$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: F9RaBwQZj8RBgrMhJjRc2ozLUo7UWizYt1PnPtOSsF4= Subject key identifier: BF:5F:05:AF:97:75:17:B6:56:04:40:6A:05:AD:60:1D:BC:8C:E0:AF Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 0A20CFDECBB580F20A9AF26AA3D80179D51AC381 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: 6F Signing time: Sat 05 Apr 2025 13:40:48 +0000 Manifest this update: Sat 05 Apr 2025 13:35:48 +0000 Manifest next update: Tue 08 Apr 2025 21:33:48 +0000 Files and hashes: 1: 3130332e3134362e3138322e302f32332d3234203d3e20313335343635.roa (hash: rkKkgXIJ/CaQspoksB+cH3AXQpHZt3rYAMcNxuF/JI8=) 2: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: 7QMgVY+kmTfBmnhS2DAYd5DWpvvEBJA6wP6rASNJJKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:20:cf:de:cb:b5:80:f2:0a:9a:f2:6a:a3:d8:01:79:d5:1a:c3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Apr 5 13:35:48 2025 GMT Not After : Apr 8 21:33:48 2025 GMT Subject: CN=BF5F05AF977517B65604406A05AD601DBC8CE0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:da:c2:ca:b5:d4:33:ab:a8:6e:91:a4:a9: 0e:e3:85:29:ea:36:60:eb:08:cf:66:5d:13:cd:d2: 8e:5b:5c:0c:87:f1:89:2a:47:83:b9:68:91:e0:5b: fa:ca:81:e3:d1:fb:36:98:de:1f:c6:87:11:e5:5b: b4:a8:b0:44:2a:9a:1e:8d:82:a0:f8:8a:de:4f:39: d6:5c:8f:03:96:3f:34:93:0f:0d:ae:f1:a2:49:cc: c9:ec:bd:1a:49:01:da:9f:06:ec:31:d6:81:03:55: 7e:6d:3e:f5:e6:38:3c:3c:71:9c:96:ac:0f:b5:d7: 99:05:f2:42:71:7c:93:de:95:b6:f0:be:a8:01:6c: 2f:d0:dd:28:1c:c3:15:8f:29:94:80:96:e1:a6:c5: 54:4f:75:ab:e1:47:e3:01:45:71:b1:84:bc:52:14: 91:61:47:c1:7c:0f:eb:07:1b:ad:d2:2a:7e:34:d9: 38:66:55:c8:42:89:56:39:a3:64:9d:ff:26:17:83: 20:46:4b:ae:2a:70:74:04:e4:26:32:ed:6f:ac:3f: e1:26:75:87:38:4b:20:0f:1c:5b:38:98:8d:2a:e2: 72:39:3b:cd:f6:8e:a4:7f:f3:04:8f:c7:3f:bd:1e: 99:c4:b8:de:b3:26:eb:3c:4a:96:1a:ae:1b:4d:37: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5F:05:AF:97:75:17:B6:56:04:40:6A:05:AD:60:1D:BC:8C:E0:AF X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f6:c9:8e:d6:ae:02:92:5f:f1:af:e4:a4:8c:e2:8c:8b:7d: f4:c0:67:ee:77:11:d5:0d:af:82:24:b0:d6:93:00:49:36:a2: 2e:03:63:80:8a:5d:40:b4:8a:3e:b2:ba:4e:39:44:55:f7:a2: 5a:ed:c6:1c:de:2e:22:71:0f:7b:44:4e:6d:c3:21:28:15:2a: dc:61:f4:97:64:f0:c7:dc:10:b3:f3:ed:b4:e4:3b:cb:f4:14: e8:b0:eb:94:17:cd:ea:e2:d9:3e:4e:99:20:5c:4e:8f:2c:ee: 22:c0:a4:76:a4:18:7d:8f:60:f4:43:c4:06:d5:c4:bf:34:27: 07:27:d1:dc:4b:91:eb:97:65:62:34:a2:c2:7d:62:ef:4f:b3: 7e:2f:6c:d9:70:0b:9a:0e:02:01:e8:69:54:ad:37:d4:9d:ee: 65:c6:61:a5:15:d8:24:df:bb:65:40:c2:a8:3c:0b:52:b7:6e: a3:fc:29:47:98:88:07:1b:f1:da:52:b3:b8:8e:b3:4b:52:e2: 32:a6:ec:34:33:3c:72:fb:b4:87:17:f0:35:b8:69:18:a7:47: 50:56:a9:9e:3c:f4:d2:de:b1:94:c4:e5:67:68:68:39:f2:1c: d2:4f:1d:a2:7a:50:4b:1c:0f:4d:78:98:9f:da:ee:ca:91:cf: 4a:71:25:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiDP3su1gPIKmvJqo9gBedUaw4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTA0MDUxMzM1NDhaFw0yNTA0MDgyMTMzNDhaMDMxMTAvBgNV BAMTKEJGNUYwNUFGOTc3NTE3QjY1NjA0NDA2QTA1QUQ2MDFEQkM4Q0UwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7trCyrXUM6uobpGkqQ7jhSnq NmDrCM9mXRPN0o5bXAyH8YkqR4O5aJHgW/rKgePR+zaY3h/GhxHlW7SosEQqmh6N gqD4it5POdZcjwOWPzSTDw2u8aJJzMnsvRpJAdqfBuwx1oEDVX5tPvXmODw8cZyW rA+115kF8kJxfJPelbbwvqgBbC/Q3SgcwxWPKZSAluGmxVRPdavhR+MBRXGxhLxS FJFhR8F8D+sHG63SKn402ThmVchCiVY5o2Sd/yYXgyBGS64qcHQE5CYy7W+sP+Em dYc4SyAPHFs4mI0q4nI5O832jqR/8wSPxz+9HpnEuN6zJus8SpYarhtNNwSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv18Fr5d1F7ZWBEBqBa1gHbyM4K8wHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMP2yY7WrgKSX/Gv5KSM4oyLffTAZ+53EdUN r4IksNaTAEk2oi4DY4CKXUC0ij6yuk45RFX3olrtxhzeLiJxD3tETm3DISgVKtxh 9Jdk8MfcELPz7bTkO8v0FOiw65QXzeri2T5OmSBcTo8s7iLApHakGH2PYPRDxAbV xL80Jwcn0dxLkeuXZWI0osJ9Yu9Ps34vbNlwC5oOAgHoaVStN9Sd7mXGYaUV2CTf u2VAwqg8C1K3bqP8KUeYiAcb8dpSs7iOs0tS4jKm7DQzPHL7tIcX8DW4aRinR1BW qZ489NLesZTE5WdoaDnyHNJPHaJ6UEscD014mJ/a7sqRz0pxJdE= -----END CERTIFICATE-----Generated at Sun Apr 6 03:38:48 2025 by rpki-client