$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: 3L8chKY+nRCtaBdQ0FFdIIaoW2j0/fZI7XZR4SlSA4g= Subject key identifier: CB:6C:2D:B8:12:09:71:63:46:56:35:D2:69:76:C5:44:B9:D7:9A:63 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 1978A745877226EA9AFFB3DD9BC643FE6100B73B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 04DB Signing time: Mon 02 Jun 2025 02:04:22 +0000 Manifest this update: Mon 02 Jun 2025 01:59:22 +0000 Manifest next update: Thu 05 Jun 2025 02:45:22 +0000 Files and hashes: 1: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: m2k7haGbvE1YrtmlKZ9vzta396FixAe+Cw+FjMCLwk4=) 2: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:78:a7:45:87:72:26:ea:9a:ff:b3:dd:9b:c6:43:fe:61:00:b7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Jun 2 01:59:22 2025 GMT Not After : Jun 5 02:45:22 2025 GMT Subject: CN=CB6C2DB812097163465635D26976C544B9D79A63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:ef:90:eb:a9:21:26:33:eb:f2:67:52:0f: 98:4e:18:1f:a1:d6:fb:cf:a3:f2:cf:45:5b:5f:5b: 23:a3:77:a0:3f:81:e3:fe:10:05:b5:1d:82:27:92: 13:7c:4f:29:fa:9a:3f:fe:a0:8c:57:40:65:d8:3e: e9:78:0f:1a:ae:66:31:ae:b1:39:e5:0a:9e:33:e4: 02:7f:5c:ce:76:22:89:86:fa:d2:8c:a9:47:fd:79: 1f:d3:58:26:38:4d:47:6b:09:e4:be:b8:a2:37:23: 36:84:e8:06:75:78:d9:38:ee:3f:c0:f8:33:d0:43: d7:55:bc:23:19:26:1f:1d:64:bc:7f:8a:b1:59:06: 57:6d:59:ff:31:1b:fa:d6:db:39:41:58:49:85:23: 33:f8:32:18:84:fe:9b:42:bc:62:af:b2:e4:80:c5: 98:2f:7b:18:7e:b0:10:48:51:b8:95:b2:cb:1a:dd: 08:f3:dc:ef:b5:7d:a6:83:c8:37:e6:e5:ef:63:2b: 0e:27:2d:af:64:53:28:47:c0:4c:1c:8f:cf:6f:90: 4f:e6:07:3b:1f:3d:99:69:f4:9a:ec:48:73:d2:2e: 01:a1:53:d8:7e:77:21:10:16:e5:67:81:9a:6c:42: 65:8d:af:0a:6c:87:86:6e:e6:c1:22:82:e2:e4:c2: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6C:2D:B8:12:09:71:63:46:56:35:D2:69:76:C5:44:B9:D7:9A:63 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:84:61:64:6e:83:73:5d:cd:f9:3e:06:de:68:71:43:cb:8e: 4a:d8:27:45:7e:d4:ca:9e:e3:97:79:b7:98:63:e5:fd:a3:44: 03:ef:de:d7:da:d3:02:c3:d5:a0:46:49:87:81:86:1b:78:2d: ac:c9:a7:44:74:46:f8:66:30:dd:a8:8d:4d:e5:ed:41:5f:aa: 1d:fe:68:23:fc:5a:62:52:20:93:f5:36:1d:ba:1a:21:1c:6e: 4d:9a:79:da:63:db:f8:db:d6:e8:a5:68:b9:f9:46:78:5b:e2: 8a:b5:7b:cc:03:a4:34:c7:60:32:e8:a4:5e:41:85:f8:c0:6e: 2a:9a:08:3c:6b:b1:59:bf:af:6f:f7:f4:56:af:b1:39:df:22: e6:3a:b2:4e:67:75:73:d5:49:d5:e4:d3:77:b8:06:63:e2:a4: 8c:8d:8b:41:02:69:13:3c:b9:ae:38:d8:1a:b2:4d:38:df:9a: 55:54:b7:54:60:cd:5a:2b:55:b8:d9:83:8f:51:d6:85:48:61: 81:0e:bb:d2:6a:10:3b:c2:d4:14:08:7f:fc:e5:93:79:21:12: 04:5e:d1:e3:c7:89:d6:c4:7b:69:65:5b:c1:e9:95:27:64:42: 2c:11:1c:9a:76:de:e6:7b:ee:1a:e8:23:05:0a:d8:b0:8e:45: dd:cd:19:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXinRYdyJuqa/7Pdm8ZD/mEAtzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTA2MDIwMTU5MjJaFw0yNTA2MDUwMjQ1MjJaMDMxMTAvBgNV BAMTKENCNkMyREI4MTIwOTcxNjM0NjU2MzVEMjY5NzZDNTQ0QjlENzlBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyh++Q66khJjPr8mdSD5hOGB+h 1vvPo/LPRVtfWyOjd6A/geP+EAW1HYInkhN8Tyn6mj/+oIxXQGXYPul4DxquZjGu sTnlCp4z5AJ/XM52IomG+tKMqUf9eR/TWCY4TUdrCeS+uKI3IzaE6AZ1eNk47j/A +DPQQ9dVvCMZJh8dZLx/irFZBldtWf8xG/rW2zlBWEmFIzP4MhiE/ptCvGKvsuSA xZgvexh+sBBIUbiVsssa3Qjz3O+1faaDyDfm5e9jKw4nLa9kUyhHwEwcj89vkE/m BzsfPZlp9JrsSHPSLgGhU9h+dyEQFuVngZpsQmWNrwpsh4Zu5sEiguLkwrCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2wtuBIJcWNGVjXSaXbFRLnXmmMwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKEYWRug3Ndzfk+Bt5ocUPLjkrYJ0V+1Mqe 45d5t5hj5f2jRAPv3tfa0wLD1aBGSYeBhht4LazJp0R0RvhmMN2ojU3l7UFfqh3+ aCP8WmJSIJP1Nh26GiEcbk2aedpj2/jb1uilaLn5Rnhb4oq1e8wDpDTHYDLopF5B hfjAbiqaCDxrsVm/r2/39FavsTnfIuY6sk5ndXPVSdXk03e4BmPipIyNi0ECaRM8 ua442BqyTTjfmlVUt1RgzVorVbjZg49R1oVIYYEOu9JqEDvC1BQIf/zlk3khEgRe 0ePHidbEe2llW8HplSdkQiwRHJp23uZ77hroIwUK2LCORd3NGew= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:42 2025 by rpki-client