$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: Z/WN6ceY+GNX9NgPwkumQ9gy14uAQQ8iYkyQkVX1Uqg= Subject key identifier: 8B:C2:1C:25:19:B3:08:E8:86:40:9E:5F:66:C0:29:B8:9E:E9:3A:50 Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 1AA99AAFA9411DAC844679441DA5A30433254ADB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: E8 Signing time: Sun 29 Jun 2025 18:21:16 +0000 Manifest this update: Sun 29 Jun 2025 18:16:16 +0000 Manifest next update: Thu 03 Jul 2025 03:32:16 +0000 Files and hashes: 1: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=) 2: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) 3: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: Yj0NYeQWUHZ0VSBcLzxRGkycJwbB8p26H3N+jcd9484=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a9:9a:af:a9:41:1d:ac:84:46:79:44:1d:a5:a3:04:33:25:4a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Jun 29 18:16:16 2025 GMT Not After : Jul 3 03:32:16 2025 GMT Subject: CN=8BC21C2519B308E886409E5F66C029B89EE93A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:a9:ce:f8:a6:cd:9e:5c:34:b9:3c:51:36: 87:90:4e:29:ba:ba:55:c0:cb:1c:92:fd:06:1f:72: 7c:fe:cd:ed:2b:34:1d:cb:89:2e:c6:00:50:45:ef: a3:56:20:a8:85:2c:18:48:4d:0c:50:82:89:5e:f5: de:2d:2c:7f:bd:70:4f:c8:2d:09:87:d0:10:80:af: 19:69:fb:b7:ff:53:64:95:b1:85:d4:8c:39:e8:14: 49:ae:c0:4e:24:64:30:13:e6:30:d9:f7:23:80:5f: 6d:8d:58:9c:8b:42:e5:71:d7:84:48:6d:d8:ba:a2: af:71:30:c6:63:c0:c5:5d:b7:ec:6a:eb:bb:7f:b9: b2:17:53:ce:6e:e0:bb:bb:17:d0:03:dc:80:58:40: 39:40:3a:31:0a:ec:b5:cb:66:3a:e2:fb:0a:d1:e4: 2f:cd:d3:09:7b:06:81:19:91:b2:20:55:b2:de:df: f9:bd:c7:7a:6c:03:ee:07:f5:73:d4:ae:dd:ee:7f: 56:e3:f0:f1:aa:f6:bd:e9:6f:ff:c5:71:a8:20:ac: 25:61:02:55:24:0c:fe:a0:f4:bf:ef:dc:12:e1:4f: ee:ae:da:c6:89:a0:0f:65:65:70:a1:05:3e:e6:69: 2a:93:20:aa:ac:08:9f:8c:31:03:0f:a2:88:6d:3f: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:1C:25:19:B3:08:E8:86:40:9E:5F:66:C0:29:B8:9E:E9:3A:50 X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:21:98:08:ab:49:20:b0:aa:5d:c1:72:f3:82:a2:0d:5e:94: 7a:74:0e:f9:b6:6b:d5:9b:e0:f4:47:e4:84:00:36:53:3a:aa: 50:15:cc:d6:14:6a:4e:e5:92:c5:f1:d8:b8:d0:3e:e6:86:0d: cc:f1:3f:73:0c:33:f8:b8:ba:ad:23:43:50:eb:b4:e4:00:ae: 52:99:af:ca:47:a8:20:8b:ba:f3:9c:b8:31:5f:e9:49:f7:16: ee:30:a6:fb:47:44:6b:c9:49:1d:bd:98:27:95:be:28:c4:04: 67:ef:45:98:b3:54:0f:9c:12:84:2f:88:23:c2:9f:1b:a9:ad: 70:4f:1a:d2:29:97:28:ac:b8:f7:6e:77:03:13:73:41:3b:89: f3:62:c7:66:cc:76:52:5e:4f:a1:30:14:fc:56:19:1b:35:7d: a0:7e:48:77:43:29:f7:b5:5c:58:17:15:06:50:1d:8d:77:9f: 26:35:ae:da:11:6d:cc:94:81:2d:6f:f4:ff:e1:22:4d:86:ff: a7:e8:6a:89:3b:19:eb:46:81:81:79:cc:ee:62:98:0c:e0:85: 58:8a:54:3f:fc:d9:ea:59:1d:4c:59:c6:60:5e:53:9f:8e:99: 7f:70:c3:34:95:bd:9c:8e:61:bc:d4:57:88:a9:bd:67:e5:ba: fb:ac:da:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqmar6lBHayERnlEHaWjBDMlStswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTA2MjkxODE2MTZaFw0yNTA3MDMwMzMyMTZaMDMxMTAvBgNV BAMTKDhCQzIxQzI1MTlCMzA4RTg4NjQwOUU1RjY2QzAyOUI4OUVFOTNBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCup6nO+KbNnlw0uTxRNoeQTim6 ulXAyxyS/QYfcnz+ze0rNB3LiS7GAFBF76NWIKiFLBhITQxQgole9d4tLH+9cE/I LQmH0BCArxlp+7f/U2SVsYXUjDnoFEmuwE4kZDAT5jDZ9yOAX22NWJyLQuVx14RI bdi6oq9xMMZjwMVdt+xq67t/ubIXU85u4Lu7F9AD3IBYQDlAOjEK7LXLZjri+wrR 5C/N0wl7BoEZkbIgVbLe3/m9x3psA+4H9XPUrt3uf1bj8PGq9r3pb//FcaggrCVh AlUkDP6g9L/v3BLhT+6u2saJoA9lZXChBT7maSqTIKqsCJ+MMQMPoohtPxglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8IcJRmzCOiGQJ5fZsApuJ7pOlAwHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAchmAirSSCwql3BcvOCog1elHp0Dvm2a9Wb 4PRH5IQANlM6qlAVzNYUak7lksXx2LjQPuaGDczxP3MMM/i4uq0jQ1DrtOQArlKZ r8pHqCCLuvOcuDFf6Un3Fu4wpvtHRGvJSR29mCeVvijEBGfvRZizVA+cEoQviCPC nxuprXBPGtIplyisuPdudwMTc0E7ifNix2bMdlJeT6EwFPxWGRs1faB+SHdDKfe1 XFgXFQZQHY13nyY1rtoRbcyUgS1v9P/hIk2G/6foaok7GetGgYF5zO5imAzghViK VD/82epZHUxZxmBeU5+OmX9wwzSVvZyOYbzUV4ipvWfluvus2tc= -----END CERTIFICATE-----Generated at Tue Jul 1 19:28:16 2025 by rpki-client