$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: WirQbaIibMz3LA4bleYLyLoQtFcMAPKmkIFmYEYKaA0= Subject key identifier: 3C:EF:F1:53:C6:75:D9:A9:B0:36:E3:81:E1:10:B8:3B:C7:E2:36:78 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 7C29F6152BE9397634B060A1DF8342D80C564D38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0551 Signing time: Wed 25 Feb 2026 03:41:13 +0000 Manifest this update: Wed 25 Feb 2026 03:36:13 +0000 Manifest next update: Sat 28 Feb 2026 04:03:13 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: v43dX61mCA6FzgTzkEcAocYzE5kc+xCFmNwTpX7sOvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Feb 2026 04:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:29:f6:15:2b:e9:39:76:34:b0:60:a1:df:83:42:d8:0c:56:4d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Feb 25 03:36:13 2026 GMT Not After : Feb 28 04:03:13 2026 GMT Subject: CN=3CEFF153C675D9A9B036E381E110B83BC7E23678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:1a:b8:81:9c:b2:bb:0b:b0:a1:75:7a:cd: af:c4:a8:a8:f3:83:43:80:09:a5:bd:6c:05:4f:61: ed:de:24:cb:a8:1f:49:b9:36:1b:55:be:6f:01:90: 0c:0a:a7:7f:ea:0a:c6:14:6a:43:c2:65:12:8a:cb: 87:90:d6:56:49:33:7f:20:e3:75:09:99:53:3f:81: 8d:b4:4a:b0:d5:5b:37:ba:bd:ea:10:aa:34:b5:a2: 37:fb:0e:9f:22:da:42:c0:90:73:84:f7:74:d0:b7: d6:e4:b1:44:dd:22:79:fd:58:2a:b3:d3:2b:f4:11: 4d:8e:57:d5:29:95:46:70:1f:35:44:41:50:26:18: 7a:00:bc:d8:7b:ba:b6:72:11:7b:1c:57:da:c9:e3: 1c:a4:04:34:2a:7f:a9:52:0c:ac:df:90:8e:90:80: 7e:2d:cd:0b:cb:7c:f0:01:b2:99:1b:6a:84:99:d0: 39:1a:b7:12:57:3a:d8:f3:11:6f:38:d9:a9:54:ce: 24:f6:2c:c8:e7:2a:05:f7:59:c7:69:84:29:03:b7: 46:40:a5:80:e2:12:1b:a5:d4:54:16:6c:3b:63:73: 44:65:e1:69:98:c1:77:03:f7:c5:22:51:ce:e0:7b: 0c:5d:9e:7a:84:87:68:03:d8:24:3a:e8:7f:58:1c: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:F1:53:C6:75:D9:A9:B0:36:E3:81:E1:10:B8:3B:C7:E2:36:78 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:22:6d:46:01:cb:9b:7f:87:00:c4:ce:63:15:5a:47:2d: e1:1d:cb:2e:1a:e0:ef:2f:60:c3:a8:e5:e1:72:5f:af:37:af: b2:4d:f9:77:dd:3d:4d:80:b5:c2:1f:34:ad:59:08:bb:a2:b9: e9:ab:05:7b:0e:85:40:3f:f7:84:91:aa:31:23:4d:d4:fc:9c: c2:fb:9c:83:16:3b:24:58:38:23:ae:cf:01:35:4b:87:a2:74: e5:4d:a3:c8:78:a0:99:5f:18:2b:e1:13:3e:f4:f0:49:93:4b: ed:e4:3c:53:6f:e6:75:6a:85:ca:ae:ba:6d:ff:85:0f:72:0f: 3c:2c:e0:0f:40:05:02:e1:95:fb:ac:d7:20:05:e5:97:46:d4: 61:2e:99:34:fc:d8:56:37:c1:53:2d:bd:61:d4:58:6e:c6:75: 7e:0b:3c:d0:a2:f1:e1:a6:99:bb:8d:b5:3c:4a:7b:0f:75:e0: bb:66:b7:f9:d6:a1:d9:aa:30:4c:e5:4f:b8:2e:8f:60:df:d0: 7c:df:af:97:8a:86:e7:7f:01:95:6c:e4:3e:b0:35:05:38:fc: c1:d0:04:f5:74:8f:51:9d:87:7f:0d:b1:8e:65:f3:c8:eb:d6: ed:d0:85:cb:cc:e3:e9:74:b0:fd:48:6f:78:2e:dc:44:76:de: 6e:1d:57:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCn2FSvpOXY0sGCh34NC2AxWTTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNjAyMjUwMzM2MTNaFw0yNjAyMjgwNDAzMTNaMDMxMTAvBgNV BAMTKDNDRUZGMTUzQzY3NUQ5QTlCMDM2RTM4MUUxMTBCODNCQzdFMjM2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyRq4gZyyuwuwoXV6za/EqKjz g0OACaW9bAVPYe3eJMuoH0m5NhtVvm8BkAwKp3/qCsYUakPCZRKKy4eQ1lZJM38g 43UJmVM/gY20SrDVWze6veoQqjS1ojf7Dp8i2kLAkHOE93TQt9bksUTdInn9WCqz 0yv0EU2OV9UplUZwHzVEQVAmGHoAvNh7urZyEXscV9rJ4xykBDQqf6lSDKzfkI6Q gH4tzQvLfPABspkbaoSZ0DkatxJXOtjzEW842alUziT2LMjnKgX3WcdphCkDt0ZA pYDiEhul1FQWbDtjc0Rl4WmYwXcD98UiUc7gewxdnnqEh2gD2CQ66H9YHOJFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPO/xU8Z12amwNuOB4RC4O8fiNngwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+6Im1GAcubf4cAxM5jFVpHLeEdyy4a4O8v YMOo5eFyX683r7JN+XfdPU2AtcIfNK1ZCLuiuemrBXsOhUA/94SRqjEjTdT8nML7 nIMWOyRYOCOuzwE1S4eidOVNo8h4oJlfGCvhEz708EmTS+3kPFNv5nVqhcquum3/ hQ9yDzws4A9ABQLhlfus1yAF5ZdG1GEumTT82FY3wVMtvWHUWG7GdX4LPNCi8eGm mbuNtTxKew914Ltmt/nWodmqMEzlT7guj2Df0Hzfr5eKhud/AZVs5D6wNQU4/MHQ BPV0j1Gdh38NsY5l88jr1u3QhcvM4+l0sP1Ib3gu3ER23m4dV5w= -----END CERTIFICATE-----Generated at Thu Feb 26 16:57:53 2026 by rpki-client