$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: 6rW1Yvk0NoOljWyiaGIdtzdSYT9S9PuQKABxXdfE72w= Subject key identifier: DA:70:FA:21:CB:C3:B3:4A:68:03:13:F1:7E:25:CD:AE:9E:60:61:99 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 61041858CABDCAF12D9378CCC071FD927AADCB56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 07:21:06 +0000 Manifest this update: Sun 29 Jun 2025 07:16:06 +0000 Manifest next update: Wed 02 Jul 2025 11:38:06 +0000 Files and hashes: 1: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: uylYfloCYcXIjkc0ct/klSKn24vfkYtJ5FMlQNmdJug=) 2: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 11:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:04:18:58:ca:bd:ca:f1:2d:93:78:cc:c0:71:fd:92:7a:ad:cb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Jun 29 07:16:06 2025 GMT Not After : Jul 2 11:38:06 2025 GMT Subject: CN=DA70FA21CBC3B34A680313F17E25CDAE9E606199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:56:1c:ce:2f:bf:4a:a4:3a:0c:33:e4:71:47: a3:0c:0a:bd:7b:28:92:6a:b1:0d:47:3b:3f:dc:e8: da:1d:f5:74:4d:44:c5:33:2a:56:86:84:d4:1f:30: 88:51:ae:0c:47:68:eb:df:f6:1f:83:12:c7:73:0f: ba:5c:49:6c:e8:ce:30:d4:4f:13:18:c8:bd:b1:9f: f7:bd:8d:81:dd:62:1a:0d:59:79:f4:34:61:f8:df: 73:a3:7f:71:49:df:34:48:fb:3e:7d:fa:47:b8:21: 44:d6:24:07:da:66:5f:c2:d8:75:19:8e:96:b4:7d: 11:b1:ac:4f:e2:81:32:bb:c4:22:1a:1d:8f:06:8c: b5:37:47:57:47:6f:9a:22:18:8d:7a:1b:61:6c:75: 4b:01:a2:b6:b9:5b:2e:d9:27:53:88:a8:41:36:4f: 95:cf:68:e1:39:75:95:05:74:ce:6e:46:8c:f6:79: a2:bf:e7:b0:e4:c0:e1:34:0b:26:2a:08:0c:c0:ff: ab:4d:23:3c:19:1d:ce:e1:b8:70:b8:23:75:0a:66: 3c:22:d2:eb:31:3b:54:99:f4:6a:58:5a:12:6f:6a: 28:6c:6d:62:32:9b:10:15:39:ff:59:a6:f2:d0:80: 9a:ad:ec:22:c0:07:c9:ac:bc:82:a9:09:e0:17:26: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:70:FA:21:CB:C3:B3:4A:68:03:13:F1:7E:25:CD:AE:9E:60:61:99 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d3:6c:de:f8:8d:b1:18:8d:83:74:ba:6f:a5:03:9d:d8:f6: 49:ff:4f:b9:e8:fb:05:36:a3:73:b2:99:1c:28:33:96:d2:97: 04:35:21:60:74:87:40:78:9e:51:ad:23:67:04:98:00:6f:3f: fc:85:bb:c0:d9:87:40:36:41:9a:d0:e0:fb:f1:12:7b:98:ff: e1:e5:a0:0b:b3:a6:35:4e:9a:38:95:80:c5:8f:b5:65:39:eb: 30:77:3a:c2:cc:e0:5b:7a:75:73:27:1e:d7:9a:ad:03:ad:dc: b0:1b:f2:ed:f6:a0:ad:e0:0a:bc:1b:68:30:d1:d5:2c:ce:c8: b6:da:b7:69:b7:51:71:5a:ef:e5:c1:0a:f8:08:65:88:6e:d8: 1a:72:d1:19:b2:a3:ce:37:6a:21:71:55:85:54:86:bf:b2:9d: 77:70:0b:0a:b5:01:0f:02:d8:4f:d6:27:ea:e3:20:d4:74:46: 31:f1:d6:8f:20:f9:f4:cf:ee:73:45:5a:bc:a4:47:d2:d7:3f: 1d:78:54:d8:fe:6d:56:a0:e6:0b:59:9d:65:6e:30:f5:51:6d: 0c:9e:e1:1b:ad:8c:33:bb:00:12:ed:d0:4f:22:25:16:1c:0a: f8:34:31:81:9b:7c:e2:36:cc:ef:b0:64:5a:63:95:68:aa:a5: 22:11:52:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQQYWMq9yvEtk3jMwHH9knqty1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTA2MjkwNzE2MDZaFw0yNTA3MDIxMTM4MDZaMDMxMTAvBgNV BAMTKERBNzBGQTIxQ0JDM0IzNEE2ODAzMTNGMTdFMjVDREFFOUU2MDYxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVhzOL79KpDoMM+RxR6MMCr17 KJJqsQ1HOz/c6Nod9XRNRMUzKlaGhNQfMIhRrgxHaOvf9h+DEsdzD7pcSWzozjDU TxMYyL2xn/e9jYHdYhoNWXn0NGH433Ojf3FJ3zRI+z59+ke4IUTWJAfaZl/C2HUZ jpa0fRGxrE/igTK7xCIaHY8GjLU3R1dHb5oiGI16G2FsdUsBora5Wy7ZJ1OIqEE2 T5XPaOE5dZUFdM5uRoz2eaK/57DkwOE0CyYqCAzA/6tNIzwZHc7huHC4I3UKZjwi 0usxO1SZ9GpYWhJvaihsbWIymxAVOf9ZpvLQgJqt7CLAB8msvIKpCeAXJqMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2nD6IcvDs0poAxPxfiXNrp5gYZkwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/TbN74jbEYjYN0um+lA53Y9kn/T7no+wU2 o3OymRwoM5bSlwQ1IWB0h0B4nlGtI2cEmABvP/yFu8DZh0A2QZrQ4PvxEnuY/+Hl oAuzpjVOmjiVgMWPtWU56zB3OsLM4Ft6dXMnHtearQOt3LAb8u32oK3gCrwbaDDR 1SzOyLbat2m3UXFa7+XBCvgIZYhu2Bpy0Rmyo843aiFxVYVUhr+ynXdwCwq1AQ8C 2E/WJ+rjINR0RjHx1o8g+fTP7nNFWrykR9LXPx14VNj+bVag5gtZnWVuMPVRbQye 4RutjDO7ABLt0E8iJRYcCvg0MYGbfOI2zO+wZFpjlWiqpSIRUhI= -----END CERTIFICATE-----Generated at Tue Jul 1 06:17:47 2025 by rpki-client