$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft File: 499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft (raw, json) Hash identifier: 638M6JbWX9VsxUHfCpGIv0Q9zSbSFpdaVGXhPSMO+Jc= Subject key identifier: 91:4D:9C:7B:8D:95:C7:AB:95:54:BF:0B:72:D0:9C:09:17:2A:14:A9 Authority key identifier: 49:99:50:14:1E:5E:3A:04:03:B5:39:ED:29:BB:3B:93:BC:E2:C1:6C Certificate issuer: /CN=499950141E5E3A0403B539ED29BB3B93BCE2C16C Certificate serial: 174BABDA40401B6BF54B8E73365E14F1B38752C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft Manifest number: BA Signing time: Wed 16 Sep 2026 22:47:05 +0000 Manifest this update: Wed 16 Sep 2026 22:42:05 +0000 Manifest next update: Thu 17 Sep 2026 23:50:05 +0000 Files and hashes: 1: 499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl (hash: LzYNZcof7peaOAOCqC/tz/AvpUsZH+iXrHfNP+9NfGk=) 2: 3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa (hash: H/EU/GM9zbZ8LDvAdbWVszvkAPkqKeCYb9wj1+YBJDk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4b:ab:da:40:40:1b:6b:f5:4b:8e:73:36:5e:14:f1:b3:87:52:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499950141E5E3A0403B539ED29BB3B93BCE2C16C Validity Not Before: Sep 16 22:42:05 2026 GMT Not After : Sep 17 23:50:05 2026 GMT Subject: CN=914D9C7B8D95C7AB9554BF0B72D09C09172A14A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:cf:e8:56:dc:d7:09:c0:a2:e1:cb:b8:9d: 53:9f:7b:77:d3:91:71:79:b5:51:40:0b:bc:15:fa: 42:ca:2e:77:ed:f7:b0:83:13:7a:02:e1:58:a2:16: 96:bb:77:1d:50:90:8d:b3:38:41:22:27:39:20:28: 15:0d:62:b5:dd:76:a9:98:7a:e9:a8:41:c7:09:ac: f3:ea:68:78:55:f9:d0:76:67:4d:0e:1c:d8:ca:b2: eb:bb:75:eb:cc:2a:86:92:3e:c7:8b:f1:5b:b3:60: 61:56:91:d5:2d:c9:79:97:35:d1:bd:f3:20:60:97: 4a:5c:9f:e1:47:ee:b4:e2:39:73:64:6d:c0:60:bb: 89:77:34:37:f9:29:a8:cc:08:02:64:e0:c9:be:b5: ca:6e:5d:3a:33:0f:bf:5d:a1:0a:93:96:53:ba:dd: ec:3c:88:01:db:33:b7:ad:9f:a5:b9:87:b0:a7:e0: a7:4e:1c:4d:d0:4e:d1:00:30:87:5e:fb:9a:b0:80: d4:cf:f7:56:78:ca:40:ba:8a:ee:b5:c4:72:18:7c: b1:20:e4:27:75:79:85:c2:6f:e9:f0:82:54:1e:67: 79:f1:33:d0:6b:ba:bb:54:2b:36:3b:ab:18:9b:57: e1:7a:94:d8:aa:10:7f:bc:fc:91:40:7e:9b:ea:18: a7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4D:9C:7B:8D:95:C7:AB:95:54:BF:0B:72:D0:9C:09:17:2A:14:A9 X509v3 Authority Key Identifier: keyid:49:99:50:14:1E:5E:3A:04:03:B5:39:ED:29:BB:3B:93:BC:E2:C1:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d3:22:4c:ef:e1:41:29:1a:48:55:5d:a2:fc:14:16:9f:07: