$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: sR5EmX/OW38anLtyCcAfzDjO5RX/zPE9yXN42JgQ4dc= Subject key identifier: 9C:1B:82:A1:11:1D:FD:3E:80:3C:D7:35:CA:3F:A7:EE:F8:74:DA:87 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 4DE94E03BB3289155EA3C8D74E06F96C36297FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 019A Signing time: Sat 14 Jun 2025 19:42:30 +0000 Manifest this update: Sat 14 Jun 2025 19:37:30 +0000 Manifest next update: Tue 17 Jun 2025 22:57:30 +0000 Files and hashes: 1: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: g3pZRs4gusVVx0eBHqNNCNtLdmKkuDsVCXom5ccJqKk=) 2: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: IsUfNXGGb6B2JpK1REITELEe401FAG/0ijHJDoCEoDE=) 3: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: 1ZjwKj5FyNPg7EqZzxjb+MWBzZJK5F12g1ZsYa8Kk1s=) 4: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: 2M7ym4x+2EoAnsRwKsCD8M2xKS4VnhZ8DePxWflgvZ4=) 5: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: EC4pdeKS6m2DS2kb8wXXQcTFTqrjCCiW8l5re1PpeaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e9:4e:03:bb:32:89:15:5e:a3:c8:d7:4e:06:f9:6c:36:29:7f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Jun 14 19:37:30 2025 GMT Not After : Jun 17 22:57:30 2025 GMT Subject: CN=9C1B82A1111DFD3E803CD735CA3FA7EEF874DA87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:2a:11:9f:fe:2c:b3:8f:d2:eb:19:3f:13: 23:59:6b:f1:de:1e:6f:57:cf:67:bf:c6:f6:82:08: 90:fa:34:14:e5:7d:5c:d4:d4:87:3e:9f:a8:d7:91: bd:30:ab:8b:05:f0:ce:0b:6c:c5:fd:b3:4f:02:af: 7c:0a:5f:ab:23:86:65:b3:c6:6d:b0:50:89:00:31: 39:de:87:e6:d8:4b:6c:1d:d2:0d:03:00:9c:b0:ad: c8:2d:4a:53:2f:76:9d:4e:a2:5e:2f:80:ec:8d:ac: 7b:9a:8e:01:07:0a:31:76:37:e6:4a:21:a3:39:f1: 45:67:7e:d7:d7:95:2b:9c:52:db:88:d6:2c:c3:38: 59:c1:22:fa:db:86:6f:a6:04:ed:1b:c6:57:db:60: 30:1c:54:15:21:20:22:31:4c:56:4a:1a:2f:24:9f: 1f:84:aa:67:57:06:36:e2:33:64:16:c7:6b:56:8d: b2:a9:6d:5a:b6:20:6a:ae:10:eb:ac:40:fb:d0:12: c1:f2:ff:49:61:72:ae:69:75:46:f7:86:a6:68:56: 1d:b7:32:38:af:19:29:eb:b5:2b:1a:57:28:d5:98: 4b:e5:a7:d0:3b:e3:c1:52:a7:4a:c9:18:5b:a8:94: 8b:4c:35:d5:a0:b4:c3:c3:91:c9:06:e4:1b:3b:32: a2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1B:82:A1:11:1D:FD:3E:80:3C:D7:35:CA:3F:A7:EE:F8:74:DA:87 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4f:c2:04:0c:d7:6c:d4:f8:f3:44:29:28:55:e2:2e:40:34: b6:14:42:5f:7c:1d:95:57:96:e9:38:0d:28:4e:d3:87:4b:46: 6d:04:7d:c6:f4:26:0d:14:91:de:e7:bd:c7:d7:e2:c8:6c:b6: 49:94:2d:1d:d4:0f:e5:a5:09:38:86:7d:7f:79:71:20:14:7c: da:ba:0f:c0:39:37:7b:3a:69:32:eb:8c:97:9d:0c:72:8e:79: 85:61:d5:f9:d0:5b:60:26:52:f7:b1:d2:2a:27:43:28:3c:a1: 93:c0:2f:ae:7d:e5:6b:ec:92:57:76:67:0a:08:ba:a1:9d:c1: 0a:0e:5f:42:ec:d2:bf:9b:04:2a:75:52:19:ac:fd:63:53:10: ab:8c:82:62:6b:80:5d:56:ac:73:a1:c3:7e:1e:06:26:c5:d0: fe:f9:a4:98:46:8d:42:d6:f4:11:94:90:c2:19:ad:a5:5d:19: 58:4f:c8:19:94:4c:2d:0f:76:35:3a:a5:08:9f:66:10:b3:ac: 07:42:ea:34:11:af:a5:ce:63:e7:17:25:4c:55:7a:ed:45:6a: 1b:44:91:de:04:83:9a:fc:33:6b:ef:5e:ce:42:12:d9:9f:a0: 3f:9f:dd:d0:0c:53:5b:88:af:7e:61:96:dd:30:33:94:8d:97: e2:24:e3:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTelOA7syiRVeo8jXTgb5bDYpf+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTA2MTQxOTM3MzBaFw0yNTA2MTcyMjU3MzBaMDMxMTAvBgNV BAMTKDlDMUI4MkExMTExREZEM0U4MDNDRDczNUNBM0ZBN0VFRjg3NERBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCyoRn/4ss4/S6xk/EyNZa/He Hm9Xz2e/xvaCCJD6NBTlfVzU1Ic+n6jXkb0wq4sF8M4LbMX9s08Cr3wKX6sjhmWz xm2wUIkAMTneh+bYS2wd0g0DAJywrcgtSlMvdp1Ool4vgOyNrHuajgEHCjF2N+ZK IaM58UVnftfXlSucUtuI1izDOFnBIvrbhm+mBO0bxlfbYDAcVBUhICIxTFZKGi8k nx+EqmdXBjbiM2QWx2tWjbKpbVq2IGquEOusQPvQEsHy/0lhcq5pdUb3hqZoVh23 MjivGSnrtSsaVyjVmEvlp9A748FSp0rJGFuolItMNdWgtMPDkckG5Bs7MqLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBuCoREd/T6APNc1yj+n7vh02ocwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpPwgQM12zU+PNEKShV4i5ANLYUQl98HZVX luk4DShO04dLRm0Efcb0Jg0Ukd7nvcfX4shstkmULR3UD+WlCTiGfX95cSAUfNq6 D8A5N3s6aTLrjJedDHKOeYVh1fnQW2AmUvex0ionQyg8oZPAL6595Wvskld2ZwoI uqGdwQoOX0Ls0r+bBCp1Uhms/WNTEKuMgmJrgF1WrHOhw34eBibF0P75pJhGjULW 9BGUkMIZraVdGVhPyBmUTC0PdjU6pQifZhCzrAdC6jQRr6XOY+cXJUxVeu1FahtE kd4Eg5r8M2vvXs5CEtmfoD+f3dAMU1uIr35hlt0wM5SNl+Ik41s= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:50 2025 by rpki-client