$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: +jTRWYTx/56elXbr3uujDD3R6gpSCIOGaHx/pJSA6SU= Subject key identifier: F6:66:3D:10:B7:97:0A:48:B0:3D:0F:32:EB:30:1E:63:18:2C:99:5A Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 1584CFB0D8D159C1275E0124A2995D77F25451C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: 011D Signing time: Thu 21 Aug 2025 16:32:19 +0000 Manifest this update: Thu 21 Aug 2025 16:27:19 +0000 Manifest next update: Mon 25 Aug 2025 02:47:19 +0000 Files and hashes: 1: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: Lj5hsJhJ6JpEgMVCgAZCv/WCLUc9u93VD9xxBcP2FV0=) 2: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: osFwS3xf1DonSoJwht99d9Tc2cqBOTGD/HEV1v4fujI=) 3: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: 2deZljQHRC+27lOtPHeNXwE5AsA5ouy4hMQ4YZL8z3c=) 4: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: UkSU3ofAJMwQMSBV8CLkdD+7q/O7V/69EnZpNB0eiWY=) 5: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: eQwZ0HpEaRU5AO86abCZFFKH0HF0iLl7VUx7NHne24s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:84:cf:b0:d8:d1:59:c1:27:5e:01:24:a2:99:5d:77:f2:54:51:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Aug 21 16:27:19 2025 GMT Not After : Aug 25 02:47:19 2025 GMT Subject: CN=F6663D10B7970A48B03D0F32EB301E63182C995A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:6a:60:6d:42:45:77:18:cf:4c:88:fd:6f: 1a:36:d8:40:25:f0:b0:43:6a:22:d0:b3:9f:f8:72: 14:73:f6:81:0b:05:51:9d:0a:c3:90:13:01:dc:06: ad:88:74:c6:7c:21:d5:77:89:47:50:45:9b:79:40: ee:eb:45:fb:5d:4d:27:9e:2e:bf:43:8b:78:a7:cf: e0:88:26:61:ad:96:ed:67:31:be:a7:bf:94:0e:f2: 89:12:31:23:bd:df:39:b1:15:3e:42:bf:d5:83:1a: 65:32:81:e3:0d:94:c1:57:fc:2c:f8:d5:e6:6b:ae: ee:ae:31:cf:fa:f4:5c:3b:4a:27:1c:28:23:73:4c: 5e:2f:9a:4f:d1:0c:9b:53:2a:30:ac:c8:50:bc:f1: 8a:f0:ec:14:2e:0a:d9:71:8b:a6:55:9c:fb:3f:a1: 9d:08:44:d7:05:de:7f:bc:4f:e6:55:d2:81:18:04: e0:4f:90:1a:7e:60:6b:ed:79:20:3e:9c:7c:2e:62: a0:92:2c:d6:00:a5:e5:46:81:ef:f8:19:5f:2a:c8: 4f:6c:61:a4:ef:21:53:10:0e:d0:17:4c:0b:af:ed: c7:58:58:54:f0:bf:fe:8b:c9:f5:47:d1:ae:fe:79: 4b:fa:a5:69:c4:82:e4:a6:a6:ba:d3:a3:eb:e2:f9: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:66:3D:10:B7:97:0A:48:B0:3D:0F:32:EB:30:1E:63:18:2C:99:5A X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b0:17:cd:b5:ac:b5:78:14:3a:06:97:bf:62:38:1f:7c:a4: ba:2c:76:6e:6f:b2:fd:ec:95:85:22:75:8a:18:0e:6d:25:e1: 7d:3a:ac:43:3b:37:65:07:ba:22:c7:01:e9:80:df:d0:77:e0: d7:8f:6e:d1:34:65:1c:f4:a1:2f:da:58:31:dd:51:a3:29:f9: 31:62:75:44:0e:06:71:20:56:f0:13:bf:d3:b6:b9:ca:10:ba: f4:7f:02:f8:f8:b3:bd:86:9c:5a:4f:ba:fa:8f:29:3c:92:ad: ae:fa:4c:c7:d6:61:2c:1d:7f:65:a8:08:70:4f:b0:46:75:18: 3a:d0:e8:33:f3:45:50:02:b6:ed:92:3e:17:06:d1:28:8d:33: ac:4b:47:9c:42:ce:43:55:f3:ad:25:6d:dd:b4:69:43:fb:27: 71:20:08:9e:ba:72:ad:57:5d:f3:76:69:83:7d:6d:92:63:74: 8c:71:ca:21:28:3e:35:0c:b6:96:07:26:cd:eb:f8:f2:4e:40: 2b:40:03:e7:00:e9:17:72:a6:71:36:79:20:43:06:a4:7e:ac: 1a:21:83:2e:2c:af:9b:6c:d5:f4:63:2e:b4:1a:ff:78:fa:83: 27:5e:52:61:95:3d:d9:2c:60:97:72:4a:66:3a:bb:79:17:8f: 37:67:f3:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYTPsNjRWcEnXgEkopldd/JUUcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNTA4MjExNjI3MTlaFw0yNTA4MjUwMjQ3MTlaMDMxMTAvBgNV BAMTKEY2NjYzRDEwQjc5NzBBNDhCMDNEMEYzMkVCMzAxRTYzMTgyQzk5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaGpgbUJFdxjPTIj9bxo22EAl 8LBDaiLQs5/4chRz9oELBVGdCsOQEwHcBq2IdMZ8IdV3iUdQRZt5QO7rRftdTSee Lr9Di3inz+CIJmGtlu1nMb6nv5QO8okSMSO93zmxFT5Cv9WDGmUygeMNlMFX/Cz4 1eZrru6uMc/69Fw7SiccKCNzTF4vmk/RDJtTKjCsyFC88Yrw7BQuCtlxi6ZVnPs/ oZ0IRNcF3n+8T+ZV0oEYBOBPkBp+YGvteSA+nHwuYqCSLNYApeVGge/4GV8qyE9s YaTvIVMQDtAXTAuv7cdYWFTwv/6LyfVH0a7+eUv6pWnEguSmprrTo+vi+a4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mY9ELeXCkiwPQ8y6zAeYxgsmVowHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiwF821rLV4FDoGl79iOB98pLosdm5vsv3s lYUidYoYDm0l4X06rEM7N2UHuiLHAemA39B34NePbtE0ZRz0oS/aWDHdUaMp+TFi dUQOBnEgVvATv9O2ucoQuvR/Avj4s72GnFpPuvqPKTySra76TMfWYSwdf2WoCHBP sEZ1GDrQ6DPzRVACtu2SPhcG0SiNM6xLR5xCzkNV860lbd20aUP7J3EgCJ66cq1X XfN2aYN9bZJjdIxxyiEoPjUMtpYHJs3r+PJOQCtAA+cA6RdypnE2eSBDBqR+rBoh gy4sr5ts1fRjLrQa/3j6gydeUmGVPdksYJdySmY6u3kXjzdn83g= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:35 2025 by rpki-client