$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft File: 49E12E5CDD57B2E343A560CA6816C93C81748A71.mft (raw, json) Hash identifier: fW+1IhedY4zefcspcogO3M98WWka6sSm5d+H1nAuw3A= Subject key identifier: DA:C0:C0:68:41:AC:1C:20:3A:98:BB:CA:E1:F4:61:91:4C:19:3D:FD Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 61A1F97A69DB2005B42598DC87262BB8C22EA48C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft Manifest number: 0195 Signing time: Tue 03 Jun 2025 09:14:58 +0000 Manifest this update: Tue 03 Jun 2025 09:09:58 +0000 Manifest next update: Fri 06 Jun 2025 15:50:58 +0000 Files and hashes: 1: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: EC4pdeKS6m2DS2kb8wXXQcTFTqrjCCiW8l5re1PpeaY=) 2: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: 1ZjwKj5FyNPg7EqZzxjb+MWBzZJK5F12g1ZsYa8Kk1s=) 3: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: 2M7ym4x+2EoAnsRwKsCD8M2xKS4VnhZ8DePxWflgvZ4=) 4: 49E12E5CDD57B2E343A560CA6816C93C81748A71.crl (hash: 2SbtN0xjRI0jaL3NzSNaOrbuklNup4wv0+aqw5lodrw=) 5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: IsUfNXGGb6B2JpK1REITELEe401FAG/0ijHJDoCEoDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a1:f9:7a:69:db:20:05:b4:25:98:dc:87:26:2b:b8:c2:2e:a4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Jun 3 09:09:58 2025 GMT Not After : Jun 6 15:50:58 2025 GMT Subject: CN=DAC0C06841AC1C203A98BBCAE1F461914C193DFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:ac:71:50:1b:4d:1b:b4:05:d7:c9:5d:f4: 8c:be:14:25:20:c4:a9:22:20:e5:62:9b:fc:47:61: 8e:4e:30:9e:52:8b:ad:5a:7c:d7:37:c2:93:ab:ac: a6:8f:2b:70:33:4e:37:ae:85:96:ab:a3:3d:70:d8: bd:5e:20:e5:ab:35:80:ff:14:23:8e:a2:00:3c:8a: 9d:21:95:2b:8b:fe:33:7b:9c:92:4f:24:99:84:5b: 33:21:c5:4f:c7:d1:a1:dc:f6:a5:72:51:87:d4:c5: 59:ae:31:51:0e:05:d1:c6:52:ab:df:52:40:3b:b6: 2f:53:fd:30:d9:c3:42:e6:f2:53:e6:a0:2d:31:be: 74:2b:df:19:18:f7:db:e3:31:3e:6a:3b:87:8c:71: 6f:e1:49:d3:b0:f0:9b:29:cd:0e:48:8a:8b:5a:e6: 7e:42:70:80:ed:6b:a8:ad:33:61:4e:1e:30:ae:a1: 35:98:05:97:34:a7:f9:58:7a:ea:ae:dd:fd:dc:e7: a5:c3:49:86:99:df:23:be:50:90:14:bc:93:bc:65: 95:f8:eb:d5:1a:32:ec:75:34:92:83:02:20:a6:53: 97:4d:08:1c:5a:44:19:de:77:c4:63:b6:52:6c:2b: 7b:91:f9:d2:32:0c:ba:37:d8:85:67:e3:35:54:18: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C0:C0:68:41:AC:1C:20:3A:98:BB:CA:E1:F4:61:91:4C:19:3D:FD X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:9d:cd:94:fe:bb:91:7a:ad:b8:ac:09:13:79:22:a1:b4:76: 53:ef:0e:a4:6f:a7:5a:10:97:10:77:a1:97:3c:42:a9:46:ad: 8e:9c:f1:1a:27:a4:ce:3e:fa:eb:6e:24:ad:6d:78:04:97:58: 6a:0f:95:6a:23:7e:78:b1:8e:5f:7d:3c:0b:ff:14:d7:ac:c0: 3d:75:36:ab:6b:41:22:05:16:3e:7e:85:b0:5b:14:04:4b:9e: e0:c3:b6:22:97:c4:ff:76:54:1e:0f:2d:ff:78:14:c1:10:06: 2b:d1:da:b4:4f:58:02:62:ba:2f:17:59:da:f5:8c:fe:98:90: c8:61:a8:96:9e:ab:4d:a8:c6:53:00:1e:b5:26:29:c7:89:68: 33:20:2e:24:04:8b:09:8b:38:4b:7f:69:76:d4:9b:3b:d5:c8: bb:98:42:0f:bc:a1:c0:a7:f8:5e:64:c2:b5:70:cc:39:b7:d1: e5:a7:ef:ee:58:ed:25:2d:b7:25:cf:8e:03:73:9c:50:4c:d6: 96:66:58:f8:4a:25:3a:89:ee:bb:b1:d2:63:a5:97:e3:2a:77: 0b:c6:5f:c1:e2:89:08:e5:31:88:bb:21:48:15:0c:81:c3:b8: 99:f2:7d:76:55:91:df:17:7d:4e:99:8b:c6:d3:99:92:0a:22: 6d:45:6f:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaH5emnbIAW0JZjchyYruMIupIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTA2MDMwOTA5NThaFw0yNTA2MDYxNTUwNThaMDMxMTAvBgNV BAMTKERBQzBDMDY4NDFBQzFDMjAzQTk4QkJDQUUxRjQ2MTkxNEMxOTNERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1axxUBtNG7QF18ld9Iy+FCUg xKkiIOVim/xHYY5OMJ5Si61afNc3wpOrrKaPK3AzTjeuhZaroz1w2L1eIOWrNYD/ FCOOogA8ip0hlSuL/jN7nJJPJJmEWzMhxU/H0aHc9qVyUYfUxVmuMVEOBdHGUqvf UkA7ti9T/TDZw0Lm8lPmoC0xvnQr3xkY99vjMT5qO4eMcW/hSdOw8JspzQ5Iiota 5n5CcIDta6itM2FOHjCuoTWYBZc0p/lYeuqu3f3c56XDSYaZ3yO+UJAUvJO8ZZX4 69UaMux1NJKDAiCmU5dNCBxaRBned8RjtlJsK3uR+dIyDLo32IVn4zVUGDknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sDAaEGsHCA6mLvK4fRhkUwZPf0wHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5 M0M4MTc0OEE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmdzZT+u5F6rbisCRN5IqG0dlPvDqRvp1oQ lxB3oZc8QqlGrY6c8RonpM4++utuJK1teASXWGoPlWojfnixjl99PAv/FNeswD11 NqtrQSIFFj5+hbBbFARLnuDDtiKXxP92VB4PLf94FMEQBivR2rRPWAJiui8XWdr1 jP6YkMhhqJaeq02oxlMAHrUmKceJaDMgLiQEiwmLOEt/aXbUmzvVyLuYQg+8ocCn +F5kwrVwzDm30eWn7+5Y7SUttyXPjgNznFBM1pZmWPhKJTqJ7rux0mOll+MqdwvG X8HiiQjlMYi7IUgVDIHDuJnyfXZVkd8XfU6Zi8bTmZIKIm1Fb9s= -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:13 2025 by rpki-client