$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: DdUvdhYzc7+Fe7Susgx+T3KbNRyigzP4tnK7uBL0L/s= Subject key identifier: BA:A1:0F:A5:9A:B5:E7:6A:86:39:16:25:49:B9:14:C5:7F:94:91:41 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 08C288B49315AD09085B2E814F67E736B2876537 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 0247 Signing time: Wed 15 Apr 2026 19:01:11 +0000 Manifest this update: Wed 15 Apr 2026 18:56:11 +0000 Manifest next update: Sat 18 Apr 2026 22:44:11 +0000 Files and hashes: 1: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: /PJu6AuSDnXhTeWg26VNks6i/shKNwV6BfRsxAn96JQ=) 2: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: wJIxSydIcIK632aJu1sVcTgkjmEOfnhPh7sYYVJOybg=) 3: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ=) 4: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g=) 5: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: ptZDC1QxEJ1qYR1JK+LpFE9hUdl4Mx+l7itGMa64wLk=) 6: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: TB81RW09cSXgrXgJAYPXKsxvmNEuOM4iVijZs/dW40o=) 7: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: 4DXpIxqwUP2SHUxVghm+mTwAYqcISbPiOREbhlKDTQA=) 8: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: I6slakky3CQtWTIuBbfvHlCbvw8Jyy9iX7shA/6YgbI=) 9: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: /AD55gQuIXqmhT7jl8XXbRiu7aeneAmR5bk7jupkCNk=) 10: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: 8nguT3momJWxkNDEroQABDHN2eM7JqQ479oCJjzQz54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c2:88:b4:93:15:ad:09:08:5b:2e:81:4f:67:e7:36:b2:87:65:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Apr 15 18:56:11 2026 GMT Not After : Apr 18 22:44:11 2026 GMT Subject: CN=BAA10FA59AB5E76A8639162549B914C57F949141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:f0:b0:c6:da:35:7f:11:4f:cd:a2:8e:51: db:21:53:5a:f5:91:74:ed:bf:f8:67:7f:01:17:63: 79:04:7f:c7:b9:e2:15:85:f5:1a:77:3e:8f:c5:f8: af:3b:a2:3a:98:e5:52:bd:9c:fc:b0:f1:fe:87:39: f0:94:c0:2e:67:32:2c:40:3a:e7:01:a6:0b:1e:22: 1a:1f:91:af:bd:b9:d4:e6:1b:fc:4d:20:a7:b0:64: 08:d6:e3:72:9e:e6:e1:d3:40:58:94:82:fe:58:de: 4d:c3:7b:b2:fc:2c:c4:4f:d4:48:e9:21:21:8b:e1: 9c:57:e5:df:e3:5a:20:3c:90:c3:ba:a8:66:44:ac: ed:6d:22:d8:d9:d8:b0:da:f9:1a:fe:97:96:21:59: 7a:92:70:60:41:a4:76:9b:d6:5b:e6:59:57:88:c8: b4:80:94:d7:c0:7f:01:d3:71:b3:43:ff:55:62:f0: f8:73:61:72:35:23:c5:78:bc:52:ca:6c:4c:85:02: 09:5a:50:66:1f:00:40:0b:82:ca:63:0c:32:da:b3: bb:0f:49:d7:37:e6:29:32:88:0e:87:53:f0:b4:a2: ca:28:7f:64:9f:52:87:f0:74:fb:13:03:05:52:ed: 67:55:58:5b:80:c0:ed:15:fc:a0:13:b5:3d:a3:70: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A1:0F:A5:9A:B5:E7:6A:86:39:16:25:49:B9:14:C5:7F:94:91:41 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3f:82:4b:84:aa:4f:b8:5d:86:59:4a:9f:d6:99:2a:47:84: 7d:45:f8:61:3a:e5:2d:67:78:f9:a8:86:3b:5b:12:af:d3:42: 23:3b:3e:d2:b3:46:7c:88:72:28:1c:bb:2e:3d:84:b9:2f:15: bf:7b:8d:0b:75:40:8f:6a:9a:2a:22:48:07:f7:59:21:be:77: 33:77:ac:49:22:a2:87:db:f9:4b:3d:a0:0b:2c:2a:5b:fd:45: 18:96:fc:94:b6:50:10:0a:02:d8:54:35:d9:96:9e:69:8b:cf: c1:32:f8:ab:83:6a:5f:19:3d:67:1d:4d:08:0d:59:1f:60:82: 2b:c6:90:4c:7d:7c:da:49:fc:e1:20:86:d0:99:d1:56:3d:01: bf:65:75:aa:3f:a6:6f:94:24:c3:e7:c9:36:71:85:f3:20:56: 64:d3:6a:01:1d:3c:ef:72:d7:fd:bb:93:b6:34:f2:13:d3:c2: ef:ec:d1:41:9b:a7:d0:ac:75:27:ed:b4:6b:7e:ef:0e:d3:e3: 82:c9:8c:b9:82:7a:4e:f8:cf:bc:0a:d5:1d:03:fb:fd:75:28: 7d:4b:5b:cc:72:10:b9:71:18:9e:74:93:d5:e0:19:fb:01:77: 2c:b2:24:df:ac:fb:17:a0:3b:9b:53:28:28:ea:3d:1d:43:52: af:c4:b7:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMKItJMVrQkIWy6BT2fnNrKHZTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNjA0MTUxODU2MTFaFw0yNjA0MTgyMjQ0MTFaMDMxMTAvBgNV BAMTKEJBQTEwRkE1OUFCNUU3NkE4NjM5MTYyNTQ5QjkxNEM1N0Y5NDkxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYfCwxto1fxFPzaKOUdshU1r1 kXTtv/hnfwEXY3kEf8e54hWF9Rp3Po/F+K87ojqY5VK9nPyw8f6HOfCUwC5nMixA OucBpgseIhofka+9udTmG/xNIKewZAjW43Ke5uHTQFiUgv5Y3k3De7L8LMRP1Ejp ISGL4ZxX5d/jWiA8kMO6qGZErO1tItjZ2LDa+Rr+l5YhWXqScGBBpHab1lvmWVeI yLSAlNfAfwHTcbND/1Vi8PhzYXI1I8V4vFLKbEyFAglaUGYfAEALgspjDDLas7sP Sdc35ikyiA6HU/C0osoof2SfUofwdPsTAwVS7WdVWFuAwO0V/KATtT2jcG4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuqEPpZq152qGORYlSbkUxX+UkUEwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAs/gkuEqk+4XYZZSp/WmSpHhH1F+GE65S1n ePmohjtbEq/TQiM7PtKzRnyIcigcuy49hLkvFb97jQt1QI9qmioiSAf3WSG+dzN3 rEkioofb+Us9oAssKlv9RRiW/JS2UBAKAthUNdmWnmmLz8Ey+KuDal8ZPWcdTQgN WR9ggivGkEx9fNpJ/OEghtCZ0VY9Ab9ldao/pm+UJMPnyTZxhfMgVmTTagEdPO9y 1/27k7Y08hPTwu/s0UGbp9CsdSfttGt+7w7T44LJjLmCek74z7wK1R0D+/11KH1L W8xyELlxGJ50k9XgGfsBdyyyJN+s+xegO5tTKCjqPR1DUq/Et9E= -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:59 2026 by rpki-client