$ rpki-client -vvf rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft File: 499BF8D17B00F9C4F71ED17D51782A65C271B666.mft (raw, json) Hash identifier: 2qfc6KTXoJ7hhGZdJhsygnXOeASblG9lCxm6g/Gr1y0= Subject key identifier: 29:F8:47:F9:9F:1F:FF:88:D3:55:D6:AF:C7:CA:4A:4F:2B:1E:59:A4 Authority key identifier: 49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 Certificate issuer: /CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Certificate serial: 28C537D9551E9FCD70120140DACCBA4DE51A326A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 22:58:44 +0000 Manifest this update: Fri 19 Jun 2026 22:53:44 +0000 Manifest next update: Sun 21 Jun 2026 00:05:44 +0000 Files and hashes: 1: 499BF8D17B00F9C4F71ED17D51782A65C271B666.crl (hash: gNjSX8FDn2cKBKMr2QjM5+19tG3+RFHXMNVRREDH/r0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c5:37:d9:55:1e:9f:cd:70:12:01:40:da:cc:ba:4d:e5:1a:32:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Validity Not Before: Jun 19 22:53:44 2026 GMT Not After : Jun 21 00:05:44 2026 GMT Subject: CN=29F847F99F1FFF88D355D6AFC7CA4A4F2B1E59A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:7b:e6:37:c7:b2:8e:a9:7a:8b:ff:f6:a0: 73:63:8f:f2:dc:85:47:ea:67:36:4d:bc:58:a4:b2: 2b:92:dc:29:ae:d2:1b:18:ed:36:f6:73:ad:97:78: 73:2e:49:d0:4f:34:f7:42:8c:f5:be:b4:d8:5b:a4: 2c:74:82:e1:69:11:5a:2b:4d:55:3f:05:64:87:23: bd:27:5c:86:76:c6:b4:d9:da:73:ac:d2:29:f9:24: 80:84:3b:11:0f:b6:d9:95:c8:ff:3b:60:47:0a:f7: ca:9d:ed:6c:6b:61:5b:a8:4e:53:7f:14:cc:46:43: dc:3b:db:d4:53:ee:c1:67:0c:95:5a:01:ef:3e:25: 0f:cb:25:3e:54:1a:ed:ff:29:ef:5d:ce:f7:f0:7c: 6b:05:34:80:75:92:2b:10:46:72:16:d6:38:c5:f2: 4e:02:3a:f9:46:81:42:74:57:a1:6e:6d:9f:00:70: bc:46:67:38:78:87:23:2a:55:8f:be:5d:20:0f:7e: 7f:b4:63:53:c5:83:56:1d:2a:45:68:4c:cf:1f:ac: 36:09:79:04:ee:18:36:0f:e8:a3:28:88:11:53:dd: a1:33:d2:20:a1:57:65:ef:e9:04:4a:6b:e8:9d:88: ed:1f:0d:ac:a1:aa:0e:76:fb:2f:06:b3:29:2c:30: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F8:47:F9:9F:1F:FF:88:D3:55:D6:AF:C7:CA:4A:4F:2B:1E:59:A4 X509v3 Authority Key Identifier: keyid:49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:02:f4:86:b9:5b:68:10:46:b9:94:77:68:a1:21:c8:a4:25: 7e:f8:3a:b4:02:a6:1d:7a:5e:bb:ea:ab:e1:a7:a3:82:9f:50: 1e:05:77:cd:75:74:94:53:de:65:15:d0:7b:bd:da:53:50:32: bd:92:5e:cb:44:56:ff:69:8b:fe:8d:4a:4b:bf:05:a7:f5:df: 69:db:f6:6b:a1:14:70:8b:01:c9:35:8b:9f:38:32:42:15:ef: 16:2c:3e:2e:71:db:ce:98:16:3c:1e:a0:f8:d8:83:eb:83:ec: 14:b5:9e:30:37:24:dc:51:4c:81:23:ad:da:0f:81:62:81:e5: 8b:cb:04:f6:d3:72:5e:eb:c2:5b:d7:db:5a:d0:0d:9a:c1:74: 03:4a:f8:6f:b3:97:2a:5b:3e:d4:fd:6a:63:b1:40:8b:2b:eb: f5:b2:07:38:2d:ab:82:74:8e:77:96:28:6c:db:75:57:ce:2f: 45:2d:55:31:f8:25:52:02:e1:fa:38:35:41:30:b2:1d:0a:12: f0:71:5f:3c:79:05:66:0c:d7:4e:8e:2d:67:aa:a9:5e:ca:c3: 7c:a0:6d:c9:00:3a:6b:97:50:5e:5c:d5:8a:86:54:fc:e1:95: e8:7a:fa:c9:b4:44:fe:0f:61:91:8a:27:5c:9a:18:e4:74:d9: bb:b3:5d:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMU32VUen81wEgFA2sy6TeUaMmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVD MjcxQjY2NjAeFw0yNjA2MTkyMjUzNDRaFw0yNjA2MjEwMDA1NDRaMDMxMTAvBgNV BAMTKDI5Rjg0N0Y5OUYxRkZGODhEMzU1RDZBRkM3Q0E0QTRGMkIxRTU5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqL3vmN8eyjql6i//2oHNjj/Lc hUfqZzZNvFiksiuS3Cmu0hsY7Tb2c62XeHMuSdBPNPdCjPW+tNhbpCx0guFpEVor TVU/BWSHI70nXIZ2xrTZ2nOs0in5JICEOxEPttmVyP87YEcK98qd7WxrYVuoTlN/ FMxGQ9w729RT7sFnDJVaAe8+JQ/LJT5UGu3/Ke9dzvfwfGsFNIB1kisQRnIW1jjF 8k4COvlGgUJ0V6FubZ8AcLxGZzh4hyMqVY++XSAPfn+0Y1PFg1YdKkVoTM8frDYJ eQTuGDYP6KMoiBFT3aEz0iChV2Xv6QRKa+idiO0fDayhqg52+y8GsyksMFJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfhH+Z8f/4jTVdavx8pKTyseWaQwHwYDVR0j BBgwFoAUSZv40XsA+cT3HtF9UXgqZcJxtmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MzA5ZTItZjkyOS00MmQ5LTljM2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3 QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVDMjcxQjY2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTlCRjhEMTdCMDBGOUM0RjcxRUQxN0Q1MTc4MkE2NUMyNzFC NjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJB NjVDMjcxQjY2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4C9Ia5W2gQRrmUd2ihIcikJX74OrQCph16 Xrvqq+Gno4KfUB4Fd811dJRT3mUV0Hu92lNQMr2SXstEVv9pi/6NSku/Baf132nb 9muhFHCLAck1i584MkIV7xYsPi5x286YFjweoPjYg+uD7BS1njA3JNxRTIEjrdoP gWKB5YvLBPbTcl7rwlvX21rQDZrBdANK+G+zlypbPtT9amOxQIsr6/WyBzgtq4J0 jneWKGzbdVfOL0UtVTH4JVIC4fo4NUEwsh0KEvBxXzx5BWYM106OLWeqqV7Kw3yg bckAOmuXUF5c1YqGVPzhleh6+sm0RP4PYZGKJ1yaGOR02buzXeY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:57 2026 by rpki-client