$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: /hMf2HMyqCSwVpDQAMVN+ynrlhbQL29jR00W6LRq4qY= Subject key identifier: 92:6F:CD:62:65:F5:6F:8B:29:FB:25:56:54:F7:A3:B4:A5:7B:89:51 Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 0E831563569A12B505CCBA52A18F2FB7851039E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: 011A Signing time: Mon 20 Oct 2025 10:51:17 +0000 Manifest this update: Mon 20 Oct 2025 10:46:17 +0000 Manifest next update: Thu 23 Oct 2025 16:33:17 +0000 Files and hashes: 1: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: FI09j/hST40mQYzMGqQfHuhsh8fbyV7/mPp/gTRVc5k=) 2: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=) 3: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:83:15:63:56:9a:12:b5:05:cc:ba:52:a1:8f:2f:b7:85:10:39:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Oct 20 10:46:17 2025 GMT Not After : Oct 23 16:33:17 2025 GMT Subject: CN=926FCD6265F56F8B29FB255654F7A3B4A57B8951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:6a:b2:ee:e2:94:9a:25:5e:18:54:50:f8: 0f:25:0d:0d:6a:0c:4e:2b:f5:e0:bc:56:ee:bd:50: 91:30:d3:bb:4f:5f:21:b7:dd:19:ca:a4:d5:5a:f0: 1c:42:59:20:b7:24:df:87:14:db:88:99:f6:48:13: f4:52:1b:63:d3:49:c9:bf:d3:65:ae:5c:99:59:e1: 86:47:e5:dc:d6:80:7a:11:16:cd:1a:39:08:cf:1b: d0:4c:6f:15:5a:0a:df:2c:76:6b:0c:5b:24:46:9d: ad:9a:01:ac:e1:84:3a:d0:64:b8:95:5f:fe:94:04: 9d:33:5e:cd:42:45:bc:50:6b:f5:a5:d0:9b:ae:84: b2:ac:60:19:cc:df:b2:40:31:70:cc:8b:25:9e:14: be:63:08:be:59:59:88:ee:5b:9a:38:d1:a5:90:b4: 28:3b:f3:54:47:da:a5:8f:23:99:d9:55:b2:fa:f9: 10:01:c5:c7:2b:d2:3d:78:f4:05:85:33:45:9c:b7: 7a:8b:ea:a3:8b:20:d1:d2:9b:c8:82:5f:ce:ad:ff: 52:5f:00:62:59:67:2c:e0:5c:78:04:4f:73:f0:2c: f2:60:cc:24:62:7e:05:ca:f4:c0:b4:fe:f3:86:8f: a1:58:3a:e0:ec:02:8f:fc:a4:da:cd:c3:bd:f9:2e: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6F:CD:62:65:F5:6F:8B:29:FB:25:56:54:F7:A3:B4:A5:7B:89:51 X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5f:f0:45:b1:12:52:72:74:b5:16:48:0d:86:c6:5b:e9:b1: 38:ac:69:0d:14:85:a8:dd:1c:8b:95:77:30:9c:8e:ae:b6:99: 74:eb:70:f7:05:6e:93:b8:ca:ff:5f:7b:5f:ef:8f:4c:d0:84: a2:05:52:7f:bd:87:f0:61:78:41:c7:55:a8:c5:2e:a7:12:8c: 2f:db:68:57:ae:f3:a2:97:87:47:0c:e5:1a:0f:89:8b:54:ce: 7a:43:61:f7:69:52:a1:eb:d3:65:ff:91:92:dc:8e:2d:bf:48: 72:f0:56:57:e2:73:f6:a1:af:e4:89:74:7f:c1:13:a1:c5:20: bd:50:b6:c0:e8:6f:1b:95:c2:5b:33:0f:45:db:ff:6a:3c:5b: 24:e0:e7:40:8a:a9:90:99:e7:1e:de:5f:2b:6c:2e:20:0d:43: 30:bb:ee:2e:c9:f1:45:b8:18:ba:ae:33:ed:5e:c2:7d:63:00: de:cf:09:fa:6e:80:b1:68:ae:be:a4:9a:6c:fe:f6:2b:25:09: ef:20:d7:b3:b4:ab:00:6e:80:ae:4f:6f:8b:2f:5b:10:ba:3d: 82:32:8d:4a:f6:e5:84:11:7d:e4:13:01:33:2a:ae:c4:a7:4b: fa:ad:c4:72:18:dd:44:0e:f3:59:99:d0:ce:da:1d:33:7f:46: f2:fb:53:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDoMVY1aaErUFzLpSoY8vt4UQOecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTEwMjAxMDQ2MTdaFw0yNTEwMjMxNjMzMTdaMDMxMTAvBgNV BAMTKDkyNkZDRDYyNjVGNTZGOEIyOUZCMjU1NjU0RjdBM0I0QTU3Qjg5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpWqy7uKUmiVeGFRQ+A8lDQ1q DE4r9eC8Vu69UJEw07tPXyG33RnKpNVa8BxCWSC3JN+HFNuImfZIE/RSG2PTScm/ 02WuXJlZ4YZH5dzWgHoRFs0aOQjPG9BMbxVaCt8sdmsMWyRGna2aAazhhDrQZLiV X/6UBJ0zXs1CRbxQa/Wl0JuuhLKsYBnM37JAMXDMiyWeFL5jCL5ZWYjuW5o40aWQ tCg781RH2qWPI5nZVbL6+RABxccr0j149AWFM0Wct3qL6qOLINHSm8iCX86t/1Jf AGJZZyzgXHgET3PwLPJgzCRifgXK9MC0/vOGj6FYOuDsAo/8pNrNw735LnWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkm/NYmX1b4sp+yVWVPejtKV7iVEwHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1f8EWxElJydLUWSA2GxlvpsTisaQ0Uhajd HIuVdzCcjq62mXTrcPcFbpO4yv9fe1/vj0zQhKIFUn+9h/BheEHHVajFLqcSjC/b aFeu86KXh0cM5RoPiYtUznpDYfdpUqHr02X/kZLcji2/SHLwVlfic/ahr+SJdH/B E6HFIL1QtsDobxuVwlszD0Xb/2o8WyTg50CKqZCZ5x7eXytsLiANQzC77i7J8UW4 GLquM+1ewn1jAN7PCfpugLForr6kmmz+9islCe8g17O0qwBugK5Pb4svWxC6PYIy jUr25YQRfeQTATMqrsSnS/qtxHIY3UQO81mZ0M7aHTN/RvL7U1U= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:31 2025 by rpki-client