$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: pqsdG+l9P0ThqeIWfkSKiAmGF5xZsTbs4rpgjRCIvZo= Subject key identifier: F3:3A:28:F7:67:DE:B5:27:56:2C:DA:DA:B3:A6:E5:C9:2F:99:9D:85 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 01F91BDA5518C835F142BBAE51730C8863E6F906 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 01DC Signing time: Thu 21 Aug 2025 15:51:01 +0000 Manifest this update: Thu 21 Aug 2025 15:46:01 +0000 Manifest next update: Sun 24 Aug 2025 20:33:01 +0000 Files and hashes: 1: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: m75v8RCf+/7CNqzLLWK58mUknAV20gIGfPd6s/6MiSg=) 2: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 3: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 4: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 5: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 6: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 7: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 8: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 9: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 10: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f9:1b:da:55:18:c8:35:f1:42:bb:ae:51:73:0c:88:63:e6:f9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Aug 21 15:46:01 2025 GMT Not After : Aug 24 20:33:01 2025 GMT Subject: CN=F33A28F767DEB527562CDADAB3A6E5C92F999D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bf:28:53:bb:e7:4d:0b:58:7d:2f:98:fe:0f: eb:08:55:6e:5c:e8:28:4e:5c:41:01:c1:1b:e6:66: c0:e5:0e:6b:bd:e7:11:bc:0f:9a:fe:16:39:3f:8d: 04:be:43:72:93:05:dc:8a:23:44:c2:28:ba:71:af: 22:c4:e4:4e:30:7f:b5:ff:9a:88:c7:37:e0:9d:21: d9:66:b5:bc:77:22:5b:f1:c7:99:c3:6a:17:d2:af: 23:59:44:49:92:f0:ea:de:12:5c:2e:03:24:3f:ff: 19:ba:92:3a:a8:e0:dd:88:c3:92:bd:20:ee:7b:3b: 67:31:13:da:f9:e1:2a:68:53:97:ed:95:ca:2d:e7: d4:bf:8c:e5:14:06:77:e1:c2:db:69:7b:5c:5d:bf: 62:ba:3b:4b:57:79:20:ec:e0:65:9e:f0:3b:cf:31: fd:34:f3:0f:62:8d:d4:d8:89:e9:6e:6f:8b:82:29: f7:34:a0:f5:05:2f:fe:03:e9:b8:dd:54:b0:31:cb: b3:c0:f9:83:4b:b7:19:03:6d:1c:41:34:66:48:b6: af:32:09:5a:48:98:94:e3:9f:f7:01:28:77:9f:c2: a1:6c:5e:4a:31:5a:2c:8f:bc:b9:50:79:70:ea:44: 09:bc:d2:3f:bc:80:b3:9f:99:4b:17:c3:48:7a:45: 1d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:28:F7:67:DE:B5:27:56:2C:DA:DA:B3:A6:E5:C9:2F:99:9D:85 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:06:92:eb:59:6d:2a:d3:b7:0e:13:57:46:40:cd:00:ff:05: 52:5b:2b:5c:d1:e4:19:5e:ab:17:68:68:36:29:6c:e8:51:8d: 98:57:d4:d3:77:83:3f:72:b3:5b:2d:99:c6:fa:9f:4f:5f:47: 91:19:47:7c:b2:a8:c9:a5:6a:17:ee:bd:5f:9f:db:ca:fe:e1: 4d:45:e2:0d:a9:ef:da:e0:53:c5:4f:77:1a:f8:6c:48:0e:a3: 25:50:00:71:51:eb:0c:bc:f8:5c:01:10:04:73:ec:39:40:f6: de:a5:14:5b:d7:ac:91:02:01:d0:dd:23:5a:f2:e2:28:5c:ff: b7:f2:b1:cd:6f:b9:90:46:45:44:a1:3f:46:04:96:25:ed:a2: 02:19:92:b0:bd:9e:31:65:cd:21:ea:cf:9a:c9:93:f5:33:12: 4e:fe:b2:ac:d4:88:04:af:b4:e8:50:ff:49:6c:11:6d:8d:b4: a9:52:e0:c8:75:82:2d:ed:16:be:02:e2:d1:d6:14:dd:67:69: af:c2:6a:b2:36:36:f3:53:9f:39:2f:16:d9:7d:00:c5:c5:ef: c1:48:8c:27:06:96:d4:01:f2:67:02:a6:fa:91:c5:50:5d:a7: e2:58:ec:f2:62:b1:0f:03:e5:81:f8:9a:9b:df:20:6b:d5:f6: 23:14:fb:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfkb2lUYyDXxQruuUXMMiGPm+QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTA4MjExNTQ2MDFaFw0yNTA4MjQyMDMzMDFaMDMxMTAvBgNV BAMTKEYzM0EyOEY3NjdERUI1Mjc1NjJDREFEQUIzQTZFNUM5MkY5OTlEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvyhTu+dNC1h9L5j+D+sIVW5c 6ChOXEEBwRvmZsDlDmu95xG8D5r+Fjk/jQS+Q3KTBdyKI0TCKLpxryLE5E4wf7X/ mojHN+CdIdlmtbx3Ilvxx5nDahfSryNZREmS8OreElwuAyQ//xm6kjqo4N2Iw5K9 IO57O2cxE9r54SpoU5ftlcot59S/jOUUBnfhwttpe1xdv2K6O0tXeSDs4GWe8DvP Mf008w9ijdTYielub4uCKfc0oPUFL/4D6bjdVLAxy7PA+YNLtxkDbRxBNGZItq8y CVpImJTjn/cBKHefwqFsXkoxWiyPvLlQeXDqRAm80j+8gLOfmUsXw0h6RR0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zoo92fetSdWLNras6blyS+ZnYUwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkGkutZbSrTtw4TV0ZAzQD/BVJbK1zR5Ble qxdoaDYpbOhRjZhX1NN3gz9ys1stmcb6n09fR5EZR3yyqMmlahfuvV+f28r+4U1F 4g2p79rgU8VPdxr4bEgOoyVQAHFR6wy8+FwBEARz7DlA9t6lFFvXrJECAdDdI1ry 4ihc/7fysc1vuZBGRUShP0YEliXtogIZkrC9njFlzSHqz5rJk/UzEk7+sqzUiASv tOhQ/0lsEW2NtKlS4Mh1gi3tFr4C4tHWFN1naa/CarI2NvNTnzkvFtl9AMXF78FI jCcGltQB8mcCpvqRxVBdp+JY7PJisQ8D5YH4mpvfIGvV9iMU+28= -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:41 2025 by rpki-client