$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: 1phNUj62e5S+pgqtQVI3Uzyib90KPQb3EIBAXLQeRAI= Subject key identifier: 11:3F:4A:87:8F:8C:2D:2E:98:4D:BD:C9:17:58:76:BE:2A:85:5B:A6 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 57AC6FDE2EF61AB83B4EE85AD3BF66C58244B4BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0568 Signing time: Fri 17 Apr 2026 12:01:18 +0000 Manifest this update: Fri 17 Apr 2026 11:56:18 +0000 Manifest next update: Mon 20 Apr 2026 16:14:18 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: npjV2XS3aaNakiJ1hE0/VuUyO1+H9RLoE2/rkBo1vZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ac:6f:de:2e:f6:1a:b8:3b:4e:e8:5a:d3:bf:66:c5:82:44:b4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Apr 17 11:56:18 2026 GMT Not After : Apr 20 16:14:18 2026 GMT Subject: CN=113F4A878F8C2D2E984DBDC9175876BE2A855BA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:f7:fb:dd:90:f3:95:81:aa:e7:e4:02:f3: e9:1d:9a:fb:62:56:7d:46:70:1f:d3:2f:43:bb:3e: 34:5c:c1:4f:ae:96:0f:69:a6:33:01:20:b8:97:67: 93:3e:99:b9:65:ef:92:ec:11:cd:d5:23:00:52:0d: 20:d3:bd:8c:6c:59:8d:78:ff:25:25:68:31:9c:ef: 8d:32:6f:58:28:1d:a6:5f:2b:6c:b1:2a:4d:c8:50: 23:cb:1f:25:ae:cb:ee:2d:d2:09:b1:75:d8:b5:8a: 54:3d:91:f3:40:53:95:da:1f:50:95:c2:8b:4e:1a: ff:e4:e6:0e:0b:77:22:02:01:6c:63:80:1f:9a:95: 75:e9:58:93:b1:09:e3:05:0c:6b:df:6f:44:d5:80: 8f:58:b8:32:d6:cc:c5:6b:0e:f9:c6:2a:59:c5:67: 6b:04:5f:81:9d:3e:43:72:35:b1:f1:8a:5c:d8:ea: 7e:38:a3:04:a1:5b:ca:11:c2:23:91:74:6c:fc:6b: 23:b3:3d:0d:69:2f:52:80:55:43:c8:1d:85:2f:72: ce:d3:9b:71:11:4f:3b:01:d5:35:2c:15:2c:e3:0a: 1e:d4:56:d8:fb:dc:81:fa:84:13:78:76:c3:06:5c: 97:41:05:d4:70:9c:4d:35:f4:f0:7b:4b:13:40:bb: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3F:4A:87:8F:8C:2D:2E:98:4D:BD:C9:17:58:76:BE:2A:85:5B:A6 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:74:61:13:53:d4:d9:44:8e:9e:4f:00:4b:49:dd:b8:6c:d8: 9f:df:18:78:79:c0:89:bf:f9:be:0d:b0:58:39:59:4c:d1:75: 9f:49:0b:e1:76:5f:4e:9c:0b:22:0b:59:9d:3f:c2:e8:d9:bc: 9d:4c:3e:13:9f:78:00:b7:2a:75:fc:d5:a2:2d:34:ab:0c:61: b6:aa:42:20:37:90:83:e0:6a:7a:11:16:61:82:37:c4:a3:9a: 7e:42:01:83:4a:94:66:1d:50:c4:28:b0:57:51:f4:2b:60:05: c2:91:6d:f3:02:4d:4f:9d:92:93:80:85:f6:d2:11:6a:88:0f: 2f:d1:fd:da:f8:00:f6:0f:e0:bf:d9:8f:4f:6c:68:63:22:70: be:4f:cf:57:34:2e:47:2f:37:80:95:4c:f7:ab:9e:dd:e1:f3: be:fa:f9:7c:44:30:57:ea:56:b9:4e:4e:85:69:92:86:75:3a: 3b:79:b9:ca:29:5d:d6:3a:da:f3:63:57:16:95:b6:87:97:db: 49:23:cd:81:3e:3b:6a:38:1e:62:7f:0f:c5:5f:5d:07:e7:1c: fe:ec:da:ac:8a:1e:15:67:1d:ae:f1:ee:c7:df:54:d7:82:10: 82:8a:89:cc:93:88:57:0e:2e:27:76:05:8a:23:29:9d:60:98: 1d:d9:9d:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6xv3i72Grg7Tuha079mxYJEtLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNjA0MTcxMTU2MThaFw0yNjA0MjAxNjE0MThaMDMxMTAvBgNV BAMTKDExM0Y0QTg3OEY4QzJEMkU5ODREQkRDOTE3NTg3NkJFMkE4NTVCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQivf73ZDzlYGq5+QC8+kdmvti Vn1GcB/TL0O7PjRcwU+ulg9ppjMBILiXZ5M+mbll75LsEc3VIwBSDSDTvYxsWY14 /yUlaDGc740yb1goHaZfK2yxKk3IUCPLHyWuy+4t0gmxddi1ilQ9kfNAU5XaH1CV wotOGv/k5g4LdyICAWxjgB+alXXpWJOxCeMFDGvfb0TVgI9YuDLWzMVrDvnGKlnF Z2sEX4GdPkNyNbHxilzY6n44owShW8oRwiORdGz8ayOzPQ1pL1KAVUPIHYUvcs7T m3ERTzsB1TUsFSzjCh7UVtj73IH6hBN4dsMGXJdBBdRwnE019PB7SxNAu0vpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUET9Kh4+MLS6YTb3JF1h2viqFW6YwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ0YRNT1NlEjp5PAEtJ3bhs2J/fGHh5wIm/ +b4NsFg5WUzRdZ9JC+F2X06cCyILWZ0/wujZvJ1MPhOfeAC3KnX81aItNKsMYbaq QiA3kIPganoRFmGCN8Sjmn5CAYNKlGYdUMQosFdR9CtgBcKRbfMCTU+dkpOAhfbS EWqIDy/R/dr4APYP4L/Zj09saGMicL5Pz1c0LkcvN4CVTPernt3h8776+XxEMFfq VrlOToVpkoZ1Ojt5ucopXdY62vNjVxaVtoeX20kjzYE+O2o4HmJ/D8VfXQfnHP7s 2qyKHhVnHa7x7sffVNeCEIKKicyTiFcOLid2BYojKZ1gmB3ZnUQ= -----END CERTIFICATE-----Generated at Sat Apr 18 00:01:46 2026 by rpki-client