
$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
File: 49CDCA308C289D688C649C2303BECB3ED76B5054.mft (raw, json)
Hash identifier: TUL7XhjURpAYuLT8a8QP01TNF+1vIEdIphqr8B1oKRc=
Subject key identifier: 72:83:AB:87:20:70:B1:5D:00:0C:E8:92:DD:76:54:87:60:10:11:DB
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial: 2B55B34C00FB7FA3873AF9CA2E02431F55FD8B17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
Manifest number: 052A
Signing time: Mon 03 Nov 2025 07:01:11 +0000
Manifest this update: Mon 03 Nov 2025 06:56:11 +0000
Manifest next update: Thu 06 Nov 2025 15:50:11 +0000
Files and hashes: 1: 49CDCA308C289D688C649C2303BECB3ED76B5054.crl (hash: sAfl0h1S61jONo9XaSW51yavP3ZsAO3sMayAOpqgjDw=)
2: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: Ha3WoHQ/zP70el2yWIeTgLkGHqYuIOHL7pH96V5JFfw=)
3: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: gEYK+18FP+7kBMfZJoRXCpV612TXysZxOtU9C0Gw8cc=)
4: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: 38apIlW13UqRkBJC0AvLF1JxLSXx4uzPA7tj9m0g40E=)
5: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: GUJzG7I21c6XIuzE+3MXjSNzND91626bZhTZv88Tj9U=)
6: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: 2ttGNYSIno2YUVrl5iMDUeYoXTM+0/k8iShvnFHSZUg=)
7: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: PNF09SxEelapDmbcZhAv/JlSjlnccRnMVMsb6Vjd5Cs=)
8: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: 6VuJVE5V+cRzw0YC3j26AjnB200tu5ynyJ2PlMkHwdk=)
9: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: 6lzTZpzOtbXaisX77lh3zqfu4RoYr39Ke230rMF+BLA=)
10: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: 6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=)
11: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: lh1ua1Y9ZtE2dDW45ObJ8+6IvX0lmoDB+fa6NG7jmTA=)
12: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: +XaFO38Q9dXCmJ85JQuHQCLrxReLtpZeqTNCnHE/ld8=)
13: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: 04eyxXbv9jngQdgYmmSjLsuCye8qiexJidy0wMhDXkQ=)
14: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: VOPS8e3VH0l6ubQIOcds4q8+0PaehGxHMdByhPPUMRk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 15:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:55:b3:4c:00:fb:7f:a3:87:3a:f9:ca:2e:02:43:1f:55:fd:8b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Validity
Not Before: Nov 3 06:56:11 2025 GMT
Not After : Nov 6 15:50:11 2025 GMT
Subject: CN=7283AB872070B15D000CE892DD765487601011DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8b:59:0c:e6:89:56:3b:dc:0a:38:86:f4:9e:
19:79:0d:e8:eb:5d:2e:4b:e0:2c:d5:9c:03:67:4a:
00:62:0c:9b:0b:aa:fd:8c:b8:7d:a9:9f:18:53:20:
a3:b7:03:86:e5:fb:39:85:b1:45:86:33:be:8a:4e:
ef:32:d8:14:ac:a9:4d:bf:a7:d5:f0:f2:7e:aa:58:
ce:ef:b9:d9:36:74:78:44:b7:72:58:e2:82:ed:a6:
d8:30:be:d5:f3:31:2e:5d:42:b7:12:a3:ab:3d:46:
7c:32:f1:f5:e5:e7:a3:cd:7f:86:cc:37:c9:5f:1b:
a2:8e:42:bc:ce:c7:90:ae:2f:3a:9d:54:10:45:1d:
42:8f:59:87:f1:5c:f9:28:d6:8e:a9:45:83:7f:8c:
2f:87:64:25:8e:0c:33:61:61:84:66:b7:61:07:68:
1f:6c:9a:82:9c:8e:fa:9e:a9:cc:38:3e:1e:f6:84:
9b:97:c6:0b:2c:7f:61:b6:f2:5a:52:67:2d:2a:19:
48:c9:20:79:c9:88:03:78:40:0b:68:fb:ec:fd:67:
44:af:4d:86:a5:7e:f4:26:7d:a0:89:1e:b4:e3:6d:
9f:a6:94:fa:0b:0e:6e:dc:c5:d9:1c:0b:55:bc:61:
45:e2:03:d7:5f:d8:51:ab:23:b3:3e:85:aa:ae:05:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:83:AB:87:20:70:B1:5D:00:0C:E8:92:DD:76:54:87:60:10:11:DB
X509v3 Authority Key Identifier:
keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:60:34:b2:79:5c:2b:18:82:53:e1:57:09:80:3e:b9:f8:ee:
16:26:c7:7d:8b:3b:7d:8b:fb:94:b3:9e:21:36:67:45:2c:73:
88:e3:44:63:18:33:98:0d:4f:de:94:c9:88:5d:43:fb:83:11:
77:4f:da:70:97:8d:ef:27:56:67:cb:5c:1d:1e:f3:a6:1f:d8:
45:9c:b3:66:60:7a:a6:2e:c5:c7:fd:d0:45:71:2b:4f:66:c4:
39:2a:8e:7d:7d:df:78:b8:c3:dd:d2:e0:05:01:cb:36:68:f4:
e7:e0:e9:21:95:4b:7f:4f:46:d4:09:5b:9b:da:f9:05:04:f5:
0d:f1:36:ea:50:d3:41:85:6c:66:13:64:fc:ba:9a:38:84:d0:
ae:32:f8:64:07:7e:76:e8:10:64:cf:5a:18:8f:66:9b:ea:ca:
39:c8:d7:28:4a:d8:9f:3f:b1:20:32:00:db:7f:dd:a5:43:57:
46:0c:b0:40:bc:72:97:9b:5d:c6:10:72:b8:c2:00:be:8f:17:
f8:2e:aa:78:22:51:c3:7a:cb:c2:bb:01:b8:08:da:78:b2:99:
be:c9:b4:82:dd:9a:09:08:6a:32:8a:10:f0:93:32:1e:d4:bb:
d2:46:a3:89:9b:66:6f:c4:e3:d4:0e:8a:df:d0:da:14:b9:bf:
9d:0f:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:10:33 2025 by rpki-client