$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft File: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft (raw, json) Hash identifier: tWxRgkLkKqW7to51VjpecdxBN1O9MF2OVBQm3y4IRU4= Subject key identifier: EC:6C:EE:96:34:1F:46:55:1E:34:2D:BB:6D:A2:C4:86:F5:36:F9:61 Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Certificate serial: 3B1C84C8525D7DFB275EEC835547D703FA43689F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft Manifest number: 04F4 Signing time: Sun 20 Jul 2025 21:51:06 +0000 Manifest this update: Sun 20 Jul 2025 21:46:06 +0000 Manifest next update: Thu 24 Jul 2025 06:14:06 +0000 Files and hashes: 1: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: uuH+ziNBEr2lIwcdPkvVugSjVKRTjk8bgzFRk7pTIbw=) 2: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: i7aYSENMEfGKEvc4Lk7qqNHogOL9IdoberdA+QXB6Ks=) 3: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: UD6uPbiybd2gYQ34RwGBqvbNDHuw/OBXgpqqJ4vtt5c=) 4: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Og1WIa42Ljyk1coTqcyrLMYu4TjgeM0yBlFnoKhLkxg=) 5: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: mSVrT9nxgdbO5zEJl0JNWqbaa5yXAY0zHugt4tIrWAI=) 6: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: Oed5Ss8UCWFYg2IP6FcmD4GyOtzzcl9PEDa+w2C64YA=) 7: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: d+qfmJX6WG8MNu+fGfy0UM9kQ8qVSJz1W4rWMZJ2HL0=) 8: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: pXz40XnCPDHjX6ETU549n8DZU0gFVrvM11PQ2EVGj3Q=) 9: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: 7fQVmlkjjbtviTL2Fj7ic9MZZ5loTg5W7CHv/vNGE0s=) 10: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl (hash: X0/z4YOQwn8IVC4h67woYxzWtpLPlantPcHfoEBfxXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1c:84:c8:52:5d:7d:fb:27:5e:ec:83:55:47:d7:03:fa:43:68:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Validity Not Before: Jul 20 21:46:06 2025 GMT Not After : Jul 24 06:14:06 2025 GMT Subject: CN=EC6CEE96341F46551E342DBB6DA2C486F536F961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:99:4c:88:e4:40:fa:14:94:08:49:e5:cb: 26:a0:c9:5d:6d:67:17:69:f5:70:f2:5b:ba:ba:b7: ad:2a:91:a8:8e:99:5a:f6:85:35:dc:1f:34:9b:d9: 11:99:74:5c:5a:73:2e:0a:65:c8:1a:45:a0:46:9b: 76:e3:a8:66:39:80:2e:a6:54:ef:c9:73:1c:c3:a3: 4b:74:22:1b:94:18:13:02:ab:c8:67:b3:c2:d4:f7: b8:b9:2f:08:df:25:0a:44:a2:4a:39:2e:76:8b:f5: b6:b9:32:24:5e:72:6e:e9:dd:2c:a2:b1:35:d4:b9: d8:40:be:0f:a5:a9:2c:40:77:ea:a0:80:90:79:1d: 97:73:24:c9:a7:50:0e:ed:78:bf:94:7e:60:af:4f: c0:38:10:fd:c2:cd:0f:a7:6a:a7:b6:c9:2d:ee:34: be:49:5f:f5:f8:73:7d:82:e7:bc:26:38:8e:25:5d: dd:1f:59:5a:9c:aa:63:54:5a:05:a2:10:7b:51:c4: 2d:36:25:95:13:03:b0:45:e8:fe:26:dc:ec:f4:66: 