$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: 7YShKBdP6PvesqGYN/pyPb4NuzBL05q+S/ias3H98us= Subject key identifier: 22:19:6C:B3:3B:41:B9:5D:4D:91:13:F1:07:E5:35:22:F7:E9:B4:98 Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 787259C50AB591AF476D0F1D25DCE81BA838B4DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: 0160 Signing time: Wed 25 Mar 2026 03:01:27 +0000 Manifest this update: Wed 25 Mar 2026 02:56:27 +0000 Manifest next update: Sat 28 Mar 2026 04:27:27 +0000 Files and hashes: 1: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=) 2: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: q6suRM1GDEk3DquWvwoiY8k1pPAMhJCE1PAKEv9TivM=) 3: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: DWdj4b/J8h9R8BiMu1bDJkTAbaDcrNvSXH1B7WU9BCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:72:59:c5:0a:b5:91:af:47:6d:0f:1d:25:dc:e8:1b:a8:38:b4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Mar 25 02:56:27 2026 GMT Not After : Mar 28 04:27:27 2026 GMT Subject: CN=22196CB33B41B95D4D9113F107E53522F7E9B498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:11:30:06:30:24:bc:f4:0f:a5:19:49:9a: cf:6d:18:54:27:94:01:3d:01:b8:5e:4b:58:ae:49: 35:0c:f3:6b:b3:1c:77:6e:fa:06:33:71:c5:43:57: 05:7d:2c:c7:8f:e2:6f:0f:d8:16:05:32:ce:ad:1e: 40:3d:08:2b:9b:a7:a1:bf:fb:9e:6c:de:91:b0:42: ce:de:64:1d:f6:63:30:bb:5e:45:1e:93:31:70:da: fc:e8:12:31:10:f2:d9:35:25:99:5f:0a:fe:3d:6c: 4d:30:bb:3e:63:85:05:e3:f6:47:00:26:4a:50:3e: 74:12:29:3e:89:2c:e9:7d:8c:5f:a7:bf:0b:40:28: 32:1e:76:63:d5:d2:1e:1b:d9:4f:28:3f:a6:0b:85: 7b:64:b7:4c:ea:10:d6:f6:6c:e0:66:52:b9:66:1b: 6d:33:3a:7c:58:43:10:4a:fb:69:57:61:50:83:24: ce:fe:ae:3e:75:a7:6c:69:e9:15:28:6a:ae:82:d7: 3f:76:cf:0d:74:50:6b:5b:24:4f:47:46:4a:75:25: df:2c:17:66:ce:70:e2:24:f6:ee:0f:d9:f6:7a:7f: 96:2a:b5:9a:52:58:78:c5:86:92:d9:e8:4f:33:53: 86:f5:70:ab:37:f6:03:f6:7a:ab:7d:50:80:a7:75: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:19:6C:B3:3B:41:B9:5D:4D:91:13:F1:07:E5:35:22:F7:E9:B4:98 X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5a:ba:ad:45:c6:42:dc:cb:b5:d0:53:18:22:88:cb:a2:38: e5:78:a9:a8:e2:49:c7:d6:01:cc:09:d8:35:eb:ad:16:f7:a0: 01:8a:0f:4c:90:d6:f9:bb:c0:e0:fc:8a:b4:f7:0c:28:9e:9c: 03:03:c4:77:89:a8:ec:72:89:69:49:66:dc:a7:c9:c6:06:63: 62:e3:e6:61:dc:58:32:3e:01:a1:15:d8:6d:74:c0:45:a0:9f: d6:f7:06:37:de:9a:66:ff:14:07:44:2d:4b:01:7f:06:8e:8b: e4:4a:f7:f4:17:de:41:09:b8:e1:54:cd:9b:85:58:98:10:50: a7:22:13:d2:82:47:d5:e3:35:c2:c3:9c:8d:01:b8:4a:6f:6a: 74:20:a8:fd:d8:89:a8:19:f6:bb:0a:32:35:09:41:33:fa:ea: ba:b8:2c:9d:3f:d5:5d:26:b3:2a:4f:ab:55:be:4f:f6:47:16: 56:e5:f4:d0:08:9a:25:91:f9:04:12:c7:b5:6d:c4:16:aa:d4: e0:c4:ac:00:5a:19:97:0c:fa:17:af:3a:28:33:00:8e:b6:ec: 0e:33:bc:4c:7f:df:bb:d8:50:49:58:7b:5c:44:30:0b:66:60: 9f:3e:7a:e1:e3:14:95:fe:a3:58:ca:ec:37:7c:8e:32:f7:13: aa:53:02:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHJZxQq1ka9HbQ8dJdzoG6g4tNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNjAzMjUwMjU2MjdaFw0yNjAzMjgwNDI3MjdaMDMxMTAvBgNV BAMTKDIyMTk2Q0IzM0I0MUI5NUQ0RDkxMTNGMTA3RTUzNTIyRjdFOUI0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYxEwBjAkvPQPpRlJms9tGFQn lAE9AbheS1iuSTUM82uzHHdu+gYzccVDVwV9LMeP4m8P2BYFMs6tHkA9CCubp6G/ +55s3pGwQs7eZB32YzC7XkUekzFw2vzoEjEQ8tk1JZlfCv49bE0wuz5jhQXj9kcA JkpQPnQSKT6JLOl9jF+nvwtAKDIedmPV0h4b2U8oP6YLhXtkt0zqENb2bOBmUrlm G20zOnxYQxBK+2lXYVCDJM7+rj51p2xp6RUoaq6C1z92zw10UGtbJE9HRkp1Jd8s F2bOcOIk9u4P2fZ6f5YqtZpSWHjFhpLZ6E8zU4b1cKs39gP2eqt9UICndeEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIhlssztBuV1NkRPxB+U1IvfptJgwHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdauq1FxkLcy7XQUxgiiMuiOOV4qajiScfW AcwJ2DXrrRb3oAGKD0yQ1vm7wOD8irT3DCienAMDxHeJqOxyiWlJZtynycYGY2Lj 5mHcWDI+AaEV2G10wEWgn9b3Bjfemmb/FAdELUsBfwaOi+RK9/QX3kEJuOFUzZuF WJgQUKciE9KCR9XjNcLDnI0BuEpvanQgqP3YiagZ9rsKMjUJQTP66rq4LJ0/1V0m sypPq1W+T/ZHFlbl9NAImiWR+QQSx7VtxBaq1ODErABaGZcM+hevOigzAI627A4z vEx/37vYUElYe1xEMAtmYJ8+euHjFJX+o1jK7Dd8jjL3E6pTArs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:15 2026 by rpki-client