$ rpki-client -vvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft File: 498FC3DB03528A64214589740CA13E84E4775306.mft (raw, json) Hash identifier: n78sX8XtQLf0BsLO2pUqqRTmfZHC6wURVExGe7s8gU4= Subject key identifier: 22:A9:65:4E:CA:7F:47:37:4C:38:FA:D0:A1:85:E8:DF:3C:35:4E:92 Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306 Certificate serial: 596858950576EA154EB8C7A45040369DF3FB9726 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 09:19:18 +0000 Manifest this update: Wed 17 Jun 2026 09:14:18 +0000 Manifest next update: Thu 18 Jun 2026 12:21:18 +0000 Files and hashes: 1: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: W6PaD9jD2W7QLE6L053n0v5wsFLq3jDzK+h9oZCa+Ww=) 2: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: OOkicQA5K86MoBkSuxZ02oUQ15K4MqZ+HWDN0IRHS5w=) 3: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=) 4: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U=) 5: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: sbRZOMY4qXofH+gweW2UQPxdhQAQJDKmoZuKYzDjDd8=) 6: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: y22RwJlcQ0nD5K4HN58evr6z1YokNMr+L0lhKw+Cv9w=) 7: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=) 8: 498FC3DB03528A64214589740CA13E84E4775306.crl (hash: Lq4i6wa7Bb78s46jcKG2Q6EpXhNXregilZt1lZLCTss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:68:58:95:05:76:ea:15:4e:b8:c7:a4:50:40:36:9d:f3:fb:97:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306 Validity Not Before: Jun 17 09:14:18 2026 GMT Not After : Jun 18 12:21:18 2026 GMT Subject: CN=22A9654ECA7F47374C38FAD0A185E8DF3C354E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:61:2f:0b:ce:5b:e2:81:69:81:60:f1:54: ee:88:b1:87:8d:f2:d6:16:43:a9:d1:35:d8:dc:5f: 1f:26:fd:d0:a8:e7:f5:80:05:10:db:cc:ea:df:f6: 6e:f3:a5:e3:5e:51:ee:fb:0c:35:47:36:54:2d:ad: 54:f7:e4:f3:8e:cb:20:55:56:98:d0:d9:f2:f7:f6: 47:da:7e:df:87:e4:3a:d5:20:53:76:33:10:3e:17: 71:e2:8a:c3:a2:c1:92:19:de:b4:cd:5c:c8:3a:ca: 19:f9:c6:65:cb:7a:e0:f8:f1:e6:7c:af:7a:51:b2: 20:a5:a7:25:cc:ae:d4:75:c7:3e:c9:85:5a:31:b8: 8a:11:f6:3c:db:89:c4:fb:9f:b2:11:27:8a:0a:d8: 41:f0:06:53:c4:b6:73:ea:32:fe:bd:0f:6c:14:74: a3:bc:b1:b7:2e:d1:9c:be:81:a7:07:12:99:5d:ee: 39:40:23:71:8a:1c:1e:4a:82:43:bd:09:93:a6:b6: 8a:47:df:f0:fd:68:21:37:4c:b5:e8:a4:32:e3:b0: 4f:ba:86:0f:e0:8b:60:c6:12:37:fb:32:1e:91:52: 42:07:fb:f1:f9:dd:f0:d9:56:ac:6f:fc:c5:70:47: 5a:46:a9:1e:86:86:6e:ea:06:c6:86:e7:8f:a5:ea: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A9:65:4E:CA:7F:47:37:4C:38:FA:D0:A1:85:E8:DF:3C:35:4E:92 