$ rpki-client -vvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft File: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft (raw, json) Hash identifier: GPIHdgUdp16284dXb0SkSllcTfHzlqnVmYxUwBAahuI= Subject key identifier: 1E:99:8A:AE:0A:4F:C3:1D:0C:70:97:EB:56:1D:19:1C:3C:62:1C:CA Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Certificate serial: 086626C90033D1F84B787CF79B3CC5AA95B02135 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft Manifest number: 72 Signing time: Sun 26 Jul 2026 23:32:19 +0000 Manifest this update: Sun 26 Jul 2026 23:27:19 +0000 Manifest next update: Tue 28 Jul 2026 00:44:19 +0000 Files and hashes: 1: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po=) 2: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl (hash: P2dKIdn8bgp5mfAkWTHnc2L28u+8VpFCfKW1p7g8BHg=) 3: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:66:26:c9:00:33:d1:f8:4b:78:7c:f7:9b:3c:c5:aa:95:b0:21:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Validity Not Before: Jul 26 23:27:19 2026 GMT Not After : Jul 28 00:44:19 2026 GMT Subject: CN=1E998AAE0A4FC31D0C7097EB561D191C3C621CCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:4a:91:b4:db:8c:8d:40:33:90:a1:44:99: 97:f1:75:4a:b5:49:5d:9c:fa:ba:64:34:77:44:54: 48:c7:a5:41:9b:f7:e1:d2:d1:0e:78:22:2b:3b:66: 68:24:52:1f:74:d8:5b:a2:38:6b:99:88:3f:90:cf: d1:d0:32:b6:a8:61:09:d0:44:21:91:c4:0f:81:6f: 25:1d:b6:8d:f0:a7:ba:85:7f:99:c7:58:f6:48:28: c3:8a:f8:f3:5d:13:05:1e:e4:dd:ae:95:2c:06:b7: 0e:dc:f2:23:f5:56:a1:9a:da:47:a8:cc:c0:81:28: b1:5d:eb:9b:6d:56:61:91:44:1e:4d:86:c4:cd:b4: 8d:bb:b2:0b:3b:d4:37:1b:3e:a7:52:ed:ef:96:41: d6:71:08:c6:ec:53:d7:71:6c:b3:63:c7:63:19:d8: 09:a3:f3:d4:eb:53:28:c9:fc:c4:3e:bc:c8:2d:36: 44:0a:80:97:96:e4:9f:65:00:1d:1a:77:2b:65:d9: fb:0b:c5:37:47:47:cb:b5:e2:ed:23:6c:87:77:ba: 79:41:b0:14:9b:d6:af:1d:2e:d2:45:5c:80:c9:51: 2a:d7:ed:1c:62:81:f3:ef:a2:7f:5f:7e:a3:02:bb: 56:98:fa:a0:0c:79:11:ad:26:1e:c7:01:9d:fd:62: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:99:8A:AE:0A:4F:C3:1D:0C:70:97:EB:56:1D:19:1C:3C:62:1C:CA X509v3 Authority Key Identifier: keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a9:f9:65:c4:72:97:71:3a:38:4b:5e:2f:21:89:0c:ce:ab: 33:4c:76:1e:52:ae:44:b4:98:4b:02:5d:ea:c1:48:7d:1c:56: 00:0a:49:f5:00:ee:b7:c4:c0:6c:2c:68:04:3e:3c:c1:3b:97: 9e:fc:15:21:25:d1:0b:d3:9c:11:a5:5d:2e:d7:9a:63:48:81: 78:7a:5d:02:cc:c7:7b:38:af:b4:ae:67:13:9d:3d:25:a9:ad: 29:13:02:26:48:9e:2f:bf:01:9f:27:44:b6:78:77:50:49:89: e8:53:d5:8b:72:c2:c2:90:9d:f6:e3:6c:12:ec:9a:41:40:5c: 4e:93:6b:b9:1a:ff:58:32:ed:0d:d3:e9:8b:67:c5:59:12:1b: 05:32:1a:eb:e8:35:9d:e2:1e:58:cb:1e:a6:b5:3f:17:f9:0a: 99:a2:be:c1:5a:60:ab:7e:df:68:e2:ee:e8:b3:e1:73:2b:7a: 55:14:54:57:d7:f9:c0:2f:fc:0d:68:7b:80:8b:ca:c1:a7:10: b9:c9:f7:b0:a8:90:39:48:10:51:02:96:4d:a7:7e:43:bc:1e: c8:22:7f:fd:04:40:08:ff:53:c7:d0:f2:43:bc:ac:91:58:ac: 71:b7:51:34:69:0d:fc:38:c2:cc:39:e6:3e:4c:cb:ee:84:c7: 9f:02:c1:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGYmyQAz0fhLeHz3mzzFqpWwITUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2 MjdBRTExNDAeFw0yNjA3MjYyMzI3MTlaFw0yNjA3MjgwMDQ0MTlaMDMxMTAvBgNV BAMTKDFFOTk4QUFFMEE0RkMzMUQwQzcwOTdFQjU2MUQxOTFDM0M2MjFDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHkqRtNuMjUAzkKFEmZfxdUq1 SV2c+rpkNHdEVEjHpUGb9+HS0Q54Iis7ZmgkUh902FuiOGuZiD+Qz9HQMraoYQnQ RCGRxA+BbyUdto3wp7qFf5nHWPZIKMOK+PNdEwUe5N2ulSwGtw7c8iP1VqGa2keo zMCBKLFd65ttVmGRRB5NhsTNtI27sgs71DcbPqdS7e+WQdZxCMbsU9dxbLNjx2MZ 2Amj89TrUyjJ/MQ+vMgtNkQKgJeW5J9lAB0adytl2fsLxTdHR8u14u0jbId3unlB sBSb1q8dLtJFXIDJUSrX7RxigfPvon9ffqMCu1aY+qAMeRGtJh7HAZ39YqXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpmKrgpPwx0McJfrVh0ZHDxiHMowHwYDVR0j BBgwFoAUmcFY2NudEoZFa97++7OeUmJ64RQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVlMTQzODItZDU4Ny00ZTg2LThlN2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhE QjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2MjdBRTExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxNThEOERCOUQxMjg2NDU2QkRFRkVGQkIzOUU1MjYyN0FF MTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlF NTI2MjdBRTExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWp+WXEcpdxOjhLXi8hiQzOqzNMdh5SrkS0 mEsCXerBSH0cVgAKSfUA7rfEwGwsaAQ+PME7l578FSEl0QvTnBGlXS7XmmNIgXh6 XQLMx3s4r7SuZxOdPSWprSkTAiZIni+/AZ8nRLZ4d1BJiehT1YtywsKQnfbjbBLs mkFAXE6Ta7ka/1gy7Q3T6YtnxVkSGwUyGuvoNZ3iHljLHqa1Pxf5CpmivsFaYKt+ 32ji7uiz4XMrelUUVFfX+cAv/A1oe4CLysGnELnJ97CokDlIEFEClk2nfkO8Hsgi f/0EQAj/U8fQ8kO8rJFYrHG3UTRpDfw4wsw55j5My+6Ex58CwaI= -----END CERTIFICATE-----Generated at Mon Jul 27 17:49:15 2026 by rpki-client