$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft File: 498B4126F814B92E742642C1F871ADD317C2ABF3.mft (raw, json) Hash identifier: iqAf/ZM/b2ICrNPnkOTJqDwJVwo4CIBFW6YY5tAr75o= Subject key identifier: 64:4B:73:9E:F1:DC:C0:0C:B0:03:B3:D2:FA:F1:CE:22:4D:1C:D8:2C Authority key identifier: 49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 Certificate issuer: /CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Certificate serial: 36C6343E9DFD43D46E8929298F51CFF9C3541867 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 00:10:51 +0000 Manifest this update: Thu 24 Sep 2026 00:05:51 +0000 Manifest next update: Fri 25 Sep 2026 00:35:51 +0000 Files and hashes: 1: 498B4126F814B92E742642C1F871ADD317C2ABF3.crl (hash: JtCQtbzcTVkqRsir7mo5F1hGO/EdLKHdwIE5u+SN2Ag=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: sPcPKKDd43Nai9Cg9/ZzkhBod22KktaxwVikLIQy8wc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c6:34:3e:9d:fd:43:d4:6e:89:29:29:8f:51:cf:f9:c3:54:18:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Validity Not Before: Sep 24 00:05:51 2026 GMT Not After : Sep 25 00:35:51 2026 GMT Subject: CN=644B739EF1DCC00CB003B3D2FAF1CE224D1CD82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:66:61:60:18:58:40:16:b4:03:ed:1d:52: 8e:b2:fa:20:6d:40:97:df:02:25:dc:26:13:11:ab: 7c:d5:86:c8:a3:a4:26:e7:31:3c:0c:93:42:3a:24: 83:04:ba:e8:57:90:04:f7:4a:89:dd:d1:ca:8d:05: 18:49:21:45:41:d3:89:f7:80:01:f0:9f:22:3f:56: d4:7a:f2:ff:07:5f:f0:98:ec:72:17:a2:64:b7:05: 16:b2:09:d7:da:da:32:74:cb:24:dd:9f:c2:01:c8: 90:dc:23:a7:06:ca:23:c9:09:16:79:b8:bf:cb:54: 22:5a:80:a5:dc:fc:a7:b7:d0:b1:96:f8:b2:54:cb: 20:86:4a:41:59:d2:a6:59:ff:f3:94:13:43:fd:c6: 15:ff:64:32:af:cc:af:73:80:07:c4:4b:33:13:21: 56:14:44:0a:b5:a1:9e:69:47:cf:28:fb:a0:a2:5a: 85:e4:78:d4:f6:9e:2a:b6:9a:1a:4e:99:67:f4:8a: 3e:5d:c8:63:19:fd:ef:60:f5:a4:45:fe:7d:2a:22: 12:9a:0c:eb:26:e2:f1:b0:43:c6:5a:2c:66:d0:02: f1:0e:13:74:61:2d:40:cc:6e:b0:fb:30:31:98:7a: c6:b0:e5:e5:d6:89:a6:4f:b9:17:92:22:4f:07:ec: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4B:73:9E:F1:DC:C0:0C:B0:03:B3:D2:FA:F1:CE:22:4D:1C:D8:2C X509v3 Authority Key Identifier: keyid:49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:89:09:5d:60:7c:72:bd:8e:80:96:a2:b9:20:da:41:68:46: 4c:3c:4d:3d:98:a3:02:7f:6d:27:48:40:72:99:81:98:a0:d2: 7c:59:12:35:0a:b0:3f:a2:2a:38:a4:2d:02:f4:dc:04:e7:07: 2b:19:1f:15:04:a6:43:17:c5:9d:2f:1d:27:f2:8d:a9:41:d7: 12:fa:41:36:2a:c1:96:53:80:43:24:37:8a:95:cb:15:f1:8e: 1d:e3:c9:e0:74:a9:06:66:9b:d1:b2:61:19:1d:2c:42:23:14: c5:89:c7:87:22:b6:6a:4b:13:70:65:a0:c2:77:78:6e:f5:f4: ff:ad:cb:80:ad:14:e3:fb:c9:f6:ac:40:b4:54:e3:be:9e:79: 78:36:4c:c3:cf:a3:1f:4d:e1:51:a5:0b:4a:e8:87:3b:8a:e5: 64:b2:a9:36:08:91:62:f8:f1:03:81:6a:f7:a7:e6:8e:ef:b8: 75:01:15:62:da:ca:05:0e:a1:94:db:fa:78:4d:a7:e3:2e:06: 9c:d4:1b:79:32:b3:ac:4b:3b:fe:91:1a:b7:88:97:18:11:53: 93:ae:e5:22:1e:a2:fd:18:bf:6b:14:c1:55:60:7d:0e:51:0b: 90:01:05:63:3e:5f:fc:d9:4d:5d:13:00:19:65:7a:e2:9e:8a: 05:b5:00:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsY0Pp39Q9RuiSkpj1HP+cNUGGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFERDMx N0MyQUJGMzAeFw0yNjA5MjQwMDA1NTFaFw0yNjA5MjUwMDM1NTFaMDMxMTAvBgNV BAMTKDY0NEI3MzlFRjFEQ0MwMENCMDAzQjNEMkZBRjFDRTIyNEQxQ0Q4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vGZhYBhYQBa0A+0dUo6y+iBt QJffAiXcJhMRq3zVhsijpCbnMTwMk0I6JIMEuuhXkAT3Sond0cqNBRhJIUVB04n3 gAHwnyI/VtR68v8HX/CY7HIXomS3BRayCdfa2jJ0yyTdn8IByJDcI6cGyiPJCRZ5 uL/LVCJagKXc/Ke30LGW+LJUyyCGSkFZ0qZZ//OUE0P9xhX/ZDKvzK9zgAfESzMT IVYURAq1oZ5pR88o+6CiWoXkeNT2niq2mhpOmWf0ij5dyGMZ/e9g9aRF/n0qIhKa DOsm4vGwQ8ZaLGbQAvEOE3RhLUDMbrD7MDGYesaw5eXWiaZPuReSIk8H7DZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZEtznvHcwAywA7PS+vHOIk0c2CwwHwYDVR0j BBgwFoAUSYtBJvgUuS50JkLB+HGt0xfCq/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliMWU3ZjctMWY0Yi00MWE2LTkyNTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZG ODE0QjkyRTc0MjY0MkMxRjg3MUFERDMxN0MyQUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThCNDEyNkY4MTRCOTJFNzQyNjQyQzFGODcxQUREMzE3QzJB QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFE RDMxN0MyQUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByJCV1gfHK9joCWorkg2kFoRkw8TT2YowJ/ bSdIQHKZgZig0nxZEjUKsD+iKjikLQL03ATnBysZHxUEpkMXxZ0vHSfyjalB1xL6 QTYqwZZTgEMkN4qVyxXxjh3jyeB0qQZmm9GyYRkdLEIjFMWJx4citmpLE3BloMJ3 eG719P+ty4CtFOP7yfasQLRU476eeXg2TMPPox9N4VGlC0rohzuK5WSyqTYIkWL4 8QOBaven5o7vuHUBFWLaygUOoZTb+nhNp+MuBpzUG3kys6xLO/6RGreIlxgRU5Ou 5SIeov0Yv2sUwVVgfQ5RC5ABBWM+X/zZTV0TABlleuKeigW1APk= -----END CERTIFICATE-----Generated at Thu Sep 24 02:06:43 2026 by rpki-client