
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
File: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft (raw, json)
Hash identifier: eW9tm975AAx1qixEPfZpfKHlp0AEV9rYzZqRccDSFA4=
Subject key identifier: 61:A6:AD:E6:89:43:54:07:8F:94:FC:C5:B3:BF:62:F7:F3:E5:14:30
Authority key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14
Certificate issuer: /CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114
Certificate serial: 64FBE749648FBE92B8B93C5FB9EB9EE446752A5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
Manifest number: 37
Signing time: Fri 12 Jun 2026 09:06:32 +0000
Manifest this update: Fri 12 Jun 2026 09:01:32 +0000
Manifest next update: Sat 13 Jun 2026 12:56:32 +0000
Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: 1WfqYJr02F29QOUCZ6xp1/2AhdQJ8yOTJYEJy36lRu4=)
2: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl (hash: UrawrelGi8qQelZHNQMIQW2PFH29E/sk7ynfTaHBDmg=)
3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: tUZ9VWyUlsFczruGbwl8Yg390oqsEtKgB6XaTjzW6Po=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl
rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fb:e7:49:64:8f:be:92:b8:b9:3c:5f:b9:eb:9e:e4:46:75:2a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114
Validity
Not Before: Jun 12 09:01:32 2026 GMT
Not After : Jun 13 12:56:32 2026 GMT
Subject: CN=61A6ADE6894354078F94FCC5B3BF62F7F3E51430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:c6:c3:e3:2f:6a:f7:ad:6b:3a:bd:80:e5:
c8:8b:9e:cc:24:c6:1a:08:e6:a2:5f:af:60:7b:7f:
06:56:ea:7b:1b:5d:61:c3:38:ba:b6:a1:de:05:9f:
51:81:a5:17:c6:d6:bf:55:02:15:81:df:0e:b1:6f:
a1:be:ce:d9:29:72:14:33:9a:a1:1b:02:1c:38:bd:
69:68:41:74:b2:bb:70:ed:8f:fe:c6:f5:89:33:35:
c3:aa:23:d0:43:f7:b8:5b:8f:20:e1:fb:0d:fd:9f:
f6:c6:1b:55:d5:dc:47:77:0c:37:a4:3a:3b:d8:ac:
c4:f7:bc:7b:ac:16:de:3a:cb:73:b2:6f:25:4f:1c:
a8:78:6b:aa:81:3d:97:36:9a:f0:7c:96:0d:9c:06:
e0:1d:be:aa:95:0f:f5:1f:4d:18:23:d7:8b:67:b5:
25:86:39:27:02:f4:e8:5f:60:1f:18:a4:f3:87:09:
0f:a6:42:4c:80:39:23:4f:63:37:dc:df:4b:8b:dd:
ab:a2:8b:52:23:ef:b4:82:b6:a6:b9:8c:53:b1:61:
36:4e:30:14:fd:fc:e4:ac:d3:1b:2f:1f:21:a1:3b:
b3:6c:95:5d:35:d4:87:ec:1b:2d:47:bd:f5:66:9c:
76:96:12:38:25:8a:d3:72:b3:ca:cf:24:de:e4:ea:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A6:AD:E6:89:43:54:07:8F:94:FC:C5:B3:BF:62:F7:F3:E5:14:30
X509v3 Authority Key Identifier:
keyid:99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0b:68:ca:66:f4:f0:7d:8d:b9:75:27:d5:51:ec:5e:7c:30:
db:aa:52:19:40:80:d5:02:74:66:6e:a7:ba:50:f2:e2:da:21:
be:01:ef:4c:ee:9d:48:ad:1c:b5:8b:3f:c7:46:9c:2e:2c:36:
71:34:4b:a7:b6:f3:94:3a:82:56:87:ae:83:1b:53:01:17:2a:
9d:0f:e4:d1:40:1f:8a:38:4f:58:b3:f3:7a:ec:77:14:2d:3f:
91:7b:99:5d:b2:48:e5:59:b0:8a:88:50:03:35:d5:74:be:6f:
4e:be:47:63:c2:76:36:e6:83:e1:61:c6:4d:f0:cb:8b:35:71:
22:ba:70:e3:79:b6:cb:d6:d7:54:96:ab:6d:22:2c:bf:8f:8d:
75:46:87:99:a5:cb:b3:8b:cb:3d:69:80:87:e9:d2:0c:5e:88:
a1:6d:32:33:27:4f:f9:06:17:82:ad:42:ec:93:bc:2d:fd:00:
c5:da:c6:c9:35:5d:f5:c0:69:b7:86:e0:22:09:5d:42:bb:5b:
86:c6:0d:95:ce:4a:5d:fb:fd:d5:09:76:cf:98:0b:26:d8:84:
ce:3a:c3:ed:94:0b:cd:eb:a4:4d:cc:00:16:a7:68:fd:12:76:
d0:9b:9d:f6:df:22:5b:a4:5e:db:0f:d1:6a:fa:df:75:d0:00:
c4:e8:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:02:07 2026 by rpki-client