$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: MdvjZy/V1z1Du6y5GJKfCw54hEadNXU+fXbKDjfGAvk= Subject key identifier: E9:AA:94:42:B5:BE:D9:9C:54:C7:6B:31:4B:F5:9A:50:C7:C0:AB:2D Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 02B294FB7E61B5A8FEF901331B77D604A3089DEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 0551 Signing time: Mon 02 Mar 2026 07:12:10 +0000 Manifest this update: Mon 02 Mar 2026 07:07:10 +0000 Manifest next update: Thu 05 Mar 2026 11:18:10 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) 2: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) 3: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: uOXEvS+bCtu4fIwgs3hTRmPLrJY2rMgGr+vVf7+AkDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b2:94:fb:7e:61:b5:a8:fe:f9:01:33:1b:77:d6:04:a3:08:9d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Mar 2 07:07:10 2026 GMT Not After : Mar 5 11:18:10 2026 GMT Subject: CN=E9AA9442B5BED99C54C76B314BF59A50C7C0AB2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:1b:5f:83:69:61:b8:d2:0a:68:05:2c:d7: 45:02:74:d4:d0:1f:b7:fa:47:90:f3:44:78:f4:08: ce:c4:ad:9e:76:4d:a5:c4:a1:65:97:bf:ac:68:c7: 29:4a:bd:4a:c9:7f:20:f9:28:71:d0:75:ef:43:07: 14:93:82:d3:ad:d9:cc:a5:2d:8a:fb:65:b6:09:14: d5:4c:e3:5b:b8:d1:6a:8c:3f:95:1d:1e:76:3b:4f: f3:9e:19:c0:92:aa:f4:e8:7d:0f:f7:50:42:35:24: cb:bd:48:52:46:9a:d1:99:9e:0a:fb:c9:4a:04:0a: 06:99:67:df:c4:42:0f:ca:52:81:12:1d:10:c1:f3: 41:96:e2:da:c2:42:17:9b:a4:14:35:b5:92:77:20: bb:87:65:bb:e5:a5:2f:f5:61:a1:05:d6:c4:07:98: 1e:52:a6:c3:e8:7f:ca:dd:70:50:fe:ba:20:ff:d6: c5:2a:fd:0a:f6:a1:88:24:ed:fe:4c:dc:04:24:cc: 93:d9:76:db:b5:dd:42:a3:42:13:c3:23:56:16:7e: fe:4e:f1:03:8b:6d:37:4a:fa:ae:10:aa:68:42:79: 44:60:c3:28:6e:3c:a3:61:71:09:e2:dd:8c:8f:f9: 10:3f:9f:58:7b:48:d4:01:0e:5f:79:77:fd:ff:ed: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:94:42:B5:BE:D9:9C:54:C7:6B:31:4B:F5:9A:50:C7:C0:AB:2D X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c5:d7:f3:29:4b:97:b5:c5:ce:62:9e:7d:f5:51:90:aa:c9: 51:f2:e3:b7:2a:43:94:81:05:58:f1:9d:c2:e3:be:f9:1f:23: d4:2f:f1:a2:b5:02:d0:ca:6c:f7:fd:e0:da:9b:76:52:5b:d1: b0:ee:ef:33:df:50:d4:52:07:ab:2d:c4:5a:51:c3:f3:eb:1d: 85:e1:dc:23:89:07:84:87:1f:58:f6:f4:1e:0e:ef:9e:f1:8b: f6:13:02:a6:3a:4e:7e:68:2c:bf:22:1b:c9:ca:7f:95:51:3c: fa:7a:3a:34:63:c7:86:49:46:e5:6e:d3:57:2b:1d:b5:04:39: 0e:01:c4:e4:9a:63:56:12:d4:5b:1c:c7:c0:07:01:16:b4:6d: f0:c5:50:90:58:4a:19:97:7a:3c:a5:1a:36:fc:0b:a5:ed:c4: 8d:59:0d:b5:da:0d:cd:ef:4c:64:ac:4c:b2:a9:c0:1a:2f:62: 14:9e:e1:00:cc:37:aa:e9:f3:0f:31:01:ba:23:9e:6b:57:c0: 75:43:90:47:e1:22:60:ef:90:20:33:47:cf:f3:f9:d3:16:c4: bb:11:47:5d:59:a6:54:f3:04:ad:63:6f:ac:83:a3:6b:b8:71: da:41:b4:23:fe:36:99:23:eb:21:91:22:da:2b:de:e8:69:db: a3:43:f2:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArKU+35htaj++QEzG3fWBKMIne4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNjAzMDIwNzA3MTBaFw0yNjAzMDUxMTE4MTBaMDMxMTAvBgNV BAMTKEU5QUE5NDQyQjVCRUQ5OUM1NEM3NkIzMTRCRjU5QTUwQzdDMEFCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNRtfg2lhuNIKaAUs10UCdNTQ H7f6R5DzRHj0CM7ErZ52TaXEoWWXv6xoxylKvUrJfyD5KHHQde9DBxSTgtOt2cyl LYr7ZbYJFNVM41u40WqMP5UdHnY7T/OeGcCSqvTofQ/3UEI1JMu9SFJGmtGZngr7 yUoECgaZZ9/EQg/KUoESHRDB80GW4trCQhebpBQ1tZJ3ILuHZbvlpS/1YaEF1sQH mB5SpsPof8rdcFD+uiD/1sUq/Qr2oYgk7f5M3AQkzJPZdtu13UKjQhPDI1YWfv5O 8QOLbTdK+q4QqmhCeURgwyhuPKNhcQni3YyP+RA/n1h7SNQBDl95d/3/7XNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6aqUQrW+2ZxUx2sxS/WaUMfAqy0wHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrF1/MpS5e1xc5inn31UZCqyVHy47cqQ5SB BVjxncLjvvkfI9Qv8aK1AtDKbPf94NqbdlJb0bDu7zPfUNRSB6stxFpRw/PrHYXh 3COJB4SHH1j29B4O757xi/YTAqY6Tn5oLL8iG8nKf5VRPPp6OjRjx4ZJRuVu01cr HbUEOQ4BxOSaY1YS1Fscx8AHARa0bfDFUJBYShmXejylGjb8C6XtxI1ZDbXaDc3v TGSsTLKpwBovYhSe4QDMN6rp8w8xAbojnmtXwHVDkEfhImDvkCAzR8/z+dMWxLsR R11ZplTzBK1jb6yDo2u4cdpBtCP+Npkj6yGRItor3uhp26ND8sc= -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:53 2026 by rpki-client