$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: xQUxBVVrkEbiTrslMcrYEEI7D/H5tBP+AP7ymi3NcVQ= Subject key identifier: 56:E5:0C:FB:C3:D4:20:B6:90:57:11:1F:F2:39:92:04:0B:C1:BE:FC Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 6342CC4299C1E075DE5DE47B631888DAAF691CC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 04F0 Signing time: Sat 19 Jul 2025 12:31:04 +0000 Manifest this update: Sat 19 Jul 2025 12:26:04 +0000 Manifest next update: Tue 22 Jul 2025 14:41:04 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: LqKaSBIfF4vvzTWki4RYLfTHE0SAZSc/HDIA4c/qzLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:42:cc:42:99:c1:e0:75:de:5d:e4:7b:63:18:88:da:af:69:1c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Jul 19 12:26:04 2025 GMT Not After : Jul 22 14:41:04 2025 GMT Subject: CN=56E50CFBC3D420B69057111FF23992040BC1BEFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:d1:b1:cc:2e:55:79:34:88:68:a0:97:52: 4e:33:c0:e3:97:e0:5b:4a:dd:8a:c3:ce:9e:b6:59: 61:ef:25:8b:90:e9:68:5c:fc:20:9c:1c:d9:83:a9: 55:47:25:11:07:a0:b9:71:d5:ba:85:40:bc:27:e4: 50:6e:77:2b:85:4d:34:c5:cf:c7:35:c6:68:6a:4a: 9d:4e:60:0e:a7:57:d5:9f:af:b7:f5:24:87:a3:9e: 78:6d:c6:ae:f7:c7:c3:10:ff:1d:84:24:7b:30:6f: d2:36:5f:cc:b7:4f:91:7d:bf:59:78:a6:03:09:3b: fb:0e:54:14:a4:5a:dd:f1:68:12:83:0b:1e:86:32: 52:d3:d5:2d:1b:af:51:d1:3d:dd:dc:af:c0:04:3c: 3e:05:42:97:be:11:32:53:8c:35:40:3d:3a:f2:42: 64:c4:f4:ed:63:b6:6a:77:1c:5a:84:9c:3e:96:99: b8:68:9f:26:5e:61:62:4c:6a:fc:24:91:95:23:96: b4:c6:39:f5:5e:17:06:96:11:71:03:ea:36:54:37: 68:90:71:01:f5:50:7b:38:6b:fe:f6:12:09:38:28: 42:47:0f:ab:bd:89:fd:78:0d:e2:74:5e:30:f1:d0: 24:17:5c:cd:da:e5:c6:66:f7:71:9f:91:ff:c6:24: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E5:0C:FB:C3:D4:20:B6:90:57:11:1F:F2:39:92:04:0B:C1:BE:FC X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:69:44:f9:23:e8:80:ba:1a:03:ea:28:e0:3e:fe:3c:96:fd: ec:06:f8:a1:da:1d:ba:bb:fc:d9:df:94:f2:e8:7c:e5:10:3f: 5e:cb:4e:b3:02:96:99:03:6f:0a:67:15:cb:82:fd:7b:ae:a8: 55:54:0f:0d:2c:21:2e:4e:74:27:9d:8f:94:0c:1a:2c:6e:6d: fc:dc:e6:a4:9e:54:d2:b4:52:7f:8e:23:eb:f2:42:b7:59:be: c1:e6:66:ed:97:1d:63:c2:1a:21:f2:ef:ff:27:7f:34:3a:f3: 9c:c1:81:2c:45:18:b6:b2:c4:ee:ec:b6:52:95:3e:49:61:0a: 33:06:87:0d:16:02:b3:6d:36:10:20:89:c9:cc:60:df:23:06: f8:7c:b1:de:6e:32:ec:fd:f6:3c:75:86:7d:66:36:09:31:de: c2:6b:f8:4b:e3:66:f6:51:b6:f6:a3:fb:8a:19:32:fd:6f:10: 19:fe:01:c1:48:81:b4:b5:d5:e1:4b:68:3d:a1:7e:0d:e9:cf: 55:6a:69:2f:cb:5e:9b:81:0a:f6:9c:ff:69:e9:5f:ed:44:9f: ac:81:af:e3:93:09:8b:aa:75:33:8c:b5:eb:b3:20:20:d3:71: cc:99:12:85:a1:49:df:55:11:e4:ee:be:03:7a:05:3a:c5:39: 1c:4c:da:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0LMQpnB4HXeXeR7YxiI2q9pHMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTA3MTkxMjI2MDRaFw0yNTA3MjIxNDQxMDRaMDMxMTAvBgNV BAMTKDU2RTUwQ0ZCQzNENDIwQjY5MDU3MTExRkYyMzk5MjA0MEJDMUJFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHj9GxzC5VeTSIaKCXUk4zwOOX 4FtK3YrDzp62WWHvJYuQ6Whc/CCcHNmDqVVHJREHoLlx1bqFQLwn5FBudyuFTTTF z8c1xmhqSp1OYA6nV9Wfr7f1JIejnnhtxq73x8MQ/x2EJHswb9I2X8y3T5F9v1l4 pgMJO/sOVBSkWt3xaBKDCx6GMlLT1S0br1HRPd3cr8AEPD4FQpe+ETJTjDVAPTry QmTE9O1jtmp3HFqEnD6WmbhonyZeYWJMavwkkZUjlrTGOfVeFwaWEXED6jZUN2iQ cQH1UHs4a/72Egk4KEJHD6u9if14DeJ0XjDx0CQXXM3a5cZm93Gfkf/GJHwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuUM+8PUILaQVxEf8jmSBAvBvvwwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVpRPkj6IC6GgPqKOA+/jyW/ewG+KHaHbq7 /NnflPLofOUQP17LTrMClpkDbwpnFcuC/XuuqFVUDw0sIS5OdCedj5QMGixubfzc 5qSeVNK0Un+OI+vyQrdZvsHmZu2XHWPCGiHy7/8nfzQ685zBgSxFGLayxO7stlKV PklhCjMGhw0WArNtNhAgicnMYN8jBvh8sd5uMuz99jx1hn1mNgkx3sJr+EvjZvZR tvaj+4oZMv1vEBn+AcFIgbS11eFLaD2hfg3pz1VqaS/LXpuBCvac/2npX+1En6yB r+OTCYuqdTOMteuzICDTccyZEoWhSd9VEeTuvgN6BTrFORxM2u8= -----END CERTIFICATE-----Generated at Mon Jul 21 12:27:06 2025 by rpki-client