X509v3 Authority Key Identifier: keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f1:52:b4:a9:70:bf:81:57:50:2a:33:d1:3d:02:8f:ad:c2: 30:2e:b2:7a:89:d1:aa:ad:d6:ab:4b:77:d0:6c:b5:ae:78:d1: d8:1e:3e:72:ee:e6:18:97:a3:2f:57:7c:6e:ec:c0:fc:ea:4b: e0:e8:b0:b9:52:df:29:63:8b:4d:b6:2d:9f:07:46:f3:0e:30: 44:62:fb:b7:2f:08:66:30:62:77:ec:08:9b:ab:30:b8:80:c2: 97:32:4d:60:9d:41:d5:cd:a8:43:23:c9:f4:95:3e:65:6e:01: 06:30:80:61:71:43:27:7d:0b:28:55:33:51:76:65:5d:2d:f9: e3:67:9a:0c:b5:e6:8a:b9:ab:45:30:fe:bb:90:41:a1:1a:30: 85:45:a2:d1:3c:26:5e:fd:7b:6e:0f:28:0a:47:c1:6c:b1:19: ba:fd:dd:6d:60:31:90:21:5e:30:0b:c5:5a:aa:69:6b:a7:a3: 85:25:eb:ab:4b:3d:f3:db:af:02:bb:b4:4d:20:22:37:a4:33: e8:bc:7a:26:16:7a:38:62:97:fa:03:f5:a2:a9:23:27:c1:78: 33:39:13:77:d4:d2:02:16:1b:04:ba:c0:46:5e:7c:8c:10:a7: 4a:a9:b0:6b:a3:58:76:93:a7:98:7a:3d:22:bf:e0:aa:53:e6: e3:ec:b5:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWhYlQV26hVOuMekUEA2nfP7lyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNFODRF NDc3NTMwNjAeFw0yNjA2MTcwOTE0MThaFw0yNjA2MTgxMjIxMThaMDMxMTAvBgNV BAMTKDIyQTk2NTRFQ0E3RjQ3Mzc0QzM4RkFEMEExODVFOERGM0MzNTRFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRWEvC85b4oFpgWDxVO6IsYeN 8tYWQ6nRNdjcXx8m/dCo5/WABRDbzOrf9m7zpeNeUe77DDVHNlQtrVT35POOyyBV VpjQ2fL39kfaft+H5DrVIFN2MxA+F3HiisOiwZIZ3rTNXMg6yhn5xmXLeuD48eZ8 r3pRsiClpyXMrtR1xz7JhVoxuIoR9jzbicT7n7IRJ4oK2EHwBlPEtnPqMv69D2wU dKO8sbcu0Zy+gacHEpld7jlAI3GKHB5KgkO9CZOmtopH3/D9aCE3TLXopDLjsE+6 hg/gi2DGEjf7Mh6RUkIH+/H53fDZVqxv/MVwR1pGqR6Ghm7qBsaG54+l6rZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIqllTsp/RzdMOPrQoYXo3zw1TpIwHwYDVR0j BBgwFoAUSY/D2wNSimQhRYl0DKE+hOR3UwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE5MjAyMWUtMzkwNC00MTE1LWFmNWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIw MzUyOEE2NDIxNDU4OTc0MENBMTNFODRFNDc3NTMwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThGQzNEQjAzNTI4QTY0MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1 MzA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNF ODRFNDc3NTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/xUrSpcL+BV1AqM9E9Ao+twjAusnqJ0aqt 1qtLd9Bsta540dgePnLu5hiXoy9XfG7swPzqS+DosLlS3ylji022LZ8HRvMOMERi +7cvCGYwYnfsCJurMLiAwpcyTWCdQdXNqEMjyfSVPmVuAQYwgGFxQyd9CyhVM1F2 ZV0t+eNnmgy15oq5q0Uw/ruQQaEaMIVFotE8Jl79e24PKApHwWyxGbr93W1gMZAh XjALxVqqaWuno4Ul66tLPfPbrwK7tE0gIjekM+i8eiYWejhil/oD9aKpIyfBeDM5 E3fU0gIWGwS6wEZefIwQp0qpsGujWHaTp5h6PSK/4KpT5uPstbg= -----END CERTIFICATE-----Generated at Wed Jun 17 13:19:16 2026 by rpki-client