$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft File: 49CDCA308C289D688C649C2303BECB3ED76B5054.mft (raw, json) Hash identifier: yyj728ZIqMe9vTVO1yvP/EhqsJy0YHg9C+AjTpYEIh4= Subject key identifier: CD:0C:E0:D9:77:DC:CC:7E:01:44:95:24:A3:79:A4:BD:1A:93:6E:0A Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Certificate serial: 428B95ABD07517B4039E65F3D7DE472D23C9A573 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft Manifest number: 0523 Signing time: Sun 19 Oct 2025 00:01:12 +0000 Manifest this update: Sat 18 Oct 2025 23:56:12 +0000 Manifest next update: Wed 22 Oct 2025 00:28:12 +0000 Files and hashes: 1: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: 6VuJVE5V+cRzw0YC3j26AjnB200tu5ynyJ2PlMkHwdk=) 2: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: lh1ua1Y9ZtE2dDW45ObJ8+6IvX0lmoDB+fa6NG7jmTA=) 3: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: 38apIlW13UqRkBJC0AvLF1JxLSXx4uzPA7tj9m0g40E=) 4: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: PNF09SxEelapDmbcZhAv/JlSjlnccRnMVMsb6Vjd5Cs=) 5: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: 04eyxXbv9jngQdgYmmSjLsuCye8qiexJidy0wMhDXkQ=) 6: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: gEYK+18FP+7kBMfZJoRXCpV612TXysZxOtU9C0Gw8cc=) 7: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: 6lzTZpzOtbXaisX77lh3zqfu4RoYr39Ke230rMF+BLA=) 8: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: VOPS8e3VH0l6ubQIOcds4q8+0PaehGxHMdByhPPUMRk=) 9: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: 2ttGNYSIno2YUVrl5iMDUeYoXTM+0/k8iShvnFHSZUg=) 10: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: 6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=) 11: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: Ha3WoHQ/zP70el2yWIeTgLkGHqYuIOHL7pH96V5JFfw=) 12: 49CDCA308C289D688C649C2303BECB3ED76B5054.crl (hash: lsPsV+SOS9dfI2Zp/jM54+EErUW3jbzRPCQ5kZfcWA0=) 13: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: +XaFO38Q9dXCmJ85JQuHQCLrxReLtpZeqTNCnHE/ld8=) 14: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: GUJzG7I21c6XIuzE+3MXjSNzND91626bZhTZv88Tj9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8b:95:ab:d0:75:17:b4:03:9e:65:f3:d7:de:47:2d:23:c9:a5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Validity Not Before: Oct 18 23:56:12 2025 GMT Not After : Oct 22 00:28:12 2025 GMT Subject: CN=CD0CE0D977DCCC7E01449524A379A4BD1A936E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:96:9a:40:25:f6:a2:c8:7a:cf:c7:69:22: 3f:fd:6d:4f:a4:b0:a8:f9:da:b3:0f:eb:66:e8:94: f8:bc:d8:12:b7:d9:3c:0b:ec:88:79:ab:23:f3:cf: 08:24:16:a3:a7:90:44:db:c3:bc:89:85:82:45:f7: 5b:0d:be:e8:b7:30:90:30:23:34:7d:05:46:ec:65: 3b:2b:bc:0e:ad:6a:22:39:4d:e8:22:25:21:da:8d: a2:0b:d4:99:ea:0c:d6:f2:e5:9e:54:14:b5:69:a2: 37:3e:a1:eb:42:08:9d:10:cf:03:ae:a8:67:02:e4: 43:7a:99:c4:ae:d1:17:87:1d:3a:22:7d:9e:46:64: