$ rpki-client -vvf rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft File: 499BF8D17B00F9C4F71ED17D51782A65C271B666.mft (raw, json) Hash identifier: yaFNTjkAyi+DivLKP1muFTgHUyn+bPn4i5Bhi1sZjwk= Subject key identifier: D2:4E:FD:2F:F6:57:F7:A1:25:E1:D6:10:8B:D5:E4:93:55:17:BB:1A Authority key identifier: 49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 Certificate issuer: /CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Certificate serial: 28DE2BA0C595078AE6091BA020BF10413EFBB9D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 16:40:18 +0000 Manifest this update: Thu 23 Jul 2026 16:35:18 +0000 Manifest next update: Fri 24 Jul 2026 18:52:18 +0000 Files and hashes: 1: 499BF8D17B00F9C4F71ED17D51782A65C271B666.crl (hash: gPn94UII5CC0/Kwfgu2JzxYWQt6+53I9ltPviTmGYFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:de:2b:a0:c5:95:07:8a:e6:09:1b:a0:20:bf:10:41:3e:fb:b9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499BF8D17B00F9C4F71ED17D51782A65C271B666 Validity Not Before: Jul 23 16:35:18 2026 GMT Not After : Jul 24 18:52:18 2026 GMT Subject: CN=D24EFD2FF657F7A125E1D6108BD5E4935517BB1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:0e:dd:04:30:28:fb:f6:4c:ce:b6:31:e0: e2:d6:05:c0:be:dc:8a:39:08:d9:f7:29:00:5c:ba: d0:af:b8:72:22:17:9e:32:5c:43:bb:9e:ae:7c:8e: 5d:87:99:5a:d8:df:77:d7:0e:74:42:6c:8b:ee:54: 62:c7:c7:f4:cc:a4:b9:36:67:14:23:b7:e9:36:a7: bf:cb:be:d6:07:22:05:ae:61:d6:8a:d1:2b:bc:bd: 0d:50:0f:75:70:2b:5c:38:18:7f:69:6d:c0:d8:43: 05:a5:f7:19:34:5b:74:f6:fc:71:3f:80:78:29:80: 02:7e:61:80:c7:01:55:30:2c:1d:e9:d7:2d:5c:a9: d0:6d:c3:4b:78:86:5a:70:32:d1:26:ea:2f:4b:09: ad:2f:2a:92:87:85:46:9b:35:bc:11:45:50:e3:2c: 85:b4:d2:e8:af:1d:34:f1:7f:95:b9:15:04:38:a2: 16:7d:94:bd:c0:b6:e9:82:11:85:05:47:7d:ec:77: 2b:f3:ab:21:b4:24:fb:39:a5:26:5f:68:38:fe:9b: bf:ac:93:59:6f:14:03:d6:be:b4:9c:36:49:5f:19: 04:41:3c:c6:af:99:6e:82:00:a2:17:d2:5e:03:5c: 41:2d:53:a8:97:bf:bb:eb:08:72:5b:31:18:a2:06: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4E:FD:2F:F6:57:F7:A1:25:E1:D6:10:8B:D5:E4:93:55:17:BB:1A X509v3 Authority Key Identifier: keyid:49:9B:F8:D1:7B:00:F9:C4:F7:1E:D1:7D:51:78:2A:65:C2:71:B6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499BF8D17B00F9C4F71ED17D51782A65C271B666.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b65309e2-f929-42d9-9c3b-a91a00690cf1/0/499BF8D17B00F9C4F71ED17D51782A65C271B666.