$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: 6QHEaOMeJ9rNrMLjaj3DObY8EPqq6FWFSbD4UhpgwYc= Subject key identifier: 4A:84:F7:FA:70:8E:8E:6F:81:5B:B0:E0:FA:F4:1F:39:EA:CD:8B:68 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 0B674D2D82CEBE317EA340CD4DDC7D6262A06E96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 02E9 Signing time: Sun 19 Oct 2025 19:02:20 +0000 Manifest this update: Sun 19 Oct 2025 18:57:20 +0000 Manifest next update: Wed 22 Oct 2025 20:30:20 +0000 Files and hashes: 1: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) 2: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 3: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) 4: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) 5: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: awgmPL/uBq8iehdphwhn07dq6NuMssG+LAGcguFtsP4=) 6: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) 7: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 8: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:67:4d:2d:82:ce:be:31:7e:a3:40:cd:4d:dc:7d:62:62:a0:6e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Oct 19 18:57:20 2025 GMT Not After : Oct 22 20:30:20 2025 GMT Subject: CN=4A84F7FA708E8E6F815BB0E0FAF41F39EACD8B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:ec:24:0f:9c:aa:c9:61:37:53:86:e4:63: 91:28:47:8d:61:36:b6:55:ed:b8:95:4a:a6:dc:a2: 84:9e:eb:72:b3:3d:64:be:11:f9:32:84:20:0d:66: 14:9e:41:3a:aa:f3:3c:b0:85:72:a2:3d:b6:8f:f3: 5c:1a:53:ce:70:05:49:82:ab:33:8f:52:44:ae:9f: 9d:41:c6:49:9a:36:68:70:e9:95:15:d7:b0:70:b1: 65:e0:bd:1d:3f:af:2c:8d:53:09:85:84:b2:a1:10: 42:25:08:8d:e0:74:fb:3a:78:43:cc:09:40:79:64: 0b:64:71:72:9c:70:b3:8a:4b:6d:13:57:7e:89:12: 9b:03:a0:2d:5f:23:90:49:56:78:be:78:1b:f0:eb: 0d:c0:52:fb:80:76:93:1a:56:52:61:a4:de:bf:90: 07:0e:68:4a:f6:a8:89:a8:87:26:3d:85:32:67:b6: 45:ae:6e:b0:9c:ed:b3:51:a0:56:21:ff:32:2c:b3: dd:5d:6b:0d:7b:4b:ed:1d:0e:bb:07:32:55:72:29: 5b:02:e8:1b:77:c9:61:86:9c:da:a3:23:16:b9:28: 8e:4e:fb:c7:fd:34:23:0a:53:fb:d6:c8:53:3e:e8: 30:c7:ad:f9:11:e7:47:c4:04:60:d8:73:c9:05:86: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:84:F7:FA:70:8E:8E:6F:81:5B:B0:E0:FA:F4:1F:39:EA:CD:8B:68 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:91:07:e9:33:31:f6:92:4b:68:91:92:d1:90:94:eb:33:42: 47:b3:92:02:54:75:10:f9:4b:d7:81:98:d6:c9:66:98:40:1d: ea:e1:5e:c7:8d:58:34:bb:ac:86:1e:1a:91:05:4f:53:1d:65: f1:46:85:d6:65:5a:f7:f2:18:36:29:8c:87:fe:5a:92:5b:b4: d1:28:a1:a4:68:60:85:b8:05:38:cb:8a:c9:f3:b4:1e:f1:40: fe:f9:41:68:ba:94:b4:d2:25:8e:59:a2:5d:1f:fb:8f:ae:d7: db:43:3d:9d:72:3e:21:51:a6:04:df:52:b6:aa:c0:93:9d:85: 23:28:f3:2c:1b:9e:25:9d:dd:12:5c:cf:aa:83:eb:b3:10:22: ca:d4:4c:f2:ef:d6:f0:80:77:b3:fe:f5:c1:57:bc:be:fe:70: 82:68:e1:f9:a5:29:d9:68:32:a9:25:d8:b8:09:10:2a:12:31: f0:03:6a:12:06:97:37:c2:21:03:72:35:11:ad:e5:01:67:e1: 5b:f6:40:11:26:07:22:af:b3:8c:fc:6b:12:a2:37:f3:a6:87: cf:39:ae:09:d5:0d:49:4a:67:f3:ae:21:cb:3e:13:c5:8f:cf: d5:55:04:2f:2f:47:90:7d:e8:a5:9a:5f:21:c6:ed:5f:d6:e7: 8e:3e:b7:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2dNLYLOvjF+o0DNTdx9YmKgbpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTEwMTkxODU3MjBaFw0yNTEwMjIyMDMwMjBaMDMxMTAvBgNV BAMTKDRBODRGN0ZBNzA4RThFNkY4MTVCQjBFMEZBRjQxRjM5RUFDRDhCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzi+wkD5yqyWE3U4bkY5EoR41h NrZV7biVSqbcooSe63KzPWS+EfkyhCANZhSeQTqq8zywhXKiPbaP81waU85wBUmC qzOPUkSun51BxkmaNmhw6ZUV17BwsWXgvR0/ryyNUwmFhLKhEEIlCI3gdPs6eEPM CUB5ZAtkcXKccLOKS20TV36JEpsDoC1fI5BJVni+eBvw6w3AUvuAdpMaVlJhpN6/ kAcOaEr2qImohyY9hTJntkWubrCc7bNRoFYh/zIss91daw17S+0dDrsHMlVyKVsC 6Bt3yWGGnNqjIxa5KI5O+8f9NCMKU/vWyFM+6DDHrfkR50fEBGDYc8kFhgw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSoT3+nCOjm+BW7Dg+vQfOerNi2gwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByRB+kzMfaSS2iRktGQlOszQkezkgJUdRD5 S9eBmNbJZphAHerhXseNWDS7rIYeGpEFT1MdZfFGhdZlWvfyGDYpjIf+WpJbtNEo oaRoYIW4BTjLisnztB7xQP75QWi6lLTSJY5Zol0f+4+u19tDPZ1yPiFRpgTfUraq wJOdhSMo8ywbniWd3RJcz6qD67MQIsrUTPLv1vCAd7P+9cFXvL7+cIJo4fmlKdlo Mqkl2LgJECoSMfADahIGlzfCIQNyNRGt5QFn4Vv2QBEmByKvs4z8axKiN/Omh885 rgnVDUlKZ/OuIcs+E8WPz9VVBC8vR5B96KWaXyHG7V/W544+t4s= -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:42 2025 by rpki-client