$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft File: 499BF8D17B00F9C4F71ED17D51782A65C271B666.mft (raw, json) Hash identifier: lsMM9i5Qj3LuYq9a4ECL6Y2ljAT4aswfZJkaI9rwfnk= Subject key identifier: CA:4A:CF:A0:EC:16:A0:E3:2C:10:EE:A3:6F:F1:3F:95:F1:2A:7B:9F Authority key identifier: 49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 Certificate issuer: /CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Certificate serial: 1674BD3E7B798C1A387012CB11CCA3858D1FCB66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 00:29:12 +0000 Manifest this update: Thu 17 Sep 2026 00:24:12 +0000 Manifest next update: Fri 18 Sep 2026 00:35:12 +0000 Files and hashes: 1: 499BF8D17B00F9C4F71ED17D51782A65C271B666.crl (hash: fSzpqqLnKSNOy5UCKoLWXiMA5CSZQdNC3G07TnQOFOE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:74:bd:3e:7b:79:8c:1a:38:70:12:cb:11:cc:a3:85:8d:1f:cb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Validity Not Before: Sep 17 00:24:12 2026 GMT Not After : Sep 18 00:35:12 2026 GMT Subject: CN=CA4ACFA0EC16A0E32C10EEA36FF13F95F12A7B9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:12:5b:d4:71:00:e2:82:3e:4e:d8:d6:69: b3:d3:4a:a6:77:02:2d:65:cd:64:c1:cf:10:21:4f: 8a:d0:f6:d1:96:b3:ef:f8:31:f3:31:1f:b1:41:78: a1:c8:2a:13:1a:ae:6e:13:ab:60:66:cb:79:c7:39: 77:20:6f:75:4f:25:89:2b:92:6b:a7:75:51:8e:22: 0d:0e:06:13:dd:75:7c:f1:92:ae:80:03:e9:4f:75: ca:46:d0:60:1f:d4:e0:8e:8e:42:14:a5:af:77:60: 16:9f:b3:2e:9e:94:86:5e:54:cc:87:c7:2d:7c:e0: 60:8b:2f:5f:82:e9:9a:c2:4f:37:37:56:e4:bb:dd: d7:b3:d8:94:42:b4:a4:c5:e2:71:d3:1c:9d:16:93: 18:84:e9:fe:c3:2c:c1:a5:99:f9:47:f0:7e:b8:67: b8:38:bc:8a:91:d9:96:d3:c2:68:8e:6e:a9:26:f0: 37:bb:4e:ed:0e:c0:bc:09:08:c0:e3:55:71:59:07: 8e:cf:7e:17:a7:cd:8c:71:fc:b5:ff:c8:63:4c:64: cf:22:70:c0:64:ab:10:b6:bd:7b:90:19:9f:d1:9b: c0:1b:4c:68:83:26:e9:0f:5e:7f:f4:98:a1:ed:aa: b9:d4:8e:0d:ca:e4:03:ee:5c:d4:6d:08:f2:5f:44: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4A:CF:A0:EC:16:A0:E3:2C:10:EE:A3:6F:F1:3F:95:F1:2A:7B:9F X509v3 Authority Key Identifier: keyid:49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:39:3f:a0:bc:fb:2d:38:06:ae:dc:29:67:bb:98:0b:2c:40: a3:cd:89:1b:86:67:26:aa:49:d0:c3:e8:49:76:27:6a:09:4f: 1b:e0:53:b0:45:8c:06:4d:b8:6b:60:58:ad:8a:15:79:82:ad: c8:25:55:ec:43:c0:07:a2:f7:0c:fb:15:fd:c7:26:17:17:2e: 61:e7:c2:fb:2c:01:dd:85:3f:57:53:c9:1a:e5:4d:27:c0:12: 2b:47:c5:b3:d9:1b:0f:e4:12:ef:df:2c:48:47:a2:7a:22:94: 18:fb:f9:b8:d4:d9:58:f1:eb:4a:80:72:af:c7:3d:1d:e3:71: 65:3d:12:88:9e:af:a1:8a:e4:2a:ea:b6:ea:6a:ad:f2:31:b0: ea:0f:3d:a7:28:0d:3d:39:6c:ee:1a:e6:6e:5f:21:56:ad:0a: c7:34:50:52:24:7d:59:e4:2a:d6:e1:d2:16:86:f0:47:a7:ee: 49:68:3c:92:f3:a1:4e:7c:81:3c:88:82:5c:41:c4:59:5d:73: 2e:e2:65:c3:6f:42:60:25:2a:db:a9:2a:05:7f:ee:3f:02:09: 52:f4:c5:4c:02:09:27:24:d6:98:8f:02:f4:01:ed:56:9c:0e: 39:0f:65:46:fe:4b:2c:9b:01:a8:38:c0:50:8c:9f:0a:26:e5: b4:41:d1:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnS9Pnt5jBo4cBLLEcyjhY0fy2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVD MjcxQjY2NjAeFw0yNjA5MTcwMDI0MTJaFw0yNjA5MTgwMDM1MTJaMDMxMTAvBgNV BAMTKENBNEFDRkEwRUMxNkEwRTMyQzEwRUVBMzZGRjEzRjk1RjEyQTdCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMhJb1HEA4oI+TtjWabPTSqZ3 Ai1lzWTBzxAhT4rQ9tGWs+/4MfMxH7FBeKHIKhMarm4Tq2Bmy3nHOXcgb3VPJYkr kmundVGOIg0OBhPddXzxkq6AA+lPdcpG0GAf1OCOjkIUpa93YBafsy6elIZeVMyH xy184GCLL1+C6ZrCTzc3VuS73dez2JRCtKTF4nHTHJ0WkxiE6f7DLMGlmflH8H64 Z7g4vIqR2ZbTwmiObqkm8De7Tu0OwLwJCMDjVXFZB47PfhenzYxx/LX/yGNMZM8i cMBkqxC2vXuQGZ/Rm8AbTGiDJukPXn/0mKHtqrnUjg3K5APuXNRtCPJfRK5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykrPoOwWoOMsEO6jb/E/lfEqe58wHwYDVR0j BBgwFoAUSZv40XsA+cT3HtF9UXgqZcJxtmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MzA5ZTItZjkyOS00MmQ5LTljM2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3 QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVDMjcxQjY2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTlCRjhEMTdCMDBGOUM0RjcxRUQxN0Q1MTc4MkE2NUMyNzFC NjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJB NjVDMjcxQjY2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJY5P6C8+y04Bq7cKWe7mAssQKPNiRuGZyaq SdDD6El2J2oJTxvgU7BFjAZNuGtgWK2KFXmCrcglVexDwAei9wz7Ff3HJhcXLmHn wvssAd2FP1dTyRrlTSfAEitHxbPZGw/kEu/fLEhHonoilBj7+bjU2Vjx60qAcq/H PR3jcWU9Eoier6GK5CrqtupqrfIxsOoPPacoDT05bO4a5m5fIVatCsc0UFIkfVnk Ktbh0haG8Een7kloPJLzoU58gTyIglxBxFldcy7iZcNvQmAlKtupKgV/7j8CCVL0 xUwCCSck1piPAvQB7VacDjkPZUb+SyybAag4wFCMnwom5bRB0ZI= -----END CERTIFICATE-----Generated at Thu Sep 17 15:10:57 2026 by rpki-client