$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft File: 498FC3DB03528A64214589740CA13E84E4775306.mft (raw, json) Hash identifier: TtGjALOD0EJfQOGvFgwqqxVBe6PKtCFT9LHnbYgqr1M= Subject key identifier: D0:B2:54:9F:B2:6F:50:D8:65:99:55:7F:96:6C:3D:5B:22:51:F0:3F Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306 Certificate serial: 0DA974CC829D1D5986C95796AA292DA307799267 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft Manifest number: ED Signing time: Sun 25 Oct 2026 21:54:11 +0000 Manifest this update: Sun 25 Oct 2026 21:49:11 +0000 Manifest next update: Mon 26 Oct 2026 22:08:11 +0000 Files and hashes: 1: 498FC3DB03528A64214589740CA13E84E4775306.crl (hash: X69G4Iz2cdww9J2pVQJVHgw8BkLoS47aLwoYfXLkxoQ=) 2: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=) 3: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: y22RwJlcQ0nD5K4HN58evr6z1YokNMr+L0lhKw+Cv9w=) 4: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U=) 5: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=) 6: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: W6PaD9jD2W7QLE6L053n0v5wsFLq3jDzK+h9oZCa+Ww=) 7: 323430373a613563303a3130303a3a2f34382d3438203d3e20313432333339.roa (hash: NxZyATvn5vq2FKc65c4Nnkb5SqJdxZb7IhVwK0ixCrY=) 8: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: sbRZOMY4qXofH+gweW2UQPxdhQAQJDKmoZuKYzDjDd8=) 9: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: OOkicQA5K86MoBkSuxZ02oUQ15K4MqZ+HWDN0IRHS5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 22:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a9:74:cc:82:9d:1d:59:86:c9:57:96:aa:29:2d:a3:07:79:92:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306 Validity Not Before: Oct 25 21:49:11 2026 GMT Not After : Oct 26 22:08:11 2026 GMT Subject: CN=D0B2549FB26F50D86599557F966C3D5B2251F03F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:f4:46:f7:06:07:57:37:f1:11:27:fd:48: de:d4:93:34:27:7e:91:01:c1:7a:73:05:5f:14:0b: 58:6d:07:69:35:7f:23:91:36:e1:00:83:f4:1b:0d: 1c:77:5f:63:a7:24:2a:38:b4:ec:0c:4c:8b:7d:fc: 87:75:99:33:c9:1c:05:a2:14:49:dd:c5:2f:23:1e: 68:d9:e8:00:7c:1a:18:94:f4:03:ed:c4:a0:65:dd: d0:91:48:7c:c3:aa:c3:43:97:c8:c3:95:3b:1b:33: 9d:96:77:01:95:5d:1e:42:11:10:ce:70:f6:7d:f8: c9:d6:b5:e7:5b:4a:a9:63:bf:d8:56:55:9f:80:05: 53:cf:09:c9:e6:a5:2a:d6:35:ec:3a:a0:c1:92:d6: 29:ae:ab:17:14:f9:7a:40:be:51:8e:a2:19:6c:91: 07:fb:17:57:ae:66:a8:f6:88:69:2e:90:14:85:27: 13:1d:8b:bb:9e:68:de:bc:fa:8c:37:42:07:7e:c7: c0:c8:e8:0e:5e:c4:be:bd:f1:9e:19:4b:73:98:a8: f2:65:87:01:8f:03:1a:ef:63:22:dd:9e:33:e6:91: 8a:07:78:86:67:2a:89:10:2a:57:cd:13:eb:eb:01: 