$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: xk03lpHUBrbEVWNBftKn9w88W5h2pSUPM8EGUI9liYY= Subject key identifier: 0D:76:1A:42:25:D1:DA:5E:B7:E6:7F:6A:58:C6:10:4A:95:73:80:BD Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 5146CEF809D98B45E3EF6C43A7B97A56417A70DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 04FF Signing time: Thu 21 Aug 2025 19:11:10 +0000 Manifest this update: Thu 21 Aug 2025 19:06:10 +0000 Manifest next update: Mon 25 Aug 2025 02:06:10 +0000 Files and hashes: 1: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: N0FnCFzDmzht6syjkZK5c/b0nrxE2+fivhMg7FKmU3E=) 2: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:46:ce:f8:09:d9:8b:45:e3:ef:6c:43:a7:b9:7a:56:41:7a:70:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Aug 21 19:06:10 2025 GMT Not After : Aug 25 02:06:10 2025 GMT Subject: CN=0D761A4225D1DA5EB7E67F6A58C6104A957380BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:5e:bc:11:19:b6:89:7e:27:cb:a7:f7:74: 62:06:eb:e5:40:fc:8c:dd:84:d2:e6:e0:16:90:f3: 19:bb:3c:b7:7f:1b:6c:00:67:79:c3:82:c9:76:33: 79:af:43:ee:e4:70:93:3b:1b:e5:46:15:5c:d2:81: 82:10:44:21:50:c2:3e:b2:f9:03:d6:c9:4b:5f:ba: 46:59:08:0a:a6:0d:0b:ba:16:02:cd:4a:45:01:ca: 49:f6:73:c2:6f:4d:77:21:e7:36:77:1f:ca:14:ba: 20:0b:d1:83:55:83:59:a8:fc:52:20:0a:fc:40:90: 40:e9:48:24:56:8b:d7:89:24:01:77:36:f8:7f:b2: 82:f5:31:7b:e4:ca:7a:5c:03:65:c2:d2:14:9a:4b: 23:f7:ff:3e:5d:4c:62:a8:35:8e:16:9d:dd:12:b3: 0c:2e:8f:5c:8f:b1:85:c5:61:a9:4d:46:bc:b4:b6: 5c:f5:7d:99:98:44:0c:60:ea:61:26:46:30:4a:1b: 3d:b2:c5:3e:76:06:24:f2:3a:9c:ab:1e:3e:ff:e7: 45:0e:25:7d:3d:b6:81:e3:3e:24:e4:fc:71:a3:dd: f2:87:69:ea:53:85:08:b7:f2:56:d3:10:fa:06:9b: 51:40:d9:e5:34:ef:cb:05:8d:2e:0c:19:50:24:b0: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:76:1A:42:25:D1:DA:5E:B7:E6:7F:6A:58:C6:10:4A:95:73:80:BD X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:af:46:5b:98:6f:74:96:b6:d0:9c:71:75:93:da:ef:52:be: 98:8f:fb:51:1a:46:1e:d1:c2:8c:d6:38:84:77:f0:55:42:16: 0c:e6:0d:c0:8b:24:f2:67:90:07:db:cc:4e:84:a6:5d:02:ef: 29:0a:5d:d3:71:73:02:2b:d7:41:34:98:0c:97:89:f4:5e:b8: dd:3d:f8:e7:69:33:38:8c:9e:bc:16:19:3d:fd:06:d8:4d:07: f9:bd:54:3f:4a:20:fd:6a:64:a7:18:e1:21:7b:4a:d9:3a:77: 68:4e:9e:6a:54:0e:69:44:8f:db:11:32:f0:d5:c1:6e:64:3c: 2d:77:37:98:1c:4e:5c:ba:6d:17:f6:1f:3d:80:ff:58:4c:ef: 03:a6:a1:45:44:50:bf:6a:6d:20:42:83:a1:4c:1e:86:99:d6: 3b:1e:dc:38:5a:0e:b9:4c:ea:94:a4:fd:eb:56:0b:16:5d:3f: 01:59:05:00:66:4a:3f:c1:14:aa:d5:d2:d3:8b:d0:f7:83:0c: e0:a1:c1:34:db:a1:f6:3d:e7:c9:d9:10:8c:f4:0b:df:69:d1: c3:8b:cb:92:ac:71:c8:11:4c:12:96:db:ef:17:43:a2:95:f2: 7b:2e:3b:1f:43:89:13:8e:bc:25:60:9f:c1:6a:e3:10:ee:13: 7d:be:43:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUbO+AnZi0Xj72xDp7l6VkF6cN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTA4MjExOTA2MTBaFw0yNTA4MjUwMjA2MTBaMDMxMTAvBgNV BAMTKDBENzYxQTQyMjVEMURBNUVCN0U2N0Y2QTU4QzYxMDRBOTU3MzgwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7I168ERm2iX4ny6f3dGIG6+VA /IzdhNLm4BaQ8xm7PLd/G2wAZ3nDgsl2M3mvQ+7kcJM7G+VGFVzSgYIQRCFQwj6y +QPWyUtfukZZCAqmDQu6FgLNSkUBykn2c8JvTXch5zZ3H8oUuiAL0YNVg1mo/FIg CvxAkEDpSCRWi9eJJAF3Nvh/soL1MXvkynpcA2XC0hSaSyP3/z5dTGKoNY4Wnd0S swwuj1yPsYXFYalNRry0tlz1fZmYRAxg6mEmRjBKGz2yxT52BiTyOpyrHj7/50UO JX09toHjPiTk/HGj3fKHaepThQi38lbTEPoGm1FA2eU078sFjS4MGVAksEWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXYaQiXR2l635n9qWMYQSpVzgL0wHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqvRluYb3SWttCccXWT2u9SvpiP+1EaRh7R wozWOIR38FVCFgzmDcCLJPJnkAfbzE6Epl0C7ykKXdNxcwIr10E0mAyXifReuN09 +OdpMziMnrwWGT39BthNB/m9VD9KIP1qZKcY4SF7Stk6d2hOnmpUDmlEj9sRMvDV wW5kPC13N5gcTly6bRf2Hz2A/1hM7wOmoUVEUL9qbSBCg6FMHoaZ1jse3DhaDrlM 6pSk/etWCxZdPwFZBQBmSj/BFKrV0tOL0PeDDOChwTTbofY958nZEIz0C99p0cOL y5KsccgRTBKW2+8XQ6KV8nsuOx9DiROOvCVgn8Fq4xDuE32+Q7I= -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:28 2025 by rpki-client