$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: XlazSdZu/9JZ10zRVtmcWW6zfXintIHeUrD0HV/kyvM= Subject key identifier: A5:C8:E6:3A:8D:C0:7B:EB:C9:DA:61:5E:B3:1F:DE:D5:EE:85:5F:B5 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 4C6D58C88FB59E2C92FA68FF0D01473C47311506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0520 Signing time: Tue 04 Nov 2025 04:41:06 +0000 Manifest this update: Tue 04 Nov 2025 04:36:06 +0000 Manifest next update: Fri 07 Nov 2025 14:07:06 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: z7Bd5X75u8fkyK8veaA5GiMnMJ2PzDg6RKWoxFEo0yM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6d:58:c8:8f:b5:9e:2c:92:fa:68:ff:0d:01:47:3c:47:31:15:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Nov 4 04:36:06 2025 GMT Not After : Nov 7 14:07:06 2025 GMT Subject: CN=A5C8E63A8DC07BEBC9DA615EB31FDED5EE855FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:fa:06:c0:20:03:7c:fa:bc:7c:1b:46:e7: 2f:5f:43:2f:31:f5:83:fd:04:8e:db:df:a8:4d:92: cc:a2:fe:55:d3:f0:f4:2e:0f:81:bf:68:cb:29:31: be:f0:4e:d0:07:75:cb:2b:29:63:4a:33:03:5e:77: fa:87:59:19:d3:df:07:fa:b9:3c:d5:46:26:51:9b: 10:96:a9:30:c5:ac:0d:96:da:92:6f:a6:51:fe:c8: ad:29:8d:c7:e9:86:bd:6e:12:d8:cb:90:2e:bc:6e: d5:89:b1:aa:a9:0f:a6:2e:64:ef:11:f4:14:ea:bb: 08:8b:3b:9f:a8:64:e4:2c:d0:18:34:75:44:ea:83: dd:5a:d2:37:1f:0c:a8:28:58:c1:55:da:0c:bf:4b: 72:db:d2:7b:b6:c9:c5:23:ea:a5:6a:cd:cd:b7:36: 0c:c6:20:00:5b:b2:ca:16:b0:b4:27:5d:63:41:8f: 12:d2:58:7a:a9:9e:2c:8e:15:d4:7d:57:9d:61:f4: f6:d8:62:3b:99:75:87:e0:31:bb:de:3d:0d:c4:7c: 3d:39:5c:d6:bf:16:c1:3c:8e:c3:97:79:c2:91:8a: d5:84:b0:51:b2:70:f8:b6:ae:16:34:b3:4a:51:41: a1:c0:70:01:e1:1f:cf:40:fe:9c:cc:2e:1b:0b:c2: 3b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:E6:3A:8D:C0:7B:EB:C9:DA:61:5E:B3:1F:DE:D5:EE:85:5F:B5 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:50:51:b7:80:a2:ba:ea:cd:f9:84:f5:b1:6f:83:58:f8:b0: 46:58:3c:bb:41:22:68:4b:ba:20:95:ba:5f:f1:18:4d:b4:33: ca:10:af:d5:a5:31:f0:f3:3e:9b:2a:c6:94:83:09:85:5f:5f: 31:91:fa:40:d4:5b:b1:d1:c2:f5:74:da:ed:ef:1b:b1:d6:0d: d6:a6:f2:20:5f:6f:e4:a1:dd:4b:9e:73:ea:75:77:c3:1b:9f: 54:7e:4a:de:e8:3d:1d:e4:c0:49:a1:48:52:a9:26:35:a2:c2: 3e:10:bc:be:76:f6:94:2c:c4:35:89:ff:3d:e2:43:a8:96:da: 99:23:24:b0:4d:31:82:f0:e6:15:28:2b:eb:1a:7f:3d:f0:60: 1f:cc:95:4b:66:76:0d:de:71:85:c5:7e:34:27:63:ad:7b:cb: 51:73:c4:e3:8e:41:ed:cb:af:f1:35:6e:3c:5b:6c:88:bc:ed: 54:eb:e7:96:5c:f2:7c:69:a0:77:8c:f9:37:85:28:f3:ea:bf: 00:df:0e:82:fe:3f:20:6b:42:3b:0b:e9:bb:9b:d2:cf:22:ce: 20:91:a2:4d:d3:be:39:0e:0c:b9:9c:42:08:bb:77:37:b1:6c: ce:f1:9e:1f:29:af:a4:c8:7f:bc:ad:95:b1:06:1f:d2:38:b3: 95:c1:d0:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTG1YyI+1niyS+mj/DQFHPEcxFQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTExMDQwNDM2MDZaFw0yNTExMDcxNDA3MDZaMDMxMTAvBgNV BAMTKEE1QzhFNjNBOERDMDdCRUJDOURBNjE1RUIzMUZERUQ1RUU4NTVGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNi/oGwCADfPq8fBtG5y9fQy8x 9YP9BI7b36hNksyi/lXT8PQuD4G/aMspMb7wTtAHdcsrKWNKMwNed/qHWRnT3wf6 uTzVRiZRmxCWqTDFrA2W2pJvplH+yK0pjcfphr1uEtjLkC68btWJsaqpD6YuZO8R 9BTquwiLO5+oZOQs0Bg0dUTqg91a0jcfDKgoWMFV2gy/S3Lb0nu2ycUj6qVqzc23 NgzGIABbssoWsLQnXWNBjxLSWHqpniyOFdR9V51h9PbYYjuZdYfgMbvePQ3EfD05 XNa/FsE8jsOXecKRitWEsFGycPi2rhY0s0pRQaHAcAHhH89A/pzMLhsLwjtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpcjmOo3Ae+vJ2mFesx/e1e6FX7UwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJQUbeAorrqzfmE9bFvg1j4sEZYPLtBImhL uiCVul/xGE20M8oQr9WlMfDzPpsqxpSDCYVfXzGR+kDUW7HRwvV02u3vG7HWDdam 8iBfb+Sh3Uuec+p1d8Mbn1R+St7oPR3kwEmhSFKpJjWiwj4QvL529pQsxDWJ/z3i Q6iW2pkjJLBNMYLw5hUoK+safz3wYB/MlUtmdg3ecYXFfjQnY617y1FzxOOOQe3L r/E1bjxbbIi87VTr55Zc8nxpoHeM+TeFKPPqvwDfDoL+PyBrQjsL6bub0s8iziCR ok3TvjkODLmcQgi7dzexbM7xnh8pr6TIf7ytlbEGH9I4s5XB0JQ= -----END CERTIFICATE-----Generated at Tue Nov 4 15:54:17 2025 by rpki-client