$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: zF6H8ufNJPKmSs8xVDwN70PCZYmOxKuBEjcWA0kWqk8= Subject key identifier: C5:3E:51:C4:28:45:DB:F8:0C:25:15:DA:17:1C:9A:4F:50:50:A4:40 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 414D5E56988E6D866609ACB3B8260EA19B472F99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 04E2 Signing time: Tue 17 Jun 2025 17:31:06 +0000 Manifest this update: Tue 17 Jun 2025 17:26:06 +0000 Manifest next update: Fri 20 Jun 2025 22:29:06 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: jKoDuArPuR3jiYldFz1XyjR++pW/5mefjOOZobtwjCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4d:5e:56:98:8e:6d:86:66:09:ac:b3:b8:26:0e:a1:9b:47:2f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Jun 17 17:26:06 2025 GMT Not After : Jun 20 22:29:06 2025 GMT Subject: CN=C53E51C42845DBF80C2515DA171C9A4F5050A440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:dd:56:26:92:ce:d9:e3:f0:ff:81:56:6e: 69:0d:ff:fa:d3:b7:ae:32:f8:0c:4e:d7:e5:0c:54: 62:27:61:0a:85:6e:dd:f2:80:75:13:25:20:45:a6: c2:46:c4:de:62:e9:05:74:fe:3a:5e:e7:f9:e1:e1: 90:6c:ee:d5:b3:31:04:5b:2a:b0:18:c1:93:fa:f8: cf:cb:1a:60:65:4d:e5:67:87:be:f4:bf:b2:12:ff: ef:1e:31:ee:71:7c:41:e8:d5:63:af:bd:32:a9:a3: 37:fa:1f:8d:87:53:e2:f6:b0:ad:a5:2e:86:41:5e: e4:dd:cd:25:6f:b1:a9:9f:64:6e:32:d5:fa:99:85: 10:55:14:a2:f6:10:5d:f3:e5:0b:89:e3:c1:67:c4: 86:47:bf:45:93:f5:ec:43:2d:5c:93:a3:0f:0d:5b: f0:51:e7:a1:b0:96:0b:f4:28:db:75:fd:fd:b4:f4: 4e:98:6f:70:cf:01:cb:88:72:2f:f6:54:00:f8:30: c8:72:24:4a:7d:c2:3b:22:b4:8d:cc:4b:0f:67:ad: 54:e3:3c:6a:08:22:ef:c0:31:95:89:a0:73:2d:59: 93:e3:ed:44:39:2d:cf:67:cb:5e:56:95:8a:74:42: f2:57:14:e1:39:6b:98:38:75:e4:0d:0e:26:37:4a: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3E:51:C4:28:45:DB:F8:0C:25:15:DA:17:1C:9A:4F:50:50:A4:40 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:69:48:12:d8:38:62:c5:fc:f1:a0:16:17:36:16:f3:e9:5f: 8a:34:d1:57:39:e4:9c:07:c2:75:05:9c:11:fe:9a:85:50:b0: e2:dc:f6:85:aa:95:c5:fe:f4:9f:fe:29:4f:ec:cb:f5:09:08: 32:c0:4e:59:ea:06:d9:d5:75:97:70:9b:1f:d7:4d:84:4e:d6: 6e:b7:ea:f5:86:32:63:32:39:c7:be:54:e4:71:1e:70:d5:2f: 32:f4:03:a7:58:9f:99:e0:76:d4:38:64:3c:af:6f:8c:5e:06: d2:53:a8:8a:00:8a:32:b5:c2:13:ca:8c:9c:9b:08:d5:6c:e6: f6:27:10:ff:3a:4a:94:8a:20:f1:ae:f3:00:b0:c5:ca:e8:9f: d9:78:16:11:2b:bc:b7:e7:7e:cf:7b:d7:3e:73:a6:0b:28:f5: 75:b7:40:f1:aa:ed:40:cf:4f:8c:8f:fd:cb:70:80:52:de:a2: 0c:d8:93:44:73:12:a3:cc:7d:61:dc:13:8a:8b:43:c7:1f:ff: c2:fe:ec:95:c6:6b:fd:41:62:40:54:eb:7f:86:ee:9e:34:e5: 06:f1:17:b7:e5:d8:55:ae:ed:9a:ec:39:7d:00:f3:53:3d:dc: 86:e7:b5:2c:00:00:2f:71:a4:43:57:1e:66:62:b1:55:4a:26: 29:b9:23:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQU1eVpiObYZmCayzuCYOoZtHL5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTA2MTcxNzI2MDZaFw0yNTA2MjAyMjI5MDZaMDMxMTAvBgNV BAMTKEM1M0U1MUM0Mjg0NURCRjgwQzI1MTVEQTE3MUM5QTRGNTA1MEE0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXd1WJpLO2ePw/4FWbmkN//rT t64y+AxO1+UMVGInYQqFbt3ygHUTJSBFpsJGxN5i6QV0/jpe5/nh4ZBs7tWzMQRb KrAYwZP6+M/LGmBlTeVnh770v7IS/+8eMe5xfEHo1WOvvTKpozf6H42HU+L2sK2l LoZBXuTdzSVvsamfZG4y1fqZhRBVFKL2EF3z5QuJ48FnxIZHv0WT9exDLVyTow8N W/BR56Gwlgv0KNt1/f209E6Yb3DPAcuIci/2VAD4MMhyJEp9wjsitI3MSw9nrVTj PGoIIu/AMZWJoHMtWZPj7UQ5Lc9ny15WlYp0QvJXFOE5a5g4deQNDiY3SluFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxT5RxChF2/gMJRXaFxyaT1BQpEAwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNpSBLYOGLF/PGgFhc2FvPpX4o00Vc55JwH wnUFnBH+moVQsOLc9oWqlcX+9J/+KU/sy/UJCDLATlnqBtnVdZdwmx/XTYRO1m63 6vWGMmMyOce+VORxHnDVLzL0A6dYn5ngdtQ4ZDyvb4xeBtJTqIoAijK1whPKjJyb CNVs5vYnEP86SpSKIPGu8wCwxcron9l4FhErvLfnfs971z5zpgso9XW3QPGq7UDP T4yP/ctwgFLeogzYk0RzEqPMfWHcE4qLQ8cf/8L+7JXGa/1BYkBU63+G7p405Qbx F7fl2FWu7ZrsOX0A81M93IbntSwAAC9xpENXHmZisVVKJim5IxQ= -----END CERTIFICATE-----Generated at Tue Jun 17 22:45:30 2025 by rpki-client