$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: N3a0NnxN7BmCZy6sQlIyjQlwgs2RPwsXKigL7NF7W1Y= Subject key identifier: C3:7A:8F:F6:D0:FE:3D:04:70:11:13:F7:C3:6B:D0:E9:42:FB:8F:34 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 375CFEFD03216BAD19E9FBCBB5402F4435A893C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 01D5 Signing time: Fri 24 Oct 2025 21:32:21 +0000 Manifest this update: Fri 24 Oct 2025 21:27:21 +0000 Manifest next update: Tue 28 Oct 2025 03:38:21 +0000 Files and hashes: 1: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: zKdoxBDEAyteV/D/Mbsz+ItFZBW6jF9Lcdm7rRZt6VE=) 2: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: lErVtCJlJ99qdLyNM63Qc8dGtmVES+Gq6hMVSb2l3Bw=) 3: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: Nlbwhvq6RNX8tKRWUBvBeTEEQD1O0jz0pdRla10hmjk=) 4: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: k3TWS9EMIy8Aq2EwD+5FTkmYFXY12HmYmh8vOGdwopQ=) 5: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 03:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5c:fe:fd:03:21:6b:ad:19:e9:fb:cb:b5:40:2f:44:35:a8:93:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Oct 24 21:27:21 2025 GMT Not After : Oct 28 03:38:21 2025 GMT Subject: CN=C37A8FF6D0FE3D04701113F7C36BD0E942FB8F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:f7:47:2e:e5:d6:4b:7e:4a:4c:ef:ab:ad: ea:3b:53:e4:d3:82:2b:b0:e4:70:ce:e8:0e:d6:09: bd:33:d6:75:d3:41:95:92:3e:55:1d:d0:52:6f:14: 91:98:b2:24:6a:70:5d:d3:4b:19:15:b3:92:df:6f: ca:5a:a0:d5:44:cd:ad:1a:20:ad:e5:bd:a3:41:ac: a9:69:14:93:5a:57:5d:79:8b:e9:a6:25:d3:05:e4: f3:c7:9a:64:15:90:e3:c2:28:1a:66:03:b2:1a:58: a1:b2:1c:ba:2a:da:55:ee:6c:8a:6a:c5:8c:a5:dc: 6a:77:69:c9:99:d4:74:dc:13:9b:7b:e3:f0:56:f2: 39:1d:f2:4b:9c:ae:87:09:8f:62:d9:88:e7:db:bb: a5:99:18:03:1f:b2:a2:a2:e7:67:3a:1e:d0:70:0b: 40:a5:b1:74:66:36:72:3f:9c:0b:69:31:5e:aa:7e: 64:2b:6c:de:33:99:82:2c:44:1f:8c:0a:a2:98:6a: f9:71:a7:8d:30:f0:0d:ca:32:31:de:ba:0f:3e:ba: 37:52:24:7c:d1:9c:8e:9d:99:61:36:28:22:00:73: 2f:de:e0:a6:7e:3d:ef:74:77:08:a3:dd:24:78:db: 4b:2e:78:5b:8e:6b:7b:e4:ae:05:0a:12:3c:8b:2a: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7A:8F:F6:D0:FE:3D:04:70:11:13:F7:C3:6B:D0:E9:42:FB:8F:34 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:97:97:66:0f:48:41:d4:a5:be:30:5a:b9:2d:2f:46:8b:79: 04:34:a9:81:8b:46:b1:38:62:b3:b1:6a:ca:db:84:d0:67:cc: 35:a5:2a:19:9b:5b:d9:63:80:61:ae:1b:7d:10:87:9d:d2:88: 07:f8:65:89:bf:73:92:16:19:46:cb:d2:f1:d5:59:0b:fd:5d: 33:38:10:fb:d7:9b:28:2a:e1:62:d1:c5:c9:96:03:b0:e2:28: 31:d8:12:81:c6:44:00:93:70:df:05:20:47:46:e2:d0:c5:ce: 91:1d:cf:99:96:db:0e:36:b2:11:a4:31:64:a5:7d:60:e2:1b: 51:98:0e:e2:7d:42:c4:c3:2b:37:cf:5d:0c:e5:ab:cd:93:a3: 8d:a6:40:0e:18:d8:4a:b0:6f:80:43:ec:66:4e:b8:bd:7e:d0: aa:d2:6e:cb:08:57:c5:76:9b:5c:7a:40:81:b6:d0:93:11:a6: 12:9b:21:c7:ff:cb:49:c4:f5:14:9a:6d:ba:96:8a:7f:0c:62: 5f:c7:58:5e:7a:b0:67:a0:c8:1f:65:6e:3d:ac:06:6e:e1:9f: 10:91:50:b7:92:1c:f7:c5:a3:83:b5:9e:48:c7:50:ad:45:bb: 45:aa:5b:b6:51:03:b0:cb:8d:89:a6:a5:88:29:a0:fe:79:00: 03:06:c4:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1z+/QMha60Z6fvLtUAvRDWok8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTEwMjQyMTI3MjFaFw0yNTEwMjgwMzM4MjFaMDMxMTAvBgNV BAMTKEMzN0E4RkY2RDBGRTNEMDQ3MDExMTNGN0MzNkJEMEU5NDJGQjhGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsa/dHLuXWS35KTO+rreo7U+TT giuw5HDO6A7WCb0z1nXTQZWSPlUd0FJvFJGYsiRqcF3TSxkVs5Lfb8paoNVEza0a IK3lvaNBrKlpFJNaV115i+mmJdMF5PPHmmQVkOPCKBpmA7IaWKGyHLoq2lXubIpq xYyl3Gp3acmZ1HTcE5t74/BW8jkd8kucrocJj2LZiOfbu6WZGAMfsqKi52c6HtBw C0ClsXRmNnI/nAtpMV6qfmQrbN4zmYIsRB+MCqKYavlxp40w8A3KMjHeug8+ujdS JHzRnI6dmWE2KCIAcy/e4KZ+Pe90dwij3SR420sueFuOa3vkrgUKEjyLKrPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw3qP9tD+PQRwERP3w2vQ6UL7jzQwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqXl2YPSEHUpb4wWrktL0aLeQQ0qYGLRrE4 YrOxasrbhNBnzDWlKhmbW9ljgGGuG30Qh53SiAf4ZYm/c5IWGUbL0vHVWQv9XTM4 EPvXmygq4WLRxcmWA7DiKDHYEoHGRACTcN8FIEdG4tDFzpEdz5mW2w42shGkMWSl fWDiG1GYDuJ9QsTDKzfPXQzlq82To42mQA4Y2Eqwb4BD7GZOuL1+0KrSbssIV8V2 m1x6QIG20JMRphKbIcf/y0nE9RSabbqWin8MYl/HWF56sGegyB9lbj2sBm7hnxCR ULeSHPfFo4O1nkjHUK1Fu0WqW7ZRA7DLjYmmpYgpoP55AAMGxAc= -----END CERTIFICATE-----Generated at Sat Oct 25 02:51:29 2025 by rpki-client