ec:8f:53:1a:e0:53:cf:7d:56:2e:7b:c4:1c:c6:8f: c5:85:1c:64:89:47:ea:b4:8b:40:73:12:42:67:c1: b2:9b:55:dd:52:a6:c5:77:33:6a:65:8a:06:65:f5: a1:ad:cb:74:74:74:e5:fe:88:c0:f7:7d:b2:9b:26: df:d7:3a:2c:ff:09:5b:7b:f4:9c:bc:bc:73:42:de: 51:d4:f6:cf:ee:51:f1:5a:11:c5:38:84:fb:a2:03: a5:fe:80:a2:0f:df:19:02:a6:33:62:15:cf:b3:c2: 27:7c:f8:59:6f:86:71:61:30:6e:04:62:ab:e5:2a: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0C:E0:D9:77:DC:CC:7E:01:44:95:24:A3:79:A4:BD:1A:93:6E:0A X509v3 Authority Key Identifier: keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:35:e0:10:51:90:d6:56:0d:9a:3c:55:a6:cd:42:38:0b:c4: 04:b4:e2:3b:84:50:cc:71:7e:88:d2:b2:a1:e5:76:a1:f6:6c: 92:08:49:1f:dd:56:66:27:bf:39:8e:24:ee:fe:fd:9f:bb:35: bf:2c:b0:34:67:a9:26:e0:26:2b:63:6b:fb:81:6e:e5:b4:4b: b6:e6:f4:4a:11:68:49:c3:0e:e3:43:21:35:58:e8:40:08:05: 10:f9:fd:90:ea:e0:d2:e5:fe:5f:7e:75:97:d8:58:fd:d3:0b: 7f:19:2f:f1:c3:ab:36:a2:b1:be:14:a5:43:08:dc:3a:1f:ec: fa:16:62:c5:61:78:22:dd:41:83:82:ab:41:c9:87:c3:79:db: 23:fa:a4:6f:97:46:3b:62:75:eb:57:1e:de:a4:4d:9b:e5:23: fe:75:4b:d0:c4:b4:32:a2:ef:d0:64:8c:40:76:d2:8e:94:74: 5a:c1:f0:0d:c1:81:41:fc:d1:7e:d6:82:ec:ed:fe:fb:21:8c: cc:83:33:71:8d:05:36:84:89:cc:8b:ee:af:b6:fe:85:33:8e: c8:39:3d:e7:54:92:0d:4a:af:aa:f3:49:32:aa:23:a1:91:84: 55:5f:21:50:d5:83:b8:0c:78:87:ef:55:04:fb:30:5a:a8:90: 5a:5a:54:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQouVq9B1F7QDnmXz195HLSPJpXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE NzZCNTA1NDAeFw0yNTEwMTgyMzU2MTJaFw0yNTEwMjIwMDI4MTJaMDMxMTAvBgNV BAMTKENEMENFMEQ5NzdEQ0NDN0UwMTQ0OTUyNEEzNzlBNEJEMUE5MzZFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eZaaQCX2osh6z8dpIj/9bU+k sKj52rMP62bolPi82BK32TwL7Ih5qyPzzwgkFqOnkETbw7yJhYJF91sNvui3MJAw IzR9BUbsZTsrvA6taiI5TegiJSHajaIL1JnqDNby5Z5UFLVpojc+oetCCJ0QzwOu qGcC5EN6mcSu0ReHHToifZ5GZOyPUxrgU899Vi57xBzGj8WFHGSJR+q0i0BzEkJn wbKbVd1SpsV3M2pligZl9aGty3R0dOX+iMD3fbKbJt/XOiz/CVt79Jy8vHNC3lHU 9s/uUfFaEcU4hPuiA6X+gKIP3xkCpjNiFc+zwid8+FlvhnFhMG4EYqvlKszRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQzg2XfczH4BRJUko3mkvRqTbgowHwYDVR0j BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC NTA1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWViOThjZWQtYWYxOC00YmZmLWFk NzEtNzNkMmIwYzlkOGE5LzAvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNC M0VENzZCNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI14BBRkNZWDZo8VabNQjgLxAS04juEUMxx fojSsqHldqH2bJIISR/dVmYnvzmOJO7+/Z+7Nb8ssDRnqSbgJitja/uBbuW0S7bm 9EoRaEnDDuNDITVY6EAIBRD5/ZDq4NLl/l9+dZfYWP3TC38ZL/HDqzaisb4UpUMI 3Dof7PoWYsVheCLdQYOCq0HJh8N52yP6pG+XRjtidetXHt6kTZvlI/51S9DEtDKi 79BkjEB20o6UdFrB8A3BgUH80X7Wguzt/vshjMyDM3GNBTaEicyL7q+2/oUzjsg5 PedUkg1Kr6rzSTKqI6GRhFVfIVDVg7gMeIfvVQT7MFqokFpaVEk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:15 2025 by rpki-client