$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: vaFt98Yjql9QNJIjKOTPFAJ9RsUVSSEvgZU9juOmwNc= Subject key identifier: E6:1F:8E:08:3D:7B:62:80:4E:67:45:25:4E:2F:46:83:FE:F3:27:E3 Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: EA9FE68C0E91F955AB3DA5EA662B7679E48896 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: 88 Signing time: Sun 01 Jun 2025 14:10:51 +0000 Manifest this update: Sun 01 Jun 2025 14:05:51 +0000 Manifest next update: Wed 04 Jun 2025 21:51:51 +0000 Files and hashes: 1: 3130332e3134362e3138322e302f32332d3234203d3e20313335343635.roa (hash: rkKkgXIJ/CaQspoksB+cH3AXQpHZt3rYAMcNxuF/JI8=) 2: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: Z92mC593LX17/dlFtZvOHZ5BwTr7sapl0mfhghmpJ0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 21:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ea:9f:e6:8c:0e:91:f9:55:ab:3d:a5:ea:66:2b:76:79:e4:88:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Jun 1 14:05:51 2025 GMT Not After : Jun 4 21:51:51 2025 GMT Subject: CN=E61F8E083D7B62804E6745254E2F4683FEF327E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:8e:54:a3:a2:a5:01:63:1b:6a:c1:36:be: e1:05:85:81:3f:dc:c1:6c:ca:cd:4c:8e:4d:fb:64: 62:6a:1a:ec:ba:79:c0:13:2a:57:36:48:4f:c7:40: ff:a2:ed:37:b2:90:f7:8d:01:34:ff:35:67:ce:39: 68:16:3f:1a:1d:54:de:fe:30:a2:e7:4c:94:8f:f3: 54:33:03:d6:b6:84:97:d7:b4:e1:b8:c6:10:42:68: 35:6b:bd:62:4d:26:5c:bd:f6:31:a6:aa:24:5a:63: 2f:60:ad:42:75:90:26:b9:ea:47:df:4c:88:f6:f7: bd:e8:81:a3:b1:8a:ed:72:e8:e6:09:ca:87:b6:ce: 9b:07:15:9b:ea:e9:4d:a4:c5:fb:c1:14:24:93:b1: 2f:6a:cb:db:93:7e:48:51:7f:9e:b2:d1:a2:b3:cb: b5:b8:55:c9:7e:c4:3d:30:bc:87:d1:a1:c2:45:91: de:63:72:40:5f:6f:de:2a:71:c7:60:d3:60:89:32: 14:ba:35:2d:51:a3:d1:3d:81:c8:4e:93:93:09:26: b8:95:05:fe:f6:db:81:ad:b3:77:24:da:80:55:e5: 62:4a:1f:69:fc:4d:2d:19:87:7d:66:39:3f:ba:27: 25:8b:b6:77:de:22:ef:f7:7e:0b:fa:bb:9b:f4:f9: 2f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1F:8E:08:3D:7B:62:80:4E:67:45:25:4E:2F:46:83:FE:F3:27:E3 X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e5:d3:7b:d9:68:b5:90:71:08:00:14:f1:ba:c7:c1:da:b7: 21:4f:e4:1d:ab:57:a2:40:e1:8a:bc:98:e1:8a:00:67:36:bb: ea:a8:82:dc:9c:62:98:a4:8e:16:80:c0:cc:36:cc:d0:d4:d0: 60:c5:ef:04:d4:ac:7d:48:0c:71:17:a8:a6:5f:b2:1a:bd:2e: f4:21:69:73:95:4d:2b:b8:c5:30:e8:b4:30:09:c7:60:6d:76: e3:06:65:0c:c0:28:9a:55:13:24:f8:e6:41:38:2b:fa:59:ba: a2:96:61:fb:98:70:aa:9a:4c:2f:63:a2:5d:52:1f:29:d5:f0: 5d:a6:51:59:a1:3b:43:7c:57:e0:8c:7a:df:91:dc:5a:87:35: 57:37:1f:03:4b:26:17:0c:2c:a8:3a:58:5b:28:47:77:c8:f2: dd:30:d0:8f:23:2d:8a:87:99:49:82:42:74:4c:91:3d:fb:31: 71:24:7a:66:b7:b7:00:45:dd:1c:06:fd:a7:e8:8a:92:e4:1e: 31:0b:6a:6e:fc:a4:b4:6a:2b:98:31:3f:ad:4c:32:52:41:a1: 8b:c3:b2:63:3a:5b:92:cb:a2:83:5b:b4:f5:17:ca:c2:2c:ef: d3:15:82:33:57:d6:a3:5f:b8:d3:ac:3a:cb:96:bf:2a:19:78: 87:02:e1:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOqf5owOkflVqz2l6mYrdnnkiJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTA2MDExNDA1NTFaFw0yNTA2MDQyMTUxNTFaMDMxMTAvBgNV BAMTKEU2MUY4RTA4M0Q3QjYyODA0RTY3NDUyNTRFMkY0NjgzRkVGMzI3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQI5Uo6KlAWMbasE2vuEFhYE/ 3MFsys1Mjk37ZGJqGuy6ecATKlc2SE/HQP+i7TeykPeNATT/NWfOOWgWPxodVN7+ MKLnTJSP81QzA9a2hJfXtOG4xhBCaDVrvWJNJly99jGmqiRaYy9grUJ1kCa56kff TIj2973ogaOxiu1y6OYJyoe2zpsHFZvq6U2kxfvBFCSTsS9qy9uTfkhRf56y0aKz y7W4Vcl+xD0wvIfRocJFkd5jckBfb94qccdg02CJMhS6NS1Ro9E9gchOk5MJJriV Bf7224Gts3ck2oBV5WJKH2n8TS0Zh31mOT+6JyWLtnfeIu/3fgv6u5v0+S99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5h+OCD17YoBOZ0UlTi9Gg/7zJ+MwHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbl03vZaLWQcQgAFPG6x8HatyFP5B2rV6JA 4Yq8mOGKAGc2u+qogtycYpikjhaAwMw2zNDU0GDF7wTUrH1IDHEXqKZfshq9LvQh aXOVTSu4xTDotDAJx2BtduMGZQzAKJpVEyT45kE4K/pZuqKWYfuYcKqaTC9jol1S HynV8F2mUVmhO0N8V+CMet+R3FqHNVc3HwNLJhcMLKg6WFsoR3fI8t0w0I8jLYqH mUmCQnRMkT37MXEkema3twBF3RwG/afoipLkHjELam78pLRqK5gxP61MMlJBoYvD smM6W5LLooNbtPUXysIs79MVgjNX1qNfuNOsOsuWvyoZeIcC4aY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:59 2025 by rpki-client