$ rpki-client -vvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft File: 498FC3DB03528A64214589740CA13E84E4775306.mft (raw, json) Hash identifier: HbukdyI5PjjOJP52NYzPmVzF4BvDsXq/U/KZxQSrBag= Subject key identifier: 40:C5:51:E6:C0:A3:2B:FD:95:61:D1:97:98:E5:26:EA:67:D5:6D:E1 Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306 Certificate serial: 310D709F7E7A5A5F44ECFA5592D3B167A6880387 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:16:46 +0000 Manifest this update: Fri 19 Jun 2026 17:11:46 +0000 Manifest next update: Sat 20 Jun 2026 17:53:46 +0000 Files and hashes: 1: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: W6PaD9jD2W7QLE6L053n0v5wsFLq3jDzK+h9oZCa+Ww=) 2: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: sbRZOMY4qXofH+gweW2UQPxdhQAQJDKmoZuKYzDjDd8=) 3: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: y22RwJlcQ0nD5K4HN58evr6z1YokNMr+L0lhKw+Cv9w=) 4: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: OOkicQA5K86MoBkSuxZ02oUQ15K4MqZ+HWDN0IRHS5w=) 5: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U=) 6: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=) 7: 498FC3DB03528A64214589740CA13E84E4775306.crl (hash: G2tYp7nlfWt4BnrAiLk1BZ2fhtoOFTpFVEPOeOnHXZE=) 8: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0d:70:9f:7e:7a:5a:5f:44:ec:fa:55:92:d3:b1:67:a6:88:03:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306 Validity Not Before: Jun 19 17:11:46 2026 GMT Not After : Jun 20 17:53:46 2026 GMT Subject: CN=40C551E6C0A32BFD9561D19798E526EA67D56DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:0e:1c:7f:d9:9a:db:ce:24:37:c3:9d:87: af:fe:74:f1:35:0e:75:1c:7b:07:22:84:4a:20:43: 5d:85:ab:62:fa:ec:f5:7f:07:97:21:30:3a:40:a0: 40:bb:1f:58:0e:75:00:d3:3b:25:27:ac:06:3d:d2: 69:54:1e:bf:64:78:6e:91:44:e5:6f:7b:fc:34:69: 44:a1:86:ad:dd:bc:36:92:b9:53:d4:4f:ff:f9:f4: cd:84:ac:9b:75:ed:8a:42:0f:1e:4b:29:5d:76:8e: 98:f7:fb:1e:0c:d7:ac:ff:d8:dd:a9:f8:7a:08:b6: 09:c4:28:e5:a8:9d:75:10:8d:aa:93:82:4f:89:8f: cb:d0:86:47:7b:1a:8b:0b:de:1a:e8:80:9c:87:ec: 7a:87:4e:35:8f:dd:bc:07:ba:88:6f:61:be:71:83: 7d:4f:08:ff:05:bb:cd:c4:3d:7f:c7:02:5d:32:42: 44:d3:32:15:bd:5f:a1:5e:9c:b7:8e:a9:4e:2c:43: 6c:ff:09:f9:4e:a9:67:09:8e:f4:5d:b3:23:3e:76: 71:f0:c7:97:82:75:d9:27:3a:f5:51:03:a7:cc:63: e7:d5:c2:ba:f5:1f:bf:69:d1:cb:0a:b8:09:ee:34: 84:95:d2:f2:ab:48:e8:17:f4:bf:63:fa:d1:1c:df: 5a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C5:51:E6:C0:A3:2B:FD:95:61:D1:97:98:E5:26:EA:67:D5:6D:E1 X509v3 Authority Key