$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: wwW0b8KfmNrdv8blX2wUtrs5PxwvFhNHhKU8t5hcm48= Subject key identifier: BF:09:5A:91:15:1F:7B:D4:47:3C:BF:EC:97:12:47:2D:4E:40:81:C3 Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 10EB4A05ED877016BD46704E175875FA8053BA67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: 7E Signing time: Sat 10 May 2025 01:00:49 +0000 Manifest this update: Sat 10 May 2025 00:55:49 +0000 Manifest next update: Tue 13 May 2025 11:01:49 +0000 Files and hashes: 1: 3130332e3134362e3138322e302f32332d3234203d3e20313335343635.roa (hash: rkKkgXIJ/CaQspoksB+cH3AXQpHZt3rYAMcNxuF/JI8=) 2: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: ZwBvsR/xTAFnOyvE1YYhwJUaiHXVdL7C9FDgnDRSQUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 11:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:eb:4a:05:ed:87:70:16:bd:46:70:4e:17:58:75:fa:80:53:ba:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: May 10 00:55:49 2025 GMT Not After : May 13 11:01:49 2025 GMT Subject: CN=BF095A91151F7BD4473CBFEC9712472D4E4081C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:61:95:1e:2a:ba:7b:62:e8:ac:01:49:c3: 25:51:8e:4f:74:61:63:2a:70:c8:e9:45:49:f4:5f: f0:3d:8a:c3:22:42:e4:7f:13:c4:6b:b5:02:09:87: 94:06:1d:2c:bb:8b:7e:2e:39:91:a0:6b:f5:1a:fa: 96:2d:75:f0:14:d7:5b:fd:af:68:d4:c9:97:9b:8e: 85:e0:ce:fc:dc:0b:d7:51:0d:7b:6d:6d:fa:a4:3e: 84:bb:b1:26:3e:8c:00:c6:ed:31:d1:ed:90:0f:2b: 79:02:2f:b8:b4:a3:ba:04:8c:7b:5e:f4:44:54:07: 3f:3e:b9:a6:4c:16:2d:58:56:28:af:aa:e4:9c:79: bf:68:42:54:fb:db:d7:78:07:56:16:3c:5f:6a:65: c3:45:02:c5:41:25:cc:e1:75:e1:5f:17:0b:e3:eb: 5d:e8:e9:fa:5a:62:49:5c:b4:54:5a:1e:4f:86:9e: 6a:21:fa:22:d0:02:72:dd:3c:72:e7:56:00:02:bf: 6a:79:b7:0c:a7:a9:08:07:02:b1:12:37:c4:ef:d5: 40:2e:b3:04:d2:36:bb:39:74:16:cf:3d:2e:79:6b: d1:03:3c:49:93:01:8b:58:a4:63:43:a3:2e:98:0f: 29:4b:b5:c7:56:b0:d5:7b:88:ee:ba:a7:ab:32:d0: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:09:5A:91:15:1F:7B:D4:47:3C:BF:EC:97:12:47:2D:4E:40:81:C3 X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:f0:97:45:17:72:9c:07:13:7d:a0:89:5b:47:c6:a5:90:93: ed:b4:ce:aa:6e:58:1c:4f:f0:c5:51:96:ba:f5:5b:56:26:d8: 2f:b1:85:e7:e3:4b:29:02:6a:c1:6e:9b:84:b4:28:5a:12:af: b4:2a:08:f8:15:d5:b7:4b:59:df:ac:c6:42:a0:ce:da:eb:8d: 1d:6d:9b:21:92:9c:e2:2c:7b:53:48:cb:44:64:ad:a8:52:f7: cf:23:14:30:25:8f:09:23:ac:c4:64:30:77:7b:cd:0c:64:7d: 14:1a:7c:78:be:50:2f:30:29:2a:d7:78:50:f5:94:10:7c:f9: 4d:ca:03:8d:c9:5c:9e:67:7e:e3:de:9e:77:46:99:f1:7f:19: 73:f9:3b:b4:f5:5b:bd:32:da:08:27:a4:63:fa:97:43:6b:74: 76:05:31:70:90:5e:e4:98:06:8f:dd:4e:95:95:e9:82:a6:58: ea:d1:18:6d:d2:f3:64:f7:eb:f7:11:db:a9:3c:d0:5f:8d:5e: c9:d9:07:9c:fc:77:d3:45:72:0c:46:e6:48:70:fa:aa:46:45: 1b:1d:54:7a:fc:ed:31:f0:d3:e3:1c:3c:6b:21:6d:41:e8:26: 96:7a:db:7c:9e:54:34:6d:fc:cf:18:a3:d5:38:87:cd:23:8a: 89:ae:47:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEOtKBe2HcBa9RnBOF1h1+oBTumcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTA1MTAwMDU1NDlaFw0yNTA1MTMxMTAxNDlaMDMxMTAvBgNV BAMTKEJGMDk1QTkxMTUxRjdCRDQ0NzNDQkZFQzk3MTI0NzJENEU0MDgxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgGGVHiq6e2LorAFJwyVRjk90 YWMqcMjpRUn0X/A9isMiQuR/E8RrtQIJh5QGHSy7i34uOZGga/Ua+pYtdfAU11v9 r2jUyZebjoXgzvzcC9dRDXttbfqkPoS7sSY+jADG7THR7ZAPK3kCL7i0o7oEjHte 9ERUBz8+uaZMFi1YViivquSceb9oQlT729d4B1YWPF9qZcNFAsVBJczhdeFfFwvj 613o6fpaYklctFRaHk+Gnmoh+iLQAnLdPHLnVgACv2p5twynqQgHArESN8Tv1UAu swTSNrs5dBbPPS55a9EDPEmTAYtYpGNDoy6YDylLtcdWsNV7iO66p6sy0C21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvwlakRUfe9RHPL/slxJHLU5AgcMwHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOrwl0UXcpwHE32giVtHxqWQk+20zqpuWBxP 8MVRlrr1W1Ym2C+xhefjSykCasFum4S0KFoSr7QqCPgV1bdLWd+sxkKgztrrjR1t myGSnOIse1NIy0RkrahS988jFDAljwkjrMRkMHd7zQxkfRQafHi+UC8wKSrXeFD1 lBB8+U3KA43JXJ5nfuPenndGmfF/GXP5O7T1W70y2ggnpGP6l0NrdHYFMXCQXuSY Bo/dTpWV6YKmWOrRGG3S82T36/cR26k80F+NXsnZB5z8d9NFcgxG5khw+qpGRRsd VHr87THw0+McPGshbUHoJpZ623yeVDRt/M8Yo9U4h80jiomuRzs= -----END CERTIFICATE-----Generated at Mon May 12 05:31:35 2025 by rpki-client