$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft File: 498B4126F814B92E742642C1F871ADD317C2ABF3.mft (raw, json) Hash identifier: tc3McdsBUKCSnDMZKMWi+97lcMmUEwAaQBHQpYpnlN4= Subject key identifier: B6:A9:57:93:ED:AA:0A:64:97:50:32:EF:51:1F:0D:21:CB:19:00:1E Authority key identifier: 49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 Certificate issuer: /CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Certificate serial: 694C81788B4F700207AB2AB15B1DA9DAD38AC33B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:08:58 +0000 Manifest this update: Wed 16 Sep 2026 20:03:58 +0000 Manifest next update: Thu 17 Sep 2026 20:33:58 +0000 Files and hashes: 1: 498B4126F814B92E742642C1F871ADD317C2ABF3.crl (hash: rh0s2/ZGKNszg+DpIIh+dMlJkkJLeuMCGRzt2hPVY2Y=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: sPcPKKDd43Nai9Cg9/ZzkhBod22KktaxwVikLIQy8wc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4c:81:78:8b:4f:70:02:07:ab:2a:b1:5b:1d:a9:da:d3:8a:c3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Validity Not Before: Sep 16 20:03:58 2026 GMT Not After : Sep 17 20:33:58 2026 GMT Subject: CN=B6A95793EDAA0A64975032EF511F0D21CB19001E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:86:9a:2a:10:f0:9c:00:7b:3b:ae:3b:7d:8a: 56:c0:70:9f:a0:52:34:d1:4b:1d:1c:7d:48:c8:a9: 21:72:8e:f3:43:11:97:b9:d6:7b:84:d2:0b:81:b6: b6:3b:04:01:14:9f:1b:84:28:e0:eb:f9:b9:01:9c: 6e:6c:91:60:73:62:07:84:ed:a7:81:67:3c:1a:e0: 1d:3f:94:ae:a7:e2:3a:7b:b4:24:34:31:aa:ed:a4: 95:f3:27:fd:89:f3:a6:1a:fa:b2:84:31:05:b6:03: fd:16:37:aa:d0:40:05:86:12:f4:63:de:7c:f2:ed: 7d:53:09:2c:9a:4c:98:56:db:48:4b:15:bd:39:74: 02:fd:cc:d0:04:66:4f:f8:f6:20:55:22:66:64:55: 9a:86:c2:e7:cf:c6:f4:26:97:25:ba:e9:16:72:64: 42:8c:76:f1:2c:a7:2d:8d:7d:58:2f:5a:4c:96:84: ab:06:6a:52:6e:49:92:12:a0:01:1b:b2:45:cb:6e: a9:83:9b:72:1e:91:67:35:48:89:c5:ec:15:72:45: 25:d9:1c:46:11:c6:79:db:ba:1e:a6:03:23:98:1d: a4:03:45:b3:f0:ba:ff:25:cc:37:9c:56:48:92:98: a0:89:3c:19:9f:36:15:85:92:9f:19:aa:b8:96:8a: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A9:57:93:ED:AA:0A:64:97:50:32:EF:51:1F:0D:21:CB:19:00:1E X509v3 Authority Key Identifier: keyid:49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:94:65:f6:7f:dd:c2:03:e5:3d:14:0d:be:b1:b4:f1:b6:69: 38:9b:28:c3:31:28:37:46:ef:b0:29:24:32:d2:3f:23:33:24: ed:10:01:f5:86:16:38:4f:41:84:dd:9e:fd:73:c5:67:af:c6: f0:13:97:3f:95:c7:3b:46:46:e8:00:67:73:82:9b:c3:07:35: 37:56:5f:3c:eb:10:3f:e2:23:c8:89:63:dd:d1:05:73:c5:96: fa:4d:a5:69:ea:ed:83:80:e8:d1:4c:36:e5:d2:74:ba:10:d1: c1:63:37:9c:9c:fe:3a:08:c3:e4:41:5f:bb:fc:73:6c:9a:a3: 51:5e:34:02:9b:15:2f:9e:25:f7:7b:18:00:86:c6:ec:f6:81: cf:b3:05:d2:95:10:c2:21:e4:fa:10:90:05:81:fb:5c:a0:9f: 8e:97:46:16:ef:d9:3a:30:bc:84:43:ce:b8:1f:fc:2e:d9:c3: 8d:b4:35:7e:09:3c:9c:62:08:c8:f0:01:ec:97:ce:07:a6:44: c5:84:cd:59:34:61:16:37:9f:1b:31:83:2e:af:c0:84:f5:58: 51:b8:7e:88:7b:5f:01:73:39:82:13:18:f1:f7:c7:36:21:65: c7:06:99:46:5b:ba:3c:b0:bc:b4:fe:8e:ed:fb:0b:dc:3e:7f: fa:71:dc:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUyBeItPcAIHqyqxWx2p2tOKwzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFERDMx N0MyQUJGMzAeFw0yNjA5MTYyMDAzNThaFw0yNjA5MTcyMDMzNThaMDMxMTAvBgNV BAMTKEI2QTk1NzkzRURBQTBBNjQ5NzUwMzJFRjUxMUYwRDIxQ0IxOTAwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDthpoqEPCcAHs7rjt9ilbAcJ+g UjTRSx0cfUjIqSFyjvNDEZe51nuE0guBtrY7BAEUnxuEKODr+bkBnG5skWBzYgeE 7aeBZzwa4B0/lK6n4jp7tCQ0MartpJXzJ/2J86Ya+rKEMQW2A/0WN6rQQAWGEvRj 3nzy7X1TCSyaTJhW20hLFb05dAL9zNAEZk/49iBVImZkVZqGwufPxvQmlyW66RZy ZEKMdvEspy2NfVgvWkyWhKsGalJuSZISoAEbskXLbqmDm3IekWc1SInF7BVyRSXZ HEYRxnnbuh6mAyOYHaQDRbPwuv8lzDecVkiSmKCJPBmfNhWFkp8ZqriWity3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtqlXk+2qCmSXUDLvUR8NIcsZAB4wHwYDVR0j BBgwFoAUSYtBJvgUuS50JkLB+HGt0xfCq/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliMWU3ZjctMWY0Yi00MWE2LTkyNTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZG ODE0QjkyRTc0MjY0MkMxRjg3MUFERDMxN0MyQUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThCNDEyNkY4MTRCOTJFNzQyNjQyQzFGODcxQUREMzE3QzJB QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFE RDMxN0MyQUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGUZfZ/3cID5T0UDb6xtPG2aTibKMMxKDdG 77ApJDLSPyMzJO0QAfWGFjhPQYTdnv1zxWevxvATlz+VxztGRugAZ3OCm8MHNTdW XzzrED/iI8iJY93RBXPFlvpNpWnq7YOA6NFMNuXSdLoQ0cFjN5yc/joIw+RBX7v8 c2yao1FeNAKbFS+eJfd7GACGxuz2gc+zBdKVEMIh5PoQkAWB+1ygn46XRhbv2Tow vIRDzrgf/C7Zw420NX4JPJxiCMjwAeyXzgemRMWEzVk0YRY3nxsxgy6vwIT1WFG4 foh7XwFzOYITGPH3xzYhZccGmUZbujywvLT+ju37C9w+f/px3DM= -----END CERTIFICATE-----Generated at Thu Sep 17 09:17:46 2026 by rpki-client