$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: q2bh2wN4RjLn/K8dxDppcX0xKK+L96ph2+5H3C8LaKY= Subject key identifier: 0E:DA:D9:EE:16:D9:FF:4C:D3:24:A4:FC:AC:FA:0C:75:A3:8B:6F:D0 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 4C98CFCE0563BD9C22CD96948F716C3770EB1401 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 01FD Signing time: Mon 03 Nov 2025 03:51:02 +0000 Manifest this update: Mon 03 Nov 2025 03:46:02 +0000 Manifest next update: Thu 06 Nov 2025 05:17:02 +0000 Files and hashes: 1: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: sao5+tV1fgo3d3Saj53nXhmlLJ0LvPVEs5QSoCnFwyM=) 2: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 3: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 4: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 5: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 6: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 7: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 8: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=) 9: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 10: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:98:cf:ce:05:63:bd:9c:22:cd:96:94:8f:71:6c:37:70:eb:14:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Nov 3 03:46:02 2025 GMT Not After : Nov 6 05:17:02 2025 GMT Subject: CN=0EDAD9EE16D9FF4CD324A4FCACFA0C75A38B6FD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:d3:d6:da:8c:af:65:19:fa:d7:b6:78:0e: 6d:b9:44:eb:4f:3f:b8:73:f3:0c:aa:42:79:d5:b1: 25:90:f4:03:5e:8c:af:05:83:39:1f:a9:ba:3f:ce: dc:d6:00:4d:72:e2:90:a7:ee:2f:09:12:6c:1e:7f: b3:bc:47:a2:4a:91:89:88:c3:18:a8:66:31:4a:b6: 7a:95:7e:0c:2f:f0:6b:89:63:3c:ed:22:11:85:36: 04:6a:88:9b:83:49:f3:a5:53:fd:99:dc:54:d6:39: c8:1e:8c:af:b1:94:10:65:e3:53:93:c0:a5:b8:84: 83:65:8c:52:87:07:b5:e0:b2:8f:e5:2a:c3:9f:5b: 08:51:9c:86:99:e1:07:fa:3d:24:f7:3d:4c:a3:75: db:f4:bd:df:bb:d3:a1:53:30:c0:6a:2c:b6:26:3b: 90:1b:34:45:fb:f9:5d:5d:21:72:14:6d:c5:9f:1f: 45:61:83:b8:15:34:8b:e3:1a:ab:43:d2:e9:86:00: a4:23:27:30:f1:ec:4d:65:07:62:dc:95:4f:c5:db: 27:c3:5c:3b:dd:52:4b:4b:c3:d9:c5:ea:e5:d7:78: c9:1e:0f:db:e4:f9:87:c0:6a:f7:d0:a5:44:dc:4c: 52:1b:60:1e:c2:9a:09:a1:1d:c3:49:de:9c:4c:49: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DA:D9:EE:16:D9:FF:4C:D3:24:A4:FC:AC:FA:0C:75:A3:8B:6F:D0 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d8:b8:25:66:1f:f6:5c:eb:34:65:08:65:80:42:fc:41:7c: 42:76:f4:cf:f2:6c:ff:ce:77:01:5f:16:bc:d7:5a:09:80:2f: 45:44:89:b8:9d:7f:eb:9a:fc:c5:10:c5:8b:cc:e7:00:39:31: 2b:98:b2:34:b1:7d:69:38:4d:e0:c4:64:9d:ab:0c:92:0c:ef: a8:bb:7e:58:f0:c4:7d:c2:29:13:ea:f1:a2:f9:8d:9b:65:ae: cc:dd:fe:86:10:8e:64:be:a6:9b:9f:92:a3:f8:33:2f:54:8b: 5e:d8:52:99:37:29:6c:5d:72:5e:bd:8e:f3:62:19:46:97:e4: 1c:1a:f5:75:a0:c2:73:e0:5f:cf:c7:20:ad:70:f3:d1:36:cb: ec:e8:84:1b:e4:f2:81:05:a4:fa:89:01:c9:bc:ec:a0:33:f4: bb:34:04:0b:c2:7d:ef:e6:16:ca:ef:b3:c3:a2:09:92:79:50: c6:02:f8:db:7d:d0:f7:ff:2e:a2:1b:77:e5:ae:ba:99:83:29: 72:a0:c1:52:ce:ac:84:82:2f:7f:2d:56:28:5e:8f:ef:cb:1c: 39:c7:62:8c:e8:8d:22:bd:11:73:54:e3:41:09:14:4a:51:94: da:2b:83:8d:53:7e:fb:ee:25:92:00:30:6c:b1:fa:df:33:59: bf:3c:56:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJjPzgVjvZwizZaUj3FsN3DrFAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTExMDMwMzQ2MDJaFw0yNTExMDYwNTE3MDJaMDMxMTAvBgNV BAMTKDBFREFEOUVFMTZEOUZGNENEMzI0QTRGQ0FDRkEwQzc1QTM4QjZGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ9tPW2oyvZRn617Z4Dm25ROtP P7hz8wyqQnnVsSWQ9ANejK8Fgzkfqbo/ztzWAE1y4pCn7i8JEmwef7O8R6JKkYmI wxioZjFKtnqVfgwv8GuJYzztIhGFNgRqiJuDSfOlU/2Z3FTWOcgejK+xlBBl41OT wKW4hINljFKHB7Xgso/lKsOfWwhRnIaZ4Qf6PST3PUyjddv0vd+706FTMMBqLLYm O5AbNEX7+V1dIXIUbcWfH0Vhg7gVNIvjGqtD0umGAKQjJzDx7E1lB2LclU/F2yfD XDvdUktLw9nF6uXXeMkeD9vk+YfAavfQpUTcTFIbYB7CmgmhHcNJ3pxMSRn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDtrZ7hbZ/0zTJKT8rPoMdaOLb9AwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7YuCVmH/Zc6zRlCGWAQvxBfEJ29M/ybP/O dwFfFrzXWgmAL0VEibidf+ua/MUQxYvM5wA5MSuYsjSxfWk4TeDEZJ2rDJIM76i7 fljwxH3CKRPq8aL5jZtlrszd/oYQjmS+ppufkqP4My9Ui17YUpk3KWxdcl69jvNi GUaX5Bwa9XWgwnPgX8/HIK1w89E2y+zohBvk8oEFpPqJAcm87KAz9Ls0BAvCfe/m Fsrvs8OiCZJ5UMYC+Nt90Pf/LqIbd+WuupmDKXKgwVLOrISCL38tVihej+/LHDnH YozojSK9EXNU40EJFEpRlNorg41TfvvuJZIAMGyx+t8zWb88VvU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:42 2025 by rpki-client