$ rpki-client -vvf rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft File: 499BF8D17B00F9C4F71ED17D51782A65C271B666.mft (raw, json) Hash identifier: sXH18qWRLjw0u/4WiihqLNdOGVLln82CvxpP5qw2Jms= Subject key identifier: 8D:0F:86:FD:C4:9C:07:FE:E9:5B:92:F2:23:35:77:40:33:AF:50:68 Authority key identifier: 49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 Certificate issuer: /CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Certificate serial: 1CED66DC05A24B3FE1D44FE85D1F531B32F579E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 18:06:04 +0000 Manifest this update: Tue 16 Jun 2026 18:01:04 +0000 Manifest next update: Wed 17 Jun 2026 21:24:04 +0000 Files and hashes: 1: 499BF8D17B00F9C4F71ED17D51782A65C271B666.crl (hash: GerTuueaZpl/dxfDUUQIxVPBH8OJ2TJRpqNrYp3cLRs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ed:66:dc:05:a2:4b:3f:e1:d4:4f:e8:5d:1f:53:1b:32:f5:79:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Validity Not Before: Jun 16 18:01:04 2026 GMT Not After : Jun 17 21:24:04 2026 GMT Subject: CN=8D0F86FDC49C07FEE95B92F22335774033AF5068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:d1:ac:f2:9c:38:f4:ce:ae:d5:c5:4d:1e: bb:c3:b2:f8:37:e4:48:2f:a2:56:37:f4:b5:c8:ed: da:5a:39:63:0d:39:9f:10:4b:b3:03:eb:56:34:c5: 37:94:b1:c1:16:11:2b:d3:1e:94:4b:3b:37:9e:ed: dc:70:a2:87:cb:64:30:cc:03:35:a5:1a:9c:3b:31: e7:8a:5d:e3:d1:34:05:65:ef:25:4e:df:69:a6:e9: ff:3a:d9:7e:c6:2c:78:2b:b3:51:83:8d:cf:69:a5: 76:b8:98:c2:b8:21:a6:73:a4:9d:d1:80:37:a5:66: c2:6e:de:c6:80:ab:56:d2:28:b8:91:6d:4b:df:1e: bf:09:e5:bf:e1:79:c5:1a:f9:60:62:62:7c:81:3c: b1:da:0b:99:5a:be:42:46:29:95:bd:c3:32:23:25: 3d:9c:e9:19:53:a0:21:8f:75:2a:91:fb:ae:ee:0a: d7:16:c0:1e:ef:50:29:d2:94:85:6b:fd:3c:06:7d: 1c:f5:7c:e2:bf:48:f7:6d:03:71:65:89:72:3f:a8: ba:14:fc:95:47:c8:04:8c:e8:b2:70:d4:79:85:9d: b6:dc:c7:17:0e:f0:3b:c2:f0:1b:81:23:fb:74:be: 6b:98:f5:a0:0e:1e:b2:81:b9:b5:b7:13:05:c1:6c: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0F:86:FD:C4:9C:07:FE:E9:5B:92:F2:23:35:77:40:33:AF:50:68 X509v3 Authority Key Identifier: keyid:49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:64:d8:7f:c6:23:62:90:7c:16:89:74:ba:b8:e7:0d:4b:71: 2d:e1:9c:2a:4b:bd:62:5f:bd:b2:c5:c2:20:55:5e:f5:c2:84: 7b:a1:92:6a:ce:19:35:89:ae:04:5d:90:b0:bb:13:f2:01:49: 94:cf:9f:ec:f4:3f:7a:5e:4f:5e:25:38:09:c1:23:a8:8f:af: 86:74:3e:2e:ba:47:2a:8a:80:8a:54:ad:0e:5f:d9:f1:5c:53: b6:c0:73:ac:ce:a6:ab:48:bc:35:24:1c:9d:86:82:d0:59:b3: 16:dc:eb:4d:c2:c0:e9:49:48:8d:aa:76:f4:1a:c2:1f:d2:0e: d8:93:ca:82:b3:71:b0:83:27:b5:ad:e6:0d:55:f5:e6:ae:03: d2:99:de:cf:83:0f:72:d0:a3:29:52:53:13:92:2d:15:5c:99: 56:3a:77:fc:fe:ac:eb:33:a3:9e:ce:e7:e1:0f:13:c7:e2:ce: 0d:4b:42:a4:1d:c3:b9:ae:bf:af:d3:ae:ba:c9:5e:c5:42:01: 92:fe:6d:01:62:73:d8:81:77:bf:ea:c0:50:6c:64:24:b7:7b: 43:9e:43:7d:ff:ee:35:60:d9:4c:ba:dd:bf:e2:66:ac:f6:8c: 53:8f:bd:6d:60:5a:dd:89:3f:40:8c:49:c3:1a:13:59:a2:f5: 0a:bb:f6:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHO1m3AWiSz/h1E/oXR9TGzL1eeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVD MjcxQjY2NjAeFw0yNjA2MTYxODAxMDRaFw0yNjA2MTcyMTI0MDRaMDMxMTAvBgNV BAMTKDhEMEY4NkZEQzQ5QzA3RkVFOTVCOTJGMjIzMzU3NzQwMzNBRjUwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZsNGs8pw49M6u1cVNHrvDsvg3 5EgvolY39LXI7dpaOWMNOZ8QS7MD61Y0xTeUscEWESvTHpRLOzee7dxwoofLZDDM AzWlGpw7MeeKXePRNAVl7yVO32mm6f862X7GLHgrs1GDjc9ppXa4mMK4IaZzpJ3R gDelZsJu3saAq1bSKLiRbUvfHr8J5b/hecUa+WBiYnyBPLHaC5lavkJGKZW9wzIj JT2c6RlToCGPdSqR+67uCtcWwB7vUCnSlIVr/TwGfRz1fOK/SPdtA3FliXI/qLoU /JVHyASM6LJw1HmFnbbcxxcO8DvC8BuBI/t0vmuY9aAOHrKBubW3EwXBbCmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQ+G/cScB/7pW5LyIzV3QDOvUGgwHwYDVR0j BBgwFoAUSZv40XsA+cT3HtF9UXgqZcJxtmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MzA5ZTItZjkyOS00MmQ5LTljM2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3 QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVDMjcxQjY2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTlCRjhEMTdCMDBGOUM0RjcxRUQxN0Q1MTc4MkE2NUMyNzFC NjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJB NjVDMjcxQjY2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJk2H/GI2KQfBaJdLq45w1LcS3hnCpLvWJf vbLFwiBVXvXChHuhkmrOGTWJrgRdkLC7E/IBSZTPn+z0P3peT14lOAnBI6iPr4Z0 Pi66RyqKgIpUrQ5f2fFcU7bAc6zOpqtIvDUkHJ2GgtBZsxbc603CwOlJSI2qdvQa wh/SDtiTyoKzcbCDJ7Wt5g1V9eauA9KZ3s+DD3LQoylSUxOSLRVcmVY6d/z+rOsz o57O5+EPE8fizg1LQqQdw7muv6/TrrrJXsVCAZL+bQFic9iBd7/qwFBsZCS3e0Oe Q33/7jVg2Uy63b/iZqz2jFOPvW1gWt2JP0CMScMaE1mi9Qq79p0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:42 2026 by rpki-client