$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft File: 498FC3DB03528A64214589740CA13E84E4775306.mft (raw, json) Hash identifier: w2yY0PKQ+s2XQx2ONYq/wYsloy0DxYYm3nvxX+uWRdg= Subject key identifier: FC:6F:62:7C:5E:44:C6:5F:14:74:03:1B:FC:FE:92:6C:F9:C5:0D:B0 Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 Certificate issuer: /CN=498FC3DB03528A64214589740CA13E84E4775306 Certificate serial: 4BD471F483C413560396C91E294D764761C27318 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:26:05 +0000 Manifest this update: Thu 24 Sep 2026 08:21:05 +0000 Manifest next update: Fri 25 Sep 2026 12:04:05 +0000 Files and hashes: 1: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U=) 2: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=) 3: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: W6PaD9jD2W7QLE6L053n0v5wsFLq3jDzK+h9oZCa+Ww=) 4: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: OOkicQA5K86MoBkSuxZ02oUQ15K4MqZ+HWDN0IRHS5w=) 5: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=) 6: 323430373a613563303a3130303a3a2f34382d3438203d3e20313432333339.roa (hash: NxZyATvn5vq2FKc65c4Nnkb5SqJdxZb7IhVwK0ixCrY=) 7: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: y22RwJlcQ0nD5K4HN58evr6z1YokNMr+L0lhKw+Cv9w=) 8: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: sbRZOMY4qXofH+gweW2UQPxdhQAQJDKmoZuKYzDjDd8=) 9: 498FC3DB03528A64214589740CA13E84E4775306.crl (hash: m9h7isKtdCVizhC6hb+hpwGohagGLDYHTLD/S0jeN1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d4:71:f4:83:c4:13:56:03:96:c9:1e:29:4d:76:47:61:c2:73:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306 Validity Not Before: Sep 24 08:21:05 2026 GMT Not After : Sep 25 12:04:05 2026 GMT Subject: CN=FC6F627C5E44C65F1474031BFCFE926CF9C50DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:38:fb:a1:e8:20:42:c3:75:1f:8c:8a:61: f4:67:cc:1d:52:8d:ee:28:cf:2c:e5:7a:02:15:99: dc:8b:fd:7a:70:04:eb:f8:93:f7:e1:27:17:00:c6: 5c:82:52:40:f1:39:9f:0e:0f:06:8e:89:6e:e8:21: e7:ab:68:38:0f:5f:06:f8:29:2b:89:01:14:e8:4f: b6:8c:67:b0:50:18:f6:04:bc:35:bb:68:50:09:b3: 53:e3:dc:63:1d:36:78:b4:3e:03:ab:3c:cb:2b:9b: 07:82:cd:ae:a4:67:64:9e:b5:59:8e:60:4f:45:18: 7c:e3:8d:74:6d:b2:d6:e2:48:79:d2:03:f1:8e:8e: 33:bf:1f:98:f8:0c:5d:a2:8a:d0:9b:4a:52:28:f7: 15:0d:75:f9:84:56:cc:40:8f:c4:cb:08:4d:72:72: 4f:c5:1b:e8:a9:42:89:02:08:94:59:78:32:0b:ca: 8a:f6:5c:14:28:ce:fd:fe:7b:24:f1:6e:2f:43:7b: c0:16:97:6f:6f:25:7a:a8:03:46:61:cd:01:25:84: 9d:2b:f4:72:24:3c:a2:97:98:a1:ab:a1:af:f3:c0: 03:c4:c7:1b:33:ad:16:50:87:8f:ab:72:7f:6a:94: a5:88:0d:7d:e5:d7:93:d3:ca:76:ab:5a:95:fa:16: