$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: LWWIIKWNv7ybjyuOg0BWDWn4zJgLRaguf4XUiX8bc3w= Subject key identifier: E6:3F:71:5D:AA:90:13:AF:D0:FE:F4:B0:94:E0:63:97:C8:6F:3B:73 Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 57FFFE0315FB4E225D544424BBB4F434B75312BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 055B Signing time: Tue 24 Mar 2026 18:32:12 +0000 Manifest this update: Tue 24 Mar 2026 18:27:12 +0000 Manifest next update: Sat 28 Mar 2026 01:54:12 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) 2: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: PgvJB5VXuj6okuJRlEDlAoNCC+uhLGPIOra4+cMXrCs=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ff:fe:03:15:fb:4e:22:5d:54:44:24:bb:b4:f4:34:b7:53:12:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Mar 24 18:27:12 2026 GMT Not After : Mar 28 01:54:12 2026 GMT Subject: CN=E63F715DAA9013AFD0FEF4B094E06397C86F3B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:1c:67:f6:b6:2c:f5:67:74:52:a7:6f:e4: 95:f0:6a:6c:06:52:2e:71:40:c9:9c:8b:38:e5:50: 8b:c7:cb:10:6c:71:d9:1e:3e:ee:22:73:19:07:09: e9:51:33:bb:06:a7:e8:5a:eb:33:42:4c:6f:33:ec: 1b:85:ab:ce:07:fa:3d:7a:b6:ec:d8:0c:0e:35:d3: b5:05:7d:88:6d:b5:65:12:0b:f6:50:b3:e5:d3:d3: c9:02:a8:ee:05:72:6d:c4:19:71:f0:ea:71:cc:cf: 14:43:8d:cb:30:b9:ee:75:52:2b:8c:c9:2d:25:19: 82:0e:75:35:51:09:14:66:9e:ab:9a:49:5b:99:31: 54:76:ab:62:cd:ee:58:01:82:8f:6e:58:c3:47:9a: e4:69:2e:0f:c1:4e:91:d7:2f:ce:3f:ac:60:2e:4b: 5e:c8:1b:15:6f:bc:06:9b:76:31:af:3d:bc:21:25: 15:d7:3d:1f:56:4c:7b:53:a1:60:15:79:f5:a4:91: 2b:eb:98:0f:bf:8a:be:24:d1:65:3a:65:11:56:0e: 1e:a8:05:00:ca:1d:85:f8:65:f0:8a:fe:6b:7b:df: 2b:1b:8c:2e:2a:6b:7c:cd:44:57:35:4d:ff:3f:c1: d2:57:58:dd:69:b7:e6:cd:b1:fc:92:73:41:11:60: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:71:5D:AA:90:13:AF:D0:FE:F4:B0:94:E0:63:97:C8:6F:3B:73 X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:35:5e:84:f6:c5:a6:3a:f1:67:c6:dd:9f:76:9b:1e:bc:9b: 3e:5f:38:61:6a:95:85:30:88:a8:ef:8e:3a:88:d2:92:93:2f: bf:7f:24:f5:b3:68:2d:63:b0:d2:f2:f8:2c:8b:9d:87:ec:c9: f9:0b:6f:bb:ca:78:ad:79:99:99:1c:42:7b:10:d7:13:b1:b0: 3c:ad:a9:19:52:4b:04:3f:8c:ad:59:6f:e9:06:2c:06:21:20: f0:fc:3c:14:fb:b8:ff:f9:36:37:bc:cb:66:0d:d6:1f:8d:e6: 9d:92:e6:4e:b2:12:5b:5a:d0:0c:27:82:2e:b5:e1:de:c8:56: 54:ed:98:ee:c3:a8:bd:1a:96:7d:52:0e:3a:0d:61:7b:68:73: 9b:c4:21:87:f8:7d:ee:c2:09:e5:90:04:b8:82:59:67:25:92: 26:b6:97:1e:73:b6:89:3b:3b:8a:eb:5f:15:23:c2:6f:8e:7b: c8:1c:02:5f:8d:5a:1e:76:fd:52:b1:02:c1:2c:10:8f:e8:c6: 31:a0:83:a3:5f:fe:5e:32:1b:8b:a4:6e:15:e9:af:f7:5d:16: 70:ba:1b:c6:a0:97:11:b3:a8:f4:a4:25:23:ab:c0:cd:88:ec: 8b:ca:db:f6:f6:75:b1:3c:fb:bd:c9:c2:72:a0:a0:c2:b9:da: af:93:9c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV//+AxX7TiJdVEQku7T0NLdTEr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNjAzMjQxODI3MTJaFw0yNjAzMjgwMTU0MTJaMDMxMTAvBgNV BAMTKEU2M0Y3MTVEQUE5MDEzQUZEMEZFRjRCMDk0RTA2Mzk3Qzg2RjNCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrRxn9rYs9Wd0Uqdv5JXwamwG Ui5xQMmcizjlUIvHyxBscdkePu4icxkHCelRM7sGp+ha6zNCTG8z7BuFq84H+j16 tuzYDA4107UFfYhttWUSC/ZQs+XT08kCqO4Fcm3EGXHw6nHMzxRDjcswue51UiuM yS0lGYIOdTVRCRRmnquaSVuZMVR2q2LN7lgBgo9uWMNHmuRpLg/BTpHXL84/rGAu S17IGxVvvAabdjGvPbwhJRXXPR9WTHtToWAVefWkkSvrmA+/ir4k0WU6ZRFWDh6o BQDKHYX4ZfCK/mt73ysbjC4qa3zNRFc1Tf8/wdJXWN1pt+bNsfySc0ERYCAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5j9xXaqQE6/Q/vSwlOBjl8hvO3MwHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD01XoT2xaY68WfG3Z92mx68mz5fOGFqlYUw iKjvjjqI0pKTL79/JPWzaC1jsNLy+CyLnYfsyfkLb7vKeK15mZkcQnsQ1xOxsDyt qRlSSwQ/jK1Zb+kGLAYhIPD8PBT7uP/5Nje8y2YN1h+N5p2S5k6yElta0Awngi61 4d7IVlTtmO7DqL0aln1SDjoNYXtoc5vEIYf4fe7CCeWQBLiCWWclkia2lx5ztok7 O4rrXxUjwm+Oe8gcAl+NWh52/VKxAsEsEI/oxjGgg6Nf/l4yG4ukbhXpr/ddFnC6 G8aglxGzqPSkJSOrwM2I7IvK2/b2dbE8+73JwnKgoMK52q+TnO4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:06:19 2026 by rpki-client