$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft File: 499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft (raw, json) Hash identifier: QJi/iu86ZiCxLTD2BLvxk33zvlSm9G+kD0DJ8nFje48= Subject key identifier: 63:63:C4:A7:42:5F:5D:5D:58:F9:B0:4F:90:F1:C5:0D:4D:DB:38:54 Authority key identifier: 49:99:50:14:1E:5E:3A:04:03:B5:39:ED:29:BB:3B:93:BC:E2:C1:6C Certificate issuer: /CN=499950141E5E3A0403B539ED29BB3B93BCE2C16C Certificate serial: 35F21D28EFA57D7BCE70DED286EFC49AEB39C3BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft Manifest number: C9 Signing time: Mon 28 Sep 2026 09:06:20 +0000 Manifest this update: Mon 28 Sep 2026 09:01:20 +0000 Manifest next update: Tue 29 Sep 2026 11:56:20 +0000 Files and hashes: 1: 3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa (hash: H/EU/GM9zbZ8LDvAdbWVszvkAPkqKeCYb9wj1+YBJDk=) 2: 499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl (hash: OOS/Y+CgJ5to++6ZW9395VRVRoywL2VaLJcP5wZPwgU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 10:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f2:1d:28:ef:a5:7d:7b:ce:70:de:d2:86:ef:c4:9a:eb:39:c3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499950141E5E3A0403B539ED29BB3B93BCE2C16C Validity Not Before: Sep 28 09:01:20 2026 GMT Not After : Sep 29 11:56:20 2026 GMT Subject: CN=6363C4A7425F5D5D58F9B04F90F1C50D4DDB3854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:39:5e:77:39:10:09:16:77:67:24:db:1f: 7a:70:55:bd:9f:a0:c6:cb:6c:a9:54:af:69:86:79: 49:e5:f9:a1:97:e1:16:da:43:21:82:ad:bd:24:f9: ac:53:8a:b7:1b:80:78:21:77:63:cd:eb:b2:99:75: a1:ad:e1:62:56:a2:c1:32:01:77:eb:7d:34:e1:2f: 6c:0f:45:a1:67:30:b3:d7:56:0b:27:21:a4:a3:5f: a6:03:0b:db:bf:97:33:c4:0a:00:6d:64:4e:cb:ae: b9:72:74:19:a4:82:14:2f:07:02:b0:45:91:43:38: 1f:34:af:ac:f7:50:55:5e:54:35:3c:2f:06:aa:1e: bd:8a:59:1a:80:d1:3f:94:72:37:a3:59:8a:b1:b1: 82:af:19:36:c9:ac:0a:89:bf:d1:7f:40:9a:90:d6: c5:b1:1a:f7:a1:42:67:f8:a2:70:66:05:a0:35:61: 0c:9d:2d:b0:5d:c7:77:96:36:bd:57:20:73:cb:50: 2e:48:9d:61:4c:86:11:25:64:5b:5b:ef:95:e5:66: 7a:30:27:15:ce:0b:43:e8:de:93:80:61:d6:02:8d: fc:db:61:d3:dc:5d:14:d7:ca:f7:69:d6:7f:df:32: f8:32:48:b9:c0:0a:a0:76:56:ac:05:3c:57:e4:98: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:63:C4:A7:42:5F:5D:5D:58:F9:B0:4F:90:F1:C5:0D:4D:DB:38:54 X509v3 Authority Key Identifier: keyid:49:99:50:14:1E:5E:3A:04:03:B5:39:ED:29:BB:3B:93:BC:E2:C1:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:21:9d:c8:bf:c4:60:45:f0:1a:03:c8:a2:af:5a:1d:48:5b: 