$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: GCoaVoI4OmA/JwyoVwpGh//fQx/KqqMxamwZWDNx5hk= Subject key identifier: 57:82:23:E9:01:D6:35:3C:1A:D7:89:75:E9:11:BF:51:5A:BA:B8:57 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 0E04D3301D1D50155E19F6E6CEBD36960F46FA86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 055E Signing time: Wed 25 Mar 2026 23:21:19 +0000 Manifest this update: Wed 25 Mar 2026 23:16:19 +0000 Manifest next update: Sun 29 Mar 2026 06:05:19 +0000 Files and hashes: 1: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: V5bRCa8d/YyxvhiWHxGaiYGl187uZtOSIni5BAE33UY=) 2: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:04:d3:30:1d:1d:50:15:5e:19:f6:e6:ce:bd:36:96:0f:46:fa:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Mar 25 23:16:19 2026 GMT Not After : Mar 29 06:05:19 2026 GMT Subject: CN=578223E901D6353C1AD78975E911BF515ABAB857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:84:88:b6:dd:ac:e2:ef:ff:1e:39:b4:83: b9:3d:0c:0e:5e:d2:5b:f9:9a:0a:6e:16:f0:04:d7: de:86:b6:2f:ca:22:1e:d9:aa:3f:1f:3d:86:8b:e4: 4e:83:74:25:26:4a:a0:30:f4:2f:91:16:32:59:50: 9a:40:49:54:11:77:1f:98:80:53:05:96:f9:4b:a1: d6:be:46:c9:13:72:49:84:39:55:af:44:63:c1:d4: 38:8f:14:f1:e8:e0:92:6e:1d:f5:c7:60:32:8f:4e: bc:2b:dc:80:37:a8:ee:3d:f7:5e:fc:31:bd:50:94: 03:9d:85:e5:44:52:07:85:2e:ee:9a:6e:ec:a3:ad: b0:b4:89:6c:00:ce:05:6e:69:cd:93:8d:24:20:6c: 3d:6b:ab:5c:20:e6:70:2d:98:e8:d3:0a:14:96:50: 95:70:ac:f0:c1:12:4e:62:79:cc:23:54:98:9d:ef: 85:40:d3:eb:b7:89:35:57:83:07:6f:3d:af:1c:8b: 18:63:0e:cc:57:53:21:cb:f5:f0:7f:ac:f3:b2:df: 24:dc:ba:e3:ae:0e:0a:c6:93:53:de:40:3c:5c:53: 66:0a:e1:2f:3c:5d:d3:d8:c9:d4:8e:66:8c:c8:10: 4d:9c:50:34:59:f2:d6:41:21:34:a5:d2:99:2f:50: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:82:23:E9:01:D6:35:3C:1A:D7:89:75:E9:11:BF:51:5A:BA:B8:57 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fb:73:21:3e:6f:ad:6a:5b:23:ad:84:9a:32:f5:33:bc:16: 2a:b0:70:cc:ea:22:a7:10:60:b5:da:f5:b2:14:6b:f3:bc:49: ce:70:b5:57:be:89:90:36:44:ea:94:52:e8:5d:f2:69:25:87: 6b:7d:85:3e:5a:37:2f:57:61:68:be:cd:f0:e0:c8:e5:4b:9b: b0:ba:9c:b3:33:01:42:55:dc:e9:db:f6:e5:dc:ec:55:9a:49: 52:74:af:28:78:ca:7d:af:ed:94:04:ea:d0:fd:c2:ac:54:86: b6:c8:1b:17:c9:05:9b:16:99:a0:32:0a:21:3f:09:65:16:c7: bd:d6:68:b7:46:1b:71:9c:5a:7c:97:07:9e:55:81:dd:52:0f: 1e:f4:7d:a0:cb:a9:cf:69:1e:55:3c:78:c3:c5:d5:29:88:fb: 68:72:1d:68:2d:98:4a:96:95:65:68:2f:93:46:5d:ad:53:8c: 6e:85:85:7e:42:7b:a8:99:ef:3d:f7:f3:e6:4f:43:50:8b:9c: 07:6c:d5:0d:24:89:4d:4c:bb:4f:88:c0:d5:81:b9:be:fc:ab: 6a:80:ff:d7:e2:22:9d:54:c7:2a:47:03:45:6f:f3:7a:af:a8: 72:1f:d1:f7:a0:d5:5b:25:b5:0a:4e:a4:2b:0d:10:13:49:20: 14:9f:71:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDgTTMB0dUBVeGfbmzr02lg9G+oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNjAzMjUyMzE2MTlaFw0yNjAzMjkwNjA1MTlaMDMxMTAvBgNV BAMTKDU3ODIyM0U5MDFENjM1M0MxQUQ3ODk3NUU5MTFCRjUxNUFCQUI4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ3ISItt2s4u//Hjm0g7k9DA5e 0lv5mgpuFvAE196Gti/KIh7Zqj8fPYaL5E6DdCUmSqAw9C+RFjJZUJpASVQRdx+Y gFMFlvlLoda+RskTckmEOVWvRGPB1DiPFPHo4JJuHfXHYDKPTrwr3IA3qO499178 Mb1QlAOdheVEUgeFLu6abuyjrbC0iWwAzgVuac2TjSQgbD1rq1wg5nAtmOjTChSW UJVwrPDBEk5iecwjVJid74VA0+u3iTVXgwdvPa8cixhjDsxXUyHL9fB/rPOy3yTc uuOuDgrGk1PeQDxcU2YK4S88XdPYydSOZozIEE2cUDRZ8tZBITSl0pkvUDgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV4Ij6QHWNTwa14l16RG/UVq6uFcwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/7cyE+b61qWyOthJoy9TO8FiqwcMzqIqcQ YLXa9bIUa/O8Sc5wtVe+iZA2ROqUUuhd8mklh2t9hT5aNy9XYWi+zfDgyOVLm7C6 nLMzAUJV3Onb9uXc7FWaSVJ0ryh4yn2v7ZQE6tD9wqxUhrbIGxfJBZsWmaAyCiE/ CWUWx73WaLdGG3GcWnyXB55Vgd1SDx70faDLqc9pHlU8eMPF1SmI+2hyHWgtmEqW lWVoL5NGXa1TjG6FhX5Ce6iZ7z338+ZPQ1CLnAds1Q0kiU1Mu0+IwNWBub78q2qA /9fiIp1UxypHA0Vv83qvqHIf0feg1VsltQpOpCsNEBNJIBSfcT4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:35 2026 by rpki-client