a2:16:20:12:76:fe:4f:c9:a5:e0:77:e7:95:3c:b2:fd:1f:40: 0f:d3:3f:22:00:a1:eb:6f:aa:0c:fd:89:ef:13:a1:7f:ad:fd: 6a:55:ea:e2:c7:5a:84:25:ef:c6:b5:a9:4c:ee:f5:31:d9:c1: a4:bc:2b:a3:b5:a2:25:b3:b2:5a:eb:2f:2f:d4:7e:d3:04:96: 3f:be:c5:1f:20:2c:6b:fa:60:5c:94:4c:b6:a2:37:d7:2c:a1: 08:1d:85:67:5e:9b:5e:31:95:ff:2f:df:bc:32:ca:a5:ea:ab: 1d:30:27:9c:99:fe:e0:5c:d6:4a:df:5a:5f:b9:60:34:7e:25: 47:cc:d0:b6:22:dd:11:e8:9d:15:61:bc:45:87:95:aa:0c:f6: 62:31:4e:6e:e0:2e:34:ee:5c:b3:13:65:aa:07:31:af:06:68: ac:db:23:de:3e:6d:67:a9:44:93:15:0d:21:07:1d:43:d3:56: 59:0c:40:7f:e9:ef:83:80:3b:27:47:55:c8:98:b1:40:fb:bb: 0c:c5:b6:ab:3f:f2:f3:44:1f:88:f0:cd:d8:01:66:e6:ac:c4: 8d:f3:4e:40:2a:5a:a7:22:04:44:69:5f:2c:20:25:9c:05:cf: 80:e2:b5:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0ur2kBAG2v1S45zNl4U8bOHUsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5OTUwMTQxRTVFM0EwNDAzQjUzOUVEMjlCQjNCOTNC Q0UyQzE2QzAeFw0yNjA5MTYyMjQyMDVaFw0yNjA5MTcyMzUwMDVaMDMxMTAvBgNV BAMTKDkxNEQ5QzdCOEQ5NUM3QUI5NTU0QkYwQjcyRDA5QzA5MTcyQTE0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUD8/oVtzXCcCi4cu4nVOfe3fT kXF5tVFAC7wV+kLKLnft97CDE3oC4ViiFpa7dx1QkI2zOEEiJzkgKBUNYrXddqmY eumoQccJrPPqaHhV+dB2Z00OHNjKsuu7devMKoaSPseL8VuzYGFWkdUtyXmXNdG9 8yBgl0pcn+FH7rTiOXNkbcBgu4l3NDf5KajMCAJk4Mm+tcpuXTozD79doQqTllO6 3ew8iAHbM7etn6W5h7Cn4KdOHE3QTtEAMIde+5qwgNTP91Z4ykC6iu61xHIYfLEg 5Cd1eYXCb+nwglQeZ3nxM9BrurtUKzY7qxibV+F6lNiqEH+8/JFAfpvqGKfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkU2ce42Vx6uVVL8LctCcCRcqFKkwHwYDVR0j BBgwFoAUSZlQFB5eOgQDtTntKbs7k7ziwWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzUxNGEwODktNjViNi00NTg1LWFmODQtM2Y4MmIxNjljMjdhLzAvNDk5OTUwMTQx RTVFM0EwNDAzQjUzOUVEMjlCQjNCOTNCQ0UyQzE2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTk5NTAxNDFFNUUzQTA0MDNCNTM5RUQyOUJCM0I5M0JDRTJD MTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzUxNGEwODktNjViNi00NTg1LWFm ODQtM2Y4MmIxNjljMjdhLzAvNDk5OTUwMTQxRTVFM0EwNDAzQjUzOUVEMjlCQjNC OTNCQ0UyQzE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPTIkzv4UEpGkhVXaL8FBafB6IWIBJ2/k/J peB355U8sv0fQA/TPyIAoetvqgz9ie8ToX+t/WpV6uLHWoQl78a1qUzu9THZwaS8 K6O1oiWzslrrLy/UftMElj++xR8gLGv6YFyUTLaiN9csoQgdhWdem14xlf8v37wy yqXqqx0wJ5yZ/uBc1krfWl+5YDR+JUfM0LYi3RHonRVhvEWHlaoM9mIxTm7gLjTu XLMTZaoHMa8GaKzbI94+bWepRJMVDSEHHUPTVlkMQH/p74OAOydHVciYsUD7uwzF tqs/8vNEH4jwzdgBZuasxI3zTkAqWqciBERpXywgJZwFz4DitcM= -----END CERTIFICATE-----Generated at Thu Sep 17 10:21:17 2026 by rpki-client