Identifier: keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ce:36:8e:39:7b:94:04:a1:35:ef:af:c8:50:60:b2:ec:3b: 35:ce:57:56:dd:13:39:b7:f0:a9:8d:78:5a:2b:86:78:41:9e: a4:01:1e:db:e7:5c:a9:28:f2:56:3b:a6:bb:94:70:f5:c5:5b: f7:43:32:92:91:c9:72:39:6b:86:45:3b:31:58:38:14:63:96: b5:c2:82:06:5e:99:e6:cd:d6:b3:5d:2a:b1:d1:94:2a:89:35: f5:52:78:fd:e3:5b:19:3b:b0:b8:0a:72:67:fc:9d:a5:e5:5d: 9d:2c:0d:55:8e:bd:cd:b9:be:d2:0f:68:32:af:99:c7:fb:13: 4e:3d:48:ce:d2:28:27:a9:17:75:60:ce:83:c2:2b:e4:b2:f8: 36:cc:78:86:0c:fc:22:70:82:8c:a3:fe:8f:9c:d3:43:33:13: 07:52:00:42:7f:db:25:35:6c:fa:bc:83:1f:5a:55:53:61:95: 7b:27:2a:55:ae:f9:50:53:fe:7c:57:02:0a:08:62:17:bd:00: 64:85:5f:12:6f:b0:ac:2a:00:71:e8:42:c3:37:a9:ee:42:20: bc:e5:c4:58:19:05:14:3b:72:5c:e9:e1:b5:d1:44:03:77:64: 7e:e5:30:a6:6d:09:f2:e2:54:7d:3d:bb:c6:58:b9:30:f2:15: ec:67:b6:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQ1wn356Wl9E7PpVktOxZ6aIA4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNFODRF NDc3NTMwNjAeFw0yNjA2MTkxNzExNDZaFw0yNjA2MjAxNzUzNDZaMDMxMTAvBgNV BAMTKDQwQzU1MUU2QzBBMzJCRkQ5NTYxRDE5Nzk4RTUyNkVBNjdENTZERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeQ4cf9ma284kN8Odh6/+dPE1 DnUcewcihEogQ12Fq2L67PV/B5chMDpAoEC7H1gOdQDTOyUnrAY90mlUHr9keG6R ROVve/w0aUShhq3dvDaSuVPUT//59M2ErJt17YpCDx5LKV12jpj3+x4M16z/2N2p +HoItgnEKOWonXUQjaqTgk+Jj8vQhkd7GosL3hrogJyH7HqHTjWP3bwHuohvYb5x g31PCP8Fu83EPX/HAl0yQkTTMhW9X6FenLeOqU4sQ2z/CflOqWcJjvRdsyM+dnHw x5eCddknOvVRA6fMY+fVwrr1H79p0csKuAnuNISV0vKrSOgX9L9j+tEc31opAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQMVR5sCjK/2VYdGXmOUm6mfVbeEwHwYDVR0j BBgwFoAUSY/D2wNSimQhRYl0DKE+hOR3UwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE5MjAyMWUtMzkwNC00MTE1LWFmNWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIw MzUyOEE2NDIxNDU4OTc0MENBMTNFODRFNDc3NTMwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThGQzNEQjAzNTI4QTY0MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1 MzA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNF ODRFNDc3NTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/ONo45e5QEoTXvr8hQYLLsOzXOV1bdEzm3 8KmNeForhnhBnqQBHtvnXKko8lY7pruUcPXFW/dDMpKRyXI5a4ZFOzFYOBRjlrXC ggZemebN1rNdKrHRlCqJNfVSeP3jWxk7sLgKcmf8naXlXZ0sDVWOvc25vtIPaDKv mcf7E049SM7SKCepF3VgzoPCK+Sy+DbMeIYM/CJwgoyj/o+c00MzEwdSAEJ/2yU1 bPq8gx9aVVNhlXsnKlWu+VBT/nxXAgoIYhe9AGSFXxJvsKwqAHHoQsM3qe5CILzl xFgZBRQ7clzp4bXRRAN3ZH7lMKZtCfLiVH09u8ZYuTDyFexntow= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:12 2026 by rpki-client