$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: TOPcaF1AuG1hDm9XMkIqf0SXquKcSBqQBaIoJyjHqeI= Subject key identifier: 02:8B:F7:66:BB:17:9A:26:46:D8:53:FA:1E:2C:48:6D:43:E2:29:CD Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 4BDF8EA3A980D78EA2F9405A3BCD5BA13DCDC356 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01B2 Signing time: Fri 08 Aug 2025 01:52:22 +0000 Manifest this update: Fri 08 Aug 2025 01:47:22 +0000 Manifest next update: Mon 11 Aug 2025 10:52:22 +0000 Files and hashes: 1: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: IsUfNXGGb6B2JpK1REITELEe401FAG/0ijHJDoCEoDE=) 2: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: 1ZjwKj5FyNPg7EqZzxjb+MWBzZJK5F12g1ZsYa8Kk1s=) 3: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: BJoL2SiWz0vEdEHz+nAbE9j2Mt14CAg+p/eHzzGogAw=) 4: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: 2M7ym4x+2EoAnsRwKsCD8M2xKS4VnhZ8DePxWflgvZ4=) 5: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: EC4pdeKS6m2DS2kb8wXXQcTFTqrjCCiW8l5re1PpeaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 10:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:df:8e:a3:a9:80:d7:8e:a2:f9:40:5a:3b:cd:5b:a1:3d:cd:c3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Aug 8 01:47:22 2025 GMT Not After : Aug 11 10:52:22 2025 GMT Subject: CN=028BF766BB179A2646D853FA1E2C486D43E229CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:34:d8:23:05:15:06:2e:03:36:09:ab:c8:41: c9:8d:f3:b9:a5:f4:b1:9d:54:f0:98:d1:c7:08:5e: d5:7d:67:bd:fb:5f:d9:9b:e0:66:30:5f:e9:fc:4d: ba:f8:1b:b7:eb:ee:92:6a:af:58:15:c5:ed:91:8e: a6:a4:2b:a5:92:a5:8f:ad:03:1f:a5:f1:67:27:e8: bb:fa:54:12:6e:fa:5c:03:2e:d6:b0:52:81:cf:be: 9d:f1:41:14:e6:74:50:52:aa:90:bb:99:bc:e6:2b: 6c:43:15:4a:29:a6:2f:df:c4:4c:dd:86:2d:f2:41: 79:e6:da:01:c8:55:67:2c:6f:cd:99:dd:23:f6:24: c6:f3:ad:eb:11:03:f4:74:37:fd:c6:44:2a:e8:27: 6c:fa:27:c4:93:32:a8:12:4f:76:40:ac:fe:dd:c3: e7:79:8e:85:14:d3:31:7b:1d:5d:46:9c:79:4f:b0: b9:d3:5d:1f:b4:10:ce:de:73:07:e2:14:2d:4e:b9: 73:d8:f0:80:b6:53:4c:8c:c3:a1:a0:64:8d:5a:f6: 08:20:f4:02:8b:e6:60:51:d1:75:2b:0d:78:d2:2e: 8f:eb:d3:4b:69:4e:8d:36:b9:ec:bc:82:f2:f3:b8: 38:8b:b7:68:38:51:67:2e:41:26:ce:c1:15:1d:05: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8B:F7:66:BB:17:9A:26:46:D8:53:FA:1E:2C:48:6D:43:E2:29:CD X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4e:bd:c2:5c:2e:d0:d0:bd:2d:96:ec:ef:25:b7:59:79:59: 89:f0:24:b3:17:0b:e5:17:1a:28:49:97:ef:a4:90:7b:9a:1f: b4:86:21:c9:47:b1:2a:5c:f6:1f:76:ee:d4:87:50:bc:1b:cc: 6d:c2:11:9a:41:0f:33:49:d1:68:62:16:a8:5c:50:cf:c3:92: aa:05:fe:f3:31:22:2a:0b:41:c9:29:44:96:86:7c:8d:44:f5: b4:96:08:e7:f6:e4:c7:a6:14:32:5d:a1:28:70:7c:9a:71:53: 3d:7e:fe:8f:77:f8:01:4f:44:5a:d6:7f:6d:a1:c6:3e:32:89: 6a:af:09:b3:d4:9b:bf:95:97:18:6d:14:5c:06:6e:a1:d0:8f: 69:88:c3:3e:d6:c9:58:87:c6:4a:f6:82:09:f1:0e:25:1f:a6: 28:7b:42:59:8b:d8:86:d9:52:c4:ac:74:83:a4:ab:bd:8e:7f: f2:ff:1e:c9:dc:4f:17:03:de:60:c6:fb:e2:06:e1:f7:9a:22: 56:0d:89:2e:94:92:d5:4f:1e:d0:00:5f:3e:6f:ea:e4:b0:4e: 3d:ce:26:3c:b4:0b:f9:69:57:0c:d4:53:4e:f3:65:41:e5:a0: 6a:0c:45:a3:54:45:17:7c:67:1a:d5:76:95:2b:2f:b4:07:66: 81:7d:51:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9+Oo6mA146i+UBaO81boT3Nw1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTA4MDgwMTQ3MjJaFw0yNTA4MTExMDUyMjJaMDMxMTAvBgNV BAMTKDAyOEJGNzY2QkIxNzlBMjY0NkQ4NTNGQTFFMkM0ODZENDNFMjI5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnNNgjBRUGLgM2CavIQcmN87ml 9LGdVPCY0ccIXtV9Z737X9mb4GYwX+n8Tbr4G7fr7pJqr1gVxe2RjqakK6WSpY+t Ax+l8Wcn6Lv6VBJu+lwDLtawUoHPvp3xQRTmdFBSqpC7mbzmK2xDFUoppi/fxEzd hi3yQXnm2gHIVWcsb82Z3SP2JMbzresRA/R0N/3GRCroJ2z6J8STMqgST3ZArP7d w+d5joUU0zF7HV1GnHlPsLnTXR+0EM7ecwfiFC1OuXPY8IC2U0yMw6GgZI1a9ggg 9AKL5mBR0XUrDXjSLo/r00tpTo02uey8gvLzuDiLt2g4UWcuQSbOwRUdBXwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAov3ZrsXmiZG2FP6HixIbUPiKc0wHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBOvcJcLtDQvS2W7O8lt1l5WYnwJLMXC+UX GihJl++kkHuaH7SGIclHsSpc9h927tSHULwbzG3CEZpBDzNJ0WhiFqhcUM/DkqoF /vMxIioLQckpRJaGfI1E9bSWCOf25MemFDJdoShwfJpxUz1+/o93+AFPRFrWf22h xj4yiWqvCbPUm7+VlxhtFFwGbqHQj2mIwz7WyViHxkr2ggnxDiUfpih7QlmL2IbZ UsSsdIOkq72Of/L/HsncTxcD3mDG++IG4feaIlYNiS6UktVPHtAAXz5v6uSwTj3O Jjy0C/lpVwzUU07zZUHloGoMRaNURRd8ZxrVdpUrL7QHZoF9Uec= -----END CERTIFICATE-----Generated at Sat Aug 9 20:32:49 2025 by rpki-client