$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: 1iSEeoOAXSNqmMj2znqsqNKMbLdzqg4UglSl/srxdCg= Subject key identifier: 9B:5D:BC:D7:0F:0A:C1:ED:55:44:2E:BA:F3:E0:BC:67:2E:8F:D6:82 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 57CE50D6878441E6BED7C17A03AA06FEE62F5A4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01D3 Signing time: Mon 20 Oct 2025 03:22:20 +0000 Manifest this update: Mon 20 Oct 2025 03:17:20 +0000 Manifest next update: Thu 23 Oct 2025 15:16:20 +0000 Files and hashes: 1: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=) 2: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: zOREGGN4Xc4isgOLxnt8++gtVSGOQFEFbGzEnmCek84=) 3: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=) 4: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=) 5: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ce:50:d6:87:84:41:e6:be:d7:c1:7a:03:aa:06:fe:e6:2f:5a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Oct 20 03:17:20 2025 GMT Not After : Oct 23 15:16:20 2025 GMT Subject: CN=9B5DBCD70F0AC1ED55442EBAF3E0BC672E8FD682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:70:e3:cf:a0:02:c4:b8:73:12:93:8a:63: 62:10:93:60:82:25:39:ed:d2:25:a5:32:d2:14:0b: db:ca:8e:07:38:74:f5:1a:cc:fe:a0:2a:9e:f3:18: 33:08:f8:cf:b9:93:e8:16:fd:56:51:c7:20:9c:6f: 71:5c:4b:72:24:10:da:7e:4f:aa:d9:1e:f7:06:c6: aa:9f:33:db:92:c4:e1:f9:3b:15:ec:f7:21:1f:a0: 93:01:71:d8:f4:8b:59:6b:d5:af:bd:2c:8a:b3:5c: d0:ce:4c:01:df:09:74:1e:6d:79:96:1a:cd:75:30: 47:85:b4:6f:04:39:68:e8:d3:8e:39:7e:e9:46:85: 7e:8e:0a:97:04:01:fe:c5:a6:b4:92:1f:73:1f:64: e2:fa:a6:67:32:51:56:82:3e:06:5b:eb:6d:ac:4f: fc:65:4d:38:cc:59:5f:b8:ce:a6:00:f7:43:b1:59: 8d:84:0c:04:1f:02:1c:3c:7c:2a:13:d0:81:68:3f: ac:7a:8a:4e:79:e1:9a:4f:1d:df:86:74:e6:e2:b4: 25:ff:49:2d:60:77:7d:2e:a1:6c:78:7d:24:01:97: 01:da:9c:aa:be:4c:28:b9:7c:22:fb:88:32:b6:3e: ff:75:7c:9a:a3:c2:92:11:21:4f:a0:fd:76:d1:f9: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5D:BC:D7:0F:0A:C1:ED:55:44:2E:BA:F3:E0:BC:67:2E:8F:D6:82 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8c:e3:27:19:63:02:22:3e:50:59:d7:e9:54:a8:f0:6f:06: a6:3a:f7:b5:15:55:fb:60:95:eb:83:7d:51:bf:64:1e:6a:99: a5:8e:84:df:d2:4d:53:40:c3:bd:8b:52:ae:3b:0b:f5:f5:71: f2:f9:fd:39:54:79:fa:08:ca:b6:ee:7f:e7:5c:a8:9c:f4:3f: b7:1d:43:a6:ae:e9:6b:c8:13:9c:cf:4b:75:7e:40:53:d4:1c: 2f:c6:d8:ab:02:07:56:27:4c:a2:2a:7a:0a:66:e7:e2:64:64: f8:90:6b:28:29:32:17:98:02:d1:df:bc:09:1a:ae:f8:75:35: 07:27:d9:14:a5:93:f5:b3:7d:d4:f4:54:42:3c:8d:6c:67:bf: 62:c3:fe:d9:53:52:fb:17:05:6b:8e:e2:bd:4b:3a:92:58:c4: 59:68:67:b4:04:0a:f3:a7:7e:ef:d4:a9:d3:0a:57:77:f3:fe: 63:ae:0d:80:77:ec:7c:13:b5:4c:bd:d8:52:f0:30:49:56:85: 7c:6e:9b:9d:52:ad:bb:0b:73:fa:d7:f2:99:90:75:b7:d9:43: 94:ee:be:3c:07:55:30:c4:fc:a3:74:75:c1:db:1d:b9:e0:90: 3b:30:0e:08:49:36:b1:99:fd:18:df:d7:f0:0e:a1:ed:78:11: 44:9a:a2:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV85Q1oeEQea+18F6A6oG/uYvWkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTEwMjAwMzE3MjBaFw0yNTEwMjMxNTE2MjBaMDMxMTAvBgNV BAMTKDlCNURCQ0Q3MEYwQUMxRUQ1NTQ0MkVCQUYzRTBCQzY3MkU4RkQ2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSznDjz6ACxLhzEpOKY2IQk2CC JTnt0iWlMtIUC9vKjgc4dPUazP6gKp7zGDMI+M+5k+gW/VZRxyCcb3FcS3IkENp+ T6rZHvcGxqqfM9uSxOH5OxXs9yEfoJMBcdj0i1lr1a+9LIqzXNDOTAHfCXQebXmW Gs11MEeFtG8EOWjo0445fulGhX6OCpcEAf7FprSSH3MfZOL6pmcyUVaCPgZb622s T/xlTTjMWV+4zqYA90OxWY2EDAQfAhw8fCoT0IFoP6x6ik554ZpPHd+GdObitCX/ SS1gd30uoWx4fSQBlwHanKq+TCi5fCL7iDK2Pv91fJqjwpIRIU+g/XbR+aiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1281w8Kwe1VRC668+C8Zy6P1oIwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaM4ycZYwIiPlBZ1+lUqPBvBqY697UVVftg leuDfVG/ZB5qmaWOhN/STVNAw72LUq47C/X1cfL5/TlUefoIyrbuf+dcqJz0P7cd Q6au6WvIE5zPS3V+QFPUHC/G2KsCB1YnTKIqegpm5+JkZPiQaygpMheYAtHfvAka rvh1NQcn2RSlk/WzfdT0VEI8jWxnv2LD/tlTUvsXBWuO4r1LOpJYxFloZ7QECvOn fu/UqdMKV3fz/mOuDYB37HwTtUy92FLwMElWhXxum51SrbsLc/rX8pmQdbfZQ5Tu vjwHVTDE/KN0dcHbHbngkDswDghJNrGZ/Rjf1/AOoe14EUSaolI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:19:43 2025 by rpki-client