$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: 4uT9/raaFyPT+lx/mgJ/ZIm7WdSYQADP9RalL1zt/f8= Subject key identifier: C3:5F:AC:2B:20:FF:75:D5:67:2F:D4:5E:C5:71:C6:39:85:72:21:34 Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 646B01DCC7AECAE5ECA69D6FC73DF6A28E682F74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: 017D Signing time: Wed 25 Mar 2026 17:22:38 +0000 Manifest this update: Wed 25 Mar 2026 17:17:38 +0000 Manifest next update: Sun 29 Mar 2026 04:09:38 +0000 Files and hashes: 1: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: H1Gb+eiOUICwBUcSb7QWvdT/w9/QaKzCCS+ZZRgMwMs=) 2: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: nwEHa3/WlV/z4/EUCjtnhlcu3D5Y4h6NQPei0E4YMNc=) 3: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: JTYJFzqjRRdjCxhKlg86KCP4U02Ouv8UsoC915C4AYo=) 4: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: 4g7FCyKoIAcKDnKoinVIDZbyk+0ilB+hanJJOS6EiJg=) 5: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: Gg4PjaHJJ2ELmK/kINP16QwFpCzFc3eTiKaJ4v4sLgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6b:01:dc:c7:ae:ca:e5:ec:a6:9d:6f:c7:3d:f6:a2:8e:68:2f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Mar 25 17:17:38 2026 GMT Not After : Mar 29 04:09:38 2026 GMT Subject: CN=C35FAC2B20FF75D5672FD45EC571C63985722134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:80:f1:42:4a:87:1c:b1:98:65:77:8a:9c:f0: 91:33:6f:ae:19:24:fa:fb:b2:d4:8c:42:57:fe:8d: 0b:73:7b:20:d7:a3:63:5a:4f:00:0d:7f:17:09:69: 89:94:98:98:5c:3a:db:06:b2:48:5d:30:77:e7:55: a2:a7:46:7d:07:5f:05:c9:6c:c0:a0:8f:b3:44:a9: 71:83:e4:fa:6e:3b:96:a5:8f:a8:02:67:38:57:60: 13:49:b0:7e:39:59:27:7d:8c:3a:21:5f:3b:ce:53: d8:98:c5:28:b9:d8:b1:86:1b:51:e8:0a:02:40:4d: 8f:c2:34:d5:1a:0e:15:7b:3d:ad:b0:bf:20:0e:23: 15:53:9d:ea:8e:79:1c:66:91:a2:e5:78:6d:ec:1a: bd:ed:e4:15:5c:82:37:a0:15:80:c7:de:89:f8:ca: 1a:21:75:92:e6:11:ce:d0:47:67:de:9b:0f:f5:4c: 50:0c:66:51:ac:dd:4a:fd:87:62:44:bd:24:3d:b6: cf:2f:7b:a0:48:78:56:db:71:ca:75:e7:0a:f8:4c: ea:36:3e:5f:00:9d:85:2e:e8:e3:ef:f9:09:84:03: 20:08:82:23:2c:7c:44:34:d8:5e:23:35:d6:ca:02: 96:63:c5:fb:2d:06:f2:53:4e:da:fa:e3:52:db:52: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5F:AC:2B:20:FF:75:D5:67:2F:D4:5E:C5:71:C6:39:85:72:21:34 X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0c:c6:7b:d2:90:54:6b:52:99:9d:cd:9d:61:be:64:c0:a8: e1:f3:4e:44:a7:51:65:a5:2b:d2:e1:4c:8f:28:9a:9f:54:e4: 95:98:8a:ee:41:ed:47:5c:a4:4a:a5:fc:51:61:bc:27:a8:3d: a2:cf:37:1f:78:b3:d9:e5:95:4c:ac:ab:47:f2:45:ff:6f:12: ae:42:69:0f:62:99:b0:af:25:a7:f5:4f:01:93:84:36:03:41: 25:da:47:6e:80:79:3a:a4:7b:2c:e5:a1:08:eb:94:97:53:3b: be:8d:0c:2c:32:1d:9c:e9:b1:b9:77:f8:11:09:3b:d3:3c:3b: f6:df:9f:9e:a9:bc:ad:17:7e:14:02:4b:d7:29:24:9d:06:13: 27:ff:2f:00:a8:a3:73:4c:4c:11:97:cf:1e:51:29:b5:31:23: 99:68:8b:af:ea:c3:2c:61:b8:99:cb:e3:25:c9:70:59:c0:2d: 81:87:cd:54:85:7c:e9:87:22:e8:e2:f4:2c:fc:b7:41:a6:9f: 80:37:4b:8e:14:0c:69:9e:21:da:d3:52:8d:9a:26:f9:d5:40: 05:91:91:a1:ec:09:2c:b9:80:59:50:12:fa:75:dc:4a:dd:ba: b3:51:15:55:c2:43:e4:2b:05:c8:75:2a:e1:83:b8:c4:0c:b0: 68:8f:9e:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGsB3MeuyuXspp1vxz32oo5oL3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNjAzMjUxNzE3MzhaFw0yNjAzMjkwNDA5MzhaMDMxMTAvBgNV BAMTKEMzNUZBQzJCMjBGRjc1RDU2NzJGRDQ1RUM1NzFDNjM5ODU3MjIxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmgPFCSoccsZhld4qc8JEzb64Z JPr7stSMQlf+jQtzeyDXo2NaTwANfxcJaYmUmJhcOtsGskhdMHfnVaKnRn0HXwXJ bMCgj7NEqXGD5PpuO5alj6gCZzhXYBNJsH45WSd9jDohXzvOU9iYxSi52LGGG1Ho CgJATY/CNNUaDhV7Pa2wvyAOIxVTneqOeRxmkaLleG3sGr3t5BVcgjegFYDH3on4 yhohdZLmEc7QR2femw/1TFAMZlGs3Ur9h2JEvSQ9ts8ve6BIeFbbccp15wr4TOo2 Pl8AnYUu6OPv+QmEAyAIgiMsfEQ02F4jNdbKApZjxfstBvJTTtr641LbUpLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw1+sKyD/ddVnL9RexXHGOYVyITQwHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUMxnvSkFRrUpmdzZ1hvmTAqOHzTkSnUWWl K9LhTI8omp9U5JWYiu5B7UdcpEql/FFhvCeoPaLPNx94s9nllUysq0fyRf9vEq5C aQ9imbCvJaf1TwGThDYDQSXaR26AeTqkeyzloQjrlJdTO76NDCwyHZzpsbl3+BEJ O9M8O/bfn56pvK0XfhQCS9cpJJ0GEyf/LwCoo3NMTBGXzx5RKbUxI5loi6/qwyxh uJnL4yXJcFnALYGHzVSFfOmHIuji9Cz8t0Gmn4A3S44UDGmeIdrTUo2aJvnVQAWR kaHsCSy5gFlQEvp13ErdurNRFVXCQ+QrBch1KuGDuMQMsGiPnls= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:07 2026 by rpki-client