$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: 2XHuK9bLMsUA2YA4JA+8m9rbx5Rg14Lq5UoOnTZ6b28= Subject key identifier: 4A:E3:57:86:7F:AD:8F:1F:27:0A:E8:C8:1B:98:E3:DD:08:BC:96:72 Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 22B40ED59C97A20EB22D0C92D1CD0E485C9F211C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: C9 Signing time: Sun 19 Oct 2025 01:50:51 +0000 Manifest this update: Sun 19 Oct 2025 01:45:51 +0000 Manifest next update: Wed 22 Oct 2025 10:13:51 +0000 Files and hashes: 1: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww=) 2: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw=) 3: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: EwLAG3BmNlYcYxk8W+n26HDAiHhjV1Zj9j1rn3P8KLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b4:0e:d5:9c:97:a2:0e:b2:2d:0c:92:d1:cd:0e:48:5c:9f:21:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Oct 19 01:45:51 2025 GMT Not After : Oct 22 10:13:51 2025 GMT Subject: CN=4AE357867FAD8F1F270AE8C81B98E3DD08BC9672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:e1:01:c2:22:84:55:77:81:a8:af:77:68: ff:95:2b:86:89:3d:ab:20:e2:12:ed:9b:9f:47:10: d8:79:32:27:87:33:61:c8:b2:11:d8:a0:ca:40:bc: af:dc:ef:80:9a:dc:ac:55:dd:6c:ea:8d:be:ca:b9: 6f:bf:f2:ea:d0:e8:04:3a:a0:b5:9d:12:c8:08:66: 02:d8:1c:57:d2:e0:30:95:cd:32:11:75:e1:0f:b3: ad:c0:55:77:5a:c6:13:e1:57:3c:c9:0f:82:2e:b5: b3:9f:9c:73:08:3c:e3:3e:9b:4e:63:e6:46:7b:b3: f6:5e:b0:81:b2:eb:7d:8c:37:fd:f7:c7:98:cf:70: ba:5f:6d:3d:29:4d:45:3d:01:19:d7:b6:00:e2:27: 97:d6:ca:63:c4:40:3b:d2:7d:7c:4b:87:73:21:80: 35:76:c4:f2:bb:34:54:31:0a:ad:06:5f:ac:43:73: b9:85:e6:95:25:84:ce:37:47:78:4e:58:7f:d9:a1: b9:1e:69:c1:56:ef:e2:ec:62:99:58:26:7d:c4:6b: 79:4e:73:63:a8:db:d4:d7:61:a8:a4:ad:b2:47:76: a6:ee:22:bc:75:b1:71:3a:ef:5c:38:37:96:59:dc: 10:dd:dd:10:d6:46:c3:e3:2f:19:71:a8:99:9e:fb: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E3:57:86:7F:AD:8F:1F:27:0A:E8:C8:1B:98:E3:DD:08:BC:96:72 X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:78:27:f3:9a:0a:49:76:70:e3:ea:a4:74:26:31:9c:27:f8: c1:db:07:cb:ed:b0:56:ed:7e:a8:e8:e3:e3:d0:16:91:fb:50: d4:12:03:fb:2c:d4:97:e2:2e:a3:1b:ae:4d:e4:6c:db:4b:03: c1:30:aa:bf:49:23:c4:4c:a7:90:2f:3a:bb:ce:42:c8:6a:48: 90:71:a6:18:a1:64:57:bc:6c:cd:4c:37:d7:58:2d:2d:40:6e: c9:c3:0d:d9:b4:0a:55:14:f8:9a:b0:6a:df:a6:b9:b1:b1:5e: ad:49:82:fc:0f:ad:17:f0:f5:07:13:ac:da:55:b4:44:1a:56: 0b:41:06:d5:d4:47:9f:0e:b7:9f:dd:18:38:ef:3b:38:54:03: 18:bf:6b:46:07:71:47:90:ad:1f:07:59:38:ca:97:06:a8:9a: de:92:dd:c8:b9:8e:b9:8a:13:64:c4:b4:35:f3:b7:ef:97:07: a5:b5:99:91:fc:f4:36:c5:7d:f5:ae:f2:28:88:77:f4:53:5b: e3:23:74:23:38:c1:e1:4d:3d:bd:b8:db:56:34:eb:83:9c:fe: 58:8a:56:1d:9e:95:79:65:e3:45:7c:75:d1:e3:aa:18:91:96: ba:e7:b7:96:45:c9:0a:7a:51:19:d0:3d:75:ab:50:2f:e0:24: 4b:ae:f0:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrQO1ZyXog6yLQyS0c0OSFyfIRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTEwMTkwMTQ1NTFaFw0yNTEwMjIxMDEzNTFaMDMxMTAvBgNV BAMTKDRBRTM1Nzg2N0ZBRDhGMUYyNzBBRThDODFCOThFM0REMDhCQzk2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDOEBwiKEVXeBqK93aP+VK4aJ Pasg4hLtm59HENh5MieHM2HIshHYoMpAvK/c74Ca3KxV3Wzqjb7KuW+/8urQ6AQ6 oLWdEsgIZgLYHFfS4DCVzTIRdeEPs63AVXdaxhPhVzzJD4IutbOfnHMIPOM+m05j 5kZ7s/ZesIGy632MN/33x5jPcLpfbT0pTUU9ARnXtgDiJ5fWymPEQDvSfXxLh3Mh gDV2xPK7NFQxCq0GX6xDc7mF5pUlhM43R3hOWH/ZobkeacFW7+LsYplYJn3Ea3lO c2Oo29TXYaikrbJHdqbuIrx1sXE671w4N5ZZ3BDd3RDWRsPjLxlxqJme+3HFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSuNXhn+tjx8nCujIG5jj3Qi8lnIwHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp4J/OaCkl2cOPqpHQmMZwn+MHbB8vtsFbt fqjo4+PQFpH7UNQSA/ss1JfiLqMbrk3kbNtLA8Ewqr9JI8RMp5AvOrvOQshqSJBx phihZFe8bM1MN9dYLS1AbsnDDdm0ClUU+Jqwat+mubGxXq1JgvwPrRfw9QcTrNpV tEQaVgtBBtXUR58Ot5/dGDjvOzhUAxi/a0YHcUeQrR8HWTjKlwaomt6S3ci5jrmK E2TEtDXzt++XB6W1mZH89DbFffWu8iiId/RTW+MjdCM4weFNPb2421Y064Oc/liK Vh2elXll40V8ddHjqhiRlrrnt5ZFyQp6URnQPXWrUC/gJEuu8MA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:35 2025 by rpki-client