$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: Evqc69PEVq/k351MyIw3XDS0HgMRN/ne95baf/gqoFs= Subject key identifier: AA:F8:F1:DC:B1:BE:4C:55:9E:64:B3:98:FE:E5:23:C9:D9:95:21:4C Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 68BE297B6C37810B2DFAB5204F2BA8D9C04D7B91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0566 Signing time: Mon 13 Apr 2026 04:41:16 +0000 Manifest this update: Mon 13 Apr 2026 04:36:16 +0000 Manifest next update: Thu 16 Apr 2026 09:28:16 +0000 Files and hashes: 1: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: DCHiPeV5VtddJe8Vh9yoLHhzxZw5JJXCfK8hrlKR5+s=) 2: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Apr 2026 09:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:be:29:7b:6c:37:81:0b:2d:fa:b5:20:4f:2b:a8:d9:c0:4d:7b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Apr 13 04:36:16 2026 GMT Not After : Apr 16 09:28:16 2026 GMT Subject: CN=AAF8F1DCB1BE4C559E64B398FEE523C9D995214C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:b0:ff:44:da:cb:bf:5c:28:0c:55:f7:ca: 6f:b7:b8:06:2d:26:56:97:65:67:b1:71:6f:1a:5f: 14:df:de:bb:16:d2:31:17:ce:6d:30:63:fe:79:04: d4:e7:5e:dc:a0:8c:28:b7:07:c7:85:2f:7a:e1:ac: ee:95:66:83:f0:17:7b:7c:76:ed:5d:e5:e3:ed:aa: 63:1c:60:c3:59:fb:18:14:3f:82:83:f4:c2:5c:2a: ab:a2:64:28:35:16:9b:b5:c0:8f:26:b0:5c:f0:ea: df:12:72:0c:90:9d:68:21:fc:5e:1f:d3:10:b7:56: f2:4c:f4:49:a5:4f:c0:c1:93:34:23:58:00:43:59: 60:05:8b:b5:84:1f:28:b4:c4:d2:3d:0c:7a:e2:1e: 9b:4c:df:26:75:1a:22:b9:82:79:de:d7:88:86:e7: 50:e7:e9:9a:b9:50:71:96:ff:ad:df:bb:43:59:bc: 3e:3f:98:77:4b:27:9f:e1:91:13:1f:35:6c:77:34: 57:74:95:58:4b:c5:a1:8f:d2:35:e8:45:a8:4c:2a: 20:1b:1c:4c:44:d6:41:de:2d:8d:9b:7e:ce:46:53: cc:b4:bc:18:d6:bd:5b:28:80:cd:2d:d6:89:48:36: b2:02:37:a8:b2:36:24:74:39:29:c4:eb:b3:f3:cf: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:F1:DC:B1:BE:4C:55:9E:64:B3:98:FE:E5:23:C9:D9:95:21:4C X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1a:4b:b3:a8:36:db:1a:f7:89:97:78:98:08:84:06:ac:8f: 31:e3:6f:8c:b7:b0:b4:2d:5c:fa:a9:79:ab:ae:91:3d:85:5a: 61:fd:df:13:ca:4f:e4:54:42:2c:2c:73:6c:2b:17:90:63:b8: 4b:17:c2:32:6e:23:93:c5:61:df:e9:79:af:9a:81:8b:ea:ac: 1e:c8:b0:e2:18:10:12:f7:e8:46:20:c2:56:a9:02:83:ea:e2: e7:57:a3:72:39:c4:0c:de:9d:6d:a6:eb:30:36:16:fe:e6:41: fa:fc:09:54:3b:60:1f:0f:4b:f3:23:7f:ef:cb:4d:a6:ee:0d: c7:73:ae:35:0d:4f:f3:d4:a9:cf:4b:82:7f:e2:51:97:48:6c: e9:46:bc:e9:b0:ec:d0:2a:ee:96:bc:79:f4:89:3e:2d:58:de: 8a:cd:82:bc:d8:15:c1:ac:39:ec:8a:d0:00:c7:1a:7f:a6:61: 54:00:1d:4a:17:48:58:0d:7e:e4:13:ee:cb:3f:3c:fb:34:33: dd:75:8b:df:5f:be:dc:8d:2b:4c:72:70:f0:66:50:77:48:43: 16:77:d8:77:61:2d:60:17:b9:28:30:88:64:6e:0c:4e:c9:b1: 55:11:44:1e:ca:f9:42:67:f2:2f:d0:b8:76:df:a7:09:9a:7c: c2:bc:99:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaL4pe2w3gQst+rUgTyuo2cBNe5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNjA0MTMwNDM2MTZaFw0yNjA0MTYwOTI4MTZaMDMxMTAvBgNV BAMTKEFBRjhGMURDQjFCRTRDNTU5RTY0QjM5OEZFRTUyM0M5RDk5NTIxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUrD/RNrLv1woDFX3ym+3uAYt JlaXZWexcW8aXxTf3rsW0jEXzm0wY/55BNTnXtygjCi3B8eFL3rhrO6VZoPwF3t8 du1d5ePtqmMcYMNZ+xgUP4KD9MJcKquiZCg1Fpu1wI8msFzw6t8ScgyQnWgh/F4f 0xC3VvJM9EmlT8DBkzQjWABDWWAFi7WEHyi0xNI9DHriHptM3yZ1GiK5gnne14iG 51Dn6Zq5UHGW/63fu0NZvD4/mHdLJ5/hkRMfNWx3NFd0lVhLxaGP0jXoRahMKiAb HExE1kHeLY2bfs5GU8y0vBjWvVsogM0t1olINrICN6iyNiR0OSnE67PzzwlfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqvjx3LG+TFWeZLOY/uUjydmVIUwwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIaS7OoNtsa94mXeJgIhAasjzHjb4y3sLQt XPqpeauukT2FWmH93xPKT+RUQiwsc2wrF5BjuEsXwjJuI5PFYd/pea+agYvqrB7I sOIYEBL36EYgwlapAoPq4udXo3I5xAzenW2m6zA2Fv7mQfr8CVQ7YB8PS/Mjf+/L TabuDcdzrjUNT/PUqc9Lgn/iUZdIbOlGvOmw7NAq7pa8efSJPi1Y3orNgrzYFcGs OeyK0ADHGn+mYVQAHUoXSFgNfuQT7ss/PPs0M911i99fvtyNK0xycPBmUHdIQxZ3 2HdhLWAXuSgwiGRuDE7JsVURRB7K+UJn8i/QuHbfpwmafMK8meU= -----END CERTIFICATE-----Generated at Wed Apr 15 10:11:29 2026 by rpki-client