$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft File: F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json) Hash identifier: Gj6aJGyHITi080q4qCc/xB+7tENkwdUSbAq/MvZhVa0= Subject key identifier: C5:5C:BE:64:9D:1B:3A:02:6C:05:EC:CF:81:39:1D:18:A9:1B:F6:37 Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Certificate serial: 4C691A08FB516BBD2F86B6C40BB741C261CA4530 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft Manifest number: 0524 Signing time: Thu 04 Sep 2025 04:41:10 +0000 Manifest this update: Thu 04 Sep 2025 04:36:10 +0000 Manifest next update: Sun 07 Sep 2025 11:45:10 +0000 Files and hashes: 1: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=) 2: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=) 3: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: FQt6tQmtrfggKQpJyKZAvJE2RZYndUFiALu0jZ8n/Yo=) 4: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=) 5: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=) 6: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=) 7: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=) 8: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=) 9: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=) 10: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=) 11: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=) 12: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=) 13: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:69:1a:08:fb:51:6b:bd:2f:86:b6:c4:0b:b7:41:c2:61:ca:45:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Validity Not Before: Sep 4 04:36:10 2025 GMT Not After : Sep 7 11:45:10 2025 GMT Subject: CN=C55CBE649D1B3A026C05ECCF81391D18A91BF637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:41:3a:72:a4:93:60:d3:46:a6:73:3b:cd: e1:f2:c8:6e:7c:ce:77:96:bb:db:e8:86:54:e7:53: 02:30:56:2c:d6:df:f6:bf:76:3f:37:e6:72:ca:1a: ef:21:1d:41:45:8b:d0:34:b7:56:ec:a4:60:2f:ac: 1d:24:92:f1:af:4a:17:e9:95:e0:cb:90:73:59:76: c3:97:0d:e4:85:c0:a8:8c:b5:f8:01:2d:51:c0:c6: 5e:b4:99:c7:57:d7:09:7f:1c:72:2f:c9:f4:ff:5b: 34:0f:f2:3d:78:2a:8f:a0:b7:38:eb:e9:7c:dc:4f: 19:59:30:7e:27:9e:9e:7f:9a:86:50:77:17:b5:92: 71:6e:c9:55:75:95:42:46:57:89:a1:ef:cf:3f:a8: 16:07:cb:24:92:ae:bb:26:e6:66:ac:78:b9:d2:53: f9:c1:b9:29:f2:f0:8a:50:76:b2:fc:38:fd:97:6b: ed:de:69:36:94:b2:40:31:dd:02:28:14:f0:29:f7: 6d:e0:af:16:c9:f7:ae:bb:67:73:8c:33:cb:ab:7c: cc:24:43:cb:a4:39:cc:56:ef:e3:03:20:20:fe:f3: 6e:d5:7a:f2:e5:36:05:06:21:2f:70:08:f1:5d:da: 88:ca:95:a0:ca:ba:e1:54:a1:81:43:c3:be:22:61: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5C:BE:64:9D:1B:3A:02:6C:05:EC:CF:81:39:1D:18:A9:1B:F6:37 X509v3 Authority Key Identifier: keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3b:a4:00:25:d6:72:1b:90:14:a0:c7:34:e3:ee:53:7b:bb: 47:4b:83:1e:22:97:ed:fd:48:ed:23:42:51:a8:91:d1:65:6e: b8:7e:11:4b:5d:7d:cb:22:d2:f1:18:55:93:40:6c:c7:17:24: 08:16:22:83:b4:18:da:3e:56:43:b3:31:3a:c2:6d:9f:12:75: d4:73:bd:6a:62:c6:e6:b1:8e:37:c3:a6:de:32:5d:2e:1d:21: 9f:5a:46:2d:eb:be:5d:11:6e:ce:a4:91:d0:e7:15:57:e7:98: 07:9a:10:45:ba:a0:73:20:43:50:bb:66:2e:0e:54:e2:c3:28: bd:0a:e0:64:ce:8d:52:56:ba:11:29:9b:6a:0e:ed:0e:ea:53: d2:bd:88:e9:2c:e9:83:e5:3d:b8:f0:03:95:2a:58:0f:05:c7: 1b:fc:ee:08:49:7a:b7:e7:d6:f2:b8:19:9b:49:84:ef:b6:50: dc:64:8d:55:d6:fd:5e:aa:05:58:4d:66:7e:6b:63:51:58:2c: cf:d2:0a:4e:6c:a9:e7:b6:40:85:32:8b:41:ac:7b:01:27:c8: 10:20:5b:8a:67:14:d6:f3:fb:b0:3f:d2:ea:07:9f:70:36:5e: db:3c:3c:d4:bf:36:ae:01:2b:45:0f:f7:6b:95:60:9b:28:3f: 35:2b:11:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGkaCPtRa70vhrbEC7dBwmHKRTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz MDlCM0YzQjAeFw0yNTA5MDQwNDM2MTBaFw0yNTA5MDcxMTQ1MTBaMDMxMTAvBgNV BAMTKEM1NUNCRTY0OUQxQjNBMDI2QzA1RUNDRjgxMzkxRDE4QTkxQkY2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlUE6cqSTYNNGpnM7zeHyyG58 zneWu9vohlTnUwIwVizW3/a/dj835nLKGu8hHUFFi9A0t1bspGAvrB0kkvGvShfp leDLkHNZdsOXDeSFwKiMtfgBLVHAxl60mcdX1wl/HHIvyfT/WzQP8j14Ko+gtzjr 6XzcTxlZMH4nnp5/moZQdxe1knFuyVV1lUJGV4mh788/qBYHyySSrrsm5maseLnS U/nBuSny8IpQdrL8OP2Xa+3eaTaUskAx3QIoFPAp923grxbJ9667Z3OMM8urfMwk Q8ukOcxW7+MDICD+827VevLlNgUGIS9wCPFd2ojKlaDKuuFUoYFDw74iYcyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxVy+ZJ0bOgJsBezPgTkdGKkb9jcwHwYDVR0j BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC M0YzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4NmIwOTItNTI3ZC00ODhmLWE5 ZjctMjQ3OTdkOTc3NGNiLzAvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlB NjgzMDlCM0YzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFE7pAAl1nIbkBSgxzTj7lN7u0dLgx4il+39 SO0jQlGokdFlbrh+EUtdfcsi0vEYVZNAbMcXJAgWIoO0GNo+VkOzMTrCbZ8SddRz vWpixuaxjjfDpt4yXS4dIZ9aRi3rvl0Rbs6kkdDnFVfnmAeaEEW6oHMgQ1C7Zi4O VOLDKL0K4GTOjVJWuhEpm2oO7Q7qU9K9iOks6YPlPbjwA5UqWA8Fxxv87ghJerfn 1vK4GZtJhO+2UNxkjVXW/V6qBVhNZn5rY1FYLM/SCk5sqee2QIUyi0GsewEnyBAg W4pnFNbz+7A/0uoHn3A2Xts8PNS/Nq4BK0UP92uVYJsoPzUrEQM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:40 2025 by rpki-client