$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: VONj6VtpEv1cCRjhF2qtP/GwzYHidUNMzxlc0HTnz2M= Subject key identifier: FE:5B:6B:97:45:A6:04:68:44:90:B3:A1:60:43:ED:A1:0D:38:14:6A Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 06589A4B97D84F50A4E3C279F146CF0970E0A3A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 051D Signing time: Wed 05 Nov 2025 05:52:01 +0000 Manifest this update: Wed 05 Nov 2025 05:47:01 +0000 Manifest next update: Sat 08 Nov 2025 11:20:01 +0000 Files and hashes: 1: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: g2iv5TIKOXb1BL4mv9VXur5s8NFlaVRRiAzIRMWQKJQ=) 2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 11:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:58:9a:4b:97:d8:4f:50:a4:e3:c2:79:f1:46:cf:09:70:e0:a3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Nov 5 05:47:01 2025 GMT Not After : Nov 8 11:20:01 2025 GMT Subject: CN=FE5B6B9745A604684490B3A16043EDA10D38146A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:36:db:01:63:19:40:21:82:52:89:3d:b6: 52:2a:94:4c:28:eb:18:22:78:10:83:e4:d8:b3:49: c7:5a:5c:2c:d1:33:37:25:e3:96:25:fe:d6:b2:91: 76:cb:2e:4e:49:37:91:c1:96:a0:b3:b2:de:58:09: 2c:94:5d:f8:bb:e4:22:a6:26:17:aa:8f:72:e6:6b: 18:c5:60:3a:a5:fc:51:91:a8:25:c6:dd:fb:f4:0a: 01:6d:60:ea:1a:f3:fa:64:34:d5:cd:bb:81:52:70: f4:87:08:da:a0:8c:33:38:72:5b:f2:30:b0:2f:45: 21:c3:c6:0a:22:fa:5b:c8:09:63:e2:16:a5:8c:6a: f8:87:56:31:42:e4:7a:d9:15:7e:81:98:d7:e1:5c: b3:35:72:37:06:8f:1c:5e:f1:37:35:7d:71:50:ad: d8:02:aa:f1:1d:87:bd:73:c8:1c:2d:be:28:7b:89: 6f:32:38:cf:61:b9:69:13:aa:61:e0:14:d9:4e:54: bc:bf:6a:25:bd:cc:87:33:b6:4d:dd:7b:2e:1c:68: ba:cb:3e:dd:4e:1a:87:ca:53:5f:9a:55:72:3f:8b: b9:71:38:b3:6c:cd:d7:6b:02:b5:57:a1:d4:e5:17: f2:09:c0:94:f3:db:af:28:d9:aa:21:58:84:16:3c: 37:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5B:6B:97:45:A6:04:68:44:90:B3:A1:60:43:ED:A1:0D:38:14:6A X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:dd:0e:55:0b:c0:0a:1d:80:28:dd:89:7b:fd:0a:91:d5:de: fd:e1:1c:de:f2:87:87:a7:69:d5:73:38:c9:62:b3:2f:a2:dd: 02:90:ed:f8:bd:29:af:50:93:15:2d:21:49:aa:73:2e:a5:ce: 7d:20:30:55:7c:b7:29:ba:65:b8:dc:9c:6a:1f:19:8b:f2:1b: 66:30:e3:bf:53:66:5c:8f:a3:63:a2:0d:e7:88:a4:92:50:cb: 57:c9:96:5e:21:56:cb:5d:c4:fa:52:63:c3:14:09:bf:26:c8: 4f:fb:0a:e7:29:82:12:1e:89:0d:58:dc:2b:e3:69:c8:b8:b1: 2c:e7:3a:fa:d6:57:e3:51:6e:a9:06:7c:e0:6d:b3:95:a6:e4: f4:84:e0:c1:51:83:0c:16:2c:b1:01:48:aa:26:7a:77:a6:6c: b9:f8:5b:a7:e0:74:bf:81:8f:26:ff:f2:23:7b:95:1a:e9:e4: fe:81:aa:c4:c0:43:d1:70:db:6d:cc:8b:aa:9d:78:b9:93:0a: c2:d9:26:6c:35:7e:48:08:c4:03:09:51:20:39:56:ea:74:eb: b3:4b:9f:57:dc:12:cc:48:b1:12:21:bb:74:dd:d8:69:45:4f: 2d:ae:dc:b1:14:2f:7a:91:6f:2f:d3:0b:5c:1a:d2:c1:2d:9b: b9:d1:9d:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBliaS5fYT1Ck48J58UbPCXDgo6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTExMDUwNTQ3MDFaFw0yNTExMDgxMTIwMDFaMDMxMTAvBgNV BAMTKEZFNUI2Qjk3NDVBNjA0Njg0NDkwQjNBMTYwNDNFREExMEQzODE0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7DbbAWMZQCGCUok9tlIqlEwo 6xgieBCD5NizScdaXCzRMzcl45Yl/taykXbLLk5JN5HBlqCzst5YCSyUXfi75CKm Jheqj3LmaxjFYDql/FGRqCXG3fv0CgFtYOoa8/pkNNXNu4FScPSHCNqgjDM4clvy MLAvRSHDxgoi+lvICWPiFqWMaviHVjFC5HrZFX6BmNfhXLM1cjcGjxxe8Tc1fXFQ rdgCqvEdh71zyBwtvih7iW8yOM9huWkTqmHgFNlOVLy/aiW9zIcztk3dey4caLrL Pt1OGofKU1+aVXI/i7lxOLNszddrArVXodTlF/IJwJTz268o2aohWIQWPDfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ltrl0WmBGhEkLOhYEPtoQ04FGowHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXdDlULwAodgCjdiXv9CpHV3v3hHN7yh4en adVzOMlisy+i3QKQ7fi9Ka9QkxUtIUmqcy6lzn0gMFV8tym6ZbjcnGofGYvyG2Yw 479TZlyPo2OiDeeIpJJQy1fJll4hVstdxPpSY8MUCb8myE/7CucpghIeiQ1Y3Cvj aci4sSznOvrWV+NRbqkGfOBts5Wm5PSE4MFRgwwWLLEBSKomenembLn4W6fgdL+B jyb/8iN7lRrp5P6BqsTAQ9Fw223Mi6qdeLmTCsLZJmw1fkgIxAMJUSA5Vup067NL n1fcEsxIsRIhu3Td2GlFTy2u3LEUL3qRby/TC1wa0sEtm7nRnYE= -----END CERTIFICATE-----Generated at Wed Nov 5 12:25:06 2025 by rpki-client