$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft File: 498FC3DB03528A64214589740CA13E84E4775306.mft (raw, json) Hash identifier: zBFZoRfDubGHDFYGXfUFi2mTBAgIPkDzSgg5vqAWCE4= Subject key identifier: 8C:21:50:8C:9E:DC:6B:93:BC:29:CA:15:73:E0:ED:89:61:E2:50:00 Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306 Certificate serial: 6B62D4CE23AEF46FB2DDB485CEBEEF5F55B83E09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 19:42:01 +0000 Manifest this update: Wed 02 Sep 2026 19:37:01 +0000 Manifest next update: Thu 03 Sep 2026 19:45:01 +0000 Files and hashes: 1: 498FC3DB03528A64214589740CA13E84E4775306.crl (hash: Sd2OZ/bDRlGDu2BDvc3P7JFE1AqgcqYUo7nA97SHrRM=) 2: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: W6PaD9jD2W7QLE6L053n0v5wsFLq3jDzK+h9oZCa+Ww=) 3: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: y22RwJlcQ0nD5K4HN58evr6z1YokNMr+L0lhKw+Cv9w=) 4: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=) 5: 323430373a613563303a3130303a3a2f34382d3438203d3e20313432333339.roa (hash: NxZyATvn5vq2FKc65c4Nnkb5SqJdxZb7IhVwK0ixCrY=) 6: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: sbRZOMY4qXofH+gweW2UQPxdhQAQJDKmoZuKYzDjDd8=) 7: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U=) 8: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: OOkicQA5K86MoBkSuxZ02oUQ15K4MqZ+HWDN0IRHS5w=) 9: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:62:d4:ce:23:ae:f4:6f:b2:dd:b4:85:ce:be:ef:5f:55:b8:3e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306 Validity Not Before: Sep 2 19:37:01 2026 GMT Not After : Sep 3 19:45:01 2026 GMT Subject: CN=8C21508C9EDC6B93BC29CA1573E0ED8961E25000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:88:86:1b:cf:b0:95:40:84:c3:df:48:92:aa: 7d:1e:27:4e:f6:5d:39:8f:58:48:b9:ca:ab:00:93: 7e:75:70:24:73:47:70:2a:26:e8:55:92:b1:35:95: 3f:a8:b6:ca:c9:c2:9a:2e:b6:2e:29:af:eb:58:06: 2e:8a:fc:db:cb:dd:d0:ba:5e:8e:ef:36:f1:b9:db: 3b:7f:cd:cf:ca:bd:09:46:9e:65:8f:ab:4b:ea:98: 21:0f:a6:21:85:49:44:84:81:47:4d:3b:93:b4:67: 98:7e:33:ef:d6:ac:bd:e4:2a:a4:3d:bd:56:c7:94: 00:e6:ef:4f:bb:5f:a7:3c:59:5c:b8:f5:a0:5b:b3: 33:f5:07:2e:06:05:58:eb:96:89:ef:dc:45:27:12: 54:e1:19:6a:ed:b0:98:e0:c3:a6:d2:ea:d6:40:9d: de:e4:1f:99:2a:cd:26:d7:6c:e6:74:21:d7:1b:e0: de:ee:f5:b8:fb:b3:c5:65:61:22:02:8f:1f:47:af: 7f:65:fb:3b:61:ca:ab:85:6b:a9:7d:45:ff:88:ee: 20:4b:b2:0b:1a:b3:90:05:cd:8c:b3:2e:b7:4d:83: 7c:9d:40:bb:fc:c4:5d:1f:91:5f:e6:60:b3:da:37: c1:dc:ac:9b:a3:4f:cd:e7:75:24:a4:67:33:9b:e1: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:21:50:8C:9E:DC:6B:93:BC:29:CA:15:73:E0:ED:89:61:E2:50:00 