$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft File: 498B4126F814B92E742642C1F871ADD317C2ABF3.mft (raw, json) Hash identifier: NeOUyl3WybleuO6o2LdXDlFhoeclgHBEhi/8xu/fuRc= Subject key identifier: D3:1D:DE:B4:62:60:79:1C:0D:E6:51:7C:07:82:F8:92:E6:95:71:FF Authority key identifier: 49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 Certificate issuer: /CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Certificate serial: 36076C0BB2F1E8DDE30D4F37360C35F645925205 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 20:16:15 +0000 Manifest this update: Mon 20 Jul 2026 20:11:15 +0000 Manifest next update: Tue 21 Jul 2026 23:09:15 +0000 Files and hashes: 1: 498B4126F814B92E742642C1F871ADD317C2ABF3.crl (hash: LCH4dR362T4cXmX+A/eUL4UIrJa5OQJ+cHhoO9u3oyQ=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: sPcPKKDd43Nai9Cg9/ZzkhBod22KktaxwVikLIQy8wc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:07:6c:0b:b2:f1:e8:dd:e3:0d:4f:37:36:0c:35:f6:45:92:52:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Validity Not Before: Jul 20 20:11:15 2026 GMT Not After : Jul 21 23:09:15 2026 GMT Subject: CN=D31DDEB46260791C0DE6517C0782F892E69571FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:ef:f1:4e:ab:10:39:af:4a:b4:29:ae:30: dd:a6:c9:35:8b:40:96:b6:0a:7f:ac:d1:30:da:4c: a7:e5:7e:b7:9e:3b:44:db:ec:31:e1:f7:6a:64:40: 8f:ca:bd:42:31:93:91:02:8d:f6:85:a5:47:de:df: 2a:0e:26:fa:7d:99:1c:3a:af:74:f6:9f:2e:53:5e: 63:4d:e9:00:b7:79:ea:bb:7d:9e:a7:ae:45:b7:b7: a0:a9:18:e9:e8:1d:07:58:2c:8e:ff:68:aa:33:d2: 98:7d:27:60:77:b0:79:70:58:77:ab:0b:71:22:01: dc:e5:ee:e0:b5:0e:85:39:87:5e:9f:87:0e:4c:d5: ec:d5:d8:9f:34:54:4a:d7:e8:d7:41:0e:1e:f4:7d: ad:93:e3:81:45:b2:93:3d:b7:71:6f:50:30:d7:1e: 33:bc:6f:58:a5:2f:55:f5:ac:dd:8f:8b:c8:44:1a: 03:03:2c:d7:1f:00:ad:b0:0a:fc:2f:92:c0:c9:16: c3:5f:ce:85:8d:b7:47:bd:5e:44:70:3a:30:81:7d: 3e:96:0b:37:c8:0f:20:eb:66:cb:1e:b8:fd:56:01: aa:73:bb:e4:a5:b1:ca:94:7b:a7:be:ce:13:b7:8a: 43:3e:b7:00:88:c6:65:ee:81:47:b7:8c:74:8c:c0: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1D:DE:B4:62:60:79:1C:0D:E6:51:7C:07:82:F8:92:E6:95:71:FF X509v3 Authority Key Identifier: keyid:49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d8:77:66:a6:f7:2c:35:4a:07:3d:f5:d5:15:f8:0f:b2:99: 40:4b:ae:dd:ff:58:3b:91:3c:9b:01:22:3c:ed:07:27:67:9a: 7e:a4:c5:13:aa:e1:de:3b:28:fd:6e:6a:27:d2:dd:eb:2f:37: 1e:50:5b:4e:a4:84:64:90:aa:a7:55:bb:07:df:5e:a4:26:38: f2:e1:0a:a3:61:63:f4:a2:0d:bd:19:8f:1d:14:02:10:07:1a: 79:b6:6b:f1:83:c3:9b:d8:69:9b:86:ca:19:2a:e5:ba:8e:8e: 95:35:8b:f4:45:a9:5d:7f:76:e0:79:39:d4:c3:f3:32:01:54: 01:5e:6f:d9:12:e5:39:e7:53:37:c4:f9:15:89:41:12:1d:13: b1:ea:1a:a6:b9:05:76:9f:b8:44:63:5b:bc:0b:91:b1:c4:cd: 01:22:ef:82:c5:08:14:b2:18:07:5c:49:f6:9e:7c:02:a0:23: b9:2d:6f:24:51:2f:2b:bf:fc:d3:68:7c:e7:c2:04:c5:73:fe: 34:67:00:a7:85:9a:93:c5:91:28:74:6c:f5:32:58:7d:58:c5: aa:b9:59:aa:11:92:30:7a:ba:7f:61:57:a1:af:f4:4b:b2:34: b2:2f:55:b7:ee:d7:78:0d:73:09:a8:db:d1:66:36:eb:2f:d9: 9f:04:23:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgdsC7Lx6N3jDU83Ngw19kWSUgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFERDMx N0MyQUJGMzAeFw0yNjA3MjAyMDExMTVaFw0yNjA3MjEyMzA5MTVaMDMxMTAvBgNV BAMTKEQzMURERUI0NjI2MDc5MUMwREU2NTE3QzA3ODJGODkyRTY5NTcxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMO/xTqsQOa9KtCmuMN2myTWL QJa2Cn+s0TDaTKflfreeO0Tb7DHh92pkQI/KvUIxk5ECjfaFpUfe3yoOJvp9mRw6 r3T2ny5TXmNN6QC3eeq7fZ6nrkW3t6CpGOnoHQdYLI7/aKoz0ph9J2B3sHlwWHer C3EiAdzl7uC1DoU5h16fhw5M1ezV2J80VErX6NdBDh70fa2T44FFspM9t3FvUDDX HjO8b1ilL1X1rN2Pi8hEGgMDLNcfAK2wCvwvksDJFsNfzoWNt0e9XkRwOjCBfT6W CzfIDyDrZsseuP1WAapzu+SlscqUe6e+zhO3ikM+twCIxmXugUe3jHSMwOWFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0x3etGJgeRwN5lF8B4L4kuaVcf8wHwYDVR0j BBgwFoAUSYtBJvgUuS50JkLB+HGt0xfCq/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliMWU3ZjctMWY0Yi00MWE2LTkyNTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZG ODE0QjkyRTc0MjY0MkMxRjg3MUFERDMxN0MyQUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThCNDEyNkY4MTRCOTJFNzQyNjQyQzFGODcxQUREMzE3QzJB QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFE RDMxN0MyQUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjYd2am9yw1Sgc99dUV+A+ymUBLrt3/WDuR PJsBIjztBydnmn6kxROq4d47KP1uaifS3esvNx5QW06khGSQqqdVuwffXqQmOPLh CqNhY/SiDb0Zjx0UAhAHGnm2a/GDw5vYaZuGyhkq5bqOjpU1i/RFqV1/duB5OdTD 8zIBVAFeb9kS5TnnUzfE+RWJQRIdE7HqGqa5BXafuERjW7wLkbHEzQEi74LFCBSy GAdcSfaefAKgI7ktbyRRLyu//NNofOfCBMVz/jRnAKeFmpPFkSh0bPUyWH1Yxaq5 WaoRkjB6un9hV6Gv9EuyNLIvVbfu13gNcwmo29FmNusv2Z8EI14= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:34 2026 by rpki-client