$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: jzed7aFEnoYnspVXnLrmSVazJyWP24u2wX3bPPA19sk= Subject key identifier: 57:16:B8:A9:D2:9A:4E:20:69:4E:9A:5E:1D:3A:F0:47:D8:B5:B1:2E Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 1093A07846E951BFA1BB2506DEAC4281F7795111 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: B7 Signing time: Mon 08 Sep 2025 20:40:57 +0000 Manifest this update: Mon 08 Sep 2025 20:35:57 +0000 Manifest next update: Thu 11 Sep 2025 21:40:57 +0000 Files and hashes: 1: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: p9tzsx+F9TJx+Nes2bbg18iyEmOqvqA7shBFoFADMhQ=) 2: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww=) 3: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:93:a0:78:46:e9:51:bf:a1:bb:25:06:de:ac:42:81:f7:79:51:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Sep 8 20:35:57 2025 GMT Not After : Sep 11 21:40:57 2025 GMT Subject: CN=5716B8A9D29A4E20694E9A5E1D3AF047D8B5B12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:83:b0:a0:27:d9:06:de:64:6c:98:b3:a1: 1d:33:6e:37:7d:5c:e0:e0:5c:42:5b:0d:49:2f:a2: 85:6c:67:a0:00:a2:9c:97:be:f6:cd:51:c5:da:b8: d4:f9:45:a6:19:6e:ef:58:ab:52:8b:16:87:3c:57: 5b:c7:31:72:38:3c:a6:5c:f6:92:32:46:7f:f5:bd: 14:36:25:0a:c4:5c:2e:31:64:e7:5d:9c:d3:9a:fa: b2:27:2c:f3:d3:b2:72:e6:75:3e:36:c2:01:58:10: ed:4b:ea:5a:7e:e5:14:26:bd:91:8f:e9:72:c3:1c: 4a:4a:03:4f:00:17:45:09:7f:f8:af:ff:16:4b:46: 96:2f:24:cf:9c:f7:2d:fa:0a:83:1f:d3:22:29:a9: cb:8c:87:6b:f4:47:31:c0:0e:e4:3b:e2:1e:fa:b3: 7f:73:a9:4a:62:dd:f7:95:07:ff:51:06:3a:9b:3c: 3e:81:ed:2e:aa:cc:15:27:8a:98:e0:2f:e2:01:04: ea:70:22:55:64:aa:7a:9f:a5:70:67:1d:92:57:06: 46:e8:22:9c:80:fd:29:76:5a:a8:4d:75:d5:c8:96: b0:d6:9f:e8:7c:a3:9f:f2:d9:e4:62:46:04:64:ee: 89:78:84:95:76:2e:b0:cd:46:50:59:e9:5c:ec:be: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:16:B8:A9:D2:9A:4E:20:69:4E:9A:5E:1D:3A:F0:47:D8:B5:B1:2E X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:85:b1:c9:63:81:1e:33:40:ff:9b:5e:d9:80:5b:b9:dd:43: ac:8c:32:22:01:f2:a2:2a:20:a8:8a:56:b1:c2:66:b5:19:3f: 0d:0f:67:10:97:8c:6c:37:20:f7:04:1a:47:77:a7:82:32:1a: e6:a6:c0:b3:d2:c6:7f:72:ab:63:30:62:ee:7d:33:28:1a:67: 4f:6f:3c:b5:1c:95:80:5e:0a:c1:3c:d6:26:76:3c:ab:52:44: 80:31:db:f3:fa:d1:09:07:b0:d1:5e:f9:76:ed:d8:8c:4d:37: b6:a0:2a:5c:c0:c7:ab:e4:1e:7c:a4:e8:b8:34:8d:db:f1:e1: 5d:38:63:e9:36:10:e9:cd:22:5c:6a:57:2b:3a:96:7a:f4:af: b4:40:1b:19:f4:30:8a:1c:b2:a2:23:0c:03:fd:dd:c6:f7:7a: 71:ff:90:c6:03:b1:5d:8d:45:48:97:d1:c6:93:df:eb:37:54: d9:24:d9:ad:4b:34:ec:18:01:aa:77:ce:79:8b:0a:b5:4c:5d: 5e:9b:ba:f4:0f:9b:fd:3e:10:fb:4e:2e:93:1c:7b:73:49:52: 38:8e:3a:fa:ee:4e:7b:fd:34:48:f7:30:4b:e7:a0:b8:92:df: 09:83:30:aa:b7:de:3c:49:38:fa:38:ed:3d:45:6c:55:2a:bc: cd:51:79:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJOgeEbpUb+huyUG3qxCgfd5UREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTA5MDgyMDM1NTdaFw0yNTA5MTEyMTQwNTdaMDMxMTAvBgNV BAMTKDU3MTZCOEE5RDI5QTRFMjA2OTRFOUE1RTFEM0FGMDQ3RDhCNUIxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6oOwoCfZBt5kbJizoR0zbjd9 XODgXEJbDUkvooVsZ6AAopyXvvbNUcXauNT5RaYZbu9Yq1KLFoc8V1vHMXI4PKZc 9pIyRn/1vRQ2JQrEXC4xZOddnNOa+rInLPPTsnLmdT42wgFYEO1L6lp+5RQmvZGP 6XLDHEpKA08AF0UJf/iv/xZLRpYvJM+c9y36CoMf0yIpqcuMh2v0RzHADuQ74h76 s39zqUpi3feVB/9RBjqbPD6B7S6qzBUnipjgL+IBBOpwIlVkqnqfpXBnHZJXBkbo IpyA/Sl2WqhNddXIlrDWn+h8o5/y2eRiRgRk7ol4hJV2LrDNRlBZ6VzsvqEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVxa4qdKaTiBpTppeHTrwR9i1sS4wHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyFscljgR4zQP+bXtmAW7ndQ6yMMiIB8qIq IKiKVrHCZrUZPw0PZxCXjGw3IPcEGkd3p4IyGuamwLPSxn9yq2MwYu59MygaZ09v PLUclYBeCsE81iZ2PKtSRIAx2/P60QkHsNFe+Xbt2IxNN7agKlzAx6vkHnyk6Lg0 jdvx4V04Y+k2EOnNIlxqVys6lnr0r7RAGxn0MIocsqIjDAP93cb3enH/kMYDsV2N RUiX0caT3+s3VNkk2a1LNOwYAap3znmLCrVMXV6buvQPm/0+EPtOLpMce3NJUjiO OvruTnv9NEj3MEvnoLiS3wmDMKq33jxJOPo47T1FbFUqvM1ReUg= -----END CERTIFICATE-----Generated at Tue Sep 9 10:33:49 2025 by rpki-client