$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: zSQWRUweq0KLbeHss76qyTRnjObIaP2G/PHH73K8jec= Subject key identifier: 48:AC:92:4E:E5:41:72:E6:58:5D:A8:A4:C8:E6:B5:02:B5:9B:A0:80 Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 744E5EA76132AB25104241741EBB6AD7C54D7AB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 04ED Signing time: Sat 19 Jul 2025 14:11:55 +0000 Manifest this update: Sat 19 Jul 2025 14:06:55 +0000 Manifest next update: Tue 22 Jul 2025 17:55:55 +0000 Files and hashes: 1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) 2: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: OJr2HA4VnDV9S7iOumsohLBQnleZLmikjZqKXP24UwQ=) 3: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 17:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4e:5e:a7:61:32:ab:25:10:42:41:74:1e:bb:6a:d7:c5:4d:7a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Jul 19 14:06:55 2025 GMT Not After : Jul 22 17:55:55 2025 GMT Subject: CN=48AC924EE54172E6585DA8A4C8E6B502B59BA080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:95:b9:7b:68:84:5c:3e:6f:17:5e:14:31:63: 3d:42:46:53:b6:b5:5c:f4:99:67:b5:db:5c:48:f5: 36:c2:7e:a1:36:a6:5c:25:4d:7d:74:1f:75:98:91: ff:a2:03:36:f2:98:58:2c:be:be:fa:6b:7f:e6:cd: c2:e4:32:f9:2f:b6:97:7d:b9:17:e9:2e:b5:10:94: fa:8b:9b:88:51:13:2e:04:0e:ab:bf:9a:5b:90:82: 50:fc:50:35:94:9b:5b:21:56:57:43:83:1d:4d:7a: 80:dd:8e:0a:25:be:ea:30:f9:11:fb:ed:e1:01:16: e5:17:80:dd:09:b3:2c:c3:f9:a9:ac:3b:39:60:3f: b3:44:02:c5:a4:df:35:00:56:6b:bd:39:91:54:d6: fd:3c:68:d4:d1:87:54:ee:a3:10:f4:b1:bd:4f:47: 65:5a:b5:9e:98:19:d4:91:b9:2d:c1:d4:43:73:3c: 77:12:0b:bd:ae:c8:09:be:3a:98:5b:7e:cd:c6:c4: c8:2a:f8:a3:49:38:0a:64:58:96:16:e6:aa:86:ea: 42:90:e6:e9:b7:39:4d:9f:68:27:ba:b0:ac:ca:99: e4:95:e0:c0:a3:70:79:be:9a:5a:dc:81:97:21:1c: a0:5b:2a:d4:3d:c6:b2:86:6e:07:8e:41:63:c2:f2: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AC:92:4E:E5:41:72:E6:58:5D:A8:A4:C8:E6:B5:02:B5:9B:A0:80 X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a4:f2:35:9d:2c:3f:ba:18:49:b8:0f:8a:5c:8d:40:3d:e7: 73:9d:57:46:63:86:a1:e9:e4:d1:1b:56:f3:18:47:92:14:3f: 1e:46:a6:29:41:66:c6:c0:9e:b9:c1:ce:1b:e6:f2:ec:1c:d6: da:e4:66:d3:9f:ef:26:87:62:66:33:6e:65:a9:e2:26:f3:c9: 51:e2:38:2a:70:08:94:38:60:9b:f6:e4:18:44:1c:10:e0:d5: 7b:eb:c9:74:f2:1a:a0:f0:c3:28:27:72:41:6a:31:cf:04:a7: ee:f3:c8:d8:16:86:a3:88:2f:63:40:4d:13:9a:b1:58:2e:5a: 1a:b6:4c:fb:5c:f1:2b:83:8b:b6:71:26:7e:80:4c:6d:3c:03: 07:6e:cd:64:e5:f8:b0:a8:3b:62:80:7b:c1:9e:b1:d7:21:13: 56:05:9c:5f:58:f7:fa:10:f8:fc:2a:02:ed:f5:79:3f:0b:19: 79:55:02:fc:de:03:62:11:42:25:aa:9f:43:af:9e:03:ae:0f: 40:17:c9:38:98:02:60:6a:c4:3f:ed:a8:db:0d:86:49:8e:cf: 1f:41:75:3e:61:e1:fc:57:f9:76:3f:73:40:58:39:3d:03:b3: 4d:74:f1:4f:c2:71:db:f9:d1:a8:35:02:dc:94:db:4e:6c:4f: 43:bf:ee:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdE5ep2EyqyUQQkF0Hrtq18VNerAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTA3MTkxNDA2NTVaFw0yNTA3MjIxNzU1NTVaMDMxMTAvBgNV BAMTKDQ4QUM5MjRFRTU0MTcyRTY1ODVEQThBNEM4RTZCNTAyQjU5QkEwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlbl7aIRcPm8XXhQxYz1CRlO2 tVz0mWe121xI9TbCfqE2plwlTX10H3WYkf+iAzbymFgsvr76a3/mzcLkMvkvtpd9 uRfpLrUQlPqLm4hREy4EDqu/mluQglD8UDWUm1shVldDgx1NeoDdjgolvuow+RH7 7eEBFuUXgN0JsyzD+amsOzlgP7NEAsWk3zUAVmu9OZFU1v08aNTRh1TuoxD0sb1P R2VatZ6YGdSRuS3B1ENzPHcSC72uyAm+Ophbfs3GxMgq+KNJOApkWJYW5qqG6kKQ 5um3OU2faCe6sKzKmeSV4MCjcHm+mlrcgZchHKBbKtQ9xrKGbgeOQWPC8o+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKySTuVBcuZYXaikyOa1ArWboIAwHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmk8jWdLD+6GEm4D4pcjUA953OdV0ZjhqHp 5NEbVvMYR5IUPx5GpilBZsbAnrnBzhvm8uwc1trkZtOf7yaHYmYzbmWp4ibzyVHi OCpwCJQ4YJv25BhEHBDg1XvryXTyGqDwwygnckFqMc8Ep+7zyNgWhqOIL2NATROa sVguWhq2TPtc8SuDi7ZxJn6ATG08AwduzWTl+LCoO2KAe8GesdchE1YFnF9Y9/oQ +PwqAu31eT8LGXlVAvzeA2IRQiWqn0OvngOuD0AXyTiYAmBqxD/tqNsNhkmOzx9B dT5h4fxX+XY/c0BYOT0Ds0108U/Ccdv50ag1AtyU205sT0O/7g0= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:07 2025 by rpki-client