$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: +CkSNbG5uUA9kc+ovnbM0v1tNqsUwhpLcXOgGoRqn40= Subject key identifier: 1D:0B:4B:47:A2:C9:18:5F:CF:EE:19:19:58:31:6B:57:E9:97:9F:F5 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 6ADD032EA2F5072EF31F6C80A112BA0008E0F818 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 0216 Signing time: Thu 19 Mar 2026 15:22:41 +0000 Manifest this update: Thu 19 Mar 2026 15:17:41 +0000 Manifest next update: Sun 22 Mar 2026 20:48:41 +0000 Files and hashes: 1: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=) 2: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=) 3: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=) 4: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: N3Gfb2NHCn3N/mAtCOsqZuKtxNDeVqt9ExUlpZxGRpA=) 5: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 20:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:dd:03:2e:a2:f5:07:2e:f3:1f:6c:80:a1:12:ba:00:08:e0:f8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Mar 19 15:17:41 2026 GMT Not After : Mar 22 20:48:41 2026 GMT Subject: CN=1D0B4B47A2C9185FCFEE191958316B57E9979FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:4d:37:7b:3d:17:eb:8e:a7:13:65:68:f8: f9:52:49:43:d7:73:2f:f6:7c:c8:fa:cb:e7:5e:1d: 5c:5d:74:ff:40:1d:38:9c:9c:7e:e8:45:25:f3:10: e4:db:3c:be:3f:e8:01:d4:d4:05:9e:48:e7:13:2c: a0:d9:59:21:01:e0:9b:e4:ee:f0:41:b3:f6:56:c5: 49:e0:40:f7:bc:a6:ec:23:b3:52:2a:ab:e2:8c:8b: b1:50:10:59:28:a2:1d:25:a2:f7:47:89:ae:09:33: 8d:32:5b:ec:08:f9:a0:eb:33:5c:35:4b:cb:b1:1b: d3:ba:2c:fc:c0:7f:db:7f:07:ab:78:c6:2c:31:c8: 1b:42:be:61:20:f4:25:54:8d:73:0e:aa:30:07:fc: 45:b4:4e:56:d0:6c:cb:3e:34:17:72:d1:72:7c:7a: 28:b7:80:f6:94:e7:3d:05:1b:92:f0:db:bb:ba:b1: 0d:9e:66:9a:ba:12:fe:32:7d:53:cf:17:74:1c:bf: 1b:0c:c5:2c:3f:10:dd:fe:2e:06:f4:d7:19:5d:ca: b3:85:11:9a:c9:0b:ea:86:a6:6c:f0:de:64:f8:b5: 97:37:c8:0e:8a:d3:cc:fe:42:1c:ba:a7:1e:02:5e: 68:f7:26:95:31:f3:f8:11:5a:9b:a1:30:85:05:10: 97:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0B:4B:47:A2:C9:18:5F:CF:EE:19:19:58:31:6B:57:E9:97:9F:F5 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:41:f7:38:d4:a5:31:53:9d:0a:54:50:1d:a3:27:be:4f:53: 25:4d:1c:6c:9d:e9:25:d4:e6:99:58:79:6d:a1:4f:31:a6:58: 54:dd:11:e7:f8:8b:07:b6:07:57:b5:99:f1:f3:4d:17:2b:c0: d5:bf:74:dc:e9:51:50:6d:cb:25:12:97:5e:04:0f:09:41:c5: a8:d5:c0:48:02:04:85:f4:7f:96:88:c5:e1:9f:ed:de:d7:68: 59:7c:d0:ec:c1:0a:82:83:92:ef:28:0c:6e:c6:9e:65:38:a2: fe:65:40:9e:6f:5c:b7:05:62:fa:e7:2d:e7:80:ab:e4:7b:a8: 2a:11:8e:ff:c6:4e:a1:fa:8a:ae:ea:80:8a:25:3e:9c:b7:36: c6:14:6a:dd:69:65:b9:c2:84:84:f4:f4:ae:9c:0e:bb:75:ed: b0:63:cf:ee:26:0d:85:6b:a2:c1:91:67:bf:af:74:05:02:7a: 84:28:3b:82:6d:89:eb:49:5c:94:f8:eb:35:95:ab:06:db:45: 20:a3:9b:fd:90:d5:fb:a1:03:fc:e6:3a:4c:92:97:04:f8:c1: bb:fb:c3:f8:a4:e8:c3:49:30:69:f0:50:29:d9:93:ec:90:e9: 4a:b2:8a:95:44:1f:5f:63:52:d9:1f:ed:04:4c:25:7a:ea:31: 58:c1:ed:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUat0DLqL1By7zH2yAoRK6AAjg+BgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNjAzMTkxNTE3NDFaFw0yNjAzMjIyMDQ4NDFaMDMxMTAvBgNV BAMTKDFEMEI0QjQ3QTJDOTE4NUZDRkVFMTkxOTU4MzE2QjU3RTk5NzlGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFE03ez0X646nE2Vo+PlSSUPX cy/2fMj6y+deHVxddP9AHTicnH7oRSXzEOTbPL4/6AHU1AWeSOcTLKDZWSEB4Jvk 7vBBs/ZWxUngQPe8puwjs1Iqq+KMi7FQEFkooh0lovdHia4JM40yW+wI+aDrM1w1 S8uxG9O6LPzAf9t/B6t4xiwxyBtCvmEg9CVUjXMOqjAH/EW0TlbQbMs+NBdy0XJ8 eii3gPaU5z0FG5Lw27u6sQ2eZpq6Ev4yfVPPF3QcvxsMxSw/EN3+Lgb01xldyrOF EZrJC+qGpmzw3mT4tZc3yA6K08z+Qhy6px4CXmj3JpUx8/gRWpuhMIUFEJf9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHQtLR6LJGF/P7hkZWDFrV+mXn/UwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5B9zjUpTFTnQpUUB2jJ75PUyVNHGyd6SXU 5plYeW2hTzGmWFTdEef4iwe2B1e1mfHzTRcrwNW/dNzpUVBtyyUSl14EDwlBxajV wEgCBIX0f5aIxeGf7d7XaFl80OzBCoKDku8oDG7GnmU4ov5lQJ5vXLcFYvrnLeeA q+R7qCoRjv/GTqH6iq7qgIolPpy3NsYUat1pZbnChIT09K6cDrt17bBjz+4mDYVr osGRZ7+vdAUCeoQoO4JtietJXJT46zWVqwbbRSCjm/2Q1fuhA/zmOkySlwT4wbv7 w/ik6MNJMGnwUCnZk+yQ6UqyipVEH19jUtkf7QRMJXrqMVjB7Ys= -----END CERTIFICATE-----Generated at Sat Mar 21 09:41:12 2026 by rpki-client