c9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6F:62:7C:5E:44:C6:5F:14:74:03:1B:FC:FE:92:6C:F9:C5:0D:B0 X509v3 Authority Key Identifier: keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:40:80:71:ab:86:8c:3c:88:6c:a3:09:de:73:6d:b6:49:6f: 9a:25:93:b6:21:af:28:36:93:31:b3:64:e3:b9:ac:33:24:03: 10:04:9d:a6:41:66:88:ad:21:fb:48:11:26:cc:d7:cb:2b:b3: 00:0f:88:92:b9:c4:f0:db:2e:84:4c:93:25:a8:b2:e4:cb:6c: 26:fe:1f:b4:93:f1:f9:6d:03:36:2e:70:88:32:ff:4e:7a:fe: 4c:ed:c7:4f:16:b3:46:2c:2f:46:9e:36:3f:29:a3:93:63:ca: b8:14:2c:96:22:6f:af:b4:2c:2a:f1:28:fb:f3:a4:9e:ae:21: bc:c3:d7:c1:8c:ca:d8:65:b3:ae:19:00:1c:37:a9:f1:84:e7: 9f:60:51:76:d0:c6:7d:4f:c8:23:4c:a2:28:3b:43:5e:b9:a9: a2:eb:a9:3a:30:ef:c4:ca:2f:aa:47:e0:6c:d0:54:5e:81:72: b5:97:34:36:83:31:6a:32:b7:47:97:44:1a:22:2c:c2:d9:10: cf:94:a9:1c:5a:0b:b0:7b:00:7c:21:f2:74:f6:e5:ec:a9:52: 51:43:54:21:8e:5c:81:b1:88:60:ca:c3:70:b9:a9:a8:59:ec: 92:18:31:13:f4:ce:48:1b:28:78:f3:94:c6:21:0c:bc:4b:3c: 16:8b:1c:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9Rx9IPEE1YDlskeKU12R2HCcxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNFODRF NDc3NTMwNjAeFw0yNjA5MjQwODIxMDVaFw0yNjA5MjUxMjA0MDVaMDMxMTAvBgNV BAMTKEZDNkY2MjdDNUU0NEM2NUYxNDc0MDMxQkZDRkU5MjZDRjlDNTBEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSxzj7oeggQsN1H4yKYfRnzB1S je4ozyzlegIVmdyL/XpwBOv4k/fhJxcAxlyCUkDxOZ8ODwaOiW7oIeeraDgPXwb4 KSuJARToT7aMZ7BQGPYEvDW7aFAJs1Pj3GMdNni0PgOrPMsrmweCza6kZ2SetVmO YE9FGHzjjXRtstbiSHnSA/GOjjO/H5j4DF2iitCbSlIo9xUNdfmEVsxAj8TLCE1y ck/FG+ipQokCCJRZeDILyor2XBQozv3+eyTxbi9De8AWl29vJXqoA0ZhzQElhJ0r 9HIkPKKXmKGroa/zwAPExxszrRZQh4+rcn9qlKWIDX3l15PTynarWpX6FsltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/G9ifF5Exl8UdAMb/P6SbPnFDbAwHwYDVR0j BBgwFoAUSY/D2wNSimQhRYl0DKE+hOR3UwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE5MjAyMWUtMzkwNC00MTE1LWFmNWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIw MzUyOEE2NDIxNDU4OTc0MENBMTNFODRFNDc3NTMwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThGQzNEQjAzNTI4QTY0MjE0NTg5NzQwQ0ExM0U4NEU0Nzc1 MzA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm NWUtM2VkYjcxM2JhYTE0LzAvNDk4RkMzREIwMzUyOEE2NDIxNDU4OTc0MENBMTNF ODRFNDc3NTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1AgHGrhow8iGyjCd5zbbZJb5olk7Yhryg2 kzGzZOO5rDMkAxAEnaZBZoitIftIESbM18srswAPiJK5xPDbLoRMkyWosuTLbCb+ H7ST8fltAzYucIgy/056/kztx08Ws0YsL0aeNj8po5NjyrgULJYib6+0LCrxKPvz pJ6uIbzD18GMythls64ZABw3qfGE559gUXbQxn1PyCNMoig7Q165qaLrqTow78TK L6pH4GzQVF6BcrWXNDaDMWoyt0eXRBoiLMLZEM+UqRxaC7B7AHwh8nT25eypUlFD VCGOXIGxiGDKw3C5qahZ7JIYMRP0zkgbKHjzlMYhDLxLPBaLHB8= -----END CERTIFICATE-----Generated at Thu Sep 24 15:26:51 2026 by rpki-client