$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft File: 498FC3DB03528A64214589740CA13E84E4775306.mft (raw, json) Hash identifier: Y8pvPlrMqwN+VeSnq9HQb2WDEOehew1QxmUhjkKfLsg= Subject key identifier: 5D:D0:52:B7:3F:DE:0A:2E:AF:61:1D:9E:A6:C1:AA:4F:C5:FF:A9:0A Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306 Certificate serial: 6666450B5152849AC82F7DB534002D5FAB6767D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 00:57:45 +0000 Manifest this update: Tue 22 Sep 2026 00:52:45 +0000 Manifest next update: Wed 23 Sep 2026 03:47:45 +0000 Files and hashes: 1: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: OOkicQA5K86MoBkSuxZ02oUQ15K4MqZ+HWDN0IRHS5w=) 2: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: y22RwJlcQ0nD5K4HN58evr6z1YokNMr+L0lhKw+Cv9w=) 3: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=) 4: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U=) 5: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=) 6: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: sbRZOMY4qXofH+gweW2UQPxdhQAQJDKmoZuKYzDjDd8=) 7: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: W6PaD9jD2W7QLE6L053n0v5wsFLq3jDzK+h9oZCa+Ww=) 8: 323430373a613563303a3130303a3a2f34382d3438203d3e20313432333339.roa (hash: NxZyATvn5vq2FKc65c4Nnkb5SqJdxZb7IhVwK0ixCrY=) 9: 498FC3DB03528A64214589740CA13E84E4775306.crl (hash: Q6I7miNF7drgr59qbT7WphLHLEsAt8k2hlNtlYoLEJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:66:45:0b:51:52:84:9a:c8:2f:7d:b5:34:00:2d:5f:ab:67:67:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306 Validity Not Before: Sep 22 00:52:45 2026 GMT Not After : Sep 23 03:47:45 2026 GMT Subject: CN=5DD052B73FDE0A2EAF611D9EA6C1AA4FC5FFA90A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a2:44:d4:e8:a7:70:0f:e1:9e:c9:fd:0c:cd: 2c:fb:a8:00:8d:37:f6:b3:f7:59:d5:60:ce:64:10: 27:8c:f5:a0:58:78:cc:0f:e8:b9:54:c4:c2:c4:b6: b3:51:f2:07:59:9c:c8:45:30:54:cc:2d:70:98:e0: a9:da:a5:78:90:da:1d:d8:e9:75:05:b4:33:74:2b: 42:18:91:f2:d8:b0:a8:9d:bb:76:e5:e5:44:93:e7: 6b:82:5a:62:79:7c:e1:7d:3d:a0:70:48:b0:fd:3d: 2a:53:02:22:fc:fa:2d:f4:d0:57:ba:6a:7d:82:bb: 2a:ed:48:5d:dc:80:12:d3:94:40:a5:06:10:74:fc: 31:fd:42:7e:54:35:33:4f:51:06:43:90:30:b4:b1: f7:df:f4:35:d1:a5:43:74:d4:4d:c3:dc:5e:05:c0: df:fc:65:64:c4:26:d4:8d:e8:75:cc:c1:aa:f2:e9: 71:c3:9a:34:88:54:ab:28:db:82:c8:d7:64:7b:c6: 99:70:69:1b:85:f4:b0:49:51:ac:66:bd:42:91:7d: 14:60:82:5f:37:21:74:ac:14:27:ef:1f:16:3a:2a: c9:4a:d7:5f:71:5e:e8:9b:52:8b:e4:a9:15:f7:2a: 57:1d:5a:78:94:7c:cf:f4:a2:4d:a5:59:9b:54:63: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D0:52:B7:3F:DE:0A:2E:AF:61:1D:9E:A6:C1:AA:4F:C5:FF:A9:0A