$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft File: 498B4126F814B92E742642C1F871ADD317C2ABF3.mft (raw, json) Hash identifier: NjQBRn+HIr033n2kHRYPnzaPh46tQTGbTy61+0CD828= Subject key identifier: 25:7E:90:D1:26:F7:12:74:E7:59:D6:77:3F:45:27:C1:60:62:1D:5E Authority key identifier: 49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 Certificate issuer: /CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Certificate serial: 684436D9F8E7569DDD8FBF9C6DE18088DBF93E29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:27 +0000 Manifest this update: Tue 12 May 2026 17:32:27 +0000 Manifest next update: Wed 13 May 2026 19:13:27 +0000 Files and hashes: 1: 498B4126F814B92E742642C1F871ADD317C2ABF3.crl (hash: CG3oqtOsYVOPCEDQQy7q4q/kvwRVNJE3fuA/pCPNoOM=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: sPcPKKDd43Nai9Cg9/ZzkhBod22KktaxwVikLIQy8wc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:44:36:d9:f8:e7:56:9d:dd:8f:bf:9c:6d:e1:80:88:db:f9:3e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B4126F814B92E742642C1F871ADD317C2ABF3 Validity Not Before: May 12 17:32:27 2026 GMT Not After : May 13 19:13:27 2026 GMT Subject: CN=257E90D126F71274E759D6773F4527C160621D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:9a:23:16:72:96:4d:29:a2:59:54:0d:86: 1d:d0:41:e7:c3:40:b3:49:59:09:15:59:ab:6b:6b: df:c9:67:06:b0:64:b9:44:c8:93:e0:b7:28:7d:e9: a0:a8:7e:37:9e:d3:ee:6b:b1:92:be:6c:49:8c:eb: b2:a4:da:9b:0f:c4:af:59:88:6f:a5:c5:ca:55:d6: e9:b1:80:40:2f:c4:5a:66:c4:8d:f5:96:c3:03:f6: 7b:38:1d:36:0b:74:25:35:a3:ed:08:72:40:62:52: e5:6f:6f:c1:56:e3:2b:7e:68:01:96:a6:01:bc:10: 13:da:04:d7:4b:19:a1:47:9f:06:e2:02:50:a6:db: 58:eb:2a:15:aa:fc:54:58:09:1d:16:5d:76:f2:55: 4f:1d:e7:ac:dc:e5:b8:8e:96:84:93:e8:12:08:cf: 16:2d:18:f6:7c:dd:d5:27:33:5e:34:62:4f:17:a0: a5:d4:b2:4b:ed:f1:f6:04:ce:cb:7a:7e:3a:6e:02: 9d:64:01:a9:fa:9f:10:23:b5:73:a5:3d:d1:45:7c: ba:75:d7:c9:b7:cb:fa:da:88:12:64:e5:68:fd:ab: 85:3d:80:99:84:58:3b:e9:d8:1a:eb:ba:c3:e2:e7: 20:7d:f9:d2:8c:39:1b:42:fd:30:b7:c1:96:7e:03: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7E:90:D1:26:F7:12:74:E7:59:D6:77:3F:45:27:C1:60:62:1D:5E X509v3 Authority Key Identifier: keyid:49:8B:41:26:F8:14:B9:2E:74:26:42:C1:F8:71:AD:D3:17:C2:AB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498B4126F814B92E742642C1F871ADD317C2ABF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/498B4126F814B92E742642C1F871ADD317C2ABF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:22:ef:c4:b0:6f:b0:e4:5e:e5:19:25:df:fa:5d:b0:e6:f0: 