$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft File: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft (raw, json) Hash identifier: yQD8ibGb8v+SQkaw4zfS9axfnS9nf8u+a4PX88rXFHA= Subject key identifier: F0:C4:E6:4E:3D:3F:94:33:24:A1:C3:6E:CC:04:A3:60:B5:6C:B9:30 Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Certificate serial: 5C54E113E48A192D39A63CA30C7FB91F6EEEB7D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft Manifest number: AF Signing time: Fri 11 Sep 2026 05:07:25 +0000 Manifest this update: Fri 11 Sep 2026 05:02:25 +0000 Manifest next update: Sat 12 Sep 2026 05:27:25 +0000 Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po=) 3: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl (hash: zMpuxwKGFQktxTk06XVl3umIUZR/oYtJqsayLoVVofY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 05:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:54:e1:13:e4:8a:19:2d:39:a6:3c:a3:0c:7f:b9:1f:6e:ee:b7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Validity Not Before: Sep 11 05:02:25 2026 GMT Not After : Sep 12 05:27:25 2026 GMT Subject: CN=F0C4E64E3D3F943324A1C36ECC04A360B56CB930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:d6:dc:37:4c:bc:7f:21:3d:df:9d:fd:ee: b3:e3:10:5b:f6:77:61:7d:77:38:c6:4e:8b:96:78: b5:ec:36:6a:f2:00:09:c4:2a:da:95:79:43:f0:33: 77:4e:2c:8a:75:8e:38:73:84:a7:36:ac:36:55:32: 52:6c:dd:50:cc:67:98:c6:ea:46:9d:af:1b:8a:0f: 35:3a:ff:c9:7b:00:b9:b8:eb:e3:44:62:f3:7f:d9: f2:c7:95:c2:74:a2:fc:92:2f:ee:7d:cc:2b:84:c2: 10:ca:e6:24:02:73:fe:d3:21:71:d3:b7:42:cd:c5: 57:cb:8e:85:64:2f:1d:08:ae:6e:bd:b5:40:3c:01: 3c:8f:08:20:fb:86:f7:f4:5f:f4:37:f2:c4:e8:57: dc:ad:0e:d5:c3:44:64:e2:85:c2:87:fe:01:a4:3e: b1:1c:91:67:9d:98:52:7c:f8:c9:55:07:a4:9e:0e: 8e:22:32:34:8c:65:85:99:ba:db:6d:e5:b5:f0:56: cf:06:90:f5:64:79:a4:dd:17:b0:e1:86:bc:5e:73: f1:58:e6:d2:bc:d2:8b:e5:d8:b0:07:ae:dc:f7:77: 04:ae:fc:47:37:3b:fb:9e:a7:76:9e:7e:2b:d9:33: a3:39:65:8d:6d:04:4e:5b:f4:0a:b4:4e:38:69:e2: 2b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:E6:4E:3D:3F:94:33:24:A1:C3:6E:CC:04:A3:60:B5:6C:B9:30 X509v3 Authority Key Identifier: keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2c:cd:a6:34:8a:27:80:50:f5:8a:37:58:23:45:77:7e:e3: 2f:4f:93:ec:ee:9c:64:32:f3:67:ad:39:df:36:9f:f3:41:86: 15:fa:93:61:fe:fc:d8:20:b1:5a:34:6d:37:d1:09:34:4f:cc: a0:56:10:3c:3d:16:cd:c1:e7:8b:06:de:92:11:94:2c:73:40: bf:04:f0:59:03:0b:ab:ba:9b:3b:19:0e:9c:c4:d3:9c:e9:9c: ad:10:57:ad:b2:6c:51:30:60:22:54:df:f9:9c:df:a7:fa:97: 81:99:1c:5b:8a:73:2b:2b:27:02:35:ed:18:36:79:b6:0d:85: c9:fe:e6:01:6a:85:2c:b5:ec:32:f3:f7:e4:45:0e:0a:73:e9: 57:81:e7:4c:e3:ce:6b:3a:16:b5:3d:f3:71:d1:c5:57:a2:df: 13:fc:00:54:f3:76:37:03:00:25:17:85:05:ce:f7:0c:03:a3: 95:ef:b2:95:51:8f:f1:b6:47:b1:cf:cd:d0:6a:05:bc:e7:7b: e5:49:ca:c8:c5:4a:1a:86:f1:0e:18:c7:d5:59:44:20:cd:47: 78:fe:df:89:24:c5:d3:dc:f2:a1:c1:0d:02:ea:cf:27:d1:a7: 53:83:e7:70:4f:2a:92:cd:42:1b:64:54:06:c8:4f:e6:49:ca: d4:0b:46:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFThE+SKGS05pjyjDH+5H27ut9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2 MjdBRTExNDAeFw0yNjA5MTEwNTAyMjVaFw0yNjA5MTIwNTI3MjVaMDMxMTAvBgNV BAMTKEYwQzRFNjRFM0QzRjk0MzMyNEExQzM2RUNDMDRBMzYwQjU2Q0I5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuatbcN0y8fyE935397rPjEFv2 d2F9dzjGTouWeLXsNmryAAnEKtqVeUPwM3dOLIp1jjhzhKc2rDZVMlJs3VDMZ5jG 6kadrxuKDzU6/8l7ALm46+NEYvN/2fLHlcJ0ovySL+59zCuEwhDK5iQCc/7TIXHT t0LNxVfLjoVkLx0Irm69tUA8ATyPCCD7hvf0X/Q38sToV9ytDtXDRGTihcKH/gGk PrEckWedmFJ8+MlVB6SeDo4iMjSMZYWZuttt5bXwVs8GkPVkeaTdF7Dhhrxec/FY 5tK80ovl2LAHrtz3dwSu/Ec3O/uep3aefivZM6M5ZY1tBE5b9Aq0Tjhp4is7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8MTmTj0/lDMkocNuzASjYLVsuTAwHwYDVR0j BBgwFoAUmcFY2NudEoZFa97++7OeUmJ64RQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVlMTQzODItZDU4Ny00ZTg2LThlN2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhE QjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2MjdBRTExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxNThEOERCOUQxMjg2NDU2QkRFRkVGQkIzOUU1MjYyN0FF MTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlF NTI2MjdBRTExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkszaY0iieAUPWKN1gjRXd+4y9Pk+zunGQy 82etOd82n/NBhhX6k2H+/NggsVo0bTfRCTRPzKBWEDw9Fs3B54sG3pIRlCxzQL8E 8FkDC6u6mzsZDpzE05zpnK0QV62ybFEwYCJU3/mc36f6l4GZHFuKcysrJwI17Rg2 ebYNhcn+5gFqhSy17DLz9+RFDgpz6VeB50zjzms6FrU983HRxVei3xP8AFTzdjcD ACUXhQXO9wwDo5XvspVRj/G2R7HPzdBqBbzne+VJysjFShqG8Q4Yx9VZRCDNR3j+ 34kkxdPc8qHBDQLqzyfRp1OD53BPKpLNQhtkVAbIT+ZJytQLRlI= -----END CERTIFICATE-----Generated at Fri Sep 11 09:03:44 2026 by rpki-client