$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft File: 499BF8D17B00F9C4F71ED17D51782A65C271B666.mft (raw, json) Hash identifier: 5PQz2Ibk4ukKMdeMAtTFtA3s3d+kmqBDY4uWEp0DBWA= Subject key identifier: C4:20:40:95:91:33:CE:0C:3B:85:D3:1B:98:0A:55:B8:7F:45:08:D7 Authority key identifier: 49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 Certificate issuer: /CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Certificate serial: 46660CD962DC6EA31C1D6C2872142268741865BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 03:39:48 +0000 Manifest this update: Sat 26 Sep 2026 03:34:48 +0000 Manifest next update: Sun 27 Sep 2026 04:14:48 +0000 Files and hashes: 1: 499BF8D17B00F9C4F71ED17D51782A65C271B666.crl (hash: UBEnepjRKmWIUKNaM421Q9geqj8vF1UhOrV5u5MCfy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:66:0c:d9:62:dc:6e:a3:1c:1d:6c:28:72:14:22:68:74:18:65:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Validity Not Before: Sep 26 03:34:48 2026 GMT Not After : Sep 27 04:14:48 2026 GMT Subject: CN=C42040959133CE0C3B85D31B980A55B87F4508D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:63:56:c0:8d:cb:c4:14:db:f7:04:e5:84: de:f6:a6:3d:17:62:42:69:ae:9e:45:d2:af:38:67: 8b:ed:3a:ea:01:1e:34:71:d0:e1:09:ad:33:77:93: a9:00:76:01:29:c8:fd:66:b8:da:6f:63:f6:ca:a3: 89:43:3b:cb:f7:d9:f1:df:bf:d7:28:bb:8d:b0:47: b5:8d:ef:e3:2f:86:5a:53:95:70:bd:5e:ac:68:e0: b8:22:ec:5e:6e:f0:dc:ff:7b:28:ed:24:13:95:5b: ab:bf:2f:1b:e1:c7:0a:56:f6:5c:49:78:c4:44:56: ff:7a:90:04:0c:ff:f0:a0:cc:56:52:29:76:38:f4: 2d:db:f1:ce:34:a6:59:e7:8b:02:04:3e:e2:7f:b7: f0:62:84:11:f5:63:a9:4b:63:5a:6b:76:cd:73:7f: e1:76:65:59:8c:f1:9a:17:0d:dc:1d:70:0a:d4:fb: 3d:d6:b0:38:3b:9e:7d:35:22:d3:4a:91:c9:0c:60: d8:c6:26:65:0f:5f:fe:23:92:04:ed:80:fa:b6:b7: ff:a7:30:d6:f9:3a:a2:12:26:97:ab:82:4f:3a:de: f8:b9:9e:72:bb:f4:9e:1f:1f:75:eb:d7:fb:fa:a5: f0:3e:b2:32:30:f1:64:a3:95:14:88:1e:06:2f:f0: 9d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:20:40:95:91:33:CE:0C:3B:85:D3:1B:98:0A:55:B8:7F:45:08:D7 X509v3 Authority Key Identifier: keyid:49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:66:2b:de:74:53:58:27:fa:3d:da:30:dd:15:84:8c:da:e0: dc:cd:fc:7e:06:18:9c:82:a1:4a:54:a1:42:7d:60:de:54:b6: 4b:73:4f:9c:01:91:2c:00:c7:8f:97:3a:1d:d1:af:04:4f:b0: 41:32:4b:df:33:98:77:9b:ae:1f:c2:6d:49:36:ea:21:2c:16: 9e:8f:c9:a7:c3:f2:0b:5c:2f:89:17:83:61:cb:1f:ab:10:a4: 88:57:e8:7f:c1:f7:ed:fe:d9:ef:84:46:ea:a8:e3:ec:f6:9b: 3a:1d:b1:c1:54:c6:d2:92:76:0f:a2:2a:8b:01:9a:df:f1:3f: a4:1d:14:36:50:74:94:82:1d:d8:5d:3f:c7:b9:28:93:d2:2e: 28:57:c8:8a:fb:78:8a:8c:4b:91:07:aa:59:c8:3c:70:95:af: 33:f7:cb:88:e2:34:8b:69:fa:1d:8f:34:59:4b:a4:e3:e1:0e: 65:f7:e5:4e:31:c4:65:cd:eb:8d:11:10:ac:d0:c7:29:6a:34: 61:e1:11:6e:84:af:90:d1:0f:ff:83:87:3f:f6:5a:0f:35:10: 5f:1f:ca:e1:c6:4c:e7:45:c3:56:26:b3:2c:ea:66:f1:7e:4c: d0:a2:02:85:6e:f9:6e:85:32:0f:fc:2c:38:b7:7d:e9:fd:ec: 1d:be:a3:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmYM2WLcbqMcHWwochQiaHQYZb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVD MjcxQjY2NjAeFw0yNjA5MjYwMzM0NDhaFw0yNjA5MjcwNDE0NDhaMDMxMTAvBgNV BAMTKEM0MjA0MDk1OTEzM0NFMEMzQjg1RDMxQjk4MEE1NUI4N0Y0NTA4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiomNWwI3LxBTb9wTlhN72pj0X YkJprp5F0q84Z4vtOuoBHjRx0OEJrTN3k6kAdgEpyP1muNpvY/bKo4lDO8v32fHf v9cou42wR7WN7+MvhlpTlXC9Xqxo4Lgi7F5u8Nz/eyjtJBOVW6u/LxvhxwpW9lxJ eMREVv96kAQM//CgzFZSKXY49C3b8c40plnniwIEPuJ/t/BihBH1Y6lLY1prds1z f+F2ZVmM8ZoXDdwdcArU+z3WsDg7nn01ItNKkckMYNjGJmUPX/4jkgTtgPq2t/+n MNb5OqISJpergk863vi5nnK79J4fH3Xr1/v6pfA+sjIw8WSjlRSIHgYv8J0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCBAlZEzzgw7hdMbmApVuH9FCNcwHwYDVR0j BBgwFoAUSZv40XsA+cT3HtF9UXgqZcJxtmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MzA5ZTItZjkyOS00MmQ5LTljM2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3 QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVDMjcxQjY2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTlCRjhEMTdCMDBGOUM0RjcxRUQxN0Q1MTc4MkE2NUMyNzFC NjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJB NjVDMjcxQjY2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxmK950U1gn+j3aMN0VhIza4NzN/H4GGJyC oUpUoUJ9YN5UtktzT5wBkSwAx4+XOh3RrwRPsEEyS98zmHebrh/CbUk26iEsFp6P yafD8gtcL4kXg2HLH6sQpIhX6H/B9+3+2e+ERuqo4+z2mzodscFUxtKSdg+iKosB mt/xP6QdFDZQdJSCHdhdP8e5KJPSLihXyIr7eIqMS5EHqlnIPHCVrzP3y4jiNItp +h2PNFlLpOPhDmX35U4xxGXN640REKzQxylqNGHhEW6Er5DRD/+Dhz/2Wg81EF8f yuHGTOdFw1YmsyzqZvF+TNCiAoVu+W6FMg/8LDi3fen97B2+o1I= -----END CERTIFICATE-----Generated at Sat Sep 26 06:30:37 2026 by rpki-client