X509v3 Authority Key Identifier: keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:cc:b8:08:ca:97:8d:ec:22:49:55:87:59:01:89:d6:61:17: 22:b3:be:79:50:cd:e1:7a:c3:bc:13:98:c2:eb:9d:55:e5:38: 04:35:28:69:6a:5a:9b:a3:15:59:60:03:de:c7:7c:7d:22:c8: 28:b4:34:60:b1:f2:d3:46:c9:e8:d7:cb:e5:5a:08:a3:59:2a: 64:5a:06:0f:f3:0c:12:58:b6:19:a7:7a:73:59:6a:03:12:3f: d1:56:75:b6:66:f0:3f:c2:c6:c3:5a:d8:b3:a0:18:3b:47:05: fe:07:8c:40:8b:3b:20:95:48:6f:a5:ff:4f:1b:ca:52:5b:33: eb:eb:c0:33:e2:a3:34:e1:6a:e6:f6:ed:3f:d8:ac:d5:b8:6f: 7c:22:f0:8d:47:b6:b1:ab:0c:c8:f5:2d:5c:7f:5b:57:27:dc: c9:18:94:a6:cb:81:43:83:8d:2a:49:5e:95:2c:35:cc:e1:bf: 1c:d9:b4:0b:18:08:c1:26:a3:8e:75:41:7f:c8:aa:36:95:31: 18:ed:3b:56:46:f1:d4:70:60:47:d7:b1:8c:71:75:12:11:d0: 77:af:ef:9a:cc:a7:0c:e2:f5:e8:dc:3f:10:e4:6f:51:08:62: 96:d1:71:30:07:ad:fd:94:b6:b2:d2:1d:f9:68:6c:ec:0c:fd: 04:2d:c7:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2LUziOu9G+y3bSFzr7vX1W4PgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNFODRF NDc3NTMwNjAeFw0yNjA5MDIxOTM3MDFaFw0yNjA5MDMxOTQ1MDFaMDMxMTAvBgNV BAMTKDhDMjE1MDhDOUVEQzZCOTNCQzI5Q0ExNTczRTBFRDg5NjFFMjUwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoiIYbz7CVQITD30iSqn0eJ072 XTmPWEi5yqsAk351cCRzR3AqJuhVkrE1lT+otsrJwpouti4pr+tYBi6K/NvL3dC6 Xo7vNvG52zt/zc/KvQlGnmWPq0vqmCEPpiGFSUSEgUdNO5O0Z5h+M+/WrL3kKqQ9 vVbHlADm70+7X6c8WVy49aBbszP1By4GBVjrlonv3EUnElThGWrtsJjgw6bS6tZA nd7kH5kqzSbXbOZ0Idcb4N7u9bj7s8VlYSICjx9Hr39l+zthyquFa6l9Rf+I7iBL sgsas5AFzYyzLrdNg3ydQLv8xF0fkV/mYLPaN8HcrJujT83ndSSkZzOb4eNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjCFQjJ7ca5O8KcoVc+DtiWHiUAAwHwYDVR0j BBgwFoAUSY/D2wNSimQhRYl0DKE+hOR3UwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE5MjAyMWUtMzkwNC00MTE1LWFmNWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIw MzUyOEE2NDIxNDU4OTc0MENBMTNFODRFNDc3NTMwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThGQzNEQjAzNTI4QTY0MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1 MzA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNF ODRFNDc3NTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXMuAjKl43sIklVh1kBidZhFyKzvnlQzeF6 w7wTmMLrnVXlOAQ1KGlqWpujFVlgA97HfH0iyCi0NGCx8tNGyejXy+VaCKNZKmRa Bg/zDBJYthmnenNZagMSP9FWdbZm8D/CxsNa2LOgGDtHBf4HjECLOyCVSG+l/08b ylJbM+vrwDPiozThaub27T/YrNW4b3wi8I1HtrGrDMj1LVx/W1cn3MkYlKbLgUOD jSpJXpUsNczhvxzZtAsYCMEmo451QX/IqjaVMRjtO1ZG8dRwYEfXsYxxdRIR0Hev 75rMpwzi9ejcPxDkb1EIYpbRcTAHrf2UtrLSHflobOwM/QQtx5c= -----END CERTIFICATE-----Generated at Thu Sep 3 09:29:58 2026 by rpki-client