$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: 6+mapTguVKWlTVoYynA2AyoLRx7xRFeFoSICMsbrlvM= Subject key identifier: E1:9E:DB:1D:69:91:80:3A:E6:69:24:39:D6:D4:18:BD:4B:1F:AB:2E Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 0BAF78A0C7A7D17A823FEC1CA6B8D650B132859A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 01EC Signing time: Mon 16 Jun 2025 05:30:38 +0000 Manifest this update: Mon 16 Jun 2025 05:25:38 +0000 Manifest next update: Thu 19 Jun 2025 16:50:38 +0000 Files and hashes: 1: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) 2: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) 3: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) 4: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: 73SYzKD1LSlm9rwBh9ida3v5Mwrt3E+QLNrVwfvuYuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:af:78:a0:c7:a7:d1:7a:82:3f:ec:1c:a6:b8:d6:50:b1:32:85:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Jun 16 05:25:38 2025 GMT Not After : Jun 19 16:50:38 2025 GMT Subject: CN=E19EDB1D6991803AE6692439D6D418BD4B1FAB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:c9:fb:41:0a:e3:7b:5e:3f:51:c0:3c:41: 8b:04:d4:f5:25:38:c1:95:ba:9a:3c:ea:09:73:68: 46:17:4e:5f:7f:dc:b9:86:82:23:49:ef:2e:2f:a7: 46:1f:66:64:61:28:82:32:22:56:5a:09:a2:db:98: a1:ef:cb:a9:56:f2:84:40:14:0e:36:2f:6a:58:dd: 0a:6c:be:b8:ac:61:53:f3:62:2d:71:be:bf:07:87: 11:85:dd:12:5b:14:b9:af:52:1c:0a:15:cb:a8:4f: 88:16:32:58:e6:e9:71:60:01:bc:02:5f:5d:79:16: 72:7a:9e:f3:26:90:56:b8:a3:13:b0:2f:1d:0a:88: 3b:59:d6:60:65:69:7f:a8:10:cb:8f:c0:30:4c:21: 09:97:1f:10:a2:46:2f:ea:b6:f5:e3:7b:8a:b0:c3: 97:89:b2:27:2f:00:69:7d:be:85:d7:a1:9b:38:ed: 44:c0:6e:4f:ff:43:f4:69:ee:3c:4b:0a:2f:ac:d6: c4:26:a2:2d:73:6c:e3:02:fb:13:14:51:86:24:b0: a2:b1:30:67:1c:67:07:2c:80:5c:fd:06:4a:13:d8: 94:d1:c5:b8:0a:4c:72:89:89:3b:69:d3:41:58:36: c2:05:dd:2e:ad:9c:bd:f2:25:b5:62:0a:fe:ce:a6: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9E:DB:1D:69:91:80:3A:E6:69:24:39:D6:D4:18:BD:4B:1F:AB:2E X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:46:46:d6:7a:05:0b:10:62:9c:76:bd:a3:7f:4a:85:7d:06: da:9f:b6:16:d7:fc:a3:f4:db:18:8b:be:f9:67:87:70:c8:98: 29:e1:c2:a6:cd:2a:d8:9d:ba:bd:46:57:64:74:9c:fd:19:b1: c1:13:ce:7d:ef:cb:6e:f9:58:c2:86:d5:da:3f:0f:81:63:13: 94:45:7b:58:58:c3:c4:83:1e:0d:7b:ed:71:48:22:ca:51:71: f7:89:06:eb:4b:91:5b:0a:13:09:17:7b:ce:b1:7a:32:22:37: 49:fe:3f:91:b3:93:d8:ca:fa:84:12:46:6b:ef:39:a2:bb:69: 6a:73:f5:0e:e8:82:17:7a:14:85:89:1e:57:31:fa:25:c7:55: 28:0d:8a:c7:6c:60:34:c0:10:e4:8f:93:3c:0e:71:66:fb:76: e0:ba:a9:49:35:1c:b7:f1:bd:0b:9d:6f:c8:e0:c6:e8:15:1c: eb:78:b4:1f:92:ea:9d:5a:32:0a:68:42:07:c9:d6:bd:15:8e: f0:96:bc:1f:3b:7d:85:40:16:d7:08:8c:eb:9a:0c:5a:cb:35: 7d:d0:f6:3a:14:c2:95:1c:81:f6:dc:d1:a2:7c:95:c6:83:0f: 0a:f8:27:b3:bb:39:6b:e0:f5:e3:54:ec:6c:6c:89:1a:ad:a6: b5:6d:e7:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC694oMen0XqCP+wcprjWULEyhZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTA2MTYwNTI1MzhaFw0yNTA2MTkxNjUwMzhaMDMxMTAvBgNV BAMTKEUxOUVEQjFENjk5MTgwM0FFNjY5MjQzOUQ2RDQxOEJENEIxRkFCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpisn7QQrje14/UcA8QYsE1PUl OMGVupo86glzaEYXTl9/3LmGgiNJ7y4vp0YfZmRhKIIyIlZaCaLbmKHvy6lW8oRA FA42L2pY3QpsvrisYVPzYi1xvr8HhxGF3RJbFLmvUhwKFcuoT4gWMljm6XFgAbwC X115FnJ6nvMmkFa4oxOwLx0KiDtZ1mBlaX+oEMuPwDBMIQmXHxCiRi/qtvXje4qw w5eJsicvAGl9voXXoZs47UTAbk//Q/Rp7jxLCi+s1sQmoi1zbOMC+xMUUYYksKKx MGccZwcsgFz9BkoT2JTRxbgKTHKJiTtp00FYNsIF3S6tnL3yJbViCv7Opr9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Z7bHWmRgDrmaSQ51tQYvUsfqy4wHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlGRtZ6BQsQYpx2vaN/SoV9BtqfthbX/KP0 2xiLvvlnh3DImCnhwqbNKtidur1GV2R0nP0ZscETzn3vy275WMKG1do/D4FjE5RF e1hYw8SDHg177XFIIspRcfeJButLkVsKEwkXe86xejIiN0n+P5Gzk9jK+oQSRmvv OaK7aWpz9Q7oghd6FIWJHlcx+iXHVSgNisdsYDTAEOSPkzwOcWb7duC6qUk1HLfx vQudb8jgxugVHOt4tB+S6p1aMgpoQgfJ1r0VjvCWvB87fYVAFtcIjOuaDFrLNX3Q 9joUwpUcgfbc0aJ8lcaDDwr4J7O7OWvg9eNU7GxsiRqtprVt5xg= -----END CERTIFICATE-----Generated at Wed Jun 18 05:28:36 2025 by rpki-client