$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: Lt1C9WWP3advvorCC8MHFV+ACHsUs+0QiyBliUEdENA= Subject key identifier: 6F:F8:FA:06:8B:CF:D0:5A:89:E3:50:1F:E4:55:15:3B:27:B5:4B:12 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 08608FF9C4E4A26D583F1E6C411AEF91C2B51164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 0219 Signing time: Thu 26 Mar 2026 14:42:39 +0000 Manifest this update: Thu 26 Mar 2026 14:37:39 +0000 Manifest next update: Sun 29 Mar 2026 16:32:39 +0000 Files and hashes: 1: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: sHaFm9mmYwANTPJir2wGh1LgMqahxKWyl8ZzGdh2K44=) 2: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=) 3: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=) 4: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=) 5: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:60:8f:f9:c4:e4:a2:6d:58:3f:1e:6c:41:1a:ef:91:c2:b5:11:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Mar 26 14:37:39 2026 GMT Not After : Mar 29 16:32:39 2026 GMT Subject: CN=6FF8FA068BCFD05A89E3501FE455153B27B54B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:74:c0:ee:a4:64:ff:ce:32:9f:e7:26:5d: 1c:bb:cd:e5:1b:21:3f:37:c6:a4:28:c9:e2:1a:e4: 2a:a1:36:d6:3a:4d:64:2a:24:1f:cd:09:32:26:49: a5:54:a7:15:22:e8:f9:9a:48:0f:e5:f4:e7:91:01: a3:e9:c6:7d:eb:ed:a9:43:9c:43:cb:fb:70:6c:5a: 9e:25:64:ff:4d:4c:e2:8c:13:a4:32:ba:97:16:a1: 06:d3:be:33:e1:3c:dc:78:f9:30:d7:9b:13:1d:b6: dd:4c:08:a0:4a:0f:a9:40:39:4a:b7:a1:10:5a:f7: d6:e7:82:ae:23:20:eb:d4:f2:4a:cf:94:22:8f:e8: e5:a6:1a:8a:01:a1:4a:a6:aa:a5:d4:70:59:3d:79: c5:49:83:00:64:1b:e2:f2:ce:2c:f0:f2:14:12:dd: f3:84:69:52:e1:60:7d:d4:36:db:96:99:fb:c4:ca: ea:fb:9c:18:2b:c7:8e:19:f3:bf:a6:31:0b:14:57: c5:07:a1:f2:7e:e4:cd:0e:59:d1:d9:ff:a6:45:b3: 98:5d:5a:c2:b7:de:de:89:24:3b:51:12:ea:26:91: 66:d4:03:10:aa:07:5b:87:8e:0d:f1:28:e3:0b:00: 88:33:11:72:47:c3:80:e0:27:53:e4:61:cf:3d:4b: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F8:FA:06:8B:CF:D0:5A:89:E3:50:1F:E4:55:15:3B:27:B5:4B:12 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:98:82:e2:a3:1b:67:c4:81:76:6e:a1:e0:a1:b7:25:99:7b: f2:c5:92:06:ac:50:ae:00:06:ee:5f:7a:68:bb:f3:70:43:d6: ab:e4:3f:68:08:80:83:a6:40:38:86:54:0c:49:57:7e:3b:9c: 76:15:49:aa:46:b1:ae:0d:2f:05:c0:c0:9c:e2:4d:be:76:16: ac:22:35:7d:9a:82:b1:ee:85:ed:7b:9d:8e:d9:f3:ab:d9:12: c5:41:53:e6:f0:11:25:01:19:a0:8f:32:a8:63:6b:43:e6:2f: 67:0c:d7:58:44:e3:75:b3:6d:94:a1:04:05:c7:3b:c3:d9:08: 7b:fd:86:45:cd:ce:af:52:f0:47:e1:4a:ef:2f:84:30:cf:f8: 48:f4:61:a1:bd:6e:1e:0a:76:27:9b:92:da:90:cb:db:45:68: a5:27:87:40:cf:dc:ac:38:a8:f0:f9:17:14:8f:d2:f7:8a:c7: 11:79:0d:6e:1c:0f:58:56:52:52:f9:b3:61:08:1b:11:39:af: 72:34:70:b2:ea:d6:57:4d:3c:aa:87:dc:55:b2:c1:d7:ca:e3: 17:72:64:ec:50:04:b8:b8:10:f6:ee:8e:31:ab:61:3b:68:26: 6d:22:2b:67:60:ba:56:32:a1:d6:2a:97:e1:bb:b2:16:17:1d: 5d:b2:f9:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGCP+cTkom1YPx5sQRrvkcK1EWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNjAzMjYxNDM3MzlaFw0yNjAzMjkxNjMyMzlaMDMxMTAvBgNV BAMTKDZGRjhGQTA2OEJDRkQwNUE4OUUzNTAxRkU0NTUxNTNCMjdCNTRCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcHTA7qRk/84yn+cmXRy7zeUb IT83xqQoyeIa5CqhNtY6TWQqJB/NCTImSaVUpxUi6PmaSA/l9OeRAaPpxn3r7alD nEPL+3BsWp4lZP9NTOKME6QyupcWoQbTvjPhPNx4+TDXmxMdtt1MCKBKD6lAOUq3 oRBa99bngq4jIOvU8krPlCKP6OWmGooBoUqmqqXUcFk9ecVJgwBkG+Lyzizw8hQS 3fOEaVLhYH3UNtuWmfvEyur7nBgrx44Z87+mMQsUV8UHofJ+5M0OWdHZ/6ZFs5hd WsK33t6JJDtREuomkWbUAxCqB1uHjg3xKOMLAIgzEXJHw4DgJ1PkYc89S+erAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb/j6BovP0FqJ41Af5FUVOye1SxIwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOYguKjG2fEgXZuoeChtyWZe/LFkgasUK4A Bu5femi783BD1qvkP2gIgIOmQDiGVAxJV347nHYVSapGsa4NLwXAwJziTb52Fqwi NX2agrHuhe17nY7Z86vZEsVBU+bwESUBGaCPMqhja0PmL2cM11hE43WzbZShBAXH O8PZCHv9hkXNzq9S8EfhSu8vhDDP+Ej0YaG9bh4KdiebktqQy9tFaKUnh0DP3Kw4 qPD5FxSP0veKxxF5DW4cD1hWUlL5s2EIGxE5r3I0cLLq1ldNPKqH3FWywdfK4xdy ZOxQBLi4EPbujjGrYTtoJm0iK2dgulYyodYql+G7shYXHV2y+Q0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:04 2026 by rpki-client