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e7:f4:2f:98:c0:41:5e:04:0b:84:2c:73:86:28:f2:89:2e: b1:d0:75:23:53:b4:18:18:60:a8:0e:5d:5a:ab:a3:0b:32:c6: 7c:6f:e5:be:c3:12:f0:19:a5:11:00:fe:44:2d:15:83:c8:55: f1:bb:11:f2:88:36:69:ba:25:f2:dd:7b:4f:7f:7a:18:27:53: 42:2a:d5:ea:e9:fa:0e:e6:71:45:01:31:30:cd:b9:0b:69:db: eb:d0:25:0f:f6:28:dd:36:65:0b:8e:2e:26:6e:e8:44:f2:d8: cf:0b:6d:ee:82:80:d4:ef:3a:c1:c8:98:50:50:5b:b2:82:7e: 0a:50:93:b2:36:f4:54:b2:d8:f0:fc:4d:4d:8e:81:a4:f7:9c: 27:9f:d2:68:3c:59:01:31:85:4a:71:14:05:87:23:45:5c:0e: 88:f2:ea:86:fd:37:02:32:af:30:4f:9d:eb:e8:9d:84:87:1a: 98:5a:67:dd:9b:8b:90:c4:23:e5:04:52:b9:59:eb:3d:7d:58: 6a:95:da:6e:c2:30:d9:96:94:09:db:10:ef:c3:ef:92:18:18: 4a:c9:27:a7:db:94:7a:82:11:8c:45:7b:f6:b1:1b:39:5a:3e: 9c:00:c2:9c:cb:1f:0c:3b:4c:7e:55:ab:c8:c8:69:57:73:8e: 4b:f1:ef:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKN4roMWVB4rmCRugIL8QQT77udQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVD MjcxQjY2NjAeFw0yNjA3MjMxNjM1MThaFw0yNjA3MjQxODUyMThaMDMxMTAvBgNV BAMTKEQyNEVGRDJGRjY1N0Y3QTEyNUUxRDYxMDhCRDVFNDkzNTUxN0JCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2g7dBDAo+/ZMzrYx4OLWBcC+ 3Io5CNn3KQBcutCvuHIiF54yXEO7nq58jl2HmVrY33fXDnRCbIvuVGLHx/TMpLk2 ZxQjt+k2p7/LvtYHIgWuYdaK0Su8vQ1QD3VwK1w4GH9pbcDYQwWl9xk0W3T2/HE/ gHgpgAJ+YYDHAVUwLB3p1y1cqdBtw0t4hlpwMtEm6i9LCa0vKpKHhUabNbwRRVDj LIW00uivHTTxf5W5FQQ4ohZ9lL3AtumCEYUFR33sdyvzqyG0JPs5pSZfaDj+m7+s k1lvFAPWvrScNklfGQRBPMavmW6CAKIX0l4DXEEtU6iXv7vrCHJbMRiiBsb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0k79L/ZX96El4dYQi9Xkk1UXuxowHwYDVR0j BBgwFoAUSZv40XsA+cT3HtF9UXgqZcJxtmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MzA5ZTItZjkyOS00MmQ5LTljM2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3 QjAwRjlDNEY3MUVEMTdENTE3ODJBNjVDMjcxQjY2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OTlCRjhEMTdCMDBGOUM0RjcxRUQxN0Q1MTc4MkE2NUMyNzFC NjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MzA5ZTItZjkyOS00MmQ5LTlj M2ItYTkxYTAwNjkwY2YxLzAvNDk5QkY4RDE3QjAwRjlDNEY3MUVEMTdENTE3ODJB NjVDMjcxQjY2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXn9C+YwEFeBAuELHOGKPKJLrHQdSNTtBgY YKgOXVqrowsyxnxv5b7DEvAZpREA/kQtFYPIVfG7EfKINmm6JfLde09/ehgnU0Iq 1erp+g7mcUUBMTDNuQtp2+vQJQ/2KN02ZQuOLiZu6ETy2M8Lbe6CgNTvOsHImFBQ W7KCfgpQk7I29FSy2PD8TU2OgaT3nCef0mg8WQExhUpxFAWHI0VcDojy6ob9NwIy rzBPnevonYSHGphaZ92bi5DEI+UEUrlZ6z19WGqV2m7CMNmWlAnbEO/D75IYGErJ J6fblHqCEYxFe/axGzlaPpwAwpzLHww7TH5Vq8jIaVdzjkvx74A= -----END CERTIFICATE-----Generated at Fri Jul 24 01:59:31 2026 by rpki-client