$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft File: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft (raw, json) Hash identifier: SQTUFv/2upQOqprmcDMLRzCnTQct7kMSFB+wUP7eR+Q= Subject key identifier: 14:04:EE:BB:47:62:53:F3:F0:72:76:1E:A3:77:52:16:C0:72:00:C2 Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Certificate serial: 45BA3BE237F732589C6B57EABB3D0BA6411DAA2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft Manifest number: F2 Signing time: Fri 30 Oct 2026 17:58:01 +0000 Manifest this update: Fri 30 Oct 2026 17:53:01 +0000 Manifest next update: Sat 31 Oct 2026 21:18:01 +0000 Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4=) 2: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl (hash: yqCrgT6XxKxO1ncKFYZitD1gEvZTIuHpLxOcIC+bruQ=) 3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 21:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ba:3b:e2:37:f7:32:58:9c:6b:57:ea:bb:3d:0b:a6:41:1d:aa:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Validity Not Before: Oct 30 17:53:01 2026 GMT Not After : Oct 31 21:18:01 2026 GMT Subject: CN=1404EEBB476253F3F072761EA3775216C07200C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:9c:a1:0b:65:16:95:ff:bd:e7:39:a2:4d: 1a:96:b4:85:a1:86:3e:3b:3a:20:3e:0b:85:74:5d: f0:e7:d8:ee:99:d6:57:6f:e9:8f:91:a9:a0:bc:9d: 23:6e:63:89:7a:b5:8f:3f:9d:e0:30:03:28:df:eb: d1:f3:47:dc:44:e2:73:4c:74:1d:f6:b6:d7:dd:8d: 0d:9d:8b:43:da:9d:16:f1:09:69:2d:cb:33:dd:40: 93:79:8f:03:c2:04:a1:f1:f0:97:ae:7d:a0:b6:3d: 5e:8b:d8:39:47:3d:1a:e8:3d:e9:34:ab:16:2c:d1: 37:ab:33:ee:25:ed:aa:15:f3:ef:58:ab:73:57:c2: f6:b1:b0:c9:5f:71:f8:5e:6b:f3:a9:98:86:08:cd: 70:1c:a6:8c:81:83:5a:c1:18:3f:d5:3c:25:bf:7f: ff:40:79:57:67:fa:2b:ff:a2:86:f1:11:00:9e:fc: 61:72:d5:46:4d:46:a0:33:ae:cc:7a:00:cb:cf:9f: a2:b1:61:cb:63:fd:34:c4:85:90:e1:a0:97:e2:97: 44:54:c7:f9:e0:e8:77:3f:6f:0a:61:8a:f5:6d:55: a7:ae:c1:f5:7d:28:ca:13:6c:11:dc:09:2d:65:98: 14:39:33:8b:3b:35:bd:81:c6:d3:0c:83:e2:27:1c: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:04:EE:BB:47:62:53:F3:F0:72:76:1E:A3:77:52:16:C0:72:00:C2 X509v3 Authority Key Identifier: keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6d:16:d3:df:cd:b8:0c:05:a5:86:5a:5c:a7:62:c6:77:28: 95:e6:16:5e:b1:82:45:70:d3:e8:a6:cc:b1:19:a4:2f:d8:7f: 8b:f5:e8:76:8f:24:d5:22:cd:ac:84:25:93:54:af:93:74:8d: 50:9f:fe:f0:75:28:87:0a:21:89:a1:95:23:cd:39:39:e9:26: a9:78:d0:5f:c0:a0:5f:fe:7a:c6:f9:49:04:dd:47:04:c9:84: 48:df:37:ff:de:8b:3b:5c:e4:62:8f:00:71:19:28:7d:48:2b: 78:9a:be:64:27:89:cb:cd:05:23:57:52:35:ae:56:c1:ae:b7: 76:0b:47:86:76:c1:bd:7d:25:7c:9a:77:26:a6:22:86:df:f2: ea:0d:09:76:c8:d8:59:ae:d9:69:ba:c2:12:ce:bd:27:e5:8d: 22:17:0d:fd:e8:44:7e:57:5e:44:5d:35:15:01:89:26:25:e6: 6f:d6:f7:c0:31:12:df:0b:d0:57:7a:63:a4:ae:92:08:4e:03: d2:52:f7:df:c3:d7:d0:a7:f3:03:db:be:d4:d9:4e:01:2b:10: a8:35:f4:8f:34:d3:df:ad:52:cc:29:ab:3e:59:73:19:22:02: 67:32:de:dd:44:4e:47:4b:b7:89:ab:cb:e6:89:bc:78:74:4e: 87:8b:24:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbo74jf3Mlica1fquz0LpkEdqiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2 MjdBRTExNDAeFw0yNjEwMzAxNzUzMDFaFw0yNjEwMzEyMTE4MDFaMDMxMTAvBgNV BAMTKDE0MDRFRUJCNDc2MjUzRjNGMDcyNzYxRUEzNzc1MjE2QzA3MjAwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlJyhC2UWlf+95zmiTRqWtIWh hj47OiA+C4V0XfDn2O6Z1ldv6Y+RqaC8nSNuY4l6tY8/neAwAyjf69HzR9xE4nNM dB32ttfdjQ2di0PanRbxCWktyzPdQJN5jwPCBKHx8JeufaC2PV6L2DlHPRroPek0 qxYs0TerM+4l7aoV8+9Yq3NXwvaxsMlfcfhea/OpmIYIzXAcpoyBg1rBGD/VPCW/ f/9AeVdn+iv/oobxEQCe/GFy1UZNRqAzrsx6AMvPn6KxYctj/TTEhZDhoJfil0RU x/ng6Hc/bwphivVtVaeuwfV9KMoTbBHcCS1lmBQ5M4s7Nb2BxtMMg+InHBo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFATuu0diU/PwcnYeo3dSFsByAMIwHwYDVR0j BBgwFoAUmcFY2NudEoZFa97++7OeUmJ64RQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVlMTQzODItZDU4Ny00ZTg2LThlN2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhE QjlEMTI4NjQ1NkJERUZFRkJCMzlFNTI2MjdBRTExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OUMxNThEOERCOUQxMjg2NDU2QkRFRkVGQkIzOUU1MjYyN0FF MTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvOTlDMTU4RDhEQjlEMTI4NjQ1NkJERUZFRkJCMzlF NTI2MjdBRTExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9tFtPfzbgMBaWGWlynYsZ3KJXmFl6xgkVw 0+imzLEZpC/Yf4v16HaPJNUizayEJZNUr5N0jVCf/vB1KIcKIYmhlSPNOTnpJql4 0F/AoF/+esb5SQTdRwTJhEjfN//eiztc5GKPAHEZKH1IK3iavmQnicvNBSNXUjWu VsGut3YLR4Z2wb19JXyadyamIobf8uoNCXbI2Fmu2Wm6whLOvSfljSIXDf3oRH5X XkRdNRUBiSYl5m/W98AxEt8L0Fd6Y6SukghOA9JS99/D19Cn8wPbvtTZTgErEKg1 9I8009+tUswpqz5ZcxkiAmcy3t1ETkdLt4mry+aJvHh0ToeLJOM= -----END CERTIFICATE-----Generated at Sat Oct 31 08:43:29 2026 by rpki-client