$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft File: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft (raw, json) Hash identifier: 8Z/eO0MiPtT5DCbypgvRjeIUaXKtoCliuTWEPGgrK/4= Subject key identifier: BE:C2:80:3F:F7:DB:35:9A:87:46:44:00:AB:F8:11:36:35:8D:58:F9 Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Certificate serial: 04F3DBC760EECA3CB454D3345F3E597F9F61DEAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft Manifest number: 0509 Signing time: Sat 06 Sep 2025 16:01:03 +0000 Manifest this update: Sat 06 Sep 2025 15:56:03 +0000 Manifest next update: Tue 09 Sep 2025 21:58:03 +0000 Files and hashes: 1: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: pXz40XnCPDHjX6ETU549n8DZU0gFVrvM11PQ2EVGj3Q=) 2: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: mSVrT9nxgdbO5zEJl0JNWqbaa5yXAY0zHugt4tIrWAI=) 3: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: UD6uPbiybd2gYQ34RwGBqvbNDHuw/OBXgpqqJ4vtt5c=) 4: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Og1WIa42Ljyk1coTqcyrLMYu4TjgeM0yBlFnoKhLkxg=) 5: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: i7aYSENMEfGKEvc4Lk7qqNHogOL9IdoberdA+QXB6Ks=) 6: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: uuH+ziNBEr2lIwcdPkvVugSjVKRTjk8bgzFRk7pTIbw=) 7: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: d+qfmJX6WG8MNu+fGfy0UM9kQ8qVSJz1W4rWMZJ2HL0=) 8: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: 7fQVmlkjjbtviTL2Fj7ic9MZZ5loTg5W7CHv/vNGE0s=) 9: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl (hash: Y+qrmAmUDuIZctwcZNsER8tOq+EKpWGY/1NLQsMuYug=) 10: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: Oed5Ss8UCWFYg2IP6FcmD4GyOtzzcl9PEDa+w2C64YA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f3:db:c7:60:ee:ca:3c:b4:54:d3:34:5f:3e:59:7f:9f:61:de:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Validity Not Before: Sep 6 15:56:03 2025 GMT Not After : Sep 9 21:58:03 2025 GMT Subject: CN=BEC2803FF7DB359A87464400ABF81136358D58F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:c6:e2:d1:d0:48:0b:02:b6:3c:28:ea:de: e2:62:d4:5c:16:e1:1b:4d:7e:b3:12:a0:84:0d:e7: d5:e7:33:2b:2d:58:a6:01:e0:3e:08:b6:4b:c3:82: 23:cf:c5:be:d4:07:41:06:ec:00:97:53:94:7c:77: 97:b2:6f:78:8c:3e:ab:e7:99:12:e8:3d:39:03:20: cd:61:95:b1:ca:ab:c1:92:c0:b4:f8:55:b2:13:73: 94:f3:cd:b8:4c:19:08:39:75:52:b6:47:61:7c:4c: cb:60:d5:76:9a:3c:f0:85:54:d2:b2:8f:20:d1:72: 99:99:1e:75:02:85:e0:b6:9c:c9:0d:9d:33:5e:f2: 6e:5c:a6:ff:78:50:4c:d9:75:1c:61:54:60:30:87: 88:d3:28:66:51:3c:1b:d6:2d:ea:39:45:2b:db:96: f3:33:c2:ad:50:c9:a8:c0:26:56:37:97:67:40:e0: 98:df:8a:15:44:9e:45:ef:1e:64:4d:5d:41:d5:11: 1b:df:3b:fa:60:c7:04:3f:42:fe:09:fa:f4:c9:43: 