$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: wGgOEVBXu59rkA2hqByCGwJbGm7NG01IsSgWW1CIMhY= Subject key identifier: 57:A6:68:A7:F3:06:B1:C3:62:D7:BC:31:0B:AD:4F:AD:88:1C:27:E0 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 561E6967657320FE99F451AFD01A6391FB3C45C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 02CF Signing time: Fri 22 Aug 2025 05:22:18 +0000 Manifest this update: Fri 22 Aug 2025 05:17:18 +0000 Manifest next update: Mon 25 Aug 2025 11:52:18 +0000 Files and hashes: 1: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) 2: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) 3: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) 4: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 5: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) 6: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 7: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: sQkolOG8I6uO4M0C/l856rWlMvQjZpObOL92Fvw3iJU=) 8: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1e:69:67:65:73:20:fe:99:f4:51:af:d0:1a:63:91:fb:3c:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Aug 22 05:17:18 2025 GMT Not After : Aug 25 11:52:18 2025 GMT Subject: CN=57A668A7F306B1C362D7BC310BAD4FAD881C27E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:71:85:23:2d:c7:e4:c7:16:20:5a:d4:dd: 70:09:9f:eb:b7:dd:b6:47:90:3b:bc:51:ea:85:be: 1d:12:43:2a:4b:9c:e7:4b:eb:98:e6:a4:e4:87:cc: 7f:23:35:46:5e:99:f8:36:eb:10:18:b9:87:e8:9e: a3:6f:fe:c9:ee:00:16:a3:48:94:a4:f2:4b:59:e2: 3a:b2:fb:42:e4:45:29:cc:36:ed:c5:ab:e1:de:4f: 61:e5:e1:8b:09:d5:75:ce:0d:18:68:65:b5:95:f2: 64:da:65:7f:0d:a8:ab:81:11:f3:e2:35:b0:af:33: 12:76:24:cb:48:02:81:3f:a0:f1:03:ae:79:fc:75: 7a:c0:6a:3b:fe:63:9c:c2:56:01:b6:11:dd:df:97: 71:93:80:ab:43:48:5f:b7:4f:15:1c:2c:c4:0b:5b: bf:aa:2f:af:be:7b:b2:b4:ab:d7:89:30:c2:88:c6: e0:66:f4:7e:54:84:be:8a:1a:a6:80:56:bc:21:73: 46:66:c1:ee:20:fb:1f:c7:6b:bb:ef:6e:68:ce:28: cb:db:27:76:df:8a:37:e8:9a:af:05:63:8f:61:74: 3f:5d:e9:b8:93:97:c1:ee:f3:49:78:71:04:27:b7: 3a:2c:8b:a0:df:07:62:75:07:b2:f8:71:d3:99:bb: 1b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A6:68:A7:F3:06:B1:C3:62:D7:BC:31:0B:AD:4F:AD:88:1C:27:E0 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7c:75:1f:38:55:d7:a7:86:d3:17:e3:28:56:34:59:95:35: 15:46:80:c0:d7:a9:ca:aa:e7:d1:c0:1f:d9:e8:1b:e7:f4:68: 00:0b:5c:8b:10:dc:99:15:7b:19:7e:36:3b:0a:d4:75:ec:38: 0b:6c:05:cb:d5:5f:04:f6:a6:0b:d2:fc:f2:7d:7b:47:51:85: 9b:00:f4:35:af:9a:33:2e:c1:e9:48:83:6a:d1:20:ad:18:ea: ee:b6:dd:eb:a8:72:94:42:5e:41:a6:65:4b:f6:c1:7c:86:78: e1:f4:b0:9b:8a:95:2d:e7:42:77:ed:d8:e0:27:69:bc:09:29: fe:da:20:6a:83:7b:0e:8c:cb:4b:b2:f4:0a:6f:5b:4c:a1:06: 7a:88:14:2f:11:c8:01:65:9d:d1:09:ec:84:02:ac:7e:fc:4d: 10:36:a2:d9:49:e3:85:d7:6d:ee:b7:89:70:e9:ad:61:5d:f9: 49:e6:81:b1:00:6f:4c:1a:f6:07:1a:f2:3c:be:8f:56:da:83: 14:8a:9f:11:52:b7:6b:d8:0e:d1:e7:3a:46:96:8e:16:55:cf: 1e:2d:a6:6b:94:7b:b8:d8:c2:79:98:d1:41:74:00:4a:51:e8: af:b8:cd:cd:54:7e:99:4f:59:68:71:6e:c9:02:e6:04:c8:97: 38:fa:b9:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVh5pZ2VzIP6Z9FGv0Bpjkfs8RcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTA4MjIwNTE3MThaFw0yNTA4MjUxMTUyMThaMDMxMTAvBgNV BAMTKDU3QTY2OEE3RjMwNkIxQzM2MkQ3QkMzMTBCQUQ0RkFEODgxQzI3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuDnGFIy3H5McWIFrU3XAJn+u3 3bZHkDu8UeqFvh0SQypLnOdL65jmpOSHzH8jNUZemfg26xAYuYfonqNv/snuABaj SJSk8ktZ4jqy+0LkRSnMNu3Fq+HeT2Hl4YsJ1XXODRhoZbWV8mTaZX8NqKuBEfPi NbCvMxJ2JMtIAoE/oPEDrnn8dXrAajv+Y5zCVgG2Ed3fl3GTgKtDSF+3TxUcLMQL W7+qL6++e7K0q9eJMMKIxuBm9H5UhL6KGqaAVrwhc0Zmwe4g+x/Ha7vvbmjOKMvb J3bfijfomq8FY49hdD9d6biTl8Hu80l4cQQntzosi6DfB2J1B7L4cdOZuxsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV6Zop/MGscNi17wxC61PrYgcJ+AwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIV8dR84VdenhtMX4yhWNFmVNRVGgMDXqcqq 59HAH9noG+f0aAALXIsQ3JkVexl+NjsK1HXsOAtsBcvVXwT2pgvS/PJ9e0dRhZsA 9DWvmjMuwelIg2rRIK0Y6u623euocpRCXkGmZUv2wXyGeOH0sJuKlS3nQnft2OAn abwJKf7aIGqDew6My0uy9ApvW0yhBnqIFC8RyAFlndEJ7IQCrH78TRA2otlJ44XX be63iXDprWFd+UnmgbEAb0wa9gca8jy+j1bagxSKnxFSt2vYDtHnOkaWjhZVzx4t pmuUe7jYwnmY0UF0AEpR6K+4zc1UfplPWWhxbskC5gTIlzj6uak= -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:00 2025 by rpki-client