$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: Tr4LuaJxURX/Pmc6uZh5Qv9/0zquq8B/Fvh46gv4E70= Subject key identifier: BC:D2:8C:04:B8:07:A9:63:04:AD:C9:5D:06:20:58:4E:E2:2F:A8:89 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 39B56B1AB3A15D45C3E9B9FE0DE6D21EADB9A149 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01AA Signing time: Sun 20 Jul 2025 18:32:16 +0000 Manifest this update: Sun 20 Jul 2025 18:27:16 +0000 Manifest next update: Wed 23 Jul 2025 23:10:16 +0000 Files and hashes: 1: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: 1ZjwKj5FyNPg7EqZzxjb+MWBzZJK5F12g1ZsYa8Kk1s=) 2: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: EC4pdeKS6m2DS2kb8wXXQcTFTqrjCCiW8l5re1PpeaY=) 3: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: IsUfNXGGb6B2JpK1REITELEe401FAG/0ijHJDoCEoDE=) 4: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: AY/t9IvptGjqeCB/QgX1jHlT4jpr8+ZM5iMrYuT7qC8=) 5: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: 2M7ym4x+2EoAnsRwKsCD8M2xKS4VnhZ8DePxWflgvZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b5:6b:1a:b3:a1:5d:45:c3:e9:b9:fe:0d:e6:d2:1e:ad:b9:a1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Jul 20 18:27:16 2025 GMT Not After : Jul 23 23:10:16 2025 GMT Subject: CN=BCD28C04B807A96304ADC95D0620584EE22FA889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:3b:c8:10:dd:ee:8a:3d:4a:a4:48:d6:f8: ca:66:05:f6:3b:ed:15:4a:30:af:e0:b9:db:d3:f0: d9:7f:3e:92:24:44:bc:af:de:33:4b:3a:14:8d:60: b3:63:f1:43:a4:26:52:06:b3:d4:8e:ac:2b:ce:ea: 5d:12:3e:56:4d:49:df:4b:ae:aa:83:37:b7:a1:65: e9:c3:ea:ce:0b:01:ce:bd:71:58:ee:2d:74:11:57: 8a:7b:a1:21:70:c5:b5:56:3b:45:e7:6a:1f:35:ef: 4d:52:83:0a:4e:1b:c1:3f:bf:78:15:5e:2d:4a:3e: fa:02:4e:51:8c:00:b1:65:6b:9d:58:bf:13:b1:7d: f8:2d:02:93:09:5f:3e:13:bd:0d:e1:99:01:2e:a0: b3:e4:db:63:0b:2b:3f:02:66:35:dd:e0:92:cf:45: 41:38:4d:f3:0f:42:33:09:85:fa:d1:96:ea:14:0a: 68:05:3b:76:3b:57:47:6f:58:a8:9d:42:a0:50:cf: cc:e7:0b:ce:c9:35:43:5b:bc:75:e4:ff:d1:8c:43: bd:c0:ee:40:95:4f:6e:5e:35:94:0e:ab:15:f3:f9: ee:94:58:c4:7d:5c:23:86:db:5c:15:b2:88:03:be: a0:bf:5f:d5:37:3d:45:4d:96:12:ec:1a:43:6f:c1: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:8C:04:B8:07:A9:63:04:AD:C9:5D:06:20:58:4E:E2:2F:A8:89 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c7:c0:ff:d0:ea:20:11:11:7b:36:4e:88:09:cf:7c:5a:e0: 8b:7b:31:6b:ae:98:fe:16:95:5f:a4:ac:3e:38:0a:fb:39:fc: 16:e3:05:ae:5f:ad:d9:c6:4f:26:37:ea:a8:b2:9b:7c:ce:bf: 83:e4:5a:ba:78:c5:0a:2f:40:f3:47:4b:06:01:fe:73:a7:4a: 85:14:e7:f7:f8:33:66:22:63:87:b3:c6:35:5e:e1:3b:06:97: ee:74:c0:6d:df:8d:90:aa:a8:32:74:34:37:52:c7:36:8c:d9: 0f:be:c0:ed:f0:1c:b1:29:3b:7f:40:78:bf:90:cf:bc:47:91: 11:e9:7d:9a:52:be:7d:03:89:34:ba:31:73:39:50:5f:5b:b3: 1f:4a:a1:a4:1e:4f:5f:55:61:71:f3:3d:41:0c:e3:4f:d6:c0: 91:7c:f3:4d:ee:90:f9:12:90:ba:4c:b1:ec:79:f8:db:dc:a3: c7:48:f8:31:a4:7b:50:b5:33:0f:f7:02:da:f1:85:63:5d:70: df:a8:e7:15:18:22:a2:51:6f:c1:c3:83:e2:05:13:4f:13:e1: 9f:20:f7:70:a4:c4:bc:23:88:d3:ca:a0:9b:4b:b2:cd:c5:b8: 51:97:d4:d2:93:83:13:30:bc:06:45:c7:99:c2:51:a0:24:12: 90:32:a9:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObVrGrOhXUXD6bn+DebSHq25oUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTA3MjAxODI3MTZaFw0yNTA3MjMyMzEwMTZaMDMxMTAvBgNV BAMTKEJDRDI4QzA0QjgwN0E5NjMwNEFEQzk1RDA2MjA1ODRFRTIyRkE4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gjvIEN3uij1KpEjW+MpmBfY7 7RVKMK/gudvT8Nl/PpIkRLyv3jNLOhSNYLNj8UOkJlIGs9SOrCvO6l0SPlZNSd9L rqqDN7ehZenD6s4LAc69cVjuLXQRV4p7oSFwxbVWO0Xnah81701SgwpOG8E/v3gV Xi1KPvoCTlGMALFla51YvxOxffgtApMJXz4TvQ3hmQEuoLPk22MLKz8CZjXd4JLP RUE4TfMPQjMJhfrRluoUCmgFO3Y7V0dvWKidQqBQz8znC87JNUNbvHXk/9GMQ73A 7kCVT25eNZQOqxXz+e6UWMR9XCOG21wVsogDvqC/X9U3PUVNlhLsGkNvwRjLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNKMBLgHqWMErcldBiBYTuIvqIkwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbHwP/Q6iAREXs2TogJz3xa4It7MWuumP4W lV+krD44Cvs5/BbjBa5frdnGTyY36qiym3zOv4PkWrp4xQovQPNHSwYB/nOnSoUU 5/f4M2YiY4ezxjVe4TsGl+50wG3fjZCqqDJ0NDdSxzaM2Q++wO3wHLEpO39AeL+Q z7xHkRHpfZpSvn0DiTS6MXM5UF9bsx9KoaQeT19VYXHzPUEM40/WwJF8803ukPkS kLpMsex5+Nvco8dI+DGke1C1Mw/3AtrxhWNdcN+o5xUYIqJRb8HDg+IFE08T4Z8g 93CkxLwjiNPKoJtLss3FuFGX1NKTgxMwvAZFx5nCUaAkEpAyqWY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:28 2025 by rpki-client