$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft File: 498B4126F814B92E742642C1F871ADD317C2ABF3.mft (raw, json) Hash identifier: GlPzIndCNDbTzrmAr1zbPy6NyhtEITZZ7as2cPRYM2s= Subject key identifier: 71:BD:F4:0E:B9:0F:33:84:3D:55:B2:56:58:C6:8E:35:66:9E:01:D6 Authority key identifier: 49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 Certificate issuer: /CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Certificate serial: 7389AD72AB1B9B6384BDE824FE7DD20EBD4CEFE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 07:14:03 +0000 Manifest this update: Tue 02 Jun 2026 07:09:03 +0000 Manifest next update: Wed 03 Jun 2026 10:57:03 +0000 Files and hashes: 1: 498B4126F814B92E742642C1F871ADD317C2ABF3.crl (hash: oC7fHPmbG0tNIjuJIStQru1Rh81vrIEw3fieRwZ+BwA=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: sPcPKKDd43Nai9Cg9/ZzkhBod22KktaxwVikLIQy8wc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:89:ad:72:ab:1b:9b:63:84:bd:e8:24:fe:7d:d2:0e:bd:4c:ef:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Validity Not Before: Jun 2 07:09:03 2026 GMT Not After : Jun 3 10:57:03 2026 GMT Subject: CN=71BDF40EB90F33843D55B25658C68E35669E01D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:78:ea:09:a6:a1:9e:e5:ec:69:e6:1b:fd: aa:e9:0c:d3:8b:75:1d:08:6d:23:fd:af:23:e3:f8: 03:b3:ba:0a:42:97:cb:7b:9e:a4:a5:fa:0f:0e:05: c7:7f:dd:43:98:ed:88:69:b1:d1:c5:02:57:c5:38: 65:ff:81:16:74:2d:0a:23:fe:75:27:10:3b:78:d2: ac:44:3a:ff:5f:f6:38:97:fb:92:d7:51:28:03:9c: 47:60:9d:55:f4:4e:b0:2c:3a:e2:68:9c:0c:79:b6: 58:8b:fb:c2:a1:0c:2c:ec:0e:81:48:41:c5:46:0f: 22:41:2f:63:00:75:e7:db:0e:f5:e5:be:90:a3:9f: 1f:37:40:fd:a2:c2:f8:8b:1c:78:b1:35:75:d2:b4: e9:c5:8a:73:3d:57:62:be:f8:0d:f7:12:4b:59:26: 3b:b1:b3:b4:7b:f7:d6:06:cb:c1:e7:99:9e:dc:f6: e6:ec:44:21:81:7f:9e:a1:ad:d9:02:1d:29:1f:7a: 73:01:69:95:8b:06:05:2b:9c:e0:e2:9d:e7:af:ff: 96:9a:b9:9b:75:f2:52:75:67:57:c7:ac:b7:74:0f: 66:de:64:b1:8c:39:1c:ed:39:bb:58:43:a4:c6:c0: 13:bc:d7:7a:09:f2:89:c6:37:27:6c:c1:d1:d9:31: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BD:F4:0E:B9:0F:33:84:3D:55:B2:56:58:C6:8E:35:66:9E:01:D6 X509v3 Authority Key Identifier: keyid:49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:b8:ac:2c:26:61:f6:ff:14:ca:d5:2d:1b:94:e4:f9:c4:83: c8:ef:5c:71:15:25:77:5c:cc:70:1a:c2:76:35:ea:b7:ec:da: cc:d2:aa:18:cf:19:ca:27:5b:b1:7a:ab:4a:71:19:9c:ba:68: 41:d0:64:f5:43:f3:e2:f2:11:10:00:94:30:74:ee:a3:1e:23: b1:52:4d:e9:5e:e4:71:e3:dc:88:f9:4b:97:9c:0a:f7:c3:2c: 0d:13:40:c7:ca:4a:12:c2:8f:19:fe:7f:a0:bb:f5:61:a9:4b: a7:ee:21:82:df:d1:c4:59:38:be:9c:2d:bb:d9:b8:e9:4f:ca: 3e:81:fb:9f:2b:6f:24:9f:95:d2:50:6f:7c:90:0b:f2:1d:00: 8b:da:18:91:08:34:61:1b:72:f2:7d:b0:ae:85:07:f6:4b:4a: d9:5c:1f:92:5c:44:c2:14:5c:7c:14:28:e8:77:fb:0f:5b:11: 63:d5:f9:5f:e5:02:87:3b:08:eb:7a:a1:e8:52:88:00:84:63: 50:de:59:a6:38:06:3b:b1:22:e5:9d:9f:d5:97:74:37:0d:19: b4:55:fb:03:59:c4:cc:b2:a1:d6:2b:41:a5:2b:db:74:ab:02: 65:c1:8c:5c:17:e1:a1:e0:a2:f0:4e:19:10:c8:2f:ff:39:3d: 3d:ca:c8:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4mtcqsbm2OEvegk/n3SDr1M7+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFERDMx N0MyQUJGMzAeFw0yNjA2MDIwNzA5MDNaFw0yNjA2MDMxMDU3MDNaMDMxMTAvBgNV BAMTKDcxQkRGNDBFQjkwRjMzODQzRDU1QjI1NjU4QzY4RTM1NjY5RTAxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/t3jqCaahnuXsaeYb/arpDNOL dR0IbSP9ryPj+AOzugpCl8t7nqSl+g8OBcd/3UOY7YhpsdHFAlfFOGX/gRZ0LQoj /nUnEDt40qxEOv9f9jiX+5LXUSgDnEdgnVX0TrAsOuJonAx5tliL+8KhDCzsDoFI QcVGDyJBL2MAdefbDvXlvpCjnx83QP2iwviLHHixNXXStOnFinM9V2K++A33EktZ Jjuxs7R799YGy8HnmZ7c9ubsRCGBf56hrdkCHSkfenMBaZWLBgUrnODineev/5aa uZt18lJ1Z1fHrLd0D2beZLGMORztObtYQ6TGwBO813oJ8onGNydswdHZMeIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcb30DrkPM4Q9VbJWWMaONWaeAdYwHwYDVR0j BBgwFoAUSYtBJvgUuS50JkLB+HGt0xfCq/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliMWU3ZjctMWY0Yi00MWE2LTkyNTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZG ODE0QjkyRTc0MjY0MkMxRjg3MUFERDMxN0MyQUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThCNDEyNkY4MTRCOTJFNzQyNjQyQzFGODcxQUREMzE3QzJB QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFE RDMxN0MyQUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOe4rCwmYfb/FMrVLRuU5PnEg8jvXHEVJXdc zHAawnY16rfs2szSqhjPGconW7F6q0pxGZy6aEHQZPVD8+LyERAAlDB07qMeI7FS Tele5HHj3Ij5S5ecCvfDLA0TQMfKShLCjxn+f6C79WGpS6fuIYLf0cRZOL6cLbvZ uOlPyj6B+58rbySfldJQb3yQC/IdAIvaGJEINGEbcvJ9sK6FB/ZLStlcH5JcRMIU XHwUKOh3+w9bEWPV+V/lAoc7COt6oehSiACEY1DeWaY4BjuxIuWdn9WXdDcNGbRV +wNZxMyyodYrQaUr23SrAmXBjFwX4aHgovBOGRDIL/85PT3KyDU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:06 2026 by rpki-client