$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: YGZT1UXjIe5RCnULQ0h87LGudwSamA25bEhVI+HjGDQ= Subject key identifier: 39:76:AF:ED:B3:4E:AE:6B:02:5A:F3:2C:60:5D:74:3B:D7:1D:D5:A8 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 692F60F8ACD2BB4C0AC7A9BF514D0D46AEE22A11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 01E3 Signing time: Sat 06 Sep 2025 19:11:01 +0000 Manifest this update: Sat 06 Sep 2025 19:06:01 +0000 Manifest next update: Wed 10 Sep 2025 04:53:01 +0000 Files and hashes: 1: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 2: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 3: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 4: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 5: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 6: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: Ho09a9M8RHaOpzXYYHFVFxP5Gfzm6VJi+U63ASKb4O8=) 7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 8: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 9: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 10: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:2f:60:f8:ac:d2:bb:4c:0a:c7:a9:bf:51:4d:0d:46:ae:e2:2a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Sep 6 19:06:01 2025 GMT Not After : Sep 10 04:53:01 2025 GMT Subject: CN=3976AFEDB34EAE6B025AF32C605D743BD71DD5A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:1e:ba:37:ca:6d:36:8a:65:c7:b4:ac:af: d3:02:72:b4:f2:21:61:3c:f7:82:4b:43:6d:56:ed: 22:ca:bd:f2:10:6a:5b:0d:b9:c9:54:7f:db:64:7d: 42:5e:e8:ca:cd:ec:a5:77:af:db:f5:68:79:bb:6a: 67:bb:ac:bb:cb:50:41:6b:29:2c:85:4a:5a:e6:9f: 06:9a:45:62:0c:b7:8c:27:5d:cb:c7:ac:35:d5:b7: 23:c2:bb:87:28:7c:01:98:55:da:c1:d8:6d:99:6f: 8a:a8:ec:1d:08:54:f3:15:68:dc:32:3f:c8:41:52: 20:18:7d:ff:91:55:9f:6a:00:ee:d4:4a:1f:5c:50: d4:ec:b1:60:b8:08:c1:3e:ba:f2:ed:54:b0:55:43: 9d:3d:bb:fc:e4:69:af:7d:51:5b:55:a6:1b:93:96: d4:26:04:47:ac:a8:67:5e:fb:b8:5f:6d:32:2b:4a: 75:6e:7e:26:b6:cb:24:b7:6d:ea:c0:7f:45:7c:b9: 33:cd:ea:58:5b:03:0e:1b:53:7a:f7:8b:d4:f8:7a: de:37:e5:b6:c6:2c:75:ed:02:79:f2:32:f9:3d:4b: 60:b5:e2:e0:ca:5e:ef:0c:4b:5c:3a:47:a6:9e:5a: cb:b6:5b:c4:97:8c:a4:4a:35:06:74:a1:c2:8e:51: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:AF:ED:B3:4E:AE:6B:02:5A:F3:2C:60:5D:74:3B:D7:1D:D5:A8 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fe:a7:68:40:db:9b:24:d7:b7:28:65:6f:e3:54:1f:60:fd: 02:c2:86:81:22:4c:09:f1:0c:66:4a:95:d7:86:dc:4b:d7:3d: 69:b2:7c:53:ca:c0:e6:ca:fa:bb:f3:17:07:ec:69:95:0d:e0: 7b:e5:95:9f:32:8f:69:ad:c0:3f:ae:13:b3:e0:7e:bc:6a:b4: e1:95:26:3d:51:1b:06:29:99:b2:f0:74:f8:44:c5:fa:75:0b: 83:45:19:88:f7:56:e9:e4:3e:8f:98:92:94:10:c2:65:17:ba: 34:12:ca:87:60:75:c4:22:16:63:62:f4:1e:13:4a:e8:3e:87: 1d:f2:a1:ae:8a:02:53:de:2a:47:d0:0c:45:2e:c3:01:0e:5c: 89:db:03:46:aa:cb:46:06:8d:c4:e1:27:b4:e5:06:0f:d0:07: 94:8d:f4:20:26:86:24:e7:e2:c9:d0:77:fd:53:8d:f1:b8:36: 19:a5:7b:ef:02:ac:46:e7:b3:76:fd:43:e2:24:e8:e5:22:36: 3a:37:9c:30:20:6a:cb:5a:43:cd:a5:2f:f3:c0:23:04:41:28: 63:4d:fb:77:fd:52:cd:d4:90:3d:2d:61:b2:87:25:85:9f:dd: 90:57:19:97:0b:5b:7d:ef:09:9d:cc:50:7b:ae:75:48:94:52: fe:9f:27:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaS9g+KzSu0wKx6m/UU0NRq7iKhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTA5MDYxOTA2MDFaFw0yNTA5MTAwNDUzMDFaMDMxMTAvBgNV BAMTKDM5NzZBRkVEQjM0RUFFNkIwMjVBRjMyQzYwNUQ3NDNCRDcxREQ1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBB66N8ptNoplx7Ssr9MCcrTy IWE894JLQ21W7SLKvfIQalsNuclUf9tkfUJe6MrN7KV3r9v1aHm7ame7rLvLUEFr KSyFSlrmnwaaRWIMt4wnXcvHrDXVtyPCu4cofAGYVdrB2G2Zb4qo7B0IVPMVaNwy P8hBUiAYff+RVZ9qAO7USh9cUNTssWC4CME+uvLtVLBVQ509u/zkaa99UVtVphuT ltQmBEesqGde+7hfbTIrSnVufia2yyS3berAf0V8uTPN6lhbAw4bU3r3i9T4et43 5bbGLHXtAnnyMvk9S2C14uDKXu8MS1w6R6aeWsu2W8SXjKRKNQZ0ocKOUQQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOXav7bNOrmsCWvMsYF10O9cd1agwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv+p2hA25sk17coZW/jVB9g/QLChoEiTAnx DGZKldeG3EvXPWmyfFPKwObK+rvzFwfsaZUN4HvllZ8yj2mtwD+uE7PgfrxqtOGV Jj1RGwYpmbLwdPhExfp1C4NFGYj3VunkPo+YkpQQwmUXujQSyodgdcQiFmNi9B4T Sug+hx3yoa6KAlPeKkfQDEUuwwEOXInbA0aqy0YGjcThJ7TlBg/QB5SN9CAmhiTn 4snQd/1TjfG4Nhmle+8CrEbns3b9Q+Ik6OUiNjo3nDAgastaQ82lL/PAIwRBKGNN +3f9Us3UkD0tYbKHJYWf3ZBXGZcLW33vCZ3MUHuudUiUUv6fJ+g= -----END CERTIFICATE-----Generated at Mon Sep 8 13:56:53 2025 by rpki-client