$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: g2b7/EKk91YZi0Z8zMG4ZYg3vGZsf2xrZDn7YIG04wI= Subject key identifier: 88:07:14:DE:C3:0A:82:9F:67:E6:2C:5E:EB:FC:9D:9F:86:24:96:97 Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 4434B46A3B0742389E6A9226407645C4E46661BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: FA Signing time: Tue 03 Jun 2025 03:22:22 +0000 Manifest this update: Tue 03 Jun 2025 03:17:22 +0000 Manifest next update: Fri 06 Jun 2025 07:56:22 +0000 Files and hashes: 1: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: 4oj+By0uHXLTV+2beP1qHXuRdjER/PuVU27wYsnrYgc=) 2: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: eQwZ0HpEaRU5AO86abCZFFKH0HF0iLl7VUx7NHne24s=) 3: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: 2deZljQHRC+27lOtPHeNXwE5AsA5ouy4hMQ4YZL8z3c=) 4: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: osFwS3xf1DonSoJwht99d9Tc2cqBOTGD/HEV1v4fujI=) 5: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: UkSU3ofAJMwQMSBV8CLkdD+7q/O7V/69EnZpNB0eiWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 07:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:34:b4:6a:3b:07:42:38:9e:6a:92:26:40:76:45:c4:e4:66:61:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Jun 3 03:17:22 2025 GMT Not After : Jun 6 07:56:22 2025 GMT Subject: CN=880714DEC30A829F67E62C5EEBFC9D9F86249697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:8a:b5:e1:90:35:56:34:2e:84:5c:18:4e: f9:d9:2b:30:0d:93:aa:a0:cc:87:4e:a4:26:cc:ca: e2:8e:37:9f:4d:61:2b:6a:f2:6c:0e:fa:86:66:3d: f2:d4:cf:b7:a5:4a:b2:8b:cd:cf:9e:ef:8f:49:fc: 91:60:3f:74:fc:97:0a:f3:12:29:3e:99:41:12:94: 85:0d:09:c3:24:c3:e3:fa:6c:18:7e:4b:0f:48:37: eb:86:33:d6:f1:40:ea:f1:9a:f9:88:85:af:c9:58: 9f:ed:a8:1b:bf:b5:01:bf:81:b7:1a:06:04:cf:ed: b2:e6:3d:7d:e0:36:ea:4d:1e:59:b5:5b:cf:73:d6: 69:4a:b3:5b:a6:71:c9:24:b3:82:45:d9:70:3a:22: 86:58:59:dd:5a:e9:9b:a7:fa:22:13:3b:8b:71:f3: 6a:74:88:d7:22:bc:db:da:77:20:30:36:f5:54:bf: 63:85:83:7e:2b:94:ae:f9:30:25:13:47:8a:68:30: 22:2b:50:eb:3e:e8:53:36:b0:6f:9a:b3:dd:78:7b: ae:42:1e:79:20:aa:4b:05:1c:22:ab:f3:18:d1:03: 87:2a:b2:78:fe:bf:ba:62:a0:16:3b:59:29:d5:0a: e0:08:00:f5:6e:ac:33:c4:54:c1:28:7e:0f:60:a5: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:14:DE:C3:0A:82:9F:67:E6:2C:5E:EB:FC:9D:9F:86:24:96:97 X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6b:17:cf:ad:a1:f1:9f:61:79:23:a7:39:bc:69:7a:d3:bb: 7e:0d:f2:11:2a:65:a0:0d:9d:a1:68:47:17:f0:4b:aa:65:aa: 8f:5c:cc:c2:01:59:9d:57:ab:bb:35:1c:31:3c:cd:97:f1:eb: 21:95:3d:e4:bd:f5:76:93:61:35:55:ac:1b:7c:ba:2a:ff:3b: 35:a2:b7:3b:f0:cc:35:82:f4:12:9f:51:4a:c9:b1:c0:7c:66: 93:5b:2d:46:4a:de:61:dd:be:0f:2a:51:c2:71:6e:8a:74:33: e2:73:f4:3a:84:b4:5d:db:a8:62:98:54:9f:c8:45:61:96:14: d5:bf:c1:c0:fe:04:da:0d:b2:d6:5e:3d:48:82:a2:5e:15:2e: 7f:86:4d:71:da:92:94:33:c2:f3:cf:b9:54:89:b5:2a:57:d6: bf:5c:a5:4e:7b:99:2a:3e:a9:03:f5:d7:a4:ed:81:39:42:7e: d8:c7:94:26:47:39:fe:29:d5:00:57:c6:fa:b9:20:78:31:10: 9e:b6:9e:8d:1b:d3:2e:59:15:4b:04:26:13:29:5c:d3:8a:4e: 49:7b:4e:f9:bb:2c:5e:05:ef:10:e6:80:53:26:88:27:84:9d: 71:a3:ec:71:be:cc:1f:dd:72:f1:64:b4:e8:fd:61:27:4b:4a: f5:5e:e4:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDS0ajsHQjieapImQHZFxORmYb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNTA2MDMwMzE3MjJaFw0yNTA2MDYwNzU2MjJaMDMxMTAvBgNV BAMTKDg4MDcxNERFQzMwQTgyOUY2N0U2MkM1RUVCRkM5RDlGODYyNDk2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsloq14ZA1VjQuhFwYTvnZKzAN k6qgzIdOpCbMyuKON59NYStq8mwO+oZmPfLUz7elSrKLzc+e749J/JFgP3T8lwrz Eik+mUESlIUNCcMkw+P6bBh+Sw9IN+uGM9bxQOrxmvmIha/JWJ/tqBu/tQG/gbca BgTP7bLmPX3gNupNHlm1W89z1mlKs1umcckks4JF2XA6IoZYWd1a6Zun+iITO4tx 82p0iNcivNvadyAwNvVUv2OFg34rlK75MCUTR4poMCIrUOs+6FM2sG+as914e65C HnkgqksFHCKr8xjRA4cqsnj+v7pioBY7WSnVCuAIAPVurDPEVMEofg9gpaSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiAcU3sMKgp9n5ixe6/ydn4YklpcwHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNrF8+tofGfYXkjpzm8aXrTu34N8hEqZaAN naFoRxfwS6plqo9czMIBWZ1Xq7s1HDE8zZfx6yGVPeS99XaTYTVVrBt8uir/OzWi tzvwzDWC9BKfUUrJscB8ZpNbLUZK3mHdvg8qUcJxbop0M+Jz9DqEtF3bqGKYVJ/I RWGWFNW/wcD+BNoNstZePUiCol4VLn+GTXHakpQzwvPPuVSJtSpX1r9cpU57mSo+ qQP116TtgTlCftjHlCZHOf4p1QBXxvq5IHgxEJ62no0b0y5ZFUsEJhMpXNOKTkl7 Tvm7LF4F7xDmgFMmiCeEnXGj7HG+zB/dcvFktOj9YSdLSvVe5JY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:19 2025 by rpki-client