
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft
File: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft (raw, json)
Hash identifier: DSlzsY/QeGzAbyQpCGV0X/4RmYzLjPnD1ODmLmCKIKk=
Subject key identifier: 46:07:18:60:94:38:D6:44:D5:97:7E:18:A9:D1:E1:1F:D6:E0:10:8E
Authority key identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D
Certificate issuer: /CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D
Certificate serial: 41167FE617EE2925D5414FB6DE1952CA30351B62
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 19:12:55 +0000
Manifest this update: Wed 16 Sep 2026 19:07:55 +0000
Manifest next update: Thu 17 Sep 2026 21:39:55 +0000
Files and hashes: 1: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl (hash: KKuX0n5pa4aL74/PZ/jNLqEbW4IIAKEe6OPSxn07WDA=)
2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: fh+5nuvp9S/ilgcOVbVeGaQX4NU2xadlTipLtzuaNpA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl
rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:16:7f:e6:17:ee:29:25:d5:41:4f:b6:de:19:52:ca:30:35:1b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D
Validity
Not Before: Sep 16 19:07:55 2026 GMT
Not After : Sep 17 21:39:55 2026 GMT
Subject: CN=460718609438D644D5977E18A9D1E11FD6E0108E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:73:8b:7a:59:0d:0a:3e:94:d6:50:3f:0d:
a5:07:22:5b:f1:d5:58:f8:c9:0c:b8:46:85:ac:bc:
81:e3:b6:54:81:01:17:50:d7:c3:27:ba:f9:ca:00:
17:d9:8b:7a:9c:86:f1:95:18:8f:05:b5:81:bc:82:
aa:0e:f1:27:12:90:75:8c:c9:d3:9b:b2:d0:9c:4b:
c4:49:d1:d5:5b:ac:37:b4:3f:e9:3f:73:9e:72:6b:
ac:88:db:64:75:d0:17:7b:dd:d2:12:75:20:a4:6a:
fa:db:4c:bd:e4:65:bd:86:cf:ce:14:a9:0c:42:b7:
49:01:f0:30:96:df:c4:1d:fe:60:99:13:ec:23:cf:
17:cb:ce:12:18:1c:09:54:65:7e:21:f7:bd:94:46:
eb:e5:d5:ce:9b:1f:51:21:06:ee:cf:35:7c:aa:da:
9e:72:4e:fe:8f:98:e0:c5:66:35:14:f8:6b:10:ba:
a6:91:d7:6d:7b:ff:9c:dd:50:30:15:57:8d:38:5d:
cf:59:3c:ce:2d:fd:af:54:bf:28:3b:e7:d8:0f:27:
83:86:e5:2e:27:62:5c:61:00:8d:e5:bb:84:b5:66:
f2:88:51:e8:c9:b4:6e:6c:fa:6e:e6:bf:22:3c:31:
b8:0f:e2:fe:97:55:ab:81:11:45:7d:a9:b1:38:cc:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:18:60:94:38:D6:44:D5:97:7E:18:A9:D1:E1:1F:D6:E0:10:8E
X509v3 Authority Key Identifier:
keyid:19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d9:69:89:c8:76:a3:b5:6e:c1:75:eb:fc:1a:2a:46:3e:0f:
a3:29:9a:95:66:84:19:ae:90:54:a2:eb:23:aa:b1:f8:2b:1d:
1e:43:9d:23:47:3a:20:be:5d:65:a0:a2:ef:15:cf:61:8d:a8:
55:02:81:45:f2:a9:ad:d1:37:4d:c3:fb:f6:0f:d6:62:54:11:
50:32:53:d8:1c:ed:d9:34:56:ca:b6:10:09:14:d3:c6:20:e8:
7a:68:85:3f:f7:40:f7:97:e7:eb:19:03:23:ce:07:ed:d7:30:
e3:73:03:51:ca:48:51:c7:dc:32:9f:78:80:77:2a:b8:c2:26:
e6:e5:2c:0f:c4:28:3a:32:35:6c:e2:c8:0c:f2:a6:1d:29:d4:
9d:1e:69:1a:59:ea:ee:91:fa:a8:58:68:11:27:1f:75:d1:4b:
8a:14:40:5f:26:36:c5:d8:ca:5d:30:0c:4a:1e:f9:58:5e:14:
27:59:8e:b9:ba:96:06:c7:12:fc:72:7d:31:f5:f1:90:d7:f6:
cc:e4:bd:2b:fe:ba:47:c3:3f:35:6d:89:0b:30:49:48:c6:28:
e7:42:2d:20:94:17:34:f1:d6:b9:cb:66:f5:d1:67:ed:2f:fb:
a9:58:1d:bd:09:76:88:4e:49:27:d1:4a:1d:a8:97:88:8d:6e:
8f:2d:5f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:44:46 2026 by rpki-client