$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: 77stcFMJd5m3hC1K4EExt++v1urugZmTr5AdcjjNtyk= Subject key identifier: 1E:92:98:91:EB:00:DF:AC:15:07:F6:C0:92:D6:9E:79:BE:E7:B2:C8 Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 0B0CFC8276D5CC84FA97AA4A9BE046293FB0297B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: 0187 Signing time: Fri 17 Apr 2026 23:02:39 +0000 Manifest this update: Fri 17 Apr 2026 22:57:39 +0000 Manifest next update: Tue 21 Apr 2026 04:37:39 +0000 Files and hashes: 1: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: nwEHa3/WlV/z4/EUCjtnhlcu3D5Y4h6NQPei0E4YMNc=) 2: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: y7e0GvaeiHhBzC6oLExuSTt16vC/E5qrjzVTW5pgNKE=) 3: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: 4g7FCyKoIAcKDnKoinVIDZbyk+0ilB+hanJJOS6EiJg=) 4: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: H1Gb+eiOUICwBUcSb7QWvdT/w9/QaKzCCS+ZZRgMwMs=) 5: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: Gg4PjaHJJ2ELmK/kINP16QwFpCzFc3eTiKaJ4v4sLgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0c:fc:82:76:d5:cc:84:fa:97:aa:4a:9b:e0:46:29:3f:b0:29:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Apr 17 22:57:39 2026 GMT Not After : Apr 21 04:37:39 2026 GMT Subject: CN=1E929891EB00DFAC1507F6C092D69E79BEE7B2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:b3:af:9e:f5:fd:30:13:a3:3c:29:f0:0d: d7:05:3a:d3:43:af:3d:96:34:bc:13:d7:f9:8d:bf: 1a:fc:64:11:15:e6:63:9b:01:1b:f6:ad:b4:c9:9b: b5:32:4a:4f:31:4c:ce:2c:f9:c6:45:a4:79:7e:c5: 03:3b:46:27:fa:97:b0:13:97:8b:49:9e:62:d8:cf: 7e:d5:90:b6:34:e6:23:ce:c1:5b:5b:39:24:6f:aa: 55:b7:87:de:d6:9f:86:9d:3c:ae:f4:68:58:0a:53: cb:d0:ed:63:2f:36:8e:48:35:b6:de:63:73:24:87: 75:00:f0:01:c9:86:8e:ad:00:6c:a0:3c:17:32:e8: 3f:d4:48:1a:d6:23:1a:b0:5c:eb:f1:a4:80:57:be: d7:db:7e:91:45:e8:ab:d9:8b:3f:6d:b9:60:a4:65: dd:43:f6:23:aa:e9:d9:9e:3d:16:21:8d:36:09:14: 58:1f:82:8d:ee:16:75:10:95:1f:53:cd:49:fb:0a: c7:94:42:6c:90:cb:f7:b5:b7:2b:d6:be:47:4a:e3: 83:75:b3:b4:82:a8:20:11:e7:92:17:97:56:12:55: 1b:0d:df:50:f4:46:ad:af:1d:d2:b8:c1:08:09:a7: d9:65:fa:51:a8:5b:aa:d5:b6:8d:74:5f:ea:12:62: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:98:91:EB:00:DF:AC:15:07:F6:C0:92:D6:9E:79:BE:E7:B2:C8 X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:61:f6:40:39:32:0e:88:68:45:da:25:c8:b5:15:0f:97:47: 39:21:69:7c:d8:c6:31:b7:f0:85:59:42:25:c7:84:93:5e:0c: ca:72:77:aa:30:ee:36:87:a4:47:f4:20:20:de:49:74:e7:2c: 45:5d:be:17:23:eb:2c:82:74:02:15:b1:81:eb:3f:5f:86:0b: d3:b3:d3:b2:06:5f:6c:9c:de:b0:d2:08:24:88:2c:bc:9f:41: 50:d1:7e:e6:78:bf:10:33:be:bb:20:53:48:fc:c1:02:56:77: 35:05:d1:eb:26:ef:6d:36:a9:f6:dd:81:0d:dc:87:b8:32:9f: 61:83:5c:39:c5:80:72:7e:a7:9c:87:d7:5f:2b:f1:e6:10:10: 4f:24:b5:a0:57:f1:03:31:57:ad:35:e0:ba:c1:17:7e:6d:46: 27:7f:12:56:23:13:b0:b8:cf:60:6d:dc:80:d4:f8:9d:0d:ec: ca:00:0b:78:37:48:7c:ba:66:5e:75:49:0b:f4:f9:33:a4:4c: b5:5a:08:26:58:1a:ea:77:9e:50:46:f1:42:ec:0f:f6:e8:b3: a2:6d:25:c6:e6:c4:0f:d5:54:75:5e:11:62:97:0d:10:91:36: 1d:f4:e2:c6:c8:46:92:ee:0b:aa:af:e1:f6:9e:f7:9a:32:6b: d6:8a:7c:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwz8gnbVzIT6l6pKm+BGKT+wKXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNjA0MTcyMjU3MzlaFw0yNjA0MjEwNDM3MzlaMDMxMTAvBgNV BAMTKDFFOTI5ODkxRUIwMERGQUMxNTA3RjZDMDkyRDY5RTc5QkVFN0IyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77bOvnvX9MBOjPCnwDdcFOtND rz2WNLwT1/mNvxr8ZBEV5mObARv2rbTJm7UySk8xTM4s+cZFpHl+xQM7Rif6l7AT l4tJnmLYz37VkLY05iPOwVtbOSRvqlW3h97Wn4adPK70aFgKU8vQ7WMvNo5INbbe Y3Mkh3UA8AHJho6tAGygPBcy6D/USBrWIxqwXOvxpIBXvtfbfpFF6KvZiz9tuWCk Zd1D9iOq6dmePRYhjTYJFFgfgo3uFnUQlR9TzUn7CseUQmyQy/e1tyvWvkdK44N1 s7SCqCAR55IXl1YSVRsN31D0Rq2vHdK4wQgJp9ll+lGoW6rVto10X+oSYgoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpKYkesA36wVB/bAktaeeb7nssgwHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxh9kA5Mg6IaEXaJci1FQ+XRzkhaXzYxjG3 8IVZQiXHhJNeDMpyd6ow7jaHpEf0ICDeSXTnLEVdvhcj6yyCdAIVsYHrP1+GC9Oz 07IGX2yc3rDSCCSILLyfQVDRfuZ4vxAzvrsgU0j8wQJWdzUF0esm7202qfbdgQ3c h7gyn2GDXDnFgHJ+p5yH118r8eYQEE8ktaBX8QMxV6014LrBF35tRid/ElYjE7C4 z2Bt3IDU+J0N7MoAC3g3SHy6Zl51SQv0+TOkTLVaCCZYGup3nlBG8ULsD/bos6Jt JcbmxA/VVHVeEWKXDRCRNh304sbIRpLuC6qv4fae95oya9aKfPg= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:44 2026 by rpki-client