$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: USi6NFOEb+2TXAb0B9tbKumBHHYaoodc9s3bIK3fBjE= Subject key identifier: B7:79:85:AB:76:0F:56:98:32:BC:D7:8A:9B:80:0C:9B:9C:90:80:9C Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 2965EB990F321DA34667E4F17B315AB0D280F331 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01DA Signing time: Tue 04 Nov 2025 21:02:21 +0000 Manifest this update: Tue 04 Nov 2025 20:57:21 +0000 Manifest next update: Sat 08 Nov 2025 00:19:21 +0000 Files and hashes: 1: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=) 2: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=) 3: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: tcwCXMWbO+JZGfiW+3weXnPBl0j65IwX6ZGPXymR9e0=) 4: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=) 5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:65:eb:99:0f:32:1d:a3:46:67:e4:f1:7b:31:5a:b0:d2:80:f3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Nov 4 20:57:21 2025 GMT Not After : Nov 8 00:19:21 2025 GMT Subject: CN=B77985AB760F569832BCD78A9B800C9B9C90809C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:a4:33:fa:e3:c8:53:72:64:ed:ce:24:3f: 76:2d:fb:c3:74:0d:4d:8b:61:f7:ed:32:66:b8:88: 05:ba:76:92:c3:f9:15:4d:70:43:0e:74:9b:ce:81: 6c:c7:c8:11:d3:4b:91:ea:48:5e:b1:5d:05:ac:24: f3:f0:2b:0a:dd:9e:26:e3:01:fb:dd:4a:67:4c:4c: b2:e0:a2:c7:31:de:a1:6b:70:46:37:93:11:00:f9: aa:b1:97:7f:b7:9e:d6:a7:4a:74:d9:f3:4f:af:45: bd:65:f5:62:8e:e6:a4:63:bd:83:80:21:38:f7:71: b9:aa:a4:84:ec:1f:4e:f4:dc:da:2f:1f:32:bf:33: b2:be:c6:da:e5:9c:aa:e9:53:d8:ad:4e:04:53:c0: 67:59:47:c5:68:b9:ff:ec:9b:18:e9:a9:58:c0:b1: 0f:44:a7:46:2f:39:84:95:a9:dd:28:0a:8a:e9:12: 8d:cc:69:bf:88:42:08:5a:3c:3e:8a:82:fe:0e:56: 7e:8e:c2:49:23:f3:ac:36:d1:d4:a3:f5:10:8d:1c: c1:3d:76:a9:48:64:41:65:e7:9c:3c:72:e5:fd:4f: 0a:4d:98:fa:2b:53:57:58:8f:d3:02:a6:ad:e5:f7: 72:ec:21:fe:38:cd:06:3b:70:0e:ce:7d:61:4c:b4: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:79:85:AB:76:0F:56:98:32:BC:D7:8A:9B:80:0C:9B:9C:90:80:9C X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e7:26:ed:35:22:90:68:53:74:b1:27:17:89:ef:b5:30:78: 8b:89:90:1e:c9:8e:f1:b5:68:c9:57:99:ff:1d:f2:32:97:32: 4b:56:30:f4:9d:89:ab:74:da:f8:66:91:33:44:3e:db:1e:11: f6:95:d1:03:54:f3:ef:b8:af:62:ff:87:8d:31:fe:ff:a6:f8: 47:67:64:0b:76:89:d1:3b:81:42:c3:73:3f:b3:2a:b0:c3:9e: 35:6b:ee:e2:5f:a7:f4:b0:68:5e:4b:9f:44:d7:15:65:e0:f6: da:30:c4:45:d8:45:f6:87:6d:f2:94:28:2e:46:ce:45:51:39: bb:11:e6:f7:c9:cf:73:90:67:44:1e:05:d3:38:fd:8c:e3:bd: 97:5b:ba:19:6c:cf:2c:7d:ef:c8:17:48:9c:d3:10:40:1b:4c: 7a:26:08:a6:8e:21:18:a6:ca:97:12:02:14:a2:b4:69:94:34: f8:17:10:77:ee:de:95:fc:f0:aa:9a:41:ad:7a:4f:fe:de:37: 5d:aa:2a:f2:d2:18:f9:f2:fc:ca:50:ee:66:28:04:1f:7f:27: 04:1c:f7:45:9d:b0:2f:20:36:cf:54:2d:41:ff:a3:85:bb:57: 2a:56:f8:ae:ec:d0:18:4a:fa:13:7b:6a:36:ec:fa:a7:b3:39: 9f:8a:8b:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWXrmQ8yHaNGZ+TxezFasNKA8zEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTExMDQyMDU3MjFaFw0yNTExMDgwMDE5MjFaMDMxMTAvBgNV BAMTKEI3Nzk4NUFCNzYwRjU2OTgzMkJDRDc4QTlCODAwQzlCOUM5MDgwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7qQz+uPIU3Jk7c4kP3Yt+8N0 DU2LYfftMma4iAW6dpLD+RVNcEMOdJvOgWzHyBHTS5HqSF6xXQWsJPPwKwrdnibj AfvdSmdMTLLgoscx3qFrcEY3kxEA+aqxl3+3ntanSnTZ80+vRb1l9WKO5qRjvYOA ITj3cbmqpITsH0703NovHzK/M7K+xtrlnKrpU9itTgRTwGdZR8Vouf/smxjpqVjA sQ9Ep0YvOYSVqd0oCorpEo3Mab+IQghaPD6Kgv4OVn6Owkkj86w20dSj9RCNHME9 dqlIZEFl55w8cuX9TwpNmPorU1dYj9MCpq3l93LsIf44zQY7cA7OfWFMtAWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3mFq3YPVpgyvNeKm4AMm5yQgJwwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPnJu01IpBoU3SxJxeJ77UweIuJkB7JjvG1 aMlXmf8d8jKXMktWMPSdiat02vhmkTNEPtseEfaV0QNU8++4r2L/h40x/v+m+Edn ZAt2idE7gULDcz+zKrDDnjVr7uJfp/SwaF5Ln0TXFWXg9towxEXYRfaHbfKUKC5G zkVRObsR5vfJz3OQZ0QeBdM4/YzjvZdbuhlszyx978gXSJzTEEAbTHomCKaOIRim ypcSAhSitGmUNPgXEHfu3pX88KqaQa16T/7eN12qKvLSGPny/MpQ7mYoBB9/JwQc 90WdsC8gNs9ULUH/o4W7VypW+K7s0BhK+hN7ajbs+qezOZ+Ki+s= -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:13 2025 by rpki-client