$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: JULGVo9AIg3gUyf+n/iC6LrtKM4PgDJ5buUsEFELRg8= Subject key identifier: 3D:B8:90:0E:8E:AA:94:8F:FD:2E:FC:30:E8:16:7D:45:31:B0:FB:0D Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 6C3F3C90C556898886601E54579A7CE7346B66EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 032F Signing time: Wed 25 Mar 2026 01:02:36 +0000 Manifest this update: Wed 25 Mar 2026 00:57:36 +0000 Manifest next update: Sat 28 Mar 2026 10:54:36 +0000 Files and hashes: 1: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: ud49FXeRe72XxYEMKiYhkFOzmvzEUz+AuBntxaesnoo=) 2: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 3: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: JrzqCZ2W3zixGDlzSlopvMa8Mkim/eO8+TGGdft9KsE=) 4: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) 5: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) 6: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: cRM97GaLq+yg7Y/tZ49v1KCMaCyvkEqRI2ekhh5PAv4=) 7: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: yd+4PVrVahhOI0Trm8PtbfrlMIK16prZvw0LpGvMJHg=) 8: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3f:3c:90:c5:56:89:88:86:60:1e:54:57:9a:7c:e7:34:6b:66:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Mar 25 00:57:36 2026 GMT Not After : Mar 28 10:54:36 2026 GMT Subject: CN=3DB8900E8EAA948FFD2EFC30E8167D4531B0FB0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:b7:7e:b9:3c:fd:e5:17:7b:c9:53:d9:59: 99:53:e6:c3:ae:17:c4:85:ca:b8:92:7b:6b:b0:c7: 46:35:4e:62:01:e7:87:0b:f6:8c:20:7f:73:06:f4: f8:ab:72:7a:0f:5d:43:73:74:85:88:3b:fd:a2:5f: 35:31:89:09:52:98:cd:ab:55:a3:98:dd:97:22:9f: 2d:b8:7b:b5:11:1b:b8:46:1d:85:e7:28:a5:58:a7: d6:b9:e6:24:0e:6c:23:67:e2:bc:8d:5a:03:0a:69: 10:ad:02:a4:23:cd:47:18:fb:97:d3:40:9d:99:5a: 25:9a:9d:6c:d0:8c:9b:08:8f:4e:8f:33:5d:93:34: 0a:f2:f7:a1:2e:b8:66:86:76:51:b7:c0:f2:20:02: ea:66:8b:cb:e7:41:c3:58:88:c4:e6:d4:fc:0c:db: 73:28:e8:49:9e:57:e3:ee:83:f8:fd:e6:de:23:1e: 80:9a:6b:d9:47:bb:3e:3a:7b:88:aa:d8:8b:1b:2a: 2a:7b:52:f2:ae:0c:f1:d3:3e:1a:a8:ca:98:f2:f3: 87:3b:21:29:97:be:48:11:c1:74:82:56:33:ab:82: 50:c9:00:12:30:4c:98:8f:f7:a6:1f:33:44:a2:af: 7b:61:15:60:9a:53:9d:3f:a3:43:c2:fd:34:c1:2e: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B8:90:0E:8E:AA:94:8F:FD:2E:FC:30:E8:16:7D:45:31:B0:FB:0D X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4b:ad:64:64:da:b6:b5:68:a6:b1:47:63:48:0e:ab:46:37: 53:bd:ed:6b:44:f6:cc:74:5a:e1:fa:07:81:cc:e9:0a:66:f8: f5:df:b4:78:dc:a8:84:e3:7e:4e:dc:46:67:ab:0e:34:d4:16: 37:e1:b5:3d:9a:f8:b4:9e:04:6a:49:cc:3f:10:e4:9a:89:b4: dd:8c:8c:3a:04:f4:31:93:97:ff:ef:b6:f8:67:98:02:a6:10: ea:a3:55:3e:16:7f:15:2c:3d:c0:f8:17:c2:06:11:97:bb:90: d1:56:8c:8f:4a:e9:22:fc:a8:2a:44:96:9a:26:74:d5:24:21: 16:82:38:bf:81:6a:6f:20:85:f9:83:30:42:cb:78:de:30:3a: 15:e3:a3:9c:9a:49:64:b0:13:03:8d:4e:29:16:d1:8f:72:6b: 80:62:6c:a2:80:b0:ed:b5:48:27:c9:b5:44:6b:bb:76:f4:31: 06:1c:06:a3:22:69:ed:91:7e:f6:33:09:7f:39:c1:d6:73:cb: c1:61:18:b4:b5:7c:cd:5e:72:d5:e9:28:9e:a8:19:f1:a8:26: 8e:3f:a0:6f:9b:1d:fe:4c:68:9b:2e:1f:32:db:fa:9b:c4:a7: e4:28:ec:43:b5:b7:6e:3d:f9:56:85:97:e0:70:b5:66:40:72: ca:2b:d8:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbD88kMVWiYiGYB5UV5p85zRrZu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNjAzMjUwMDU3MzZaFw0yNjAzMjgxMDU0MzZaMDMxMTAvBgNV BAMTKDNEQjg5MDBFOEVBQTk0OEZGRDJFRkMzMEU4MTY3RDQ1MzFCMEZCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcLd+uTz95Rd7yVPZWZlT5sOu F8SFyriSe2uwx0Y1TmIB54cL9owgf3MG9PircnoPXUNzdIWIO/2iXzUxiQlSmM2r VaOY3Zciny24e7URG7hGHYXnKKVYp9a55iQObCNn4ryNWgMKaRCtAqQjzUcY+5fT QJ2ZWiWanWzQjJsIj06PM12TNAry96EuuGaGdlG3wPIgAupmi8vnQcNYiMTm1PwM 23Mo6EmeV+Pug/j95t4jHoCaa9lHuz46e4iq2IsbKip7UvKuDPHTPhqoypjy84c7 ISmXvkgRwXSCVjOrglDJABIwTJiP96YfM0Sir3thFWCaU50/o0PC/TTBLhPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPbiQDo6qlI/9Lvww6BZ9RTGw+w0wHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpLrWRk2ra1aKaxR2NIDqtGN1O97WtE9sx0 WuH6B4HM6Qpm+PXftHjcqITjfk7cRmerDjTUFjfhtT2a+LSeBGpJzD8Q5JqJtN2M jDoE9DGTl//vtvhnmAKmEOqjVT4WfxUsPcD4F8IGEZe7kNFWjI9K6SL8qCpElpom dNUkIRaCOL+Bam8ghfmDMELLeN4wOhXjo5yaSWSwEwONTikW0Y9ya4BibKKAsO21 SCfJtURru3b0MQYcBqMiae2RfvYzCX85wdZzy8FhGLS1fM1ectXpKJ6oGfGoJo4/ oG+bHf5MaJsuHzLb+pvEp+Qo7EO1t249+VaFl+BwtWZAcsor2BQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:58:35 2026 by rpki-client