$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: h4AWAzHWbEMql12UmffPoAUm5RWezW5qecmHULUdjCA= Subject key identifier: E4:9E:67:A5:52:BA:C3:77:70:F9:B3:27:42:EE:0D:75:B3:BD:71:7B Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 413CA129429A3F8EE3185FEA356E6780E39FE8E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 12:12:20 +0000 Manifest this update: Sun 19 Oct 2025 12:07:20 +0000 Manifest next update: Wed 22 Oct 2025 22:35:20 +0000 Files and hashes: 1: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: UkSU3ofAJMwQMSBV8CLkdD+7q/O7V/69EnZpNB0eiWY=) 2: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: OWpJqBDIs4W64qK5qu36+W+2CsuWWE5ltdQ4io1ZJMc=) 3: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: nwEHa3/WlV/z4/EUCjtnhlcu3D5Y4h6NQPei0E4YMNc=) 4: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: osFwS3xf1DonSoJwht99d9Tc2cqBOTGD/HEV1v4fujI=) 5: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: Gg4PjaHJJ2ELmK/kINP16QwFpCzFc3eTiKaJ4v4sLgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3c:a1:29:42:9a:3f:8e:e3:18:5f:ea:35:6e:67:80:e3:9f:e8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Oct 19 12:07:20 2025 GMT Not After : Oct 22 22:35:20 2025 GMT Subject: CN=E49E67A552BAC37770F9B32742EE0D75B3BD717B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:f7:4d:9b:e4:3d:fa:4d:50:77:1d:a8:ec: dd:2b:f9:be:72:01:23:22:a1:f3:aa:c3:98:74:e2: 5b:f9:9f:d8:7b:98:4a:3a:65:68:98:11:e0:69:19: 7e:b6:b8:08:e5:80:1d:e2:e7:60:d4:6d:9b:df:ac: 32:66:99:7d:d7:c5:d2:70:08:a5:c1:d2:f7:e2:ee: 60:fd:42:e9:11:9a:2a:4f:09:87:fc:9b:03:b9:6e: 20:cf:cf:60:3d:2b:de:e3:b2:f7:44:9b:a0:1c:82: bb:77:e6:75:84:9c:f4:58:07:ba:95:3c:75:bd:59: d3:da:90:e1:fd:f8:2a:5c:47:52:32:2b:60:21:da: 19:3b:58:b4:ee:e0:39:89:0a:79:b6:5c:15:42:03: 86:b8:f7:ac:69:c4:b6:da:41:6b:d7:29:c8:4a:73: 76:52:a9:c2:a9:62:76:e7:c0:e7:49:38:cd:a4:93: 08:1c:ac:8f:88:b8:cf:19:7d:92:a0:69:ff:ae:59: df:53:ed:3f:ba:cc:16:08:ed:a3:95:47:04:73:ec: 49:3c:fb:cf:ca:d2:30:06:e7:a3:9d:47:8b:d2:08: 0f:8f:aa:86:e9:15:0a:1a:6b:dd:6b:cf:96:a4:6a: 3e:a6:a1:13:df:47:5a:29:b2:48:33:1b:d4:31:ef: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:67:A5:52:BA:C3:77:70:F9:B3:27:42:EE:0D:75:B3:BD:71:7B X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a3:09:77:28:f0:5d:71:63:4b:d6:5e:f7:09:a0:89:63:dd: 16:9d:41:ec:f0:b2:50:1b:a8:2e:19:4b:ff:7e:f3:21:c7:26: d0:fe:6b:83:1e:7f:85:52:e0:92:86:86:5c:61:db:a6:9b:47: 79:f7:18:5d:66:ad:6c:c7:6e:5d:6e:f0:db:3c:d2:ba:78:89: 76:5d:4a:64:d8:3e:0d:48:ab:fe:41:ce:9d:05:ac:82:92:08: 8f:10:93:bc:0b:47:3a:16:73:ad:3c:8a:8f:27:e1:83:b9:b5: 77:15:28:7a:51:94:e8:de:a8:e2:61:11:29:d4:ba:b2:6f:26: 55:6b:77:88:5c:7e:d6:c6:04:1f:fd:9e:32:b8:92:b5:50:17: 5b:3e:70:f8:15:53:d6:a9:85:76:56:aa:08:d0:c4:f1:b7:b7: af:a6:08:49:b4:fe:33:63:e0:42:92:cb:de:e8:71:97:b1:b9: 76:57:5c:61:cf:41:e5:fb:b7:25:18:58:55:35:fc:da:46:dc: c2:47:04:8f:e2:da:27:ac:10:e4:e9:ab:29:e1:d1:bc:ee:06: f1:61:0a:26:c8:ad:70:00:3b:dc:31:3a:a5:e0:81:df:71:b1: 23:ad:31:a8:de:73:0c:f9:5d:d6:4d:a9:95:c0:7a:88:13:42: f3:93:23:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTyhKUKaP47jGF/qNW5ngOOf6OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNTEwMTkxMjA3MjBaFw0yNTEwMjIyMjM1MjBaMDMxMTAvBgNV BAMTKEU0OUU2N0E1NTJCQUMzNzc3MEY5QjMyNzQyRUUwRDc1QjNCRDcxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/V/dNm+Q9+k1Qdx2o7N0r+b5y ASMiofOqw5h04lv5n9h7mEo6ZWiYEeBpGX62uAjlgB3i52DUbZvfrDJmmX3XxdJw CKXB0vfi7mD9QukRmipPCYf8mwO5biDPz2A9K97jsvdEm6Acgrt35nWEnPRYB7qV PHW9WdPakOH9+CpcR1IyK2Ah2hk7WLTu4DmJCnm2XBVCA4a496xpxLbaQWvXKchK c3ZSqcKpYnbnwOdJOM2kkwgcrI+IuM8ZfZKgaf+uWd9T7T+6zBYI7aOVRwRz7Ek8 +8/K0jAG56OdR4vSCA+PqobpFQoaa91rz5akaj6moRPfR1opskgzG9Qx7xdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5J5npVK6w3dw+bMnQu4NdbO9cXswHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGjCXco8F1xY0vWXvcJoIlj3RadQezwslAb qC4ZS/9+8yHHJtD+a4Mef4VS4JKGhlxh26abR3n3GF1mrWzHbl1u8Ns80rp4iXZd SmTYPg1Iq/5Bzp0FrIKSCI8Qk7wLRzoWc608io8n4YO5tXcVKHpRlOjeqOJhESnU urJvJlVrd4hcftbGBB/9njK4krVQF1s+cPgVU9aphXZWqgjQxPG3t6+mCEm0/jNj 4EKSy97ocZexuXZXXGHPQeX7tyUYWFU1/NpG3MJHBI/i2iesEOTpqynh0bzuBvFh CibIrXAAO9wxOqXggd9xsSOtMajecwz5XdZNqZXAeogTQvOTI2w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:04 2025 by rpki-client