$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: 2x/bFCaHY8/z7ymF59BrwWyYgJUsw8lP3RQ00QdVI20= Subject key identifier: 8B:F9:08:DD:66:33:3E:04:5F:29:E8:97:F2:9C:DA:14:71:7A:CB:B8 Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 1DD54B1AA2E8A167504A88E64B10D6AE8197E424 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 051C Signing time: Mon 03 Nov 2025 00:51:57 +0000 Manifest this update: Mon 03 Nov 2025 00:46:57 +0000 Manifest next update: Thu 06 Nov 2025 05:49:57 +0000 Files and hashes: 1: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: 3Y6Rtx8n2Mz1ODlLOGm8GLptqRDa6wluTooHeXKVUow=) 2: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) 3: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d5:4b:1a:a2:e8:a1:67:50:4a:88:e6:4b:10:d6:ae:81:97:e4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Nov 3 00:46:57 2025 GMT Not After : Nov 6 05:49:57 2025 GMT Subject: CN=8BF908DD66333E045F29E897F29CDA14717ACBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:a1:03:c3:f5:df:13:d4:aa:46:d7:aa:38: a1:e5:a4:6c:40:68:d9:ad:e9:8d:b6:2a:11:c2:85: b4:ab:e5:67:f8:94:09:35:79:ed:1d:2f:32:9b:38: 8f:a6:77:9f:6a:9a:a6:99:aa:52:7e:d1:b3:d1:82: d1:b1:fd:39:18:0f:5b:06:73:57:68:3f:62:b7:dc: 2b:56:24:1c:5d:11:5a:c2:b2:f3:c0:0a:af:e7:e9: 41:19:65:29:b6:bf:5d:74:c3:ca:39:ef:59:7d:cc: 89:d3:7d:d1:39:6d:c8:ca:03:51:fc:20:8d:97:25: 09:97:23:25:41:df:66:3a:ef:f3:7d:04:a9:98:5f: b4:de:70:cc:7b:60:c7:e7:99:d5:4d:3c:e0:99:56: 6e:f6:60:34:63:43:45:a7:75:90:9b:28:e3:bd:e5: ef:17:2d:cc:1b:39:ba:e2:2c:b1:6a:51:0f:2b:96: 7c:a0:97:c4:7d:41:29:9f:5c:63:ce:c1:d7:c0:58: 33:ae:11:6e:a5:0c:ce:de:3c:bf:28:8e:65:df:2f: f3:d7:c1:50:d5:17:b3:54:e1:c8:6c:32:a4:2a:48: 01:70:d9:82:28:72:62:9f:2b:f5:9d:33:db:7f:36: b8:78:ff:12:88:7b:78:ed:60:f8:2a:33:50:3d:84: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F9:08:DD:66:33:3E:04:5F:29:E8:97:F2:9C:DA:14:71:7A:CB:B8 X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:cc:b8:66:5b:6c:0e:b6:01:b0:4b:b6:e5:af:b6:a9:d6:f2: 33:de:49:30:6b:00:45:ac:b6:2c:1d:c9:af:1c:8a:3c:34:97: 0f:0d:70:d2:6f:4b:88:36:67:10:9c:a5:8d:32:b1:f3:f3:20: 5b:8d:12:6b:ae:76:e3:02:9a:16:3c:77:eb:36:6b:f8:e4:0d: 09:bd:a3:39:14:66:de:04:2b:4b:12:5d:36:8a:fb:f9:0b:f5: 11:d5:a2:8d:44:88:94:bc:5d:f2:ff:c2:06:ad:95:0b:a7:54: 0b:2c:8e:18:2e:a7:a7:f2:50:cd:04:e5:c9:2a:20:71:2e:4b: 59:d5:a6:0e:84:cd:3e:2c:3d:2a:40:f5:8f:be:27:60:e1:35: 02:83:a4:0c:92:30:c7:0b:e7:f0:a7:5e:bd:96:3c:f3:d9:74: a6:cb:ae:b3:5d:26:c4:fa:3d:6f:f8:38:e5:f3:c4:0a:4e:4f: b3:72:c0:ae:87:4a:b4:17:a1:c8:7b:2e:85:70:70:52:d2:d2: 6a:49:bc:88:c5:0f:8a:ad:cb:0a:21:29:65:27:d2:30:6e:c8: 5e:28:cb:04:bd:78:da:61:82:79:a3:ff:5e:59:76:0a:fa:42: fc:27:d0:53:83:8a:2b:59:99:cd:51:5f:0e:d6:72:1b:0a:68: 6e:8b:32:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdVLGqLooWdQSojmSxDWroGX5CQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTExMDMwMDQ2NTdaFw0yNTExMDYwNTQ5NTdaMDMxMTAvBgNV BAMTKDhCRjkwOERENjYzMzNFMDQ1RjI5RTg5N0YyOUNEQTE0NzE3QUNCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/6EDw/XfE9SqRteqOKHlpGxA aNmt6Y22KhHChbSr5Wf4lAk1ee0dLzKbOI+md59qmqaZqlJ+0bPRgtGx/TkYD1sG c1doP2K33CtWJBxdEVrCsvPACq/n6UEZZSm2v110w8o571l9zInTfdE5bcjKA1H8 II2XJQmXIyVB32Y67/N9BKmYX7TecMx7YMfnmdVNPOCZVm72YDRjQ0WndZCbKOO9 5e8XLcwbObriLLFqUQ8rlnygl8R9QSmfXGPOwdfAWDOuEW6lDM7ePL8ojmXfL/PX wVDVF7NU4chsMqQqSAFw2YIocmKfK/WdM9t/Nrh4/xKIe3jtYPgqM1A9hCVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/kI3WYzPgRfKeiX8pzaFHF6y7gwHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvMuGZbbA62AbBLtuWvtqnW8jPeSTBrAEWs tiwdya8cijw0lw8NcNJvS4g2ZxCcpY0ysfPzIFuNEmuuduMCmhY8d+s2a/jkDQm9 ozkUZt4EK0sSXTaK+/kL9RHVoo1EiJS8XfL/wgatlQunVAssjhgup6fyUM0E5ckq IHEuS1nVpg6EzT4sPSpA9Y++J2DhNQKDpAySMMcL5/CnXr2WPPPZdKbLrrNdJsT6 PW/4OOXzxApOT7NywK6HSrQXoch7LoVwcFLS0mpJvIjFD4qtywohKWUn0jBuyF4o ywS9eNphgnmj/15Zdgr6Qvwn0FODiitZmc1RXw7WchsKaG6LMmo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:11:17 2025 by rpki-client