$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: lqRNkrsZARaubA9MvpGRihC60OSVyJHQFIBZ0fc2FRk= Subject key identifier: EB:1A:38:F9:D1:E9:37:38:A7:DB:BE:5A:C1:84:8D:9D:A1:D2:9F:52 Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 439548E0481BA1B23817758BA79AA216C281B5D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: 95 Signing time: Mon 30 Jun 2025 16:20:49 +0000 Manifest this update: Mon 30 Jun 2025 16:15:49 +0000 Manifest next update: Thu 03 Jul 2025 17:47:49 +0000 Files and hashes: 1: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: 3WtExnA9cpYt8tDcqKU+fw2f7oBW/2nFT0ewv7ER7w8=) 2: 3130332e3134362e3138322e302f32332d3234203d3e20313335343635.roa (hash: rkKkgXIJ/CaQspoksB+cH3AXQpHZt3rYAMcNxuF/JI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 17:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:95:48:e0:48:1b:a1:b2:38:17:75:8b:a7:9a:a2:16:c2:81:b5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Jun 30 16:15:49 2025 GMT Not After : Jul 3 17:47:49 2025 GMT Subject: CN=EB1A38F9D1E93738A7DBBE5AC1848D9DA1D29F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:72:f2:15:b4:f1:44:52:5c:4d:c5:9f:d1: af:32:d0:9d:2e:df:22:31:ff:98:a2:c1:f0:f2:04: de:19:9d:8f:2c:5f:cd:58:9a:f0:1b:ed:8c:2a:1e: 64:5d:35:1b:1e:85:df:84:86:f1:68:f9:40:5b:44: a0:e5:c2:a3:c7:b5:38:51:87:fa:d3:94:da:cf:ef: a1:5d:91:9d:fc:76:40:23:e4:fb:b4:45:17:14:ec: 9d:12:3c:36:ed:99:97:1b:34:e7:8a:9f:29:2b:51: d1:13:98:82:8c:fe:b2:cd:d8:fd:34:38:b8:0c:c4: 4a:2e:06:3f:bc:3b:62:0f:84:9e:db:b1:77:b9:43: 03:fa:dd:cb:c0:91:78:8c:1d:60:59:bf:28:fb:f5: 5a:d3:a1:30:ba:f7:72:3e:39:ac:3e:af:dc:db:28: c1:c2:13:df:82:fe:3d:4b:78:24:25:04:6a:ec:7f: 79:1a:0e:89:8b:25:14:cb:95:8b:ba:6c:11:fd:79: b2:29:60:f3:01:a8:8c:e4:27:ce:aa:34:22:20:08: 09:83:fb:db:f3:00:63:a6:40:f9:b1:e1:51:e6:df: a2:00:4c:e5:90:66:24:f8:9d:a3:42:eb:93:0c:bc: 7f:4e:d9:c2:da:6a:80:4a:54:3f:a3:9e:22:6f:59: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1A:38:F9:D1:E9:37:38:A7:DB:BE:5A:C1:84:8D:9D:A1:D2:9F:52 X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c2:57:0b:3e:d1:e3:38:28:98:eb:c3:0b:61:9d:13:94:af: b1:ff:65:bf:d2:7f:6e:65:59:c4:7c:fa:f0:8c:c0:57:e2:9e: 02:0d:e6:fe:cc:06:3c:c7:a5:49:d0:aa:a1:d3:1a:b3:94:ea: c9:34:eb:88:09:0c:3d:c3:e5:f2:d0:b1:68:c2:fc:84:67:5d: aa:62:1e:99:8f:58:45:44:10:88:2e:14:f0:53:45:ed:f7:85: ff:29:5b:bf:63:91:5d:66:24:63:59:9c:66:44:0d:2f:c1:0a: 0e:ff:36:08:5f:08:cc:e6:90:93:70:a5:d4:7b:7f:12:13:da: 08:3f:54:bd:c9:b0:e5:9e:e0:cb:98:a1:b2:c4:f6:f1:70:5e: 66:74:fd:0c:dd:d8:9e:f0:df:ed:4d:16:28:94:06:4b:d4:d9: a6:b8:ba:60:e3:13:75:48:76:b3:02:6d:af:47:fb:3d:89:7a: a4:95:c9:18:4c:a2:9c:0c:95:19:14:40:a4:04:4f:cc:c1:e3: 17:c8:3d:f0:56:ed:7f:62:37:9d:46:2b:86:57:8c:f2:d0:a0: ac:3e:e3:84:81:62:9a:f7:81:eb:d7:f1:b8:88:f6:2c:63:82: 70:c2:58:95:04:19:af:0a:78:66:61:80:9b:c4:ba:3a:0a:fd: 27:3e:0c:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5VI4EgbobI4F3WLp5qiFsKBtdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTA2MzAxNjE1NDlaFw0yNTA3MDMxNzQ3NDlaMDMxMTAvBgNV BAMTKEVCMUEzOEY5RDFFOTM3MzhBN0RCQkU1QUMxODQ4RDlEQTFEMjlGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbHLyFbTxRFJcTcWf0a8y0J0u 3yIx/5iiwfDyBN4ZnY8sX81YmvAb7YwqHmRdNRsehd+EhvFo+UBbRKDlwqPHtThR h/rTlNrP76FdkZ38dkAj5Pu0RRcU7J0SPDbtmZcbNOeKnykrUdETmIKM/rLN2P00 OLgMxEouBj+8O2IPhJ7bsXe5QwP63cvAkXiMHWBZvyj79VrToTC693I+Oaw+r9zb KMHCE9+C/j1LeCQlBGrsf3kaDomLJRTLlYu6bBH9ebIpYPMBqIzkJ86qNCIgCAmD +9vzAGOmQPmx4VHm36IATOWQZiT4naNC65MMvH9O2cLaaoBKVD+jniJvWTitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6xo4+dHpNzin275awYSNnaHSn1IwHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfCVws+0eM4KJjrwwthnROUr7H/Zb/Sf25l WcR8+vCMwFfingIN5v7MBjzHpUnQqqHTGrOU6sk064gJDD3D5fLQsWjC/IRnXapi HpmPWEVEEIguFPBTRe33hf8pW79jkV1mJGNZnGZEDS/BCg7/NghfCMzmkJNwpdR7 fxIT2gg/VL3JsOWe4MuYobLE9vFwXmZ0/Qzd2J7w3+1NFiiUBkvU2aa4umDjE3VI drMCba9H+z2JeqSVyRhMopwMlRkUQKQET8zB4xfIPfBW7X9iN51GK4ZXjPLQoKw+ 44SBYpr3gevX8biI9ixjgnDCWJUEGa8KeGZhgJvEujoK/Sc+DAM= -----END CERTIFICATE-----Generated at Tue Jul 1 16:04:23 2025 by rpki-client