$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: yAqfMOFbAILI+ho8k4WywAuRte41aVpcsbmBOBDO1dM= Subject key identifier: D5:93:1D:3B:C6:D7:14:72:48:E9:F8:2E:3F:E0:9C:9D:07:A7:B2:CF Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 6CBCE6743F703E4C047BCA84B1EB39808CFCF689 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 04FC Signing time: Sat 23 Aug 2025 01:42:03 +0000 Manifest this update: Sat 23 Aug 2025 01:37:03 +0000 Manifest next update: Tue 26 Aug 2025 03:46:03 +0000 Files and hashes: 1: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: rhXoKmB+WPimZqicUhYFdC04zeeZhxdi4+L4FNDnW6o=) 2: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) 3: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:bc:e6:74:3f:70:3e:4c:04:7b:ca:84:b1:eb:39:80:8c:fc:f6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Aug 23 01:37:03 2025 GMT Not After : Aug 26 03:46:03 2025 GMT Subject: CN=D5931D3BC6D7147248E9F82E3FE09C9D07A7B2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6b:ef:de:5d:36:93:08:bd:d0:5d:ff:68:7f: 0b:42:a7:94:8e:51:2e:d4:4d:12:1a:01:f6:ae:34: 5f:09:7b:2d:ac:54:77:d7:50:90:7d:d2:db:9d:0f: d5:c9:a9:cc:85:a9:11:b4:a6:f4:e7:99:09:23:d0: 28:ba:0a:2c:96:e8:e7:f6:a9:c7:63:7f:08:76:29: fc:7c:b5:ff:8b:2a:db:0e:bd:a8:93:f1:fc:da:b7: 18:77:68:04:8e:54:ab:78:94:03:cd:fb:b7:5c:a1: 3e:94:bf:4f:bf:23:c1:2c:21:c3:58:96:06:93:78: 66:27:4c:50:13:54:dc:0c:6a:97:60:24:9e:c2:45: 20:69:8c:9c:5e:f1:36:4d:01:31:e0:e8:6a:8c:45: aa:6c:f4:41:1d:0e:4f:14:3a:09:09:37:ac:51:ef: 70:25:62:be:e1:80:bb:40:89:4d:7a:70:c1:b3:ed: d0:08:c0:47:89:11:c1:5d:50:9f:f1:61:54:ef:32: 23:b6:38:3e:50:38:8f:b5:34:57:73:73:96:24:00: 39:ef:97:98:a6:85:f5:b2:eb:ba:e7:0d:1a:45:04: 1a:f2:f2:86:12:27:9c:db:4c:4b:d2:b6:a2:7e:d1: b9:b5:ab:4a:9e:a8:0a:84:69:95:a4:4f:70:50:7c: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:1D:3B:C6:D7:14:72:48:E9:F8:2E:3F:E0:9C:9D:07:A7:B2:CF X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:cd:5f:d7:f1:98:94:33:4d:00:73:a0:2d:5f:14:b5:b6:59: 6c:a4:ac:8a:9a:ff:40:7c:e8:4f:c8:54:db:57:c2:45:2f:33: 10:ea:01:4e:ad:54:50:c2:94:ea:9f:9e:1b:7d:4b:a1:0f:20: 8f:b9:fc:e8:f9:00:41:48:09:46:9e:b8:af:6c:9d:47:14:c4: 0e:51:2e:f4:60:70:24:ad:3a:09:d1:fd:1f:c8:30:36:30:4f: fd:42:0a:67:8f:a3:13:11:88:ab:1b:7f:f9:4f:c5:14:82:99: 53:24:84:e5:aa:3b:a4:6f:a6:32:54:4c:e6:bb:d7:9f:4b:3e: c6:1e:e0:93:90:4a:3d:d3:22:59:10:fd:e2:4a:b4:10:e5:eb: 85:f1:29:2d:a1:b3:78:07:aa:fa:d5:1e:30:f7:9a:3a:a3:04: b4:46:39:bf:b7:64:d9:78:a9:78:ea:8a:f7:61:36:d4:f3:8e: 64:0d:f9:fa:f7:fa:72:f2:76:85:65:74:49:b3:2b:57:f4:bc: 65:93:60:56:fa:26:4d:f9:17:f0:37:75:b2:f5:c3:dc:27:69: 4e:eb:34:3d:42:ff:82:f4:5e:6b:bf:83:f4:17:f0:68:4f:49: a5:9f:89:02:fe:d4:e8:4e:71:aa:0f:37:00:2d:9b:a8:bb:d9: 48:76:1d:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLzmdD9wPkwEe8qEses5gIz89okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTA4MjMwMTM3MDNaFw0yNTA4MjYwMzQ2MDNaMDMxMTAvBgNV BAMTKEQ1OTMxRDNCQzZENzE0NzI0OEU5RjgyRTNGRTA5QzlEMDdBN0IyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDda+/eXTaTCL3QXf9ofwtCp5SO US7UTRIaAfauNF8Jey2sVHfXUJB90tudD9XJqcyFqRG0pvTnmQkj0Ci6CiyW6Of2 qcdjfwh2Kfx8tf+LKtsOvaiT8fzatxh3aASOVKt4lAPN+7dcoT6Uv0+/I8EsIcNY lgaTeGYnTFATVNwMapdgJJ7CRSBpjJxe8TZNATHg6GqMRaps9EEdDk8UOgkJN6xR 73AlYr7hgLtAiU16cMGz7dAIwEeJEcFdUJ/xYVTvMiO2OD5QOI+1NFdzc5YkADnv l5imhfWy67rnDRpFBBry8oYSJ5zbTEvStqJ+0bm1q0qeqAqEaZWkT3BQfGflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ZMdO8bXFHJI6fguP+CcnQenss8wHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnNX9fxmJQzTQBzoC1fFLW2WWykrIqa/0B8 6E/IVNtXwkUvMxDqAU6tVFDClOqfnht9S6EPII+5/Oj5AEFICUaeuK9snUcUxA5R LvRgcCStOgnR/R/IMDYwT/1CCmePoxMRiKsbf/lPxRSCmVMkhOWqO6RvpjJUTOa7 159LPsYe4JOQSj3TIlkQ/eJKtBDl64XxKS2hs3gHqvrVHjD3mjqjBLRGOb+3ZNl4 qXjqivdhNtTzjmQN+fr3+nLydoVldEmzK1f0vGWTYFb6Jk35F/A3dbL1w9wnaU7r ND1C/4L0Xmu/g/QX8GhPSaWfiQL+1OhOcaoPNwAtm6i72Uh2HUs= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:45 2025 by rpki-client