X509v3 Authority Key Identifier: keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b3:f1:ad:25:73:3e:11:af:44:31:19:b7:3a:da:a5:50:3f: d8:b2:8e:5b:e4:b1:c0:89:18:4e:3a:f4:0f:c5:0f:80:57:61: c3:5e:93:df:55:0b:a0:40:4c:41:60:d8:ad:a7:c0:ce:be:35: 11:b9:5d:06:63:5e:d3:97:76:1a:d8:d4:b5:6d:a0:b0:9a:8c: 53:8c:16:f0:99:55:45:77:29:a3:a1:1f:1c:be:ff:7b:0f:d5: 3b:f2:4a:3d:5d:0a:c0:45:3a:4b:22:1d:e8:a7:78:1f:18:96: 4b:d5:ba:2f:6d:94:6f:f9:2a:0b:8a:90:d6:2a:d5:b1:14:05: 09:a9:13:05:52:73:99:26:17:aa:38:e2:3e:2f:ab:43:26:e7: 0a:12:b7:74:d9:b2:cc:27:72:f4:bf:a1:a5:22:d4:0f:1d:15: a8:a9:ee:cf:ce:a6:5b:6a:d1:0e:76:55:ab:90:95:55:07:da: fe:c9:af:c3:81:1f:52:b2:d5:d8:97:bb:2f:ce:73:ac:c0:d1: 5d:fb:7d:00:14:4e:a8:f3:41:b4:29:05:f4:fd:cb:da:0b:45: 6f:81:53:cf:6d:af:e9:26:a7:fe:64:94:1d:c8:7a:63:2a:b2: 64:91:c9:bf:37:af:90:7c:3b:c1:5e:d4:cd:60:c0:2a:42:a0: 40:ba:36:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmZFC1FShJrIL321NAAtX6tnZ9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNFODRF NDc3NTMwNjAeFw0yNjA5MjIwMDUyNDVaFw0yNjA5MjMwMzQ3NDVaMDMxMTAvBgNV BAMTKDVERDA1MkI3M0ZERTBBMkVBRjYxMUQ5RUE2QzFBQTRGQzVGRkE5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdokTU6KdwD+Geyf0MzSz7qACN N/az91nVYM5kECeM9aBYeMwP6LlUxMLEtrNR8gdZnMhFMFTMLXCY4KnapXiQ2h3Y 6XUFtDN0K0IYkfLYsKidu3bl5UST52uCWmJ5fOF9PaBwSLD9PSpTAiL8+i300Fe6 an2CuyrtSF3cgBLTlEClBhB0/DH9Qn5UNTNPUQZDkDC0sfff9DXRpUN01E3D3F4F wN/8ZWTEJtSN6HXMwary6XHDmjSIVKso24LI12R7xplwaRuF9LBJUaxmvUKRfRRg gl83IXSsFCfvHxY6KslK119xXuibUovkqRX3KlcdWniUfM/0ok2lWZtUYxApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXdBStz/eCi6vYR2epsGqT8X/qQowHwYDVR0j BBgwFoAUSY/D2wNSimQhRYl0DKE+hOR3UwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE5MjAyMWUtMzkwNC00MTE1LWFmNWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIw MzUyOEE2NDIxNDU4OTc0MENBMTNFODRFNDc3NTMwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThGQzNEQjAzNTI4QTY0MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1 MzA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNF ODRFNDc3NTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuz8a0lcz4Rr0QxGbc62qVQP9iyjlvkscCJ GE469A/FD4BXYcNek99VC6BATEFg2K2nwM6+NRG5XQZjXtOXdhrY1LVtoLCajFOM FvCZVUV3KaOhHxy+/3sP1TvySj1dCsBFOksiHeineB8YlkvVui9tlG/5KguKkNYq 1bEUBQmpEwVSc5kmF6o44j4vq0Mm5woSt3TZsswncvS/oaUi1A8dFaip7s/Opltq 0Q52VauQlVUH2v7Jr8OBH1Ky1diXuy/Oc6zA0V37fQAUTqjzQbQpBfT9y9oLRW+B U89tr+kmp/5klB3IemMqsmSRyb83r5B8O8Fe1M1gwCpCoEC6NqY= -----END CERTIFICATE-----Generated at Tue Sep 22 18:56:45 2026 by rpki-client