8d:6f:d6:ee:1a:ca:b5:92:a1:a8:80:a9:5d:40:1e: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B2:54:9F:B2:6F:50:D8:65:99:55:7F:96:6C:3D:5B:22:51:F0:3F X509v3 Authority Key Identifier: keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8a:42:f7:4a:ba:ad:d7:c8:4c:4b:ab:21:a4:d4:01:a8:11: 1d:fa:8c:6b:0b:69:f2:20:fd:71:fb:a9:10:88:13:82:dd:7f: 25:b0:2e:37:43:09:b6:9d:bf:c3:af:01:2f:b7:c0:09:82:03: a9:a5:3f:2e:b7:70:6b:75:44:39:43:5b:1c:80:6b:c1:48:39: d2:7d:cf:cf:ec:1d:50:9d:c5:50:23:f5:bd:e9:26:95:94:77: 14:79:4f:86:49:b0:58:b5:fc:0a:d9:3f:aa:c8:a8:a5:2d:41: 83:eb:b3:59:18:f5:c6:f4:b1:cc:0c:0e:64:30:9b:94:8a:42: dd:81:cd:5d:5d:93:f6:88:41:ce:bb:3e:5e:78:20:fb:dd:a0: 00:aa:86:90:09:f1:8f:30:04:dd:b5:7e:22:65:67:52:72:5b: b3:9f:ed:c5:af:b3:5b:f0:ec:a2:3c:78:83:6a:37:b1:8a:e9: f9:4e:e5:9e:d3:b0:ae:52:a9:17:22:22:3e:d9:dc:7e:ed:bd: 65:07:89:16:a5:90:52:8c:75:7b:98:03:9e:c7:c5:cb:44:57: d4:ad:62:e5:55:04:12:3f:6a:ec:ec:d7:44:d2:08:50:54:6a: b0:f6:69:bf:df:7e:10:f5:f8:a1:39:ff:56:38:dc:fb:4d:8c: 56:52:69:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDal0zIKdHVmGyVeWqiktowd5kmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNFODRF NDc3NTMwNjAeFw0yNjEwMjUyMTQ5MTFaFw0yNjEwMjYyMjA4MTFaMDMxMTAvBgNV BAMTKEQwQjI1NDlGQjI2RjUwRDg2NTk5NTU3Rjk2NkMzRDVCMjI1MUYwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEk/RG9wYHVzfxESf9SN7UkzQn fpEBwXpzBV8UC1htB2k1fyORNuEAg/QbDRx3X2OnJCo4tOwMTIt9/Id1mTPJHAWi FEndxS8jHmjZ6AB8GhiU9APtxKBl3dCRSHzDqsNDl8jDlTsbM52WdwGVXR5CERDO cPZ9+MnWtedbSqljv9hWVZ+ABVPPCcnmpSrWNew6oMGS1imuqxcU+XpAvlGOohls kQf7F1euZqj2iGkukBSFJxMdi7ueaN68+ow3Qgd+x8DI6A5exL698Z4ZS3OYqPJl hwGPAxrvYyLdnjPmkYoHeIZnKokQKlfNE+vrAY1v1u4ayrWSoaiAqV1AHq8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0LJUn7JvUNhlmVV/lmw9WyJR8D8wHwYDVR0j BBgwFoAUSY/D2wNSimQhRYl0DKE+hOR3UwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE5MjAyMWUtMzkwNC00MTE1LWFmNWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIw MzUyOEE2NDIxNDU4OTc0MENBMTNFODRFNDc3NTMwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThGQzNEQjAzNTI4QTY0MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1 MzA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNF ODRFNDc3NTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOKQvdKuq3XyExLqyGk1AGoER36jGsLafIg /XH7qRCIE4LdfyWwLjdDCbadv8OvAS+3wAmCA6mlPy63cGt1RDlDWxyAa8FIOdJ9 z8/sHVCdxVAj9b3pJpWUdxR5T4ZJsFi1/ArZP6rIqKUtQYPrs1kY9cb0scwMDmQw m5SKQt2BzV1dk/aIQc67Pl54IPvdoACqhpAJ8Y8wBN21fiJlZ1JyW7Of7cWvs1vw 7KI8eINqN7GK6flO5Z7TsK5SqRciIj7Z3H7tvWUHiRalkFKMdXuYA57HxctEV9St YuVVBBI/auzs10TSCFBUarD2ab/ffhD1+KE5/1Y43PtNjFZSaew= -----END CERTIFICATE-----Generated at Mon Oct 26 11:21:04 2026 by rpki-client