$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: xfeCC/ThJzJ5dMZS2biF6Owt0sRoxTxO4noKH0Qy6Aw= Subject key identifier: 47:6A:34:17:B5:2F:5A:95:4B:7A:D6:4D:4D:36:57:BE:75:B3:A1:F3 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 118D49757016A9986298F08ADAFBFD6DA8018784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 020E Signing time: Sun 01 Mar 2026 21:22:42 +0000 Manifest this update: Sun 01 Mar 2026 21:17:42 +0000 Manifest next update: Thu 05 Mar 2026 00:22:42 +0000 Files and hashes: 1: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: G/71RRa8EF95t4MkW6tSBBr5+iy6FZqWlV//1cR2eKM=) 2: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=) 3: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=) 4: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=) 5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8d:49:75:70:16:a9:98:62:98:f0:8a:da:fb:fd:6d:a8:01:87:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Mar 1 21:17:42 2026 GMT Not After : Mar 5 00:22:42 2026 GMT Subject: CN=476A3417B52F5A954B7AD64D4D3657BE75B3A1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:e0:ea:f1:c2:a6:fa:9c:67:c8:c9:90:a3: 8e:a0:75:e9:9a:7f:48:9b:83:85:5f:a9:84:1f:af: 13:0b:92:f4:65:5e:92:bd:6b:47:e2:76:11:29:de: 93:3c:15:91:90:eb:23:95:44:22:ee:91:58:ac:6f: fa:96:7c:c7:8a:63:65:5b:91:08:d7:af:e0:a6:88: 90:bc:46:11:1b:a7:da:d8:e5:25:e5:f5:43:17:18: 21:fc:65:ff:e8:d6:0a:1a:18:03:77:16:75:9d:1e: d8:20:10:e1:32:d7:c8:f2:66:55:96:fe:3f:5a:73: 7d:86:1e:49:3e:3d:28:57:03:d9:09:f8:57:7d:42: 55:62:9b:24:6e:b3:83:8e:d7:bf:3e:c5:e3:36:63: 3a:f1:0d:0e:31:62:c5:e5:6a:e8:48:12:7d:65:bf: 86:6e:62:3f:c1:8c:b5:8d:81:ff:0b:84:91:60:f5: fc:1f:eb:68:ad:e0:45:22:0d:cd:c6:4b:03:7a:80: a3:bf:12:1d:ba:14:c0:c7:c2:7f:40:dd:77:1f:c2: 51:91:3f:46:85:90:b3:a0:eb:7c:f7:6c:77:a0:24: d1:9b:98:7a:06:4c:ac:ce:02:22:3f:d3:78:1b:52: 59:4c:78:cf:f7:05:60:c9:30:3d:17:d3:98:b6:c6: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6A:34:17:B5:2F:5A:95:4B:7A:D6:4D:4D:36:57:BE:75:B3:A1:F3 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:38:ed:fe:85:00:b2:1d:23:cf:f2:51:6e:0b:41:f9:ab:cd: fa:e5:ca:f6:ee:bb:de:a8:f3:f8:d1:b2:87:e8:e9:13:38:15: ee:95:c7:a6:b4:ad:9a:37:60:23:da:92:de:56:55:6a:67:76: 58:6d:25:aa:97:19:42:df:db:88:3a:74:8c:33:2a:02:8b:32: 01:35:2b:33:0f:80:ce:5e:eb:b4:6e:ac:4f:06:f9:ce:25:5c: e1:41:83:eb:0a:35:c5:0c:c6:67:49:29:c0:55:06:89:d3:07: c5:fa:4a:38:98:9e:2b:36:5a:04:73:f4:86:11:60:d5:bb:36: fc:28:a1:5a:54:59:75:bf:a1:3d:a9:0d:e5:32:52:00:66:3e: 2c:f8:1d:3f:dd:bd:a1:b9:c1:9b:b8:24:2f:59:1d:64:eb:44: 16:c5:f8:c1:e2:1c:97:f2:23:21:c9:61:74:c5:d6:77:77:df: ed:81:91:5b:a8:70:b1:c8:10:ad:1f:22:46:7f:66:4f:07:ba: ef:fb:f7:f3:f0:e9:dd:78:e2:5b:3f:6a:24:4b:55:21:09:b8: 06:32:a8:25:ce:3e:07:6b:5f:36:c1:b4:e1:08:c8:88:12:8d: 1e:34:e4:a4:b3:45:72:c3:f0:42:52:5c:0d:a1:fc:4d:6c:79: 44:a8:d6:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEY1JdXAWqZhimPCK2vv9bagBh4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNjAzMDEyMTE3NDJaFw0yNjAzMDUwMDIyNDJaMDMxMTAvBgNV BAMTKDQ3NkEzNDE3QjUyRjVBOTU0QjdBRDY0RDREMzY1N0JFNzVCM0ExRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/eDq8cKm+pxnyMmQo46gdema f0ibg4VfqYQfrxMLkvRlXpK9a0fidhEp3pM8FZGQ6yOVRCLukVisb/qWfMeKY2Vb kQjXr+CmiJC8RhEbp9rY5SXl9UMXGCH8Zf/o1goaGAN3FnWdHtggEOEy18jyZlWW /j9ac32GHkk+PShXA9kJ+Fd9QlVimyRus4OO178+xeM2YzrxDQ4xYsXlauhIEn1l v4ZuYj/BjLWNgf8LhJFg9fwf62it4EUiDc3GSwN6gKO/Eh26FMDHwn9A3XcfwlGR P0aFkLOg63z3bHegJNGbmHoGTKzOAiI/03gbUllMeM/3BWDJMD0X05i2xmaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2o0F7UvWpVLetZNTTZXvnWzofMwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw47f6FALIdI8/yUW4LQfmrzfrlyvbuu96o 8/jRsofo6RM4Fe6Vx6a0rZo3YCPakt5WVWpndlhtJaqXGULf24g6dIwzKgKLMgE1 KzMPgM5e67RurE8G+c4lXOFBg+sKNcUMxmdJKcBVBonTB8X6SjiYnis2WgRz9IYR YNW7NvwooVpUWXW/oT2pDeUyUgBmPiz4HT/dvaG5wZu4JC9ZHWTrRBbF+MHiHJfy IyHJYXTF1nd33+2BkVuocLHIEK0fIkZ/Zk8Huu/79/Pw6d144ls/aiRLVSEJuAYy qCXOPgdrXzbBtOEIyIgSjR405KSzRXLD8EJSXA2h/E1seUSo1rk= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:58 2026 by rpki-client