6c:91:c8:bc:0a:1c:98:8f:2d:0d:42:f8:66:33:6c:a9:8b:ab: b9:3f:dd:f5:57:49:c9:f8:6b:21:8e:ff:60:8e:4a:0b:bf:6c: 3d:e1:20:b5:b0:bf:b4:79:fb:6c:e8:bb:eb:c9:1b:96:e5:5b: 10:3c:52:43:99:f1:e1:fe:a9:33:16:9a:76:2f:9d:e8:f6:8c: 28:67:8c:ca:4e:40:d1:6c:7b:40:de:e7:0f:c5:5c:8f:b6:90: db:be:6b:81:76:48:0e:ce:15:d2:9e:ee:b4:e4:01:98:26:49: 6c:98:93:2e:4e:58:e3:6c:b7:c1:ae:48:9b:10:b8:ab:fe:23: 94:36:ec:71:f6:ac:16:d0:aa:c1:4f:90:39:b3:18:79:58:1c: 88:f9:4e:e5:50:37:ec:a1:9a:12:6e:38:13:8e:23:f0:be:3f: b6:23:6e:43:0f:7d:a1:16:f6:96:fb:b4:82:b5:e1:74:d3:e6: c4:62:3f:da:3d:e9:79:e2:34:49:5e:54:e9:d7:0a:a4:20:73: 78:82:17:33:1f:5f:29:e0:5e:4d:e9:d2:6c:c3:22:dd:2c:24: 2e:73:7b:e0:c2:9a:f1:29:53:51:0e:39:7e:bd:90:71:eb:9c: dc:6a:1a:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaEQ22fjnVp3dj7+cbeGAiNv5PikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFERDMx N0MyQUJGMzAeFw0yNjA1MTIxNzMyMjdaFw0yNjA1MTMxOTEzMjdaMDMxMTAvBgNV BAMTKDI1N0U5MEQxMjZGNzEyNzRFNzU5RDY3NzNGNDUyN0MxNjA2MjFENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqR5ojFnKWTSmiWVQNhh3QQefD QLNJWQkVWatra9/JZwawZLlEyJPgtyh96aCofjee0+5rsZK+bEmM67Kk2psPxK9Z iG+lxcpV1umxgEAvxFpmxI31lsMD9ns4HTYLdCU1o+0IckBiUuVvb8FW4yt+aAGW pgG8EBPaBNdLGaFHnwbiAlCm21jrKhWq/FRYCR0WXXbyVU8d56zc5biOloST6BII zxYtGPZ83dUnM140Yk8XoKXUskvt8fYEzst6fjpuAp1kAan6nxAjtXOlPdFFfLp1 18m3y/raiBJk5Wj9q4U9gJmEWDvp2BrrusPi5yB9+dKMORtC/TC3wZZ+A0AFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJX6Q0Sb3EnTnWdZ3P0UnwWBiHV4wHwYDVR0j BBgwFoAUSYtBJvgUuS50JkLB+HGt0xfCq/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzliMWU3ZjctMWY0Yi00MWE2LTkyNTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZG ODE0QjkyRTc0MjY0MkMxRjg3MUFERDMxN0MyQUJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OThCNDEyNkY4MTRCOTJFNzQyNjQyQzFGODcxQUREMzE3QzJB QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvNDk4QjQxMjZGODE0QjkyRTc0MjY0MkMxRjg3MUFE RDMxN0MyQUJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQi78Swb7DkXuUZJd/6XbDm8GyRyLwKHJiP LQ1C+GYzbKmLq7k/3fVXScn4ayGO/2COSgu/bD3hILWwv7R5+2zou+vJG5blWxA8 UkOZ8eH+qTMWmnYvnej2jChnjMpOQNFse0De5w/FXI+2kNu+a4F2SA7OFdKe7rTk AZgmSWyYky5OWONst8GuSJsQuKv+I5Q27HH2rBbQqsFPkDmzGHlYHIj5TuVQN+yh mhJuOBOOI/C+P7YjbkMPfaEW9pb7tIK14XTT5sRiP9o96XniNEleVOnXCqQgc3iC FzMfXyngXk3p0mzDIt0sJC5ze+DCmvEpU1EOOX69kHHrnNxqGiE= -----END CERTIFICATE-----Generated at Wed May 13 02:12:56 2026 by rpki-client