$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: lYD8F7KX0RNNnE1X3ykGTXQZ+3VFlhUSmGY9zWHx0j8= Subject key identifier: D2:FB:68:D6:DA:A4:CF:99:7B:BC:FE:B0:74:9D:31:94:87:3D:CE:C8 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 5A307949F19B262D969C0749C7F61D59946FFA03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 01D6 Signing time: Fri 08 Aug 2025 02:44:26 +0000 Manifest this update: Fri 08 Aug 2025 02:39:26 +0000 Manifest next update: Mon 11 Aug 2025 13:03:26 +0000 Files and hashes: 1: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 2: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 3: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 4: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 5: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 6: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 8: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 9: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 10: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: QrygwxZ77tL1hiTHs8H2CHFUxoP6koPglqG41BiiL0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:30:79:49:f1:9b:26:2d:96:9c:07:49:c7:f6:1d:59:94:6f:fa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Aug 8 02:39:26 2025 GMT Not After : Aug 11 13:03:26 2025 GMT Subject: CN=D2FB68D6DAA4CF997BBCFEB0749D3194873DCEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:60:b5:29:d5:10:a4:1e:78:a0:64:3f:00: 44:cc:c8:26:fa:95:e2:f8:8e:94:bb:cf:ad:b1:02: 7a:d8:26:e9:5f:ed:76:80:fc:e9:6a:c1:fe:72:3c: ce:29:66:df:88:dc:41:1e:9d:7b:85:40:19:4e:18: 9a:47:05:2b:d8:16:3e:28:1b:a5:ab:de:f8:40:bc: 2a:01:19:d0:ac:91:0c:8a:1f:4d:6c:00:aa:2a:36: f2:d1:bc:7d:90:76:a9:dc:24:1a:54:13:75:a2:db: 88:51:e3:8b:96:65:4d:80:9a:24:62:af:1b:3e:aa: e3:49:9d:52:02:e6:fc:ca:05:89:b2:43:df:e6:72: 9a:e7:a4:c4:aa:9d:27:5f:ae:42:9f:e5:af:69:6a: b8:96:cd:30:be:76:34:dd:de:92:b7:bc:a7:b8:9c: f3:09:75:bf:75:14:7e:33:ec:e3:06:c3:6e:39:f5: 74:1c:a8:60:21:50:da:75:f0:75:2a:bf:1d:76:1a: 99:b2:3b:a0:72:ac:c9:22:14:cf:78:df:25:2f:d4: 3d:6b:d4:34:c3:02:12:f9:87:99:9e:d9:1d:da:7d: 70:a0:4f:28:21:fd:c6:5f:ec:b5:4f:ab:82:d5:a5: e8:24:77:d4:d5:90:95:da:ba:ad:2f:88:70:cc:14: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FB:68:D6:DA:A4:CF:99:7B:BC:FE:B0:74:9D:31:94:87:3D:CE:C8 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6c:73:84:fa:2e:8f:a7:f6:cc:ad:ce:20:85:b6:c1:d7:e3: 47:7e:f4:30:70:08:ca:94:20:5a:5d:eb:c5:c6:b0:5b:1a:8f: ec:11:78:d6:96:e2:35:90:60:97:de:2c:43:9e:c2:17:91:c8: 9d:6d:7a:ca:1e:c7:4e:99:9c:cb:07:e3:b5:df:6b:ad:83:c8: 09:d5:6c:b0:20:3c:85:92:73:8f:45:4f:26:3a:d4:d6:9f:91: 05:ce:d9:2f:89:32:8d:ea:9f:48:5d:78:45:ba:68:68:2c:b7: da:f3:46:e1:fb:8b:5e:6a:ee:ab:2c:e4:39:6d:51:35:a4:35: ff:b7:da:fc:07:8e:6d:14:00:ef:c7:d9:d2:8b:30:4a:fe:1d: 17:6e:e8:8c:e1:08:5c:52:db:9f:d5:48:80:09:f8:81:25:fb: 18:a4:33:69:81:c9:74:eb:70:3f:de:6b:ea:14:a3:a1:9d:67: 83:94:c7:15:b5:62:79:11:e0:8e:d8:1a:cf:40:79:3e:71:b8: 23:00:9b:9f:1d:e0:f0:b5:10:9f:66:e2:11:c5:75:39:96:ae: 9c:53:f8:7b:94:e3:c1:02:65:35:6d:0c:50:51:ad:56:71:46: 77:7e:43:9e:9e:c7:41:49:d4:71:6d:c4:3b:66:e2:66:47:1e: 00:ae:29:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjB5SfGbJi2WnAdJx/YdWZRv+gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTA4MDgwMjM5MjZaFw0yNTA4MTExMzAzMjZaMDMxMTAvBgNV BAMTKEQyRkI2OEQ2REFBNENGOTk3QkJDRkVCMDc0OUQzMTk0ODczRENFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlmC1KdUQpB54oGQ/AETMyCb6 leL4jpS7z62xAnrYJulf7XaA/Olqwf5yPM4pZt+I3EEenXuFQBlOGJpHBSvYFj4o G6Wr3vhAvCoBGdCskQyKH01sAKoqNvLRvH2QdqncJBpUE3Wi24hR44uWZU2AmiRi rxs+quNJnVIC5vzKBYmyQ9/mcprnpMSqnSdfrkKf5a9pariWzTC+djTd3pK3vKe4 nPMJdb91FH4z7OMGw2459XQcqGAhUNp18HUqvx12GpmyO6ByrMkiFM943yUv1D1r 1DTDAhL5h5me2R3afXCgTygh/cZf7LVPq4LVpegkd9TVkJXauq0viHDMFFftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vto1tqkz5l7vP6wdJ0xlIc9zsgwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFsc4T6Lo+n9sytziCFtsHX40d+9DBwCMqU IFpd68XGsFsaj+wReNaW4jWQYJfeLEOewheRyJ1tesoex06ZnMsH47Xfa62DyAnV bLAgPIWSc49FTyY61NafkQXO2S+JMo3qn0hdeEW6aGgst9rzRuH7i15q7qss5Dlt UTWkNf+32vwHjm0UAO/H2dKLMEr+HRdu6IzhCFxS25/VSIAJ+IEl+xikM2mByXTr cD/ea+oUo6GdZ4OUxxW1YnkR4I7YGs9AeT5xuCMAm58d4PC1EJ9m4hHFdTmWrpxT +HuU48ECZTVtDFBRrVZxRnd+Q56ex0FJ1HFtxDtm4mZHHgCuKSA= -----END CERTIFICATE-----Generated at Sat Aug 9 20:47:15 2025 by rpki-client