$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: QQY8udGzer4DFwy/I5sxAfFhnDuOaM5MXa99658idig= Subject key identifier: 25:3E:A6:32:9F:D4:38:41:3D:3E:3A:F1:CE:FC:F1:5C:17:3E:3F:FF Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 11E74C68C93E9D6EDCFF684E1B983B2E211D7018 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 04E5 Signing time: Tue 01 Jul 2025 07:01:54 +0000 Manifest this update: Tue 01 Jul 2025 06:56:54 +0000 Manifest next update: Fri 04 Jul 2025 14:56:54 +0000 Files and hashes: 1: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: dN+ofDRUWTtgMwCk2MYC4y9j4LFIXaILXf2YKREqdXA=) 2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 14:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e7:4c:68:c9:3e:9d:6e:dc:ff:68:4e:1b:98:3b:2e:21:1d:70:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Jul 1 06:56:54 2025 GMT Not After : Jul 4 14:56:54 2025 GMT Subject: CN=253EA6329FD438413D3E3AF1CEFCF15C173E3FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:d9:a8:cf:09:db:e2:24:7d:be:b8:59:08: ff:24:39:79:da:e1:33:9f:fc:74:24:de:fc:9c:01: 1b:34:f7:5a:f2:cc:f6:1e:41:98:df:dd:59:80:52: f0:ae:c5:92:2c:5e:84:65:32:d0:09:46:b4:70:e3: fa:b8:8e:8b:8b:8c:6a:a1:4d:42:b6:a7:f8:92:4b: ed:85:85:19:91:3b:e5:cf:c2:28:c7:0f:44:22:f5: 76:9f:b8:80:c2:5c:4b:d3:db:c1:e3:79:b1:81:b1: 4b:27:76:e9:1f:14:81:82:17:52:8d:ae:e4:dc:40: df:f7:60:b0:54:55:f6:bc:a4:0b:e7:4e:db:c0:65: 79:87:71:a9:a5:22:7f:d6:ed:67:3c:b7:30:57:6c: 02:34:f1:61:db:c6:4c:e9:13:e4:4a:02:b0:b8:be: 98:f5:2c:2f:9a:3a:6f:3d:bd:22:68:06:a6:d6:e7: a8:40:21:3f:06:91:8a:c0:b6:13:e8:34:9c:d7:95: 36:b0:07:23:05:0a:a9:2a:e4:a7:fc:ea:97:df:80: b9:1c:69:93:cc:1f:61:ac:6c:c4:92:da:18:5a:ae: b6:2e:6c:fa:2e:70:f5:92:61:68:cc:a3:5c:12:2f: 7c:9b:e4:c2:5c:c4:d0:84:e3:29:da:4d:0c:0f:18: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3E:A6:32:9F:D4:38:41:3D:3E:3A:F1:CE:FC:F1:5C:17:3E:3F:FF X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:26:29:49:3d:98:eb:ca:05:40:1d:62:38:0d:47:3b:cc:cd: 94:b5:0d:6d:bf:7e:46:26:10:dc:51:91:10:fc:46:8c:9b:c3: f2:8e:c3:af:30:0b:7a:86:e9:cf:00:86:f2:4f:2a:98:12:54: 32:43:bf:36:ed:03:3b:b7:60:60:aa:21:ca:6a:c9:88:7c:83: d6:d0:d7:5d:71:db:9b:4d:79:df:d1:a4:5a:00:76:7e:12:3a: 84:4b:b9:42:6a:86:86:ca:4a:d1:68:0d:03:71:4a:cf:0e:7b: 63:32:36:84:bd:31:d6:26:56:64:e6:1c:9f:4d:00:04:6a:88: 40:f8:34:b4:1d:01:65:47:02:1f:07:cb:39:45:45:fc:c9:d1: d3:64:72:f2:9e:31:2a:e7:ea:af:09:c4:57:80:f9:88:5a:b4: e8:03:5c:31:ea:2a:9d:a7:2e:ca:e8:75:d3:e4:b8:38:47:28: e8:21:41:a6:6f:ef:35:02:3b:25:58:a4:3a:a7:c5:f5:fb:76: e9:9c:e5:45:75:67:c2:a7:03:34:06:2a:02:98:57:99:81:c8: 4a:3d:dc:1b:d5:1b:18:18:f4:9f:35:59:6a:10:1f:bf:0e:01: 9a:a3:c5:4f:29:37:ae:da:50:94:e0:6d:3c:4e:5e:c4:59:87: 3a:18:7b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEedMaMk+nW7c/2hOG5g7LiEdcBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTA3MDEwNjU2NTRaFw0yNTA3MDQxNDU2NTRaMDMxMTAvBgNV BAMTKDI1M0VBNjMyOUZENDM4NDEzRDNFM0FGMUNFRkNGMTVDMTczRTNGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7tmozwnb4iR9vrhZCP8kOXna 4TOf/HQk3vycARs091ryzPYeQZjf3VmAUvCuxZIsXoRlMtAJRrRw4/q4jouLjGqh TUK2p/iSS+2FhRmRO+XPwijHD0Qi9XafuIDCXEvT28HjebGBsUsndukfFIGCF1KN ruTcQN/3YLBUVfa8pAvnTtvAZXmHcamlIn/W7Wc8tzBXbAI08WHbxkzpE+RKArC4 vpj1LC+aOm89vSJoBqbW56hAIT8GkYrAthPoNJzXlTawByMFCqkq5Kf86pffgLkc aZPMH2GsbMSS2hharrYubPoucPWSYWjMo1wSL3yb5MJcxNCE4ynaTQwPGDqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJT6mMp/UOEE9PjrxzvzxXBc+P/8wHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcmKUk9mOvKBUAdYjgNRzvMzZS1DW2/fkYm ENxRkRD8Roybw/KOw68wC3qG6c8AhvJPKpgSVDJDvzbtAzu3YGCqIcpqyYh8g9bQ 111x25tNed/RpFoAdn4SOoRLuUJqhobKStFoDQNxSs8Oe2MyNoS9MdYmVmTmHJ9N AARqiED4NLQdAWVHAh8HyzlFRfzJ0dNkcvKeMSrn6q8JxFeA+YhatOgDXDHqKp2n LsroddPkuDhHKOghQaZv7zUCOyVYpDqnxfX7dumc5UV1Z8KnAzQGKgKYV5mByEo9 3BvVGxgY9J81WWoQH78OAZqjxU8pN67aUJTgbTxOXsRZhzoYe3Y= -----END CERTIFICATE-----Generated at Wed Jul 2 13:53:56 2025 by rpki-client