$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: ytHR4ixFq/6PqhoYyubiJ41vwKRWI2HCCwHm2hqmEp0= Subject key identifier: 0C:99:3D:D0:A3:BB:8D:7E:3B:43:8E:38:A0:DC:A6:EE:AF:2F:7C:5C Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 4B66103B414CAA0DA4015F8CAA639083913C7DAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: D2 Signing time: Sat 10 May 2025 12:11:15 +0000 Manifest this update: Sat 10 May 2025 12:06:15 +0000 Manifest next update: Tue 13 May 2025 15:38:15 +0000 Files and hashes: 1: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) 2: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: LkSHRy589jYpsfFTp+tPzkgwvZQDTpbbSEAVlrpW2Nk=) 3: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:66:10:3b:41:4c:aa:0d:a4:01:5f:8c:aa:63:90:83:91:3c:7d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: May 10 12:06:15 2025 GMT Not After : May 13 15:38:15 2025 GMT Subject: CN=0C993DD0A3BB8D7E3B438E38A0DCA6EEAF2F7C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:43:50:e4:b4:cb:bc:f5:80:1b:b1:c8:26: 2b:2b:2c:6e:3f:6e:68:bd:3a:eb:17:77:e8:c3:40: 5c:f1:15:5d:5a:44:5d:a5:d9:a6:a9:0f:fd:92:98: b4:c5:38:b6:dd:29:73:19:0d:4b:f6:9b:9f:91:20: f5:58:13:29:1f:26:7d:71:9b:8b:25:d5:94:fa:f0: 3a:5e:bc:41:e7:09:4f:b9:e8:4a:17:b3:82:2b:e4: a3:6a:55:a0:62:88:bd:b9:72:66:28:1d:9d:9d:bb: 85:41:c2:5b:33:24:58:36:84:9f:e7:ce:3d:0d:4b: fb:4b:92:33:13:de:0b:26:05:b3:45:f8:4b:02:fe: 44:7d:f8:9b:0e:b2:f8:4e:5e:86:d3:57:ae:68:a8: 8e:c3:fb:0f:14:96:73:02:59:16:aa:6b:a0:ec:68: 9f:c8:18:be:04:66:ae:dc:83:c7:47:a7:ac:f1:fa: 6d:1c:98:69:45:45:ba:7f:77:1b:69:75:65:80:eb: 50:a9:ca:23:c5:b2:69:42:29:45:b7:d4:1b:e4:c7: b4:df:96:a1:ad:15:f8:3d:5c:af:d7:a3:e6:91:ab: 6c:f9:84:13:34:39:fb:09:82:09:26:56:94:49:26: dd:5a:9b:c1:99:fe:ad:6f:d6:15:20:d4:5b:16:50: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:99:3D:D0:A3:BB:8D:7E:3B:43:8E:38:A0:DC:A6:EE:AF:2F:7C:5C X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ff:88:cd:62:b8:cc:2d:84:e5:94:89:2b:05:c1:62:4c:22: b9:ef:f1:8e:19:f2:68:63:b1:a5:24:b8:61:2f:d8:13:08:46: dd:ca:21:c5:0c:6c:23:2c:59:55:a7:7c:97:f5:75:93:53:ae: 75:6d:ab:04:40:b9:fd:c9:15:6c:67:de:79:32:41:86:e6:50: 21:7b:fb:05:7f:e5:90:92:3c:2c:93:37:a3:91:70:bb:9e:6d: 06:d2:ac:51:29:4b:d0:f7:34:f8:0e:76:c5:b1:73:ec:1f:fe: a2:aa:be:26:9a:ed:8c:c6:20:9c:56:7f:36:ac:03:8d:ab:bc: 7b:c1:ae:01:f4:e5:5a:ad:7f:fa:9d:96:65:0c:71:c5:fb:fa: 24:68:08:6f:bc:df:19:cd:6f:d1:1d:a2:ea:d8:2e:cf:f1:89: 6f:e4:0e:bd:21:30:3c:ec:64:e1:c5:a4:ab:7c:1e:1b:d6:1b: f4:3b:84:13:7b:28:c2:1f:06:89:5e:f1:92:e7:eb:59:b0:2b: ae:da:f9:09:1d:60:bd:ba:a1:16:bc:6e:10:66:9d:9a:a8:a1: 62:c7:d7:24:e7:81:28:de:b9:96:e3:91:24:e7:0f:ee:70:54: a3:2a:94:fe:fa:01:68:c1:c5:ed:ea:ae:42:f6:29:68:13:27: 47:ee:fb:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2YQO0FMqg2kAV+MqmOQg5E8fawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTA1MTAxMjA2MTVaFw0yNTA1MTMxNTM4MTVaMDMxMTAvBgNV BAMTKDBDOTkzREQwQTNCQjhEN0UzQjQzOEUzOEEwRENBNkVFQUYyRjdDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rUNQ5LTLvPWAG7HIJisrLG4/ bmi9OusXd+jDQFzxFV1aRF2l2aapD/2SmLTFOLbdKXMZDUv2m5+RIPVYEykfJn1x m4sl1ZT68DpevEHnCU+56EoXs4Ir5KNqVaBiiL25cmYoHZ2du4VBwlszJFg2hJ/n zj0NS/tLkjMT3gsmBbNF+EsC/kR9+JsOsvhOXobTV65oqI7D+w8UlnMCWRaqa6Ds aJ/IGL4EZq7cg8dHp6zx+m0cmGlFRbp/dxtpdWWA61CpyiPFsmlCKUW31Bvkx7Tf lqGtFfg9XK/Xo+aRq2z5hBM0OfsJggkmVpRJJt1am8GZ/q1v1hUg1FsWUPYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDJk90KO7jX47Q444oNym7q8vfFwwHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb/iM1iuMwthOWUiSsFwWJMIrnv8Y4Z8mhj saUkuGEv2BMIRt3KIcUMbCMsWVWnfJf1dZNTrnVtqwRAuf3JFWxn3nkyQYbmUCF7 +wV/5ZCSPCyTN6ORcLuebQbSrFEpS9D3NPgOdsWxc+wf/qKqviaa7YzGIJxWfzas A42rvHvBrgH05Vqtf/qdlmUMccX7+iRoCG+83xnNb9EdourYLs/xiW/kDr0hMDzs ZOHFpKt8HhvWG/Q7hBN7KMIfBole8ZLn61mwK67a+QkdYL26oRa8bhBmnZqooWLH 1yTngSjeuZbjkSTnD+5wVKMqlP76AWjBxe3qrkL2KWgTJ0fu+2w= -----END CERTIFICATE-----Generated at Mon May 12 02:28:13 2025 by rpki-client