$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft File: 49CDCA308C289D688C649C2303BECB3ED76B5054.mft (raw, json) Hash identifier: gAt7XqlVTn1c4ha3zTYg3HMjECUTHk7WnT1r6mtd0uI= Subject key identifier: 5F:0C:54:C7:BF:3C:A6:11:83:E6:29:5E:15:15:12:C5:1E:7F:AB:51 Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Certificate serial: 6A120D79E7ACBA2F2F47A633BF0AA7C96A7C7FA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft Manifest number: 04FB Signing time: Mon 21 Jul 2025 15:11:10 +0000 Manifest this update: Mon 21 Jul 2025 15:06:10 +0000 Manifest next update: Thu 24 Jul 2025 19:16:10 +0000 Files and hashes: 1: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: 04eyxXbv9jngQdgYmmSjLsuCye8qiexJidy0wMhDXkQ=) 2: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: 6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=) 3: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: 6VuJVE5V+cRzw0YC3j26AjnB200tu5ynyJ2PlMkHwdk=) 4: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: Ha3WoHQ/zP70el2yWIeTgLkGHqYuIOHL7pH96V5JFfw=) 5: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: PNF09SxEelapDmbcZhAv/JlSjlnccRnMVMsb6Vjd5Cs=) 6: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: 6lzTZpzOtbXaisX77lh3zqfu4RoYr39Ke230rMF+BLA=) 7: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: VOPS8e3VH0l6ubQIOcds4q8+0PaehGxHMdByhPPUMRk=) 8: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: +XaFO38Q9dXCmJ85JQuHQCLrxReLtpZeqTNCnHE/ld8=) 9: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: lh1ua1Y9ZtE2dDW45ObJ8+6IvX0lmoDB+fa6NG7jmTA=) 10: 49CDCA308C289D688C649C2303BECB3ED76B5054.crl (hash: JGvJ6nqwzc71I6YHAC/Q6SRB4OWtsnbB4Z/0elDVwsE=) 11: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: gEYK+18FP+7kBMfZJoRXCpV612TXysZxOtU9C0Gw8cc=) 12: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: 2ttGNYSIno2YUVrl5iMDUeYoXTM+0/k8iShvnFHSZUg=) 13: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: GUJzG7I21c6XIuzE+3MXjSNzND91626bZhTZv88Tj9U=) 14: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: 38apIlW13UqRkBJC0AvLF1JxLSXx4uzPA7tj9m0g40E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 19:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:12:0d:79:e7:ac:ba:2f:2f:47:a6:33:bf:0a:a7:c9:6a:7c:7f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054 Validity Not Before: Jul 21 15:06:10 2025 GMT Not After : Jul 24 19:16:10 2025 GMT Subject: CN=5F0C54C7BF3CA61183E6295E151512C51E7FAB51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cb:6f:74:69:fa:3f:36:40:5b:dc:d0:55:e1: eb:bc:61:81:c4:22:a8:af:a1:4a:65:ba:1d:c2:80: c1:2a:af:82:0a:78:a9:9a:3e:52:39:bb:d5:50:65: b4:4d:f5:be:7b:e0:59:b7:9c:6b:8f:61:5f:f5:62: 49:14:68:fe:cb:cd:e1:95:18:e9:be:b3:32:a3:ed: 65:52:81:c8:1c:bc:c5:49:40:0e:a4:08:4d:02:64: 70:6d:e2:23:29:6f:3c:6b:8f:35:d4:d8:d3:5b:42: eb:b5:5c:94:7d:1c:6a:fb:d5:1d:ef:c7:9d:33:be: 