$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: IKFaCOA2KCOMxwnzPOLulquECGHXMsymadjNRCquPVM= Subject key identifier: E3:B0:87:A7:EF:1B:23:DD:A8:43:67:58:D6:9B:99:3F:BF:34:51:A7 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 2F5AB061E3322153B26BBFB685F761BBB3019643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0553 Signing time: Sun 01 Mar 2026 09:11:14 +0000 Manifest this update: Sun 01 Mar 2026 09:06:14 +0000 Manifest next update: Wed 04 Mar 2026 17:32:14 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: ySTyQAQ9KakICvn/Mwabe3Oi+4+VEfupLtT7HGWzDH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5a:b0:61:e3:32:21:53:b2:6b:bf:b6:85:f7:61:bb:b3:01:96:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Mar 1 09:06:14 2026 GMT Not After : Mar 4 17:32:14 2026 GMT Subject: CN=E3B087A7EF1B23DDA8436758D69B993FBF3451A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:43:53:9f:ea:f4:e1:c3:4e:d7:ac:e2:98: fe:8a:90:40:d4:4a:ee:c5:30:f1:cd:c9:30:9b:ad: a9:b5:c7:98:31:5e:ec:be:66:74:b6:d9:47:05:dc: e8:23:50:e1:ec:bd:ff:d3:fb:b0:8f:ac:f7:f9:ae: 72:20:20:62:30:1e:5d:f6:b4:19:a6:6c:23:54:39: c8:49:65:63:20:20:19:e0:30:36:73:2e:d7:66:70: e7:53:09:41:e0:5d:89:07:14:97:7d:a5:20:1d:ee: 00:2b:c3:ca:76:ac:46:9d:c6:62:20:98:f4:d4:d4: df:e5:fd:34:a1:d7:e1:5d:b4:fd:d0:f6:4b:df:87: 7a:a2:e0:d4:f4:82:d1:af:99:83:48:5f:9e:6b:be: 00:10:1d:dc:62:f6:f5:52:2a:d4:10:8c:35:e3:6b: 45:fc:93:d6:99:d0:af:18:44:67:28:85:49:5e:4f: 06:9f:04:58:34:45:25:ea:04:8b:4b:e5:e6:81:8a: e6:f1:e8:ee:cd:da:d4:77:4f:65:1d:6f:aa:b8:6a: 82:53:4c:75:62:60:01:9c:48:a1:f9:2a:56:82:34: 2e:7c:9e:a8:b4:31:e6:39:bd:c9:00:87:83:19:05: 39:4d:bb:f2:6e:0e:b3:bf:f7:9a:25:f7:23:6a:6a: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B0:87:A7:EF:1B:23:DD:A8:43:67:58:D6:9B:99:3F:BF:34:51:A7 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3e:42:78:1c:69:21:51:bf:3b:13:a1:41:14:ee:8d:26:10: 2e:a0:06:04:7f:31:d5:35:4f:8c:68:7e:1f:b5:a7:a2:5c:f0: d6:e6:e1:67:21:4e:62:be:73:9c:72:ef:c8:2c:cd:76:2f:2f: a0:3d:75:c0:0c:b4:27:52:53:65:64:4f:37:8a:92:f4:8f:f9: b1:84:fb:4d:54:13:fe:1c:82:64:34:2c:36:25:94:bb:88:8e: f8:04:66:43:08:64:4e:5d:97:8b:a4:b2:7c:c4:0c:a1:8b:17: 68:2a:3f:4a:53:e0:31:49:66:05:c5:84:9c:a6:95:3b:80:02: 38:d8:51:b9:cd:f6:fb:32:23:38:db:7a:ea:88:25:07:bc:25: fe:ec:a4:cd:e4:63:48:ec:b8:be:19:31:de:ff:d4:e8:4d:93: bd:da:19:39:28:8d:45:07:fa:37:61:3f:59:da:8e:ed:b8:99: 9b:8b:ca:d2:3a:93:00:3b:c5:80:ad:9a:a9:81:94:6d:5d:5b: c3:4e:4f:78:fa:5c:a5:6f:c6:b4:87:e5:04:55:02:88:a9:e1: 0f:6a:d3:96:ce:47:7c:e3:90:34:72:53:fa:bc:0f:32:49:da: 49:fe:25:d4:fb:61:95:28:a9:4f:d9:82:c8:8f:c6:a3:ab:61: 17:48:75:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1qwYeMyIVOya7+2hfdhu7MBlkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNjAzMDEwOTA2MTRaFw0yNjAzMDQxNzMyMTRaMDMxMTAvBgNV BAMTKEUzQjA4N0E3RUYxQjIzRERBODQzNjc1OEQ2OUI5OTNGQkYzNDUxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE50NTn+r04cNO16zimP6KkEDU Su7FMPHNyTCbram1x5gxXuy+ZnS22UcF3OgjUOHsvf/T+7CPrPf5rnIgIGIwHl32 tBmmbCNUOchJZWMgIBngMDZzLtdmcOdTCUHgXYkHFJd9pSAd7gArw8p2rEadxmIg mPTU1N/l/TSh1+FdtP3Q9kvfh3qi4NT0gtGvmYNIX55rvgAQHdxi9vVSKtQQjDXj a0X8k9aZ0K8YRGcohUleTwafBFg0RSXqBItL5eaBiubx6O7N2tR3T2Udb6q4aoJT THViYAGcSKH5KlaCNC58nqi0MeY5vckAh4MZBTlNu/JuDrO/95ol9yNqak7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU47CHp+8bI92oQ2dY1puZP780UacwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs+QngcaSFRvzsToUEU7o0mEC6gBgR/MdU1 T4xofh+1p6Jc8Nbm4WchTmK+c5xy78gszXYvL6A9dcAMtCdSU2VkTzeKkvSP+bGE +01UE/4cgmQ0LDYllLuIjvgEZkMIZE5dl4uksnzEDKGLF2gqP0pT4DFJZgXFhJym lTuAAjjYUbnN9vsyIzjbeuqIJQe8Jf7spM3kY0jsuL4ZMd7/1OhNk73aGTkojUUH +jdhP1naju24mZuLytI6kwA7xYCtmqmBlG1dW8NOT3j6XKVvxrSH5QRVAoip4Q9q 05bOR3zjkDRyU/q8DzJJ2kn+JdT7YZUoqU/ZgsiPxqOrYRdIdZc= -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:47 2026 by rpki-client