$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: 6m+J/rasxzuxQIHwrx2AZVeJVX389pfgrcRJ/tA2L80= Subject key identifier: 82:1C:F4:A0:D1:18:C7:F9:75:21:D2:55:FC:9C:14:52:6E:64:55:7D Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 380D8B2FA0939ECAB922394A44D07CAD340A94D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01B8 Signing time: Fri 22 Aug 2025 04:02:21 +0000 Manifest this update: Fri 22 Aug 2025 03:57:21 +0000 Manifest next update: Mon 25 Aug 2025 15:36:21 +0000 Files and hashes: 1: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: 1ZjwKj5FyNPg7EqZzxjb+MWBzZJK5F12g1ZsYa8Kk1s=) 2: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: H8svyhXzZYSOTql0FXWjuQDfI5up3s0W9bpyLsNds/M=) 3: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: 2M7ym4x+2EoAnsRwKsCD8M2xKS4VnhZ8DePxWflgvZ4=) 4: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: EC4pdeKS6m2DS2kb8wXXQcTFTqrjCCiW8l5re1PpeaY=) 5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: IsUfNXGGb6B2JpK1REITELEe401FAG/0ijHJDoCEoDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0d:8b:2f:a0:93:9e:ca:b9:22:39:4a:44:d0:7c:ad:34:0a:94:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Aug 22 03:57:21 2025 GMT Not After : Aug 25 15:36:21 2025 GMT Subject: CN=821CF4A0D118C7F97521D255FC9C14526E64557D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:0b:05:0c:e2:5b:fa:e0:ed:37:62:af:c1: cd:cd:15:54:0a:cd:ab:70:7a:a0:21:6d:96:1d:e8: 04:16:30:a0:ad:cf:b6:72:7f:38:d9:43:87:e7:0f: 8b:7a:53:60:41:61:7a:8b:ee:11:76:89:8f:ae:fe: 3c:3d:fa:0d:e5:52:6a:9e:a4:35:f0:d8:00:40:9f: 82:c4:5f:ff:80:4b:0a:ab:70:90:fe:e0:cb:62:72: 29:60:99:4f:2b:c4:cc:68:1c:95:2f:4c:e5:68:da: 8a:05:64:6c:c2:6b:79:12:da:8c:94:24:6c:00:54: 37:0f:e4:dd:e9:54:5d:77:f8:a6:31:c6:d8:59:59: ff:fb:95:32:28:45:d7:03:1c:67:61:47:db:cf:d3: 09:be:e0:78:6b:93:a6:d2:b8:3b:30:a2:4c:9d:a2: 1d:10:ef:65:86:90:ce:07:61:ad:8e:51:2a:ba:b6: 8b:4a:a5:6b:10:c6:14:7e:57:cf:1b:69:82:df:fc: 33:bd:f4:8b:3e:45:a3:96:46:3f:47:96:03:65:31: eb:cf:01:17:42:5c:b2:b9:2f:cb:3a:a1:d1:32:69: ea:cf:24:7c:1e:cb:d9:7f:84:d9:e0:87:6b:73:b5: 40:b9:d8:c8:3a:a1:9e:29:c2:97:1d:61:83:42:6d: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:F4:A0:D1:18:C7:F9:75:21:D2:55:FC:9C:14:52:6E:64:55:7D X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c7:20:9f:b7:19:1a:59:9a:90:85:79:5e:53:7f:c9:ee:59: a2:39:43:35:66:54:98:29:39:d2:d9:77:ab:a2:ac:53:de:f2: be:2b:a2:44:a5:97:ba:5f:1b:e3:5c:b9:53:1b:20:c1:27:9e: ac:28:30:3a:8b:9d:f6:91:50:b6:8c:5e:97:f3:4f:b1:aa:2a: 86:ed:cc:a8:26:6f:9f:79:47:15:d8:fa:b8:8a:c2:f6:bd:e9: 79:39:34:5c:c5:96:a3:ab:ab:25:bf:38:bd:8c:b6:e6:57:7a: 8f:9f:2e:24:81:40:f8:bc:e0:45:db:74:18:1a:72:cd:e1:de: 8d:3e:c1:c9:a7:89:2f:3e:c3:eb:2e:43:6f:ee:17:2c:1d:09: f8:76:e8:5d:77:94:c2:09:2c:56:60:eb:f8:f6:31:e9:d5:b3: fb:a8:2b:b0:81:84:f7:c4:60:57:79:b6:b4:90:4b:f6:b2:d1: 0a:b8:ec:f8:dc:93:45:9e:cc:e5:d7:d9:bb:5e:6f:02:aa:e0: d5:e4:eb:2c:7b:da:11:33:52:d2:f4:2b:a6:71:ba:f6:67:dc: 51:47:88:b4:08:89:f2:04:09:12:ca:dd:a0:06:a7:5e:38:2c: 71:4b:86:64:b1:89:2e:8a:74:ad:e7:71:dd:97:92:bd:eb:f4: b0:1e:88:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOA2LL6CTnsq5IjlKRNB8rTQKlNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTA4MjIwMzU3MjFaFw0yNTA4MjUxNTM2MjFaMDMxMTAvBgNV BAMTKDgyMUNGNEEwRDExOEM3Rjk3NTIxRDI1NUZDOUMxNDUyNkU2NDU1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQPwsFDOJb+uDtN2Kvwc3NFVQK zatweqAhbZYd6AQWMKCtz7ZyfzjZQ4fnD4t6U2BBYXqL7hF2iY+u/jw9+g3lUmqe pDXw2ABAn4LEX/+ASwqrcJD+4MticilgmU8rxMxoHJUvTOVo2ooFZGzCa3kS2oyU JGwAVDcP5N3pVF13+KYxxthZWf/7lTIoRdcDHGdhR9vP0wm+4Hhrk6bSuDswokyd oh0Q72WGkM4HYa2OUSq6totKpWsQxhR+V88baYLf/DO99Is+RaOWRj9HlgNlMevP ARdCXLK5L8s6odEyaerPJHwey9l/hNngh2tztUC52Mg6oZ4pwpcdYYNCbe8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghz0oNEYx/l1IdJV/JwUUm5kVX0wHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7HIJ+3GRpZmpCFeV5Tf8nuWaI5QzVmVJgp OdLZd6uirFPe8r4rokSll7pfG+NcuVMbIMEnnqwoMDqLnfaRULaMXpfzT7GqKobt zKgmb595RxXY+riKwva96Xk5NFzFlqOrqyW/OL2MtuZXeo+fLiSBQPi84EXbdBga cs3h3o0+wcmniS8+w+suQ2/uFywdCfh26F13lMIJLFZg6/j2MenVs/uoK7CBhPfE YFd5trSQS/ay0Qq47Pjck0WezOXX2btebwKq4NXk6yx72hEzUtL0K6ZxuvZn3FFH iLQIifIECRLK3aAGp144LHFLhmSxiS6KdK3ncd2Xkr3r9LAeiDk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:15 2025 by rpki-client