$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: qWWzcEaJ2miXp/nHEegP5QWshJkMTer3eCL9azQsYis= Subject key identifier: 93:64:33:30:9C:CC:69:DB:41:7F:F6:DE:EC:0E:FF:64:11:E4:37:9B Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 05B318231C4CD2D82E76BACC8B5F6BA39A1E060B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0519 Signing time: Sun 19 Oct 2025 06:51:07 +0000 Manifest this update: Sun 19 Oct 2025 06:46:07 +0000 Manifest next update: Wed 22 Oct 2025 14:31:07 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: Ugqp3511RBamrAw0cRUVnirN0Ye2bb5uCpgZpXmYAcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b3:18:23:1c:4c:d2:d8:2e:76:ba:cc:8b:5f:6b:a3:9a:1e:06:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Oct 19 06:46:07 2025 GMT Not After : Oct 22 14:31:07 2025 GMT Subject: CN=936433309CCC69DB417FF6DEEC0EFF6411E4379B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f7:28:57:9b:1b:34:fc:7e:c2:1d:2b:90:3d: 33:1a:c2:fa:14:e0:cd:c0:e3:ef:18:c0:57:24:df: ab:86:b1:32:91:49:a6:fe:04:3f:4b:b5:1e:ab:1e: 43:dc:c5:dd:92:b0:df:3e:d7:30:42:65:f7:88:87: a3:77:6c:58:a6:1b:57:16:13:df:52:7c:9e:00:66: 22:f7:b8:85:c5:c7:fb:d1:46:68:9b:1a:c2:ba:a0: 85:d6:9d:ea:ff:65:f5:76:6b:6a:cc:80:30:0b:15: 3c:01:a4:61:99:0f:0a:e5:62:05:c2:2e:d9:40:52: 06:c5:39:ce:f1:36:26:f5:09:f5:59:dc:3c:41:33: f0:ad:42:2d:d4:2e:e0:ac:e9:5d:1f:e9:f0:59:46: 17:86:5a:2b:04:68:6c:cc:77:ce:af:c1:52:b5:8f: 29:d5:fe:bc:e5:53:89:0d:35:d2:3d:e0:7c:8b:5e: 58:51:c1:8a:1d:64:4c:72:52:0a:00:40:3d:1e:98: 77:62:6e:48:ab:16:dd:83:5d:cc:28:9b:43:bb:60: 13:ff:d3:f8:7e:38:1d:ea:b6:87:18:c7:3a:90:60: 0d:db:41:59:a9:ca:61:88:37:30:84:b6:0c:d9:cd: d2:0a:9c:eb:0b:4b:65:cd:17:38:2c:72:79:10:2d: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:64:33:30:9C:CC:69:DB:41:7F:F6:DE:EC:0E:FF:64:11:E4:37:9B X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:33:93:4e:4a:fc:7c:e5:8c:ad:01:ff:7a:5a:4b:0d:00:6b: 83:b9:3b:14:db:d1:e0:40:41:6c:78:2a:7a:13:8a:18:74:dc: 82:ec:71:ef:2f:60:2a:b7:42:4f:03:49:9c:fa:fe:d1:fd:0b: 59:9d:fb:65:a1:16:42:91:01:44:c4:b7:fc:bb:50:ae:4e:70: 8b:17:68:9f:01:a6:b2:cd:cc:89:ea:ca:13:37:03:69:dd:92: fd:fd:48:04:fd:c5:61:d7:36:54:6d:c5:b8:87:61:4a:31:1a: 12:ca:7b:42:12:f3:65:77:a9:4e:a0:92:cb:55:1d:d0:8f:fa: 2c:1b:4c:57:e1:6f:1d:a5:1f:e2:2e:a4:fc:fd:87:21:76:f9: ba:28:cf:97:73:23:b4:4b:5d:b4:10:a5:38:c3:48:ac:fd:7b: 3f:db:e5:37:3a:1e:30:61:ed:ca:51:8d:57:fc:36:78:e3:ee: 1d:4b:1c:62:66:15:51:1a:c0:5a:cf:d8:b5:ca:1e:ef:da:22: 6a:8f:a8:5a:d1:9d:d0:c1:58:b7:8f:98:aa:59:4e:2f:83:8d: fb:28:b4:48:9e:3d:f6:80:d9:9a:b9:dc:4e:9d:52:63:dc:8f: 85:4c:87:92:0e:e8:c1:94:9b:8b:88:62:e9:35:46:92:44:d9: 52:fa:6f:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbMYIxxM0tgudrrMi19ro5oeBgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTEwMTkwNjQ2MDdaFw0yNTEwMjIxNDMxMDdaMDMxMTAvBgNV BAMTKDkzNjQzMzMwOUNDQzY5REI0MTdGRjZERUVDMEVGRjY0MTFFNDM3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp9yhXmxs0/H7CHSuQPTMawvoU 4M3A4+8YwFck36uGsTKRSab+BD9LtR6rHkPcxd2SsN8+1zBCZfeIh6N3bFimG1cW E99SfJ4AZiL3uIXFx/vRRmibGsK6oIXWner/ZfV2a2rMgDALFTwBpGGZDwrlYgXC LtlAUgbFOc7xNib1CfVZ3DxBM/CtQi3ULuCs6V0f6fBZRheGWisEaGzMd86vwVK1 jynV/rzlU4kNNdI94HyLXlhRwYodZExyUgoAQD0emHdibkirFt2DXcwom0O7YBP/ 0/h+OB3qtocYxzqQYA3bQVmpymGINzCEtgzZzdIKnOsLS2XNFzgscnkQLQiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk2QzMJzMadtBf/be7A7/ZBHkN5swHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMzk05K/HzljK0B/3paSw0Aa4O5OxTb0eBA QWx4KnoTihh03ILsce8vYCq3Qk8DSZz6/tH9C1md+2WhFkKRAUTEt/y7UK5OcIsX aJ8BprLNzInqyhM3A2ndkv39SAT9xWHXNlRtxbiHYUoxGhLKe0IS82V3qU6gkstV HdCP+iwbTFfhbx2lH+IupPz9hyF2+booz5dzI7RLXbQQpTjDSKz9ez/b5Tc6HjBh 7cpRjVf8Nnjj7h1LHGJmFVEawFrP2LXKHu/aImqPqFrRndDBWLePmKpZTi+Djfso tEiePfaA2Zq53E6dUmPcj4VMh5IO6MGUm4uIYuk1RpJE2VL6bzY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:18 2025 by rpki-client