$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: T5Gk025bHkipMH7SrFtLE37LdXq4DpDphymLi2nQO2A= Subject key identifier: 8B:C6:15:8A:20:47:7B:8F:8D:88:7B:99:F7:35:24:FF:F3:6E:2F:03 Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 73419EBE38BEFE46C739C8C87312EB8D9B6AB9E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 020A Signing time: Thu 21 Aug 2025 16:50:40 +0000 Manifest this update: Thu 21 Aug 2025 16:45:40 +0000 Manifest next update: Sun 24 Aug 2025 17:23:40 +0000 Files and hashes: 1: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) 2: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) 3: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: IbUfhV9/MfqMoOnl5OswKMd2Xh8pmshiPt7vRd2yaxw=) 4: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:41:9e:be:38:be:fe:46:c7:39:c8:c8:73:12:eb:8d:9b:6a:b9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Aug 21 16:45:40 2025 GMT Not After : Aug 24 17:23:40 2025 GMT Subject: CN=8BC6158A20477B8F8D887B99F73524FFF36E2F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:d3:a5:dc:bd:47:ce:1a:74:c3:c3:34:fb: cb:61:1e:17:db:6f:b4:e0:a0:5a:88:c0:8e:d5:29: 3e:87:ed:d3:c1:c2:01:73:a2:8b:0f:e4:17:3f:b6: f3:8e:ad:a8:b7:81:a6:53:45:78:9c:01:3a:cb:be: 19:53:6d:9e:13:5b:63:26:75:18:c1:98:40:f0:dc: dd:0f:90:75:8b:3b:dd:ed:76:99:0d:d0:ca:cd:f1: b8:4e:68:ce:3e:e9:2f:c7:d1:c1:7a:be:2f:69:f7: c9:4e:85:60:5b:e7:a0:1e:de:26:c5:96:0e:9b:bf: 72:e4:cc:15:d5:9a:6a:34:eb:f0:b4:f3:e6:43:eb: c8:2e:4b:50:b6:78:68:85:22:1b:a4:1a:ff:e7:2b: 84:2c:73:2c:39:e5:36:ef:84:f7:02:53:14:d9:b8: 77:fd:8e:1f:82:7d:f0:d1:ba:11:4e:f4:6b:1e:94: 91:9a:a5:1d:d1:8b:98:e3:46:7d:2a:b3:d8:ec:51: 91:61:09:e1:46:f0:b1:42:c9:b0:b4:30:a2:e0:b0: 66:32:c9:89:ae:d6:2c:d4:a9:d8:34:b9:c8:a0:68: 59:79:89:b1:38:60:a0:72:1d:78:a6:6f:f3:89:2c: 2e:e2:a7:1c:97:52:62:af:2d:9d:d9:24:b2:15:3e: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C6:15:8A:20:47:7B:8F:8D:88:7B:99:F7:35:24:FF:F3:6E:2F:03 X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0f:b5:a8:8d:38:fb:e6:9c:f3:11:e2:24:1b:55:d5:64:07: f5:b6:9b:3f:56:77:6b:6d:e3:cb:b1:96:09:c0:07:09:63:47: 59:43:19:5e:d5:20:9c:ad:94:2b:a8:b6:c8:ad:71:03:23:6c: 48:f6:69:78:db:ac:9f:b1:c1:ed:49:c5:54:5d:7d:6e:ec:1b: 49:73:44:db:f2:93:ce:ef:97:b5:4c:ab:ea:cd:96:f7:8f:b0: 5d:27:f6:0c:92:c7:27:16:d6:08:ad:9a:fd:77:fc:57:d5:67: d4:0c:53:14:7f:f7:80:91:76:96:5c:e9:19:c4:f9:8d:ef:bd: 26:da:4b:4b:4c:cf:27:26:ad:a1:30:13:c8:fd:ab:6a:27:c9: c6:b7:39:db:e4:f9:db:38:c5:3f:10:0f:1f:92:45:55:a0:dd: eb:64:49:5c:20:5d:c5:a1:1c:6e:02:77:af:2d:95:18:cb:5a: 13:40:64:d1:6f:a7:32:d3:b4:36:34:f8:5f:0e:67:eb:5e:54: e4:5c:a3:92:0e:60:8c:eb:9b:68:e0:fa:00:fe:b6:03:0c:30: 4e:70:84:f3:a5:2f:a3:a7:e8:c9:d0:91:b1:ae:79:a1:01:bd: 34:13:39:79:53:16:90:d9:c4:ce:80:46:2e:fc:71:7a:b6:48: 59:54:ad:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0Gevji+/kbHOcjIcxLrjZtquegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTA4MjExNjQ1NDBaFw0yNTA4MjQxNzIzNDBaMDMxMTAvBgNV BAMTKDhCQzYxNThBMjA0NzdCOEY4RDg4N0I5OUY3MzUyNEZGRjM2RTJGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIONOl3L1Hzhp0w8M0+8thHhfb b7TgoFqIwI7VKT6H7dPBwgFzoosP5Bc/tvOOrai3gaZTRXicATrLvhlTbZ4TW2Mm dRjBmEDw3N0PkHWLO93tdpkN0MrN8bhOaM4+6S/H0cF6vi9p98lOhWBb56Ae3ibF lg6bv3LkzBXVmmo06/C08+ZD68guS1C2eGiFIhukGv/nK4Qscyw55TbvhPcCUxTZ uHf9jh+CffDRuhFO9GselJGapR3Ri5jjRn0qs9jsUZFhCeFG8LFCybC0MKLgsGYy yYmu1izUqdg0ucigaFl5ibE4YKByHXimb/OJLC7ipxyXUmKvLZ3ZJLIVPp19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8YViiBHe4+NiHuZ9zUk//NuLwMwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUPtaiNOPvmnPMR4iQbVdVkB/W2mz9Wd2tt 48uxlgnABwljR1lDGV7VIJytlCuotsitcQMjbEj2aXjbrJ+xwe1JxVRdfW7sG0lz RNvyk87vl7VMq+rNlvePsF0n9gySxycW1gitmv13/FfVZ9QMUxR/94CRdpZc6RnE +Y3vvSbaS0tMzycmraEwE8j9q2onyca3Odvk+ds4xT8QDx+SRVWg3etkSVwgXcWh HG4Cd68tlRjLWhNAZNFvpzLTtDY0+F8OZ+teVORco5IOYIzrm2jg+gD+tgMMME5w hPOlL6On6MnQkbGueaEBvTQTOXlTFpDZxM6ARi78cXq2SFlUrT8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:20 2025 by rpki-client