$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: QHtGfYkqi1Svn/rVqIngkbQKwf5Bk+hMRGL10r69rhM= Subject key identifier: 52:4E:D7:8D:58:20:50:3D:17:C8:8F:59:82:97:9C:88:0D:41:DB:02 Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 060012E2336683C00DECF8A075D5E7A3B49F31D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: CF Signing time: Sun 02 Nov 2025 07:50:51 +0000 Manifest this update: Sun 02 Nov 2025 07:45:51 +0000 Manifest next update: Wed 05 Nov 2025 07:56:51 +0000 Files and hashes: 1: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww=) 2: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw=) 3: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: GR+FBhC7CNMngpo1WjkPO51wn6Z0jiCT8xZ+vJBuUOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 07:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:00:12:e2:33:66:83:c0:0d:ec:f8:a0:75:d5:e7:a3:b4:9f:31:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Nov 2 07:45:51 2025 GMT Not After : Nov 5 07:56:51 2025 GMT Subject: CN=524ED78D5820503D17C88F5982979C880D41DB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:e7:df:5f:92:55:41:3d:e3:46:22:15:ad: 6f:1c:52:5c:94:e2:78:0a:c4:f7:fc:71:66:23:de: 56:28:5b:09:de:cc:8d:e4:a8:7b:3e:c6:dc:ec:e0: b4:cf:b7:b6:32:6f:a3:cc:67:14:51:bb:79:74:09: 89:33:8d:6f:1f:12:1d:7f:dd:e6:70:38:33:a5:7b: 32:60:07:70:1c:e3:67:69:7d:97:f6:2e:bc:f1:0d: 1b:fc:e2:79:75:a1:dd:8e:b7:b1:a8:66:05:d1:a3: 94:1d:e8:f6:70:19:b4:40:2c:7f:6b:2b:fb:6b:48: 58:6f:3c:9e:23:3b:60:58:b1:02:6b:b8:8d:35:e3: f8:19:13:b6:86:84:fd:8e:e4:5b:f1:b6:20:c5:cc: 9c:66:6c:02:2f:db:74:3e:ca:2c:ce:67:d0:fd:a2: 9d:aa:a4:24:55:99:0c:e2:8a:14:47:1c:e9:75:b5: 87:40:e4:a7:16:89:8a:6a:82:5e:2f:c9:cc:74:ee: 36:e3:8d:7b:57:00:36:01:db:cd:23:31:91:2a:a6: c1:3c:88:a1:dd:9a:ad:32:e7:f0:94:c9:79:43:a2: ed:61:00:84:30:8f:8c:ab:c7:d9:d8:69:ec:e3:81: 8d:13:99:2e:ee:14:03:f5:0c:d8:32:b5:41:75:63: 41:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4E:D7:8D:58:20:50:3D:17:C8:8F:59:82:97:9C:88:0D:41:DB:02 X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:19:24:9c:95:09:f7:df:cd:b7:7e:2c:b5:28:11:0f:2c:da: c2:d0:c9:7e:e4:48:9f:08:04:d1:0a:eb:73:83:50:d8:e9:a8: 55:e0:aa:db:73:b6:9a:48:1b:1b:36:b0:36:9f:cb:37:f6:54: 44:5b:eb:75:bf:c8:74:16:8f:16:76:82:7e:3b:2a:d8:42:03: 45:c7:31:13:a0:43:a6:a7:1b:d9:0b:52:2e:18:df:29:04:be: a6:a7:d1:87:1f:d5:f3:ae:f8:29:c3:2a:22:35:8c:c5:e6:65: a6:83:93:74:02:1d:49:9b:d4:e7:fd:7a:b2:df:81:bc:fc:64: 83:74:cb:10:9c:7c:7c:10:c4:e4:e6:34:a8:04:a0:70:73:2c: e8:01:69:34:5a:4a:54:99:b4:68:ba:9b:1f:f9:bd:aa:7a:3d: a3:75:de:6b:26:1a:39:a2:d2:2c:f7:2d:cb:ac:cc:a5:81:c0: 9c:91:80:7c:ca:43:d4:00:2e:68:8a:2e:2d:b6:31:6d:23:f4: fd:6d:34:bb:05:5b:24:62:77:3f:69:97:a8:a0:44:2c:0a:14: 9b:ab:67:d5:28:a0:8f:fb:9f:2a:52:6d:1f:a8:c1:bf:f4:d6: a3:bd:63:b6:1d:b7:bd:11:05:ea:27:24:97:10:d9:42:ec:b7: 89:80:92:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgAS4jNmg8AN7PigddXno7SfMdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTExMDIwNzQ1NTFaFw0yNTExMDUwNzU2NTFaMDMxMTAvBgNV BAMTKDUyNEVENzhENTgyMDUwM0QxN0M4OEY1OTgyOTc5Qzg4MEQ0MURCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDidOffX5JVQT3jRiIVrW8cUlyU 4ngKxPf8cWYj3lYoWwnezI3kqHs+xtzs4LTPt7Yyb6PMZxRRu3l0CYkzjW8fEh1/ 3eZwODOlezJgB3Ac42dpfZf2LrzxDRv84nl1od2Ot7GoZgXRo5Qd6PZwGbRALH9r K/trSFhvPJ4jO2BYsQJruI014/gZE7aGhP2O5FvxtiDFzJxmbAIv23Q+yizOZ9D9 op2qpCRVmQziihRHHOl1tYdA5KcWiYpqgl4vycx07jbjjXtXADYB280jMZEqpsE8 iKHdmq0y5/CUyXlDou1hAIQwj4yrx9nYaezjgY0TmS7uFAP1DNgytUF1Y0HTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUk7XjVggUD0XyI9ZgpeciA1B2wIwHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYZJJyVCfffzbd+LLUoEQ8s2sLQyX7kSJ8I BNEK63ODUNjpqFXgqttztppIGxs2sDafyzf2VERb63W/yHQWjxZ2gn47KthCA0XH MROgQ6anG9kLUi4Y3ykEvqan0Ycf1fOu+CnDKiI1jMXmZaaDk3QCHUmb1Of9erLf gbz8ZIN0yxCcfHwQxOTmNKgEoHBzLOgBaTRaSlSZtGi6mx/5vap6PaN13msmGjmi 0iz3LcuszKWBwJyRgHzKQ9QALmiKLi22MW0j9P1tNLsFWyRidz9pl6igRCwKFJur Z9UooI/7nypSbR+owb/01qO9Y7Ydt70RBeonJJcQ2ULst4mAkkI= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:24 2025 by rpki-client