4b:c3:c1:c4:5d:dc:fd:bb:48:4b:1a:c2:cb:6f:32:db:1e:7a: 90:e5:48:b7:54:f2:ad:a9:11:b8:d4:31:a9:e6:d6:7f:db:ef: 0a:e4:20:09:96:40:8e:06:a6:dc:9d:31:19:a9:87:70:a8:d1: dc:49:23:15:8e:b6:a1:f2:02:13:e9:83:51:89:ce:a1:a6:dc: ee:c8:f7:b9:be:41:b7:90:2d:db:b7:40:c4:de:01:76:71:03: 30:7a:44:3f:93:3a:6b:46:8c:8c:db:37:81:89:67:77:df:77: d5:15:ed:36:c2:f7:fb:c6:de:35:31:d0:4a:44:8b:8c:80:7a: 6d:5a:62:74:a7:9b:99:85:06:a0:24:27:43:20:55:66:09:34: ad:f3:2a:aa:76:ea:5f:85:59:8d:09:cd:67:91:5b:e0:de:0c: cf:c2:1e:27:8c:21:11:60:7a:5d:9a:1a:06:4c:be:1d:dc:4c: 7e:25:fc:e8:8a:97:f2:84:1b:0c:c2:15:47:3d:09:e8:fd:26: 47:f0:55:46:a8:32:c3:c7:62:07:f1:52:d8:62:c9:6e:6c:17: ff:92:34:43:d7:4b:be:bc:0a:6b:44:af:9b:76:64:d9:6b:ed: 10:e0:29:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfIdKO+lfXvOcN7Shu/Emus5w7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5OTUwMTQxRTVFM0EwNDAzQjUzOUVEMjlCQjNCOTNC Q0UyQzE2QzAeFw0yNjA5MjgwOTAxMjBaFw0yNjA5MjkxMTU2MjBaMDMxMTAvBgNV BAMTKDYzNjNDNEE3NDI1RjVENUQ1OEY5QjA0RjkwRjFDNTBENEREQjM4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLjledzkQCRZ3ZyTbH3pwVb2f oMbLbKlUr2mGeUnl+aGX4RbaQyGCrb0k+axTircbgHghd2PN67KZdaGt4WJWosEy AXfrfTThL2wPRaFnMLPXVgsnIaSjX6YDC9u/lzPECgBtZE7LrrlydBmkghQvBwKw RZFDOB80r6z3UFVeVDU8LwaqHr2KWRqA0T+UcjejWYqxsYKvGTbJrAqJv9F/QJqQ 1sWxGvehQmf4onBmBaA1YQydLbBdx3eWNr1XIHPLUC5InWFMhhElZFtb75XlZnow JxXOC0Po3pOAYdYCjfzbYdPcXRTXyvdp1n/fMvgySLnACqB2VqwFPFfkmLiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY2PEp0JfXV1Y+bBPkPHFDU3bOFQwHwYDVR0j BBgwFoAUSZlQFB5eOgQDtTntKbs7k7ziwWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzUxNGEwODktNjViNi00NTg1LWFmODQtM2Y4MmIxNjljMjdhLzAvNDk5OTUwMTQx RTVFM0EwNDAzQjUzOUVEMjlCQjNCOTNCQ0UyQzE2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTk5NTAxNDFFNUUzQTA0MDNCNTM5RUQyOUJCM0I5M0JDRTJD MTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzUxNGEwODktNjViNi00NTg1LWFm ODQtM2Y4MmIxNjljMjdhLzAvNDk5OTUwMTQxRTVFM0EwNDAzQjUzOUVEMjlCQjNC OTNCQ0UyQzE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIhnci/xGBF8BoDyKKvWh1IW0vDwcRd3P27 SEsawstvMtseepDlSLdU8q2pEbjUManm1n/b7wrkIAmWQI4GptydMRmph3Co0dxJ IxWOtqHyAhPpg1GJzqGm3O7I97m+QbeQLdu3QMTeAXZxAzB6RD+TOmtGjIzbN4GJ Z3ffd9UV7TbC9/vG3jUx0EpEi4yAem1aYnSnm5mFBqAkJ0MgVWYJNK3zKqp26l+F WY0JzWeRW+DeDM/CHieMIRFgel2aGgZMvh3cTH4l/OiKl/KEGwzCFUc9Cej9Jkfw VUaoMsPHYgfxUthiyW5sF/+SNEPXS768CmtEr5t2ZNlr7RDgKWU= -----END CERTIFICATE-----Generated at Mon Sep 28 14:30:24 2026 by rpki-client