$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: gKxXGlhjhJJEsMXSHQsQoLuqQh+fOrFlVJCg3W3VCQs= Subject key identifier: F9:CF:4D:0E:F2:61:06:20:55:F1:0A:32:C2:8E:C1:4B:7C:9C:D9:D6 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 07DD53D2C367582D8231C596234087A39AFAC035 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 04D1 Signing time: Sat 10 May 2025 10:41:05 +0000 Manifest this update: Sat 10 May 2025 10:36:05 +0000 Manifest next update: Tue 13 May 2025 20:21:05 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: JrTA8afK2n1L33dQO9//qwiVueSvsY8BHaaEpxhw9/4=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: yP6aKxxKqUtKVHS5jO3dT4CN8taxQmwkuS74TzUJ3xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:dd:53:d2:c3:67:58:2d:82:31:c5:96:23:40:87:a3:9a:fa:c0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: May 10 10:36:05 2025 GMT Not After : May 13 20:21:05 2025 GMT Subject: CN=F9CF4D0EF261062055F10A32C28EC14B7C9CD9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:8b:a4:74:02:92:30:b6:ed:f1:4f:5b:b2: a0:51:d0:07:c2:99:b5:4b:91:7a:c6:02:a9:5a:3a: b3:18:19:19:b8:28:62:6c:d9:ee:25:f6:6a:eb:85: ea:02:42:b0:83:d7:70:8b:46:5e:5f:e4:67:55:59: 35:47:b9:18:16:a1:99:8b:8b:5e:c0:57:b3:63:ec: 5d:99:da:5f:fd:8c:64:69:a7:4e:ad:5f:10:75:eb: 52:7a:12:d7:bc:42:b5:a6:cb:ac:a6:ae:40:a6:cc: c8:43:ff:9a:91:f3:30:22:36:9a:71:b9:64:f2:24: bc:60:3f:fe:f9:cc:08:43:1b:7b:d9:19:cb:52:f9: 24:ae:bf:0a:22:29:b2:82:40:92:56:54:a5:a8:ab: 2c:e3:b7:3c:15:f6:29:86:4d:25:be:68:7c:90:e9: 18:a9:04:57:e5:c2:91:3d:d1:d9:42:a2:7a:96:af: 5a:f8:de:21:db:8f:7b:8b:ef:78:0f:b0:d7:80:e4: 64:68:1d:12:3b:3a:7b:bc:a7:4a:6e:80:13:45:b4: a2:3d:d6:40:43:22:33:5b:d8:23:6c:1b:26:75:3e: a8:67:41:ca:d4:27:e2:0a:61:ab:75:ff:e3:80:30: a2:50:00:90:f1:f5:3d:44:4f:6f:13:72:b7:ab:ef: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:4D:0E:F2:61:06:20:55:F1:0A:32:C2:8E:C1:4B:7C:9C:D9:D6 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5a:08:ef:d6:bd:56:53:c2:8f:3b:d6:f7:25:16:62:99:a4: 8e:65:ec:3a:4a:d0:5f:78:25:65:e4:e3:51:28:f4:4d:07:2c: bf:69:ca:39:9f:8c:8b:16:ed:04:b7:9a:d9:ed:1a:24:9a:ed: bb:f4:eb:b4:bc:5f:1e:1d:d4:32:b3:73:e7:97:10:09:95:22: 95:61:04:f3:6b:6f:d0:e3:5d:9d:c2:9e:46:bc:6c:70:a5:4a: 55:84:a3:d9:24:e4:e5:36:ba:01:b7:a9:c8:c5:e4:35:48:50: 07:38:29:e5:54:3c:27:dd:51:1a:4a:30:81:5a:19:16:8a:c2: 47:4c:a7:a2:d4:9b:f8:61:58:11:6a:80:4d:de:76:8d:40:08: 27:db:61:c9:51:f5:70:02:10:23:b5:40:58:ae:9d:eb:c8:b3: aa:35:ca:29:d8:9c:61:6b:4d:eb:52:24:26:f7:cd:92:03:48: b2:39:fd:b3:49:c8:17:9a:26:ca:0e:b5:df:74:eb:84:83:16: e7:45:04:36:e4:f6:16:1a:dd:46:5e:33:76:d5:82:7f:64:96: e7:0a:76:5e:fe:05:60:24:fd:f4:af:1c:c4:af:c0:6e:93:f8: 5d:14:22:28:de:0b:00:a8:28:b6:f9:94:05:86:b8:21:bc:92: 06:7a:9c:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB91T0sNnWC2CMcWWI0CHo5r6wDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTA1MTAxMDM2MDVaFw0yNTA1MTMyMDIxMDVaMDMxMTAvBgNV BAMTKEY5Q0Y0RDBFRjI2MTA2MjA1NUYxMEEzMkMyOEVDMTRCN0M5Q0Q5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MIukdAKSMLbt8U9bsqBR0AfC mbVLkXrGAqlaOrMYGRm4KGJs2e4l9mrrheoCQrCD13CLRl5f5GdVWTVHuRgWoZmL i17AV7Nj7F2Z2l/9jGRpp06tXxB161J6Ete8QrWmy6ymrkCmzMhD/5qR8zAiNppx uWTyJLxgP/75zAhDG3vZGctS+SSuvwoiKbKCQJJWVKWoqyzjtzwV9imGTSW+aHyQ 6RipBFflwpE90dlConqWr1r43iHbj3uL73gPsNeA5GRoHRI7Onu8p0pugBNFtKI9 1kBDIjNb2CNsGyZ1PqhnQcrUJ+IKYat1/+OAMKJQAJDx9T1ET28Tcrer72ZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+c9NDvJhBiBV8Qoywo7BS3yc2dYwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9aCO/WvVZTwo871vclFmKZpI5l7DpK0F94 JWXk41Eo9E0HLL9pyjmfjIsW7QS3mtntGiSa7bv067S8Xx4d1DKzc+eXEAmVIpVh BPNrb9DjXZ3Cnka8bHClSlWEo9kk5OU2ugG3qcjF5DVIUAc4KeVUPCfdURpKMIFa GRaKwkdMp6LUm/hhWBFqgE3edo1ACCfbYclR9XACECO1QFiunevIs6o1yinYnGFr TetSJCb3zZIDSLI5/bNJyBeaJsoOtd9064SDFudFBDbk9hYa3UZeM3bVgn9klucK dl7+BWAk/fSvHMSvwG6T+F0UIijeCwCoKLb5lAWGuCG8kgZ6nCw= -----END CERTIFICATE-----Generated at Sat May 10 22:23:31 2025 by rpki-client