5c:40:a7:dc:de:cb:a6:12:2a:29:af:1c:b7:74:43: 7d:f8:a6:5a:34:88:f7:06:a3:f6:ad:37:13:0c:bb: 03:6b:44:73:b2:11:09:65:90:69:5e:57:11:18:a0: 11:e2:04:a3:78:3b:05:7f:20:bc:b1:26:a4:91:11: ee:e9:7d:d8:61:e1:3e:d7:53:75:7f:95:07:f6:8b: 6c:a9:7f:d0:55:bf:15:4a:4e:7c:ce:87:31:ea:b6: ca:83:61:da:26:ec:79:07:a9:6e:3e:f2:2f:1b:ef: cc:b1:ed:0a:ac:65:07:71:7e:ba:8e:3d:ec:73:19: 88:61:d4:ad:66:54:30:67:12:9a:3c:48:54:32:d5: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0C:54:C7:BF:3C:A6:11:83:E6:29:5E:15:15:12:C5:1E:7F:AB:51 X509v3 Authority Key Identifier: keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:43:cc:92:1c:75:10:e6:a4:a8:d9:9e:dc:4e:74:b9:49: 85:22:35:cf:81:49:97:7d:5c:c3:af:5e:f4:2e:fb:45:83:18: 69:f4:39:7e:a7:9f:bf:80:99:84:b3:2a:89:51:7a:ce:82:4a: 58:1a:ff:ad:be:89:d6:7d:8e:be:fa:d8:d4:35:bb:23:1d:ff: a6:5d:98:e8:41:31:83:ae:3b:41:84:7f:21:9d:6e:7b:eb:1e: 9b:5c:90:4d:92:b9:90:c9:d3:78:39:97:83:d8:6d:50:75:a5: d6:72:03:16:7f:42:f8:a8:2f:88:67:44:7d:dc:10:1a:27:90: b7:3b:f5:75:b8:fe:0a:3a:70:9d:a0:6b:a7:42:c8:8c:8b:fd: db:3b:fc:fb:41:f3:5e:33:ec:7f:15:6a:43:60:c7:02:64:39: 6a:fe:7c:21:19:ac:69:a3:dc:e2:fd:56:52:cc:45:ea:10:49: 0f:d3:ff:51:60:ae:d2:ee:5b:b4:bd:a2:c0:af:5d:61:63:2d: 2f:b9:99:06:3a:5b:65:8b:57:b1:23:c8:71:a8:bc:40:09:12: ab:bd:74:2b:03:79:81:55:f6:c0:61:99:43:85:3e:ba:34:2b: f7:f1:81:81:8c:a8:fd:91:91:93:7d:20:bc:b3:74:9b:bf:a1: 1f:a9:1f:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahINeeesui8vR6YzvwqnyWp8f6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE NzZCNTA1NDAeFw0yNTA3MjExNTA2MTBaFw0yNTA3MjQxOTE2MTBaMDMxMTAvBgNV BAMTKDVGMEM1NEM3QkYzQ0E2MTE4M0U2Mjk1RTE1MTUxMkM1MUU3RkFCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDry290afo/NkBb3NBV4eu8YYHE IqivoUpluh3CgMEqr4IKeKmaPlI5u9VQZbRN9b574Fm3nGuPYV/1YkkUaP7LzeGV GOm+szKj7WVSgcgcvMVJQA6kCE0CZHBt4iMpbzxrjzXU2NNbQuu1XJR9HGr71R3v x50zvlxAp9zey6YSKimvHLd0Q334plo0iPcGo/atNxMMuwNrRHOyEQllkGleVxEY oBHiBKN4OwV/ILyxJqSREe7pfdhh4T7XU3V/lQf2i2ypf9BVvxVKTnzOhzHqtsqD Ydom7HkHqW4+8i8b78yx7QqsZQdxfrqOPexzGYhh1K1mVDBnEpo8SFQy1V5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXwxUx788phGD5ileFRUSxR5/q1EwHwYDVR0j BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC NTA1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWViOThjZWQtYWYxOC00YmZmLWFk NzEtNzNkMmIwYzlkOGE5LzAvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNC M0VENzZCNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn2Q8ySHHUQ5qSo2Z7cTnS5SYUiNc+BSZd9 XMOvXvQu+0WDGGn0OX6nn7+AmYSzKolRes6CSlga/62+idZ9jr762NQ1uyMd/6Zd mOhBMYOuO0GEfyGdbnvrHptckE2SuZDJ03g5l4PYbVB1pdZyAxZ/QvioL4hnRH3c EBonkLc79XW4/go6cJ2ga6dCyIyL/ds7/PtB814z7H8VakNgxwJkOWr+fCEZrGmj 3OL9VlLMReoQSQ/T/1FgrtLuW7S9osCvXWFjLS+5mQY6W2WLV7EjyHGovEAJEqu9 dCsDeYFV9sBhmUOFPro0K/fxgYGMqP2RkZN9ILyzdJu/oR+pH8E= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:55 2025 by rpki-client