$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: 4u9Q6fVQmZ79de3FTJltilwyVuOkKjBclLHEZHZ2JXc= Subject key identifier: 70:95:31:4C:73:42:71:85:F4:82:B6:4A:8E:F5:28:A4:6F:C2:23:B2 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 7D68EB264E1E868B52A20997F33E048AD159B835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 0248 Signing time: Fri 17 Apr 2026 22:51:10 +0000 Manifest this update: Fri 17 Apr 2026 22:46:10 +0000 Manifest next update: Tue 21 Apr 2026 06:32:10 +0000 Files and hashes: 1: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 2: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 3: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 4: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 5: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 6: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 7: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 8: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 9: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: I6slakky3CQtWTIuBbfvHlCbvw8Jyy9iX7shA/6YgbI=) 10: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: 9r61cP8Ec/zTaOaqezYaUkuJ8iYobv6DZv4jO81uy7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:68:eb:26:4e:1e:86:8b:52:a2:09:97:f3:3e:04:8a:d1:59:b8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Apr 17 22:46:10 2026 GMT Not After : Apr 21 06:32:10 2026 GMT Subject: CN=7095314C73427185F482B64A8EF528A46FC223B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:a9:4e:35:05:c9:e6:fd:a8:f8:7c:02:3e: 95:b0:79:7d:af:34:cf:0b:b5:b1:79:f2:e4:b1:52: f1:47:b7:60:9d:22:93:a6:e8:e6:e9:2e:81:b9:e6: fa:f1:46:a6:94:0e:08:36:7f:9c:1c:71:ee:bf:aa: 62:c0:b9:dd:e6:af:92:58:c9:c6:35:35:2a:dc:d5: 21:c7:b7:34:9b:c9:5e:25:b0:5f:e0:ee:f5:56:60: 91:b9:1a:55:e8:be:47:8e:ff:d7:81:c8:04:35:74: b3:d8:46:f4:a8:ec:8f:c3:6c:52:63:7c:7b:bc:3c: 96:d8:85:d2:7f:bb:16:bd:6f:a1:7e:0f:e3:63:f5: 72:dd:2c:b7:b2:19:c8:26:0b:2a:f4:77:7e:dd:e4: bf:78:36:54:09:c7:67:df:af:2e:97:d4:1c:4e:91: 4b:78:ef:ce:d0:d5:bc:8a:7f:8d:b4:33:19:9b:7e: 7c:bf:bf:99:73:0d:c5:a5:06:a4:92:85:07:7d:0f: 24:8f:22:60:db:7d:6d:c4:c0:32:65:36:96:e0:f8: eb:d8:09:e3:8c:92:20:30:69:2e:e3:df:43:9d:27: af:52:8c:fb:c8:b2:17:63:2d:d1:65:f0:70:e2:ec: 95:38:b0:98:29:a9:b6:be:17:6d:8d:26:89:ae:e6: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:31:4C:73:42:71:85:F4:82:B6:4A:8E:F5:28:A4:6F:C2:23:B2 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:9b:1c:f6:f1:c6:69:84:2c:b6:98:c5:6a:bf:da:cf:e8:b3: ac:32:3c:fe:88:0a:e5:0c:8c:d0:ec:02:b5:7c:c6:7a:a0:4c: 8d:46:25:71:ed:4c:94:e2:ab:8e:29:74:63:1a:a2:35:d2:08: 95:55:05:36:17:98:de:bb:4d:0a:af:1c:79:04:95:ee:ff:83: e4:90:a9:5a:45:bc:00:ff:8c:67:48:98:4e:5e:16:3b:4e:a5: de:b5:cf:12:aa:9b:92:11:3a:02:ab:b4:c7:0f:64:4c:c1:19: 6b:54:34:04:98:94:ea:1a:a8:d2:6b:04:96:e5:b9:ff:96:37: 00:04:d6:ed:b3:96:35:08:0d:ea:61:57:77:fa:3d:a7:5c:66: 52:1a:eb:4c:bc:ac:69:7e:ab:87:90:cc:a2:2c:cc:a5:34:07: ba:4c:1b:1b:57:58:d3:4e:75:29:8f:9f:59:b7:f7:b3:f3:d4: cb:ef:24:80:a1:94:8e:75:4d:0b:d3:ca:45:b8:47:e9:6c:ae: 81:69:90:03:e3:b1:3b:eb:a1:78:44:3f:32:df:96:43:6c:34: 76:10:e5:76:08:2f:f7:f9:e8:6d:7b:70:53:5d:a9:70:6f:e6: 08:c4:2f:54:a8:5a:79:d0:70:a1:d9:0e:b2:02:86:87:2b:7d: da:b7:48:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWjrJk4ehotSogmX8z4EitFZuDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNjA0MTcyMjQ2MTBaFw0yNjA0MjEwNjMyMTBaMDMxMTAvBgNV BAMTKDcwOTUzMTRDNzM0MjcxODVGNDgyQjY0QThFRjUyOEE0NkZDMjIzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC536lONQXJ5v2o+HwCPpWweX2v NM8LtbF58uSxUvFHt2CdIpOm6ObpLoG55vrxRqaUDgg2f5wcce6/qmLAud3mr5JY ycY1NSrc1SHHtzSbyV4lsF/g7vVWYJG5GlXovkeO/9eByAQ1dLPYRvSo7I/DbFJj fHu8PJbYhdJ/uxa9b6F+D+Nj9XLdLLeyGcgmCyr0d37d5L94NlQJx2ffry6X1BxO kUt4787Q1byKf420Mxmbfny/v5lzDcWlBqSShQd9DySPImDbfW3EwDJlNpbg+OvY CeOMkiAwaS7j30OdJ69SjPvIshdjLdFl8HDi7JU4sJgpqba+F22NJomu5k79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcJUxTHNCcYX0grZKjvUopG/CI7IwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALibHPbxxmmELLaYxWq/2s/os6wyPP6ICuUM jNDsArV8xnqgTI1GJXHtTJTiq44pdGMaojXSCJVVBTYXmN67TQqvHHkEle7/g+SQ qVpFvAD/jGdImE5eFjtOpd61zxKqm5IROgKrtMcPZEzBGWtUNASYlOoaqNJrBJbl uf+WNwAE1u2zljUIDephV3f6PadcZlIa60y8rGl+q4eQzKIszKU0B7pMGxtXWNNO dSmPn1m397Pz1MvvJIChlI51TQvTykW4R+lsroFpkAPjsTvroXhEPzLflkNsNHYQ 5XYIL/f56G17cFNdqXBv5gjEL1SoWnnQcKHZDrIChocrfdq3SBE= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:29 2026 by rpki-client