$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: UaJVDnnbjfi4AblWRnyAF0cQW4VAt4wBAD4sbZuWLsw= Subject key identifier: 71:01:BF:79:F8:E9:F0:0F:7B:8B:31:78:BA:EE:A2:F8:FB:B1:0E:39 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 0E6C63C3305B2A391CE8EC634B7A24E76AA679E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 023D Signing time: Wed 25 Mar 2026 03:41:10 +0000 Manifest this update: Wed 25 Mar 2026 03:36:10 +0000 Manifest next update: Sat 28 Mar 2026 07:29:10 +0000 Files and hashes: 1: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: myRMSM8JZEm3wGw7bLtnb6jH6i0UWQQWRtQMOnIrwZw=) 2: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 3: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 4: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 5: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: I6slakky3CQtWTIuBbfvHlCbvw8Jyy9iX7shA/6YgbI=) 6: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 8: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 9: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 10: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6c:63:c3:30:5b:2a:39:1c:e8:ec:63:4b:7a:24:e7:6a:a6:79:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Mar 25 03:36:10 2026 GMT Not After : Mar 28 07:29:10 2026 GMT Subject: CN=7101BF79F8E9F00F7B8B3178BAEEA2F8FBB10E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7a:0d:eb:10:70:9f:9d:70:4d:a0:ae:70:99: ef:d1:a3:b6:56:2e:69:93:59:74:cd:d9:b2:85:c4: fb:f8:cb:a3:09:8b:12:67:8f:b1:15:2b:b4:99:d2: 56:56:30:16:b1:a7:85:58:67:73:a3:2e:19:10:45: e3:07:1f:1a:95:ee:ec:a1:8e:88:2a:5d:1f:bc:df: 0c:94:38:75:58:48:b9:db:a7:b2:21:3d:cb:1d:85: a3:5e:cb:a5:4d:85:3b:58:28:f3:5c:bf:6c:8b:fc: e0:a3:de:2b:70:a8:2d:62:e0:4d:89:58:03:73:54: 6a:f8:98:fa:05:54:06:e2:c6:ae:ea:15:c5:75:f9: 82:52:4f:19:03:b7:96:fe:36:09:92:9e:fb:ed:19: b3:4d:f3:95:66:ac:83:c1:e3:c3:0c:c7:a0:75:2f: 17:16:68:e5:e1:ad:eb:80:7d:41:b3:13:cd:39:d0: 84:51:1a:82:13:0b:2a:fb:2b:7a:ad:8f:2f:10:cb: 66:0a:72:24:96:93:19:b2:84:d0:f6:35:0f:95:dd: a9:6d:f8:d6:2b:fc:42:57:d8:f5:1f:72:be:16:5e: 5f:6e:a6:a8:37:ff:db:ed:50:09:1d:5f:59:a8:c0: 19:01:d7:2f:3c:bd:4f:80:e5:e2:f4:55:47:0e:93: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:01:BF:79:F8:E9:F0:0F:7B:8B:31:78:BA:EE:A2:F8:FB:B1:0E:39 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b7:97:2b:2c:db:35:1e:bd:8d:31:7c:32:df:fb:1f:eb:c7: 9c:15:b2:ab:b4:83:2d:68:5e:bb:de:3b:06:68:55:2d:a3:7c: 04:2d:58:e9:ef:1f:00:16:0f:a8:53:f5:73:86:c5:11:ce:a5: b6:23:51:b3:a2:72:f9:a4:3a:3c:63:8f:81:93:27:6d:0c:94: a0:5c:17:02:bb:23:8c:bc:72:b0:c1:35:cf:1d:fa:f1:b1:e8: bd:91:90:52:a2:73:fb:c8:5e:e8:34:d6:d1:33:6c:fe:c1:88: e9:9b:8b:3f:eb:92:fc:b9:8c:af:0e:0a:01:89:a5:74:a8:12: dd:83:42:3a:e8:cb:a4:22:70:62:66:49:d6:82:1d:01:9b:e2: 42:7b:3e:8b:37:9c:e4:6f:85:e3:0a:6b:44:06:fa:54:0e:75: 9f:ce:31:31:98:ac:cf:ef:4b:fb:96:01:97:98:4f:ec:6d:1c: 3c:95:47:bf:b4:cf:ae:e2:c1:e8:71:58:bf:1d:f7:56:bc:50: d8:16:bd:27:34:5f:e9:3b:71:9f:fd:82:0f:3d:c0:5a:6a:af: df:8f:01:fd:c3:12:37:55:98:a3:04:5d:eb:a1:e1:f7:3c:ed: 9a:b2:a9:ce:63:6e:c7:51:54:0a:06:41:2e:9a:6c:4b:4a:ba: 01:fd:54:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmxjwzBbKjkc6OxjS3ok52qmeekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNjAzMjUwMzM2MTBaFw0yNjAzMjgwNzI5MTBaMDMxMTAvBgNV BAMTKDcxMDFCRjc5RjhFOUYwMEY3QjhCMzE3OEJBRUVBMkY4RkJCMTBFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzeg3rEHCfnXBNoK5wme/Ro7ZW LmmTWXTN2bKFxPv4y6MJixJnj7EVK7SZ0lZWMBaxp4VYZ3OjLhkQReMHHxqV7uyh jogqXR+83wyUOHVYSLnbp7IhPcsdhaNey6VNhTtYKPNcv2yL/OCj3itwqC1i4E2J WANzVGr4mPoFVAbixq7qFcV1+YJSTxkDt5b+NgmSnvvtGbNN85VmrIPB48MMx6B1 LxcWaOXhreuAfUGzE8050IRRGoITCyr7K3qtjy8Qy2YKciSWkxmyhND2NQ+V3alt +NYr/EJX2PUfcr4WXl9upqg3/9vtUAkdX1mowBkB1y88vU+A5eL0VUcOk9w7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQG/efjp8A97izF4uu6i+PuxDjkwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMu3lyss2zUevY0xfDLf+x/rx5wVsqu0gy1o XrveOwZoVS2jfAQtWOnvHwAWD6hT9XOGxRHOpbYjUbOicvmkOjxjj4GTJ20MlKBc FwK7I4y8crDBNc8d+vGx6L2RkFKic/vIXug01tEzbP7BiOmbiz/rkvy5jK8OCgGJ pXSoEt2DQjroy6QicGJmSdaCHQGb4kJ7Pos3nORvheMKa0QG+lQOdZ/OMTGYrM/v S/uWAZeYT+xtHDyVR7+0z67iwehxWL8d91a8UNgWvSc0X+k7cZ/9gg89wFpqr9+P Af3DEjdVmKMEXeuh4fc87Zqyqc5jbsdRVAoGQS6abEtKugH9VIM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:08:15 2026 by rpki-client