=) 2: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: jDm3YL8LmYdXFmywG3aQllmAgON/4+BpPxjQxeXq58Y=) 3: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: MEpg6TQLHOe6wNvKYskGTniS7fA9et24LWdfA9YCFzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:58:8f:26:bd:e3:3c:2f:d5:ed:f0:5b:67:42:6a:64:04:6e:47:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C1A17781B55BFD6418159CE683ACEFEFF42976 Validity Not Before: Oct 26 04:22:30 2026 GMT Not After : Oct 27 08:13:30 2026 GMT Subject: CN=2230DA5A54D3CC5E900D4B97EAE866FA8A285999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:df:b8:c1:70:f5:5e:84:c0:6c:5f:f0:f5:7d: 4e:4b:20:63:0e:08:72:f9:19:2b:8b:f7:03:8d:5f: 2c:91:a8:0f:ee:4d:22:8a:33:67:a1:95:cb:d0:2d: 5e:41:2c:42:2f:87:cc:24:ba:9e:ec:32:70:59:9a: 54:5f:ff:84:53:d1:c9:27:2e:b6:50:f2:9d:84:36: 20:8c:2d:fe:0b:76:78:52:29:42:87:89:00:d1:04: 96:2a:7d:34:0b:f5:a0:ee:7b:06:65:04:44:77:bf: 3e:49:53:b7:12:c8:ae:d7:46:ca:73:be:28:29:8b: a7:56:42:17:80:d0:52:04:05:84:cb:9a:59:12:8a: b7:a0:d0:52:38:ef:d6:24:d4:15:f6:f2:0c:ad:e3: b1:f3:7f:3b:37:7e:d4:80:ab:24:8a:c0:ef:3d:ec: 2a:a8:16:81:f8:ec:ab:66:a6:b2:3d:33:49:a0:19: 87:78:4c:09:06:8c:82:be:2f:a7:68:4a:f9:43:7b: 76:22:f0:c2:c2:57:4d:5e:52:af:e0:4a:d3:df:8b: d6:e7:82:98:67:25:28:8e:e5:15:9d:9d:d2:55:0c: 3e:48:d5:d8:29:ac:1b:cf:d9:f8:35:cf:7e:75:c1: a6:e2:14:be:d6:8e:32:97:be:df:c7:1b:40:71:bf: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:30:DA:5A:54:D3:CC:5E:90:0D:4B:97:EA:E8:66:FA:8A:28:59:99 X509v3 Authority Key Identifier: keyid:99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:fe:cf:98:fd:fa:d4:ea:55:f5:ac:31:12:e1:14:53:e2:16: d1:13:1a:ab:98:fd:e2:18:29:66:7a:40:e7:37:99:30:00:d4: b3:7b:e7:d0:7f:eb:3c:4f:1c:0a:75:90:9d:19:c4:a0:14:9e: b2:af:ad:86:e8:07:aa:4f:a1:e6:ee:98:7c:87:2b:2e:09:64: 24:47:05:c7:8f:20:fb:b9:95:46:5e:b4:91:dc:d9:34:bf:94: a0:99:da:55:15:c1:ea:31:00:18:16:b9:5d:c8:ee:c3:3a:5e: 9d:80:7e:d8:ab:3d:7a:1b:75:58:5c:fb:ff:2b:10:e0:28:e9: 83:8e:79:2a:21:1f:d5:52:7b:9a:a0:dc:9c:20:86:07:84:80: ff:fd:85:e4:47:64:2a:43:d2:40:37:29:af:cb:7b:bb:58:0a: ce:16:36:48:28:23:13:33:0b:e2:f5:ef:35:20:01:13:33:6b: 10:c0:a0:63:27:a7:a6:5b:41:5a:59:50:2a:8a:f6:6a:88:bf: c9:e4:86:1d:f1:76:dd:91:31:b6:15:01:82:14:e1:08:6f:73: c8:7b:94:19:05:68:27:5c:84:c2:22:56:b1:63:ed:05:49:f2: b5:fd:8f:5c:1b:58:84:b9:f7:1d:a6:58:fc:61:37:36:59:a7: 1f:a9:a3:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1iPJr3jPC/V7fBbZ0JqZARuR1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZF RkY0Mjk3NjAeFw0yNjEwMjYwNDIyMzBaFw0yNjEwMjcwODEzMzBaMDMxMTAvBgNV BAMTKDIyMzBEQTVBNTREM0NDNUU5MDBENEI5N0VBRTg2NkZBOEEyODU5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD837jBcPVehMBsX/D1fU5LIGMO CHL5GSuL9wONXyyRqA/uTSKKM2ehlcvQLV5BLEIvh8wkup7sMnBZmlRf/4RT0ckn LrZQ8p2ENiCMLf4LdnhSKUKHiQDRBJYqfTQL9aDuewZlBER3vz5JU7cSyK7XRspz vigpi6dWQheA0FIEBYTLmlkSireg0FI479Yk1BX28gyt47Hzfzs3ftSAqySKwO89 7CqoFoH47KtmprI9M0mgGYd4TAkGjIK+L6doSvlDe3Yi8MLCV01eUq/gStPfi9bn gphnJSiO5RWdndJVDD5I1dgprBvP2fg1z351wabiFL7WjjKXvt/HG0Bxv1odAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIjDaWlTTzF6QDUuX6uhm+oooWZkwHwYDVR0j BBgwFoAUmcGhd4G1W/1kGBWc5oOs7+/0KXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Q3YTcxYmMtZjkxMC00YjhjLTljZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4 MUI1NUJGRDY0MTgxNTlDRTY4M0FDRUZFRkY0Mjk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxQTE3NzgxQjU1QkZENjQxODE1OUNFNjgzQUNFRkVGRjQy OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvOTlDMUExNzc4MUI1NUJGRDY0MTgxNTlDRTY4M0FD RUZFRkY0Mjk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD+z5j9+tTqVfWsMRLhFFPiFtETGquY/eIY KWZ6QOc3mTAA1LN759B/6zxPHAp1kJ0ZxKAUnrKvrYboB6pPoebumHyHKy4JZCRH BcePIPu5lUZetJHc2TS/lKCZ2lUVweoxABgWuV3I7sM6Xp2AftirPXobdVhc+/8r EOAo6YOOeSohH9VSe5qg3JwghgeEgP/9heRHZCpD0kA3Ka/Le7tYCs4WNkgoIxMz C+L17zUgARMzaxDAoGMnp6ZbQVpZUCqK9mqIv8nkhh3xdt2RMbYVAYIU4Qhvc8h7 lBkFaCdchMIiVrFj7QVJ8rX9j1wbWIS59x2mWPxhNzZZpx+po+g= -----END CERTIFICATE-----Generated at Mon Oct 26 07:33:39 2026 by rpki-client