$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: VOZjUyCRu29OXIkC8JbNhYHu3cTbjBzx6301sGNzlLc= Subject key identifier: 35:99:F5:B8:9E:1E:C8:52:4F:22:0A:00:FC:59:75:B9:48:C4:17:6F Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 63C9D12F3AC806A95DE87E1F75E619D289314C94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0505 Signing time: Wed 03 Sep 2025 20:41:06 +0000 Manifest this update: Wed 03 Sep 2025 20:36:06 +0000 Manifest next update: Sun 07 Sep 2025 01:00:06 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: 4kPHSrmo0bj6rH5DHmHzuAR5sFm6XfdtwZTnmxPYB3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 01:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c9:d1:2f:3a:c8:06:a9:5d:e8:7e:1f:75:e6:19:d2:89:31:4c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Sep 3 20:36:06 2025 GMT Not After : Sep 7 01:00:06 2025 GMT Subject: CN=3599F5B89E1EC8524F220A00FC5975B948C4176F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:21:25:ec:ff:f7:8c:a6:48:62:6e:d2:67: 8b:bd:f8:8e:32:4f:3b:ff:82:80:b7:24:c4:82:61: 60:de:02:d5:11:c7:c7:cc:13:af:20:48:e7:51:84: 94:18:0a:b7:26:a1:63:87:80:16:95:b0:f1:7b:02: 8f:52:e7:46:9a:85:2f:80:d8:f7:ad:45:79:e5:be: 54:a8:78:c6:f8:8b:c6:ae:05:9b:b5:0d:0b:49:1c: 59:0c:4f:a1:a7:ae:f6:50:b7:1c:ba:95:a8:56:b0: 6d:5a:f1:7f:0b:85:d2:23:88:31:14:23:3f:e5:37: 97:88:bb:3e:9e:57:77:09:c7:f2:7c:ba:14:23:1f: 29:27:ad:22:3a:d2:8d:60:a0:d6:df:35:87:c6:ba: a7:59:05:56:69:be:ba:9e:d3:49:79:e6:d5:0c:8b: b8:f7:ae:31:b3:6d:5c:58:4f:28:f6:55:48:ce:eb: 03:4d:6a:be:00:2f:ae:ab:e5:ed:67:83:0f:de:d1: 5f:ba:ee:9f:6d:2a:f2:ba:4f:9d:fc:ff:f0:9e:a1: e4:a1:8f:98:47:85:06:54:a1:70:b0:60:5d:d0:c4: 2a:90:cf:a4:b4:27:28:e7:49:b0:c5:bc:b3:90:61: 2c:fd:2b:2f:79:cd:a6:4e:b3:42:f3:37:ce:7a:95: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:99:F5:B8:9E:1E:C8:52:4F:22:0A:00:FC:59:75:B9:48:C4:17:6F X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b2:c4:b9:e4:e7:3a:b1:24:f0:01:ae:21:02:da:64:89:6c: db:a9:ee:ef:b3:c0:81:1a:7c:75:44:47:ee:55:1f:97:28:46: e7:f7:7a:85:3c:f4:ba:a4:d6:9c:af:f5:40:6d:db:5a:22:ee: 63:68:ad:30:2f:38:a7:5e:a1:fc:c0:9a:fa:3a:af:01:77:07: 0b:20:4e:7c:84:a6:30:26:6b:18:74:d1:2f:35:59:f9:10:0f: e0:e0:23:bc:f4:8d:53:6b:36:0b:99:db:ea:59:94:99:4c:38: 32:e6:4f:b9:40:9e:e0:23:a3:86:4f:19:7b:b2:36:f4:bd:e9: 27:76:03:d3:b0:cc:27:2c:de:b1:d0:17:e2:5f:33:e6:33:d7: 58:e7:6d:6a:1e:fc:a5:5c:a9:5b:77:58:b8:83:08:a6:fe:a8: 8c:42:33:9d:be:90:fc:a3:23:e8:2a:bf:f6:64:2c:35:1d:15: fb:9b:84:c4:5a:2f:a7:83:9c:73:e1:cb:b9:9d:15:e0:ef:df: 09:f5:1e:3b:e6:66:db:b8:44:ed:5c:40:8b:30:9a:5a:0c:c2: 48:89:55:78:dc:ae:c6:c0:8a:11:af:57:8e:21:78:3f:28:9b: 53:3c:75:47:0f:0e:2b:d3:46:eb:04:52:7d:e1:12:da:a1:90: aa:71:80:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8nRLzrIBqld6H4fdeYZ0okxTJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTA5MDMyMDM2MDZaFw0yNTA5MDcwMTAwMDZaMDMxMTAvBgNV BAMTKDM1OTlGNUI4OUUxRUM4NTI0RjIyMEEwMEZDNTk3NUI5NDhDNDE3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gyEl7P/3jKZIYm7SZ4u9+I4y Tzv/goC3JMSCYWDeAtURx8fME68gSOdRhJQYCrcmoWOHgBaVsPF7Ao9S50aahS+A 2PetRXnlvlSoeMb4i8auBZu1DQtJHFkMT6GnrvZQtxy6lahWsG1a8X8LhdIjiDEU Iz/lN5eIuz6eV3cJx/J8uhQjHyknrSI60o1goNbfNYfGuqdZBVZpvrqe00l55tUM i7j3rjGzbVxYTyj2VUjO6wNNar4AL66r5e1ngw/e0V+67p9tKvK6T538//CeoeSh j5hHhQZUoXCwYF3QxCqQz6S0JyjnSbDFvLOQYSz9Ky95zaZOs0LzN856lZXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNZn1uJ4eyFJPIgoA/Fl1uUjEF28wHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqyxLnk5zqxJPABriEC2mSJbNup7u+zwIEa fHVER+5VH5coRuf3eoU89Lqk1pyv9UBt21oi7mNorTAvOKdeofzAmvo6rwF3Bwsg TnyEpjAmaxh00S81WfkQD+DgI7z0jVNrNguZ2+pZlJlMODLmT7lAnuAjo4ZPGXuy NvS96Sd2A9OwzCcs3rHQF+JfM+Yz11jnbWoe/KVcqVt3WLiDCKb+qIxCM52+kPyj I+gqv/ZkLDUdFfubhMRaL6eDnHPhy7mdFeDv3wn1HjvmZtu4RO1cQIswmloMwkiJ VXjcrsbAihGvV44heD8om1M8dUcPDivTRusEUn3hEtqhkKpxgCE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:56 2025 by rpki-client