$ rpki-client -vvf rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft File: 499BF8D17B00F9C4F71ED17D51782A65C271B666.mft (raw, json) Hash identifier: TgL4pN9ImfJox+yuY29a3E+r87usVo+UzXxz17Wd2jY= Subject key identifier: 19:BE:C6:3B:6E:53:6A:BD:E8:53:94:1B:56:22:E9:4C:6B:46:96:EA Authority key identifier: 49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 Certificate issuer: /CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Certificate serial: 03D48958EE637A947FFF1F889FF849F0941A2912 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:20:16 +0000 Manifest this update: Tue 12 May 2026 19:15:16 +0000 Manifest next update: Wed 13 May 2026 23:04:16 +0000 Files and hashes: 1: 499BF8D17B00F9C4F71ED17D51782A65C271B666.crl (hash: I3Pr+AUEgY9lUfXLbBaBcqil8b/2oYgo7v4nJWw7LZ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d4:89:58:ee:63:7a:94:7f:ff:1f:88:9f:f8:49:f0:94:1a:29:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Validity Not Before: May 12 19:15:16 2026 GMT Not After : May 13 23:04:16 2026 GMT Subject: CN=19BEC63B6E536ABDE853941B5622E94C6B4696EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7f:02:40:b8:56:b0:92:a6:7b:83:2f:70:3d: 64:04:f7:84:12:68:82:fb:83:4a:0c:17:05:22:b1: d3:42:d9:58:48:ea:89:f9:a8:58:b7:ad:9a:26:3a: e3:b8:68:37:36:5a:34:99:7f:55:e2:88:18:ea:7d: d1:01:87:84:ca:e4:db:04:dc:88:66:c0:69:29:6b: b9:d3:77:9b:6c:0b:61:c5:d3:42:22:79:63:75:d9: 36:43:0b:35:07:f0:ce:87:10:2c:7f:4c:b4:68:96: c1:0d:ae:f9:d8:7c:a1:19:d4:4c:ff:8c:47:aa:4e: 65:b0:19:e8:6d:12:4a:e9:7c:1f:25:f8:fa:ef:df: 21:d7:84:68:0d:f1:20:ab:9a:3e:65:cc:7d:a5:79: 74:fb:d9:63:fb:95:d9:61:68:3b:bc:e6:ac:7f:89: 24:be:f1:17:0b:14:28:f0:48:a6:d4:30:1d:66:af: 21:60:36:cd:54:11:4d:9e:8b:35:a5:3b:07:94:29: e5:5b:ed:ed:80:75:3e:33:2b:80:37:aa:af:35:7a: f0:bf:40:87:5e:06:be:81:bf:fb:b9:75:da:81:52: 29:19:d9:5c:1a:d4:6f:a0:c1:9a:92:ed:97:93:be: 39:56:96:33:23:e0:c8:23:17:b9:93:cd:2a:f4:cd: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BE:C6:3B:6E:53:6A:BD:E8:53:94:1B:56:22:E9:4C:6B:46:96:EA X509v3 Authority Key Identifier: keyid:49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:11:c3:08:5b:77:9d:28:53:1a:93:5b:1b:50:15:21:8b:d1: 0e:dc:b9:de:19:1c:7d:5e:fa:0b:d2:57:a8:80:29:ed:9a:72: bc:59:d3:61:a8:0d:8f:0b:08:e2:9e:a1:d9:97:5d:b2:dd:9b: 39:83:9c:65:6f:ab:0a:2f:5c:7b:c9:af:2b:bc:dd:f8:97:04: 32:f8:91:d6:41:9a:5d:10:78:ce:91:6a:ab:e3:5c:b8:51:11: c2:b4:30:0d:b7:f8:dd:9c:db:1b:26:2c:89:80:2c:61:1e:34: 79:88:98:e0:ac:08:1f:29:d9:f9:9b:61:2d:92:f2:9d:f3:2b: 5c:5c:a2:e3:aa:0c:f2:24:de:b9:5b:12:93:e7:20:63:f2:a1: f8:88:a1:2e:e8:53:6a:08:8f:c2:34:ff:f3:96:b6:d2:06:22: dd:95:fe:7d:1f:cc:2a:7e:01:8d:45:c5:1f:80:0e:fc:ed:43: f4:39:01:56:d2:54:bb:32:f8:6c:40:6a:91:79:af:7d:45:0e: 6c:be:95:13:c8:0b:47:19:15:8a:a2:bf:31:5f:21:f1:a0:e0: 17:0a:45:50:bc:e2:ed:05:0c:36:e4:49:da:cf:e3:eb:79:ec: a5:74:39:66:e0:8b:ac:69:fd:a8:66:90:30:7f:33:30:08:94: 8d:54:ba:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9SJWO5jepR//x+In/hJ8JQaKRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVD MjcxQjY2NjAeFw0yNjA1MTIxOTE1MTZaFw0yNjA1MTMyMzA0MTZaMDMxMTAvBgNV BAMTKDE5QkVDNjNCNkU1MzZBQkRFODUzOTQxQjU2MjJFOTRDNkI0Njk2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpfwJAuFawkqZ7gy9wPWQE94QS aIL7g0oMFwUisdNC2VhI6on5qFi3rZomOuO4aDc2WjSZf1XiiBjqfdEBh4TK5NsE 3IhmwGkpa7nTd5tsC2HF00IieWN12TZDCzUH8M6HECx/TLRolsENrvnYfKEZ1Ez/ jEeqTmWwGehtEkrpfB8l+Prv3yHXhGgN8SCrmj5lzH2leXT72WP7ldlhaDu85qx/ iSS+8RcLFCjwSKbUMB1mryFgNs1UEU2eizWlOweUKeVb7e2AdT4zK4A3qq81evC/ QIdeBr6Bv/u5ddqBUikZ2Vwa1G+gwZqS7ZeTvjlWljMj4MgjF7mTzSr0zeD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGb7GO25Tar3oU5QbViLpTGtGluowHwYDVR0j BBgwFoAUSZv40XsA+cT3HtF9UXgqZcJxtmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MzA5ZTItZjkyOS00MmQ5LTljM2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3 QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVDMjcxQjY2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTlCRjhEMTdCMDBGOUM0RjcxRUQxN0Q1MTc4MkE2NUMyNzFC NjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJB NjVDMjcxQjY2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMRwwhbd50oUxqTWxtQFSGL0Q7cud4ZHH1e +gvSV6iAKe2acrxZ02GoDY8LCOKeodmXXbLdmzmDnGVvqwovXHvJryu83fiXBDL4 kdZBml0QeM6RaqvjXLhREcK0MA23+N2c2xsmLImALGEeNHmImOCsCB8p2fmbYS2S 8p3zK1xcouOqDPIk3rlbEpPnIGPyofiIoS7oU2oIj8I0//OWttIGIt2V/n0fzCp+ AY1FxR+ADvztQ/Q5AVbSVLsy+GxAapF5r31FDmy+lRPIC0cZFYqivzFfIfGg4BcK RVC84u0FDDbkSdrP4+t57KV0OWbgi6xp/ahmkDB/MzAIlI1UuiA= -----END CERTIFICATE-----Generated at Wed May 13 06:25:48 2026 by rpki-client