$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: KLQACXPMWETL+xh9vebp6FbkQEV6VCPfHV+TjJ4adiQ= Subject key identifier: 50:BB:D9:35:1F:48:28:B1:AC:F4:33:47:7E:BD:B8:FB:E8:6D:4E:5E Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 4E0DF5469EE90F1F48293F1AA0C05F1D114D5CC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 0560 Signing time: Sun 05 Apr 2026 00:42:20 +0000 Manifest this update: Sun 05 Apr 2026 00:37:20 +0000 Manifest next update: Wed 08 Apr 2026 07:33:20 +0000 Files and hashes: 1: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: cGfP6ivDW/arEjyEg4KHQyk4wJTXo9yjKrNh7BdcSc8=) 2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 07:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0d:f5:46:9e:e9:0f:1f:48:29:3f:1a:a0:c0:5f:1d:11:4d:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Apr 5 00:37:20 2026 GMT Not After : Apr 8 07:33:20 2026 GMT Subject: CN=50BBD9351F4828B1ACF433477EBDB8FBE86D4E5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:87:99:4d:a8:2a:05:a2:9e:da:a3:8b:c0: fe:29:c0:e2:f4:7c:6f:2e:d3:5f:3f:70:9b:7c:ef: de:8a:22:f6:6f:bb:6d:2e:2a:7c:84:65:c4:7a:d2: c2:18:21:d6:ac:fa:22:76:1e:4c:56:9f:d8:3b:45: 3e:91:b6:ff:eb:98:2d:46:da:71:b7:ed:fa:00:2c: 06:c3:6b:65:6b:aa:d0:e6:0f:0f:10:90:be:ce:43: 6d:ea:60:d0:b3:0e:52:d7:e9:28:b5:69:93:b9:2a: c1:9c:c0:4e:72:7c:8f:47:bc:41:2f:2f:b5:c0:63: 93:fb:f1:95:68:28:f8:93:00:31:61:15:5b:e9:fe: a7:8d:dc:f6:81:60:89:cb:a0:6d:b1:fb:aa:f2:cc: 4e:37:cf:fc:51:a7:40:84:ca:94:ab:d1:53:f6:0e: 77:ca:b7:eb:73:fd:27:68:d2:d8:30:0b:68:c1:c8: 94:1f:97:c2:af:b1:45:7a:8b:5b:fc:23:07:8f:91: dd:a4:61:41:cc:b2:08:a9:e6:a1:2b:b8:06:1f:ee: 57:de:05:b6:82:a1:06:0a:10:06:f1:46:d7:b4:54: e2:98:69:6b:6e:32:5d:44:fc:41:42:50:27:f0:91: b2:84:77:7a:bd:ab:4a:d4:b2:cd:fb:ff:68:60:6c: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BB:D9:35:1F:48:28:B1:AC:F4:33:47:7E:BD:B8:FB:E8:6D:4E:5E X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:3c:7d:91:51:4c:7b:67:1f:8f:76:c7:16:44:95:82:e8:a8: 39:e1:4c:a1:ee:fe:f9:7d:dc:bb:90:a5:d8:92:63:1f:e3:aa: 54:c2:32:1b:04:26:c5:b6:6c:a5:d2:87:29:c7:9d:ca:1b:67: 24:60:33:69:36:29:89:52:fc:9e:15:c0:de:24:6c:52:1d:e0: 32:27:49:b2:72:6b:c6:c9:04:96:94:33:a2:ca:48:e7:48:20: 32:c2:11:fc:53:13:ea:94:e8:e8:eb:4f:15:6b:b1:53:0c:6e: f7:c1:50:a5:3c:84:d9:2a:32:cc:2d:8d:3b:e7:bc:11:bc:8d: 31:6e:ac:96:82:66:42:9c:89:ff:d1:c6:6f:5b:dc:83:0d:c4: 0f:a2:53:27:b2:8d:9d:ce:65:dc:e0:d1:02:49:df:45:60:dc: 52:3e:73:e3:1c:de:54:34:e6:dd:fc:8f:02:18:2b:68:b7:30: 43:52:88:2e:84:af:ed:82:a4:35:bb:25:54:18:b3:b9:d8:76: e0:09:3f:ec:36:cb:fe:35:8c:57:66:73:6e:e6:b6:d2:5b:7c: a5:3d:00:49:ab:fa:85:4c:e8:17:24:94:ae:c4:61:d6:3e:52: c4:bf:45:a1:c7:76:90:66:d8:d9:ad:3d:ed:87:e4:7e:87:70: d5:82:a8:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTg31Rp7pDx9IKT8aoMBfHRFNXMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNjA0MDUwMDM3MjBaFw0yNjA0MDgwNzMzMjBaMDMxMTAvBgNV BAMTKDUwQkJEOTM1MUY0ODI4QjFBQ0Y0MzM0NzdFQkRCOEZCRTg2RDRFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rYeZTagqBaKe2qOLwP4pwOL0 fG8u018/cJt8796KIvZvu20uKnyEZcR60sIYIdas+iJ2HkxWn9g7RT6Rtv/rmC1G 2nG37foALAbDa2VrqtDmDw8QkL7OQ23qYNCzDlLX6Si1aZO5KsGcwE5yfI9HvEEv L7XAY5P78ZVoKPiTADFhFVvp/qeN3PaBYInLoG2x+6ryzE43z/xRp0CEypSr0VP2 DnfKt+tz/Sdo0tgwC2jByJQfl8KvsUV6i1v8IwePkd2kYUHMsgip5qEruAYf7lfe BbaCoQYKEAbxRte0VOKYaWtuMl1E/EFCUCfwkbKEd3q9q0rUss37/2hgbOedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULvZNR9IKLGs9DNHfr24++htTl4wHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALA8fZFRTHtnH492xxZElYLoqDnhTKHu/vl9 3LuQpdiSYx/jqlTCMhsEJsW2bKXShynHncobZyRgM2k2KYlS/J4VwN4kbFId4DIn SbJya8bJBJaUM6LKSOdIIDLCEfxTE+qU6OjrTxVrsVMMbvfBUKU8hNkqMswtjTvn vBG8jTFurJaCZkKcif/Rxm9b3IMNxA+iUyeyjZ3OZdzg0QJJ30Vg3FI+c+Mc3lQ0 5t38jwIYK2i3MENSiC6Er+2CpDW7JVQYs7nYduAJP+w2y/41jFdmc27mttJbfKU9 AEmr+oVM6BcklK7EYdY+UsS/RaHHdpBm2NmtPe2H5H6HcNWCqLE= -----END CERTIFICATE-----Generated at Mon Apr 6 15:31:18 2026 by rpki-client