78:a4:98:af:90:7c:92:0f:a2:50:1f:4a:e7:cc:d0: 47:ec:40:e3:f4:e6:aa:f1:89:17:de:33:da:0c:64: c8:2e:3b:2a:6f:d3:a2:5d:94:68:29:1d:1a:4d:12: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C2:80:3F:F7:DB:35:9A:87:46:44:00:AB:F8:11:36:35:8D:58:F9 X509v3 Authority Key Identifier: keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e1:98:8e:09:c1:67:6f:7f:1d:c3:a0:52:50:6a:a2:5f:a8: 44:d6:e8:00:91:32:59:31:0e:16:b8:81:d5:6c:ff:60:75:92: bb:21:fe:a7:a5:35:43:33:7d:dc:f4:41:38:dc:9a:5a:5a:63: 25:1c:0c:e5:a4:33:8e:b9:c3:6b:52:70:11:df:d5:1d:c7:3d: 99:8c:a6:59:4f:1b:ff:61:dd:3c:b8:33:c2:b9:3a:81:b0:e8: a8:cf:9b:87:4d:88:19:4d:3e:32:7d:a6:78:fc:88:e9:0d:8a: 38:5c:26:90:c8:a4:9d:4f:3f:b6:d8:03:49:75:46:94:6a:70: b2:ea:ba:82:47:f7:1c:fc:87:cc:50:12:3a:da:12:0c:b5:78: b4:6c:1c:f8:b4:d9:ad:f9:1d:95:78:15:95:98:52:77:73:51: 0c:39:38:ff:a1:ea:62:ac:7a:19:f6:f1:82:d7:40:3c:32:c5: ca:2f:74:c7:ee:b1:27:da:04:e1:0a:8a:59:22:55:47:72:d8: 9c:ed:86:0e:a9:2f:19:04:64:b4:08:86:b2:b7:85:35:bb:bd: 71:63:09:d1:9f:fa:7d:02:cf:4b:80:5c:db:92:bf:01:73:98: c1:b3:cc:5a:79:07:f7:a4:f7:d2:b6:17:18:d9:bb:0f:df:4d: b8:58:b3:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPPbx2Duyjy0VNM0Xz5Zf59h3qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1 MDU3QUNFNTAeFw0yNTA5MDYxNTU2MDNaFw0yNTA5MDkyMTU4MDNaMDMxMTAvBgNV BAMTKEJFQzI4MDNGRjdEQjM1OUE4NzQ2NDQwMEFCRjgxMTM2MzU4RDU4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCsbi0dBICwK2PCjq3uJi1FwW 4RtNfrMSoIQN59XnMystWKYB4D4ItkvDgiPPxb7UB0EG7ACXU5R8d5eyb3iMPqvn mRLoPTkDIM1hlbHKq8GSwLT4VbITc5TzzbhMGQg5dVK2R2F8TMtg1XaaPPCFVNKy jyDRcpmZHnUCheC2nMkNnTNe8m5cpv94UEzZdRxhVGAwh4jTKGZRPBvWLeo5RSvb lvMzwq1QyajAJlY3l2dA4JjfihVEnkXvHmRNXUHVERvfO/pgxwQ/Qv4J+vTJQ3ik mK+QfJIPolAfSufM0EfsQOP05qrxiRfeM9oMZMguOypv06JdlGgpHRpNEvTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsKAP/fbNZqHRkQAq/gRNjWNWPkwHwYDVR0j BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2 RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3 QUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdjZDY4ZjQtNjlhNS00NzVmLWFl ZTQtM2VmNGI4ZDMwMmRkLzAvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3 QkM1MDU3QUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMThmI4JwWdvfx3DoFJQaqJfqETW6ACRMlkx Dha4gdVs/2B1krsh/qelNUMzfdz0QTjcmlpaYyUcDOWkM465w2tScBHf1R3HPZmM pllPG/9h3Ty4M8K5OoGw6KjPm4dNiBlNPjJ9pnj8iOkNijhcJpDIpJ1PP7bYA0l1 RpRqcLLquoJH9xz8h8xQEjraEgy1eLRsHPi02a35HZV4FZWYUndzUQw5OP+h6mKs ehn28YLXQDwyxcovdMfusSfaBOEKilkiVUdy2Jzthg6pLxkEZLQIhrK3hTW7vXFj CdGf+n0Cz0uAXNuSvwFzmMGzzFp5B/ek99K2FxjZuw/fTbhYs8c= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:16 2025 by rpki-client