1f:93:57:ef:e0:d0:42:3b:1b:09:62:2f:25:2f:2d: cb:b2:5a:86:58:9c:0a:02:46:cb:cf:25:fe:2d:94: 1e:83:02:9d:73:17:b8:fb:5d:26:4d:67:a1:05:51: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6C:EE:96:34:1F:46:55:1E:34:2D:BB:6D:A2:C4:86:F5:36:F9:61 X509v3 Authority Key Identifier: keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:8b:12:9e:e8:44:e6:2a:b2:6c:4a:ed:c9:9a:3a:44:b8:66: 8a:1c:02:26:ad:b7:df:a8:d2:04:7f:c5:22:26:ec:2c:e5:3c: e4:f8:49:cb:57:28:3d:b9:6f:0a:04:f6:b4:86:bc:6c:ed:a1: b0:4c:79:c8:4d:47:98:75:7a:bc:a3:1a:b0:19:86:08:22:db: 8c:46:9a:22:3b:d7:72:2c:64:43:5f:d8:99:48:fc:12:e9:4b: ce:39:3b:b5:d4:92:e6:c8:19:22:fd:cd:8d:0f:a1:f1:8d:3a: 7e:ae:a6:bd:31:9a:15:8b:07:a7:fa:f2:d2:72:e2:6c:d2:f4: 6f:02:84:bb:56:be:1e:bd:90:99:d5:4c:02:81:ab:41:68:fd: 56:33:ee:68:a4:a8:ee:94:6f:e2:71:64:0d:9f:05:57:33:36: 45:b8:a5:8d:7f:e4:c4:ea:39:22:97:10:20:e1:dd:f6:07:37: ef:ea:c1:7b:26:ef:a0:42:e8:d2:5d:ce:e1:47:d1:fd:bd:0a: 86:e3:e8:33:6c:35:02:2c:6c:c6:3d:ca:c6:1c:e0:aa:0b:26: 82:81:01:8d:61:83:1e:ee:cc:39:e0:17:94:60:88:06:17:e3: 7a:8d:cf:cf:9a:fa:73:7a:1f:67:82:63:b4:25:a5:f3:45:ac: 2f:80:66:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxyEyFJdffsnXuyDVUfXA/pDaJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1 MDU3QUNFNTAeFw0yNTA3MjAyMTQ2MDZaFw0yNTA3MjQwNjE0MDZaMDMxMTAvBgNV BAMTKEVDNkNFRTk2MzQxRjQ2NTUxRTM0MkRCQjZEQTJDNDg2RjUzNkY5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeJlMiORA+hSUCEnlyyagyV1t Zxdp9XDyW7q6t60qkaiOmVr2hTXcHzSb2RGZdFxacy4KZcgaRaBGm3bjqGY5gC6m VO/JcxzDo0t0IhuUGBMCq8hns8LU97i5LwjfJQpEoko5LnaL9ba5MiRecm7p3Syi sTXUudhAvg+lqSxAd+qggJB5HZdzJMmnUA7teL+UfmCvT8A4EP3CzQ+naqe2yS3u NL5JX/X4c32C57wmOI4lXd0fWVqcqmNUWgWiEHtRxC02JZUTA7BF6P4m3Oz0Zh+T V+/g0EI7GwliLyUvLcuyWoZYnAoCRsvPJf4tlB6DAp1zF7j7XSZNZ6EFUXbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7GzuljQfRlUeNC27baLEhvU2+WEwHwYDVR0j BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2 RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3 QUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdjZDY4ZjQtNjlhNS00NzVmLWFl ZTQtM2VmNGI4ZDMwMmRkLzAvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3 QkM1MDU3QUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6LEp7oROYqsmxK7cmaOkS4ZoocAiatt9+o 0gR/xSIm7CzlPOT4SctXKD25bwoE9rSGvGztobBMechNR5h1eryjGrAZhggi24xG miI713IsZENf2JlI/BLpS845O7XUkubIGSL9zY0PofGNOn6upr0xmhWLB6f68tJy 4mzS9G8ChLtWvh69kJnVTAKBq0Fo/VYz7mikqO6Ub+JxZA2fBVczNkW4pY1/5MTq OSKXECDh3fYHN+/qwXsm76BC6NJdzuFH0f29Cobj6DNsNQIsbMY9ysYc4KoLJoKB AY1hgx7uzDngF5RgiAYX43qNz8+a+nN6H2eCY7QlpfNFrC+AZqk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:57 2025 by rpki-client