$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: SzL4i+cIlflg5Sy2GrsxYYDUbvdc3DXqggOowlswd48= Subject key identifier: E1:B3:20:0E:B2:13:AC:D3:09:76:8B:F2:20:0C:DB:54:75:30:3A:A4 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 5F2506947492C25DC3FCD5F13538A5ECAC009C77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01A1 Signing time: Mon 30 Jun 2025 03:22:17 +0000 Manifest this update: Mon 30 Jun 2025 03:17:17 +0000 Manifest next update: Thu 03 Jul 2025 10:03:17 +0000 Files and hashes: 1: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: EC4pdeKS6m2DS2kb8wXXQcTFTqrjCCiW8l5re1PpeaY=) 2: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: 1ZjwKj5FyNPg7EqZzxjb+MWBzZJK5F12g1ZsYa8Kk1s=) 3: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: OauKiP+o0RieIXAQbMRGX9Ra4PsYTQ/adTI7OYGm4Ks=) 4: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: IsUfNXGGb6B2JpK1REITELEe401FAG/0ijHJDoCEoDE=) 5: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: 2M7ym4x+2EoAnsRwKsCD8M2xKS4VnhZ8DePxWflgvZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 10:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:25:06:94:74:92:c2:5d:c3:fc:d5:f1:35:38:a5:ec:ac:00:9c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Jun 30 03:17:17 2025 GMT Not After : Jul 3 10:03:17 2025 GMT Subject: CN=E1B3200EB213ACD309768BF2200CDB5475303AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:a6:05:34:5a:a3:ec:cb:0d:68:69:7a:ba: 53:f0:ea:8c:58:cd:c1:e6:30:4b:de:f9:36:5d:42: 82:93:d5:d9:5b:d1:07:30:eb:09:b4:3d:43:11:13: c6:77:a8:0c:e1:81:5e:ac:8d:70:60:bf:62:b8:7d: 44:54:d0:99:ea:d7:2c:0e:8b:10:87:9a:ac:47:a8: 1e:b4:cc:d9:66:03:e6:e9:c5:45:6d:03:c0:71:2b: 96:e1:63:74:29:a6:e0:59:70:f0:5c:20:a0:15:24: 8b:e8:38:97:2b:79:4b:c5:4d:d3:57:53:ec:b4:04: 1e:91:51:b2:58:24:08:3a:ab:13:bc:e1:47:22:54: 4d:55:b0:49:6e:0b:1f:16:92:1a:b0:87:dd:04:9f: e2:6b:34:89:45:db:3c:38:40:06:1c:8d:7a:49:e2: 8a:fc:27:10:7d:2b:b0:92:3b:cb:01:70:da:f8:dc: b8:7d:d3:33:34:07:fb:df:5f:bb:4f:8b:ce:b5:6d: bf:94:40:f2:f5:48:48:a1:b2:d1:3e:1d:13:53:44: a5:cb:a3:0c:5d:9b:e7:c9:c7:74:45:01:dc:7a:bf: 15:b3:97:90:fd:fb:a7:b0:1b:8f:62:ed:1e:7f:bf: bc:af:9f:e3:5e:8c:43:6a:cc:80:b0:3c:fa:f4:d7: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B3:20:0E:B2:13:AC:D3:09:76:8B:F2:20:0C:DB:54:75:30:3A:A4 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5b:64:91:30:6d:87:7f:c1:b6:3b:93:e3:10:4e:51:8b:3a: 84:41:dc:fa:2b:f2:d6:d8:9c:9e:90:7b:eb:e5:b9:24:3f:cd: 90:68:d0:9e:e4:15:18:c1:32:d7:da:f2:db:72:ea:bd:3d:aa: 4e:21:e0:98:15:4a:f9:7f:ed:d9:81:ae:b1:a6:3e:4f:c8:b9: dd:95:14:cb:cf:07:03:5f:ae:b3:c1:21:4b:c9:6f:c7:34:78: 1b:8d:f9:75:67:43:c4:63:0c:03:2d:2a:85:16:cc:24:9e:18: 33:df:d6:1a:79:9c:6f:99:57:05:93:80:99:eb:18:62:5b:9b: af:8a:0c:74:26:85:53:1f:3d:dc:61:21:81:85:4a:e7:7c:61: 94:56:c9:42:74:8c:61:42:41:1c:64:52:f9:f7:42:74:de:82: 30:17:26:c8:08:95:39:5e:03:74:96:64:8b:f9:32:75:f8:bf: b1:6a:0a:ec:26:27:ea:86:19:dd:48:81:99:30:85:c1:7b:ab: 69:b7:82:4f:28:f5:84:78:5a:eb:51:fb:bd:b4:ed:02:c4:35: b7:0b:4e:0c:d2:80:ee:7c:be:1f:5b:e5:5d:e1:3d:70:8c:c0: 92:2b:c9:50:ac:91:a6:21:c3:00:e6:c8:64:17:04:04:c6:98: 2b:3d:f6:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyUGlHSSwl3D/NXxNTil7KwAnHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTA2MzAwMzE3MTdaFw0yNTA3MDMxMDAzMTdaMDMxMTAvBgNV BAMTKEUxQjMyMDBFQjIxM0FDRDMwOTc2OEJGMjIwMENEQjU0NzUzMDNBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSqYFNFqj7MsNaGl6ulPw6oxY zcHmMEve+TZdQoKT1dlb0Qcw6wm0PUMRE8Z3qAzhgV6sjXBgv2K4fURU0Jnq1ywO ixCHmqxHqB60zNlmA+bpxUVtA8BxK5bhY3QppuBZcPBcIKAVJIvoOJcreUvFTdNX U+y0BB6RUbJYJAg6qxO84UciVE1VsEluCx8Wkhqwh90En+JrNIlF2zw4QAYcjXpJ 4or8JxB9K7CSO8sBcNr43Lh90zM0B/vfX7tPi861bb+UQPL1SEihstE+HRNTRKXL owxdm+fJx3RFAdx6vxWzl5D9+6ewG49i7R5/v7yvn+NejENqzICwPPr01/krAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4bMgDrITrNMJdovyIAzbVHUwOqQwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhbZJEwbYd/wbY7k+MQTlGLOoRB3Por8tbY nJ6Qe+vluSQ/zZBo0J7kFRjBMtfa8tty6r09qk4h4JgVSvl/7dmBrrGmPk/Iud2V FMvPBwNfrrPBIUvJb8c0eBuN+XVnQ8RjDAMtKoUWzCSeGDPf1hp5nG+ZVwWTgJnr GGJbm6+KDHQmhVMfPdxhIYGFSud8YZRWyUJ0jGFCQRxkUvn3QnTegjAXJsgIlTle A3SWZIv5MnX4v7FqCuwmJ+qGGd1IgZkwhcF7q2m3gk8o9YR4WutR+7207QLENbcL TgzSgO58vh9b5V3hPXCMwJIryVCskaYhwwDmyGQXBATGmCs99kY= -----END CERTIFICATE-----Generated at Mon Jun 30 07:05:47 2025 by rpki-client