$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: j5pTwK3svq5Y+byNhE5xQzrcDA9dNSSvL8qe3/9+zNM= Subject key identifier: 5D:CD:70:43:16:E9:9F:5C:23:12:8D:F5:95:0B:70:1C:55:55:23:5E Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 6489BA4DB071A385D9100FBB209F2E0BF77C15DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 0203 Signing time: Wed 06 Aug 2025 08:40:39 +0000 Manifest this update: Wed 06 Aug 2025 08:35:39 +0000 Manifest next update: Sat 09 Aug 2025 14:37:39 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) 2: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) 3: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) 4: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: o4C6+APOuh4S6qDA9K8kCQKJNDwbuGTA0gc+aMs6nm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:89:ba:4d:b0:71:a3:85:d9:10:0f:bb:20:9f:2e:0b:f7:7c:15:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Aug 6 08:35:39 2025 GMT Not After : Aug 9 14:37:39 2025 GMT Subject: CN=5DCD704316E99F5C23128DF5950B701C5555235E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:03:f2:12:b4:32:48:fc:28:f1:fc:6f:a5: 69:de:ec:2e:98:08:9f:70:af:c6:b0:cf:7f:be:ac: ed:17:c5:67:75:2f:1b:5b:bd:59:7f:88:84:de:cc: 7b:9f:b0:f0:37:1c:f7:63:6f:1e:89:22:fe:0e:55: ce:5e:b9:0f:4e:93:e4:e3:bf:9c:85:44:aa:77:b0: f9:56:8f:7c:d7:e8:e3:fd:77:99:d1:a0:28:21:64: ab:62:85:47:41:ea:c9:14:ce:63:fa:53:33:b3:0b: 2b:d9:42:a2:92:66:ed:32:ec:f9:5b:08:48:f6:7d: cc:fd:5b:f8:73:05:df:e0:9c:90:ea:95:d7:f6:8b: 1f:01:09:d6:a6:17:72:00:8b:65:69:95:ff:1f:1e: b7:13:21:50:ed:15:e5:59:ab:27:53:42:c8:a5:22: a6:2d:0c:3c:62:39:36:6d:34:fd:33:9f:31:e9:c1: 1c:3c:1c:f2:9a:c1:fd:3b:88:be:80:4f:d6:eb:28: 3e:e9:be:cf:e7:a7:21:86:5a:89:fe:78:e8:71:fa: a4:a5:6b:cf:e3:2d:06:6d:5e:c5:41:e3:09:13:40: 0e:6a:5a:35:b3:cd:d9:96:06:e4:94:9c:6b:5b:34: 85:18:7c:dd:6c:d1:a4:ef:2c:cb:b2:0d:34:9a:56: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CD:70:43:16:E9:9F:5C:23:12:8D:F5:95:0B:70:1C:55:55:23:5E X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:78:43:96:61:40:9c:82:8e:6c:4c:a9:95:b9:a2:a0:6b:20: ec:87:70:41:7e:fa:b4:2f:38:1f:8f:43:73:27:3d:16:31:74: a9:3d:4d:9f:b2:d6:7a:9f:2c:07:fe:bb:c4:e6:67:4f:53:5c: 09:41:f9:74:17:bd:7c:fe:d1:fe:11:d3:3d:cd:ec:5f:6f:8c: 5c:fb:c6:22:3f:1e:54:a1:61:9d:00:0d:35:e7:2d:dd:6d:af: 5a:14:d2:d9:0c:68:1b:d4:2d:db:96:b8:0f:01:d6:5a:16:7e: dc:58:50:87:67:da:3a:ce:e3:f8:2e:26:ce:47:4b:98:df:a9: 73:42:e4:19:7b:0e:f2:b6:eb:86:cb:1e:91:ad:32:e6:24:fc: 33:2d:f8:1f:e4:f9:ee:b0:98:61:f1:5c:ac:9f:b7:69:7e:e2: 1e:a1:ba:ea:93:60:28:6f:73:fc:b5:d8:3c:b5:fe:47:a3:f5: 24:64:72:10:58:27:49:b8:00:fc:1c:5e:80:e8:5c:e6:af:78: 9f:7d:28:7a:a1:fc:d1:e3:17:8a:51:d3:62:00:c4:9a:27:c5: e3:47:3b:d2:52:ef:5f:43:fa:e1:61:29:51:db:14:00:d2:1c: 38:07:a3:dc:b3:5c:ad:ab:14:78:29:d5:ea:e0:7d:4d:d7:d1: e3:cb:d0:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIm6TbBxo4XZEA+7IJ8uC/d8FdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTA4MDYwODM1MzlaFw0yNTA4MDkxNDM3MzlaMDMxMTAvBgNV BAMTKDVEQ0Q3MDQzMTZFOTlGNUMyMzEyOERGNTk1MEI3MDFDNTU1NTIzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKQPyErQySPwo8fxvpWne7C6Y CJ9wr8awz3++rO0XxWd1LxtbvVl/iITezHufsPA3HPdjbx6JIv4OVc5euQ9Ok+Tj v5yFRKp3sPlWj3zX6OP9d5nRoCghZKtihUdB6skUzmP6UzOzCyvZQqKSZu0y7Plb CEj2fcz9W/hzBd/gnJDqldf2ix8BCdamF3IAi2Vplf8fHrcTIVDtFeVZqydTQsil IqYtDDxiOTZtNP0znzHpwRw8HPKawf07iL6AT9brKD7pvs/npyGGWon+eOhx+qSl a8/jLQZtXsVB4wkTQA5qWjWzzdmWBuSUnGtbNIUYfN1s0aTvLMuyDTSaVhdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXc1wQxbpn1wjEo31lQtwHFVVI14wHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV4Q5ZhQJyCjmxMqZW5oqBrIOyHcEF++rQv OB+PQ3MnPRYxdKk9TZ+y1nqfLAf+u8TmZ09TXAlB+XQXvXz+0f4R0z3N7F9vjFz7 xiI/HlShYZ0ADTXnLd1tr1oU0tkMaBvULduWuA8B1loWftxYUIdn2jrO4/guJs5H S5jfqXNC5Bl7DvK264bLHpGtMuYk/DMt+B/k+e6wmGHxXKyft2l+4h6huuqTYChv c/y12Dy1/kej9SRkchBYJ0m4APwcXoDoXOaveJ99KHqh/NHjF4pR02IAxJonxeNH O9JS719D+uFhKVHbFADSHDgHo9yzXK2rFHgp1ergfU3X0ePL0C8= -----END CERTIFICATE-----Generated at Thu Aug 7 07:28:05 2025 by rpki-client