$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft File: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft (raw, json) Hash identifier: qyRUSoc0/GSqZFBjwYidhb5HK14uHhivvXyWhYkzTak= Subject key identifier: B7:BA:61:A8:5E:3D:00:ED:5C:2B:CA:93:B9:64:55:D1:34:51:26:09 Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Certificate serial: 7FEBB8A104DDC0B4A9C58AADE8109D640BB4B88E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft Manifest number: 8A Signing time: Sat 23 Aug 2025 02:11:47 +0000 Manifest this update: Sat 23 Aug 2025 02:06:47 +0000 Manifest next update: Tue 26 Aug 2025 03:05:47 +0000 Files and hashes: 1: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: owuKJ6CVlpumrmiYvGv6LFymhh0iftK2bFRLbak/Vtw=) 2: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl (hash: EY2VcFZoRi/PKbiJpUG+95Ne7AdS7lR7eGgTXoDqVrQ=) 3: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: fygin3I1xgjjFUHRJ4EiAgM+R/8we3DGnULcJ+28xQo=) 4: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: n9e/0sEAxnxjRV58QVqHL9QspOrx1U/QI3uFgFT4Dgc=) 5: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: wZNP2V29Z/jMnx5FE2pxqCWbmr2oULBwAtIiARov+Sw=) 6: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: morO6ZUxlq/Lh6TfTpqRzEHZjySzNdowmQBR8R91xgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:eb:b8:a1:04:dd:c0:b4:a9:c5:8a:ad:e8:10:9d:64:0b:b4:b8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Validity Not Before: Aug 23 02:06:47 2025 GMT Not After : Aug 26 03:05:47 2025 GMT Subject: CN=B7BA61A85E3D00ED5C2BCA93B96455D134512609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:00:12:82:78:74:9a:e6:ed:16:76:ad:c5: f7:b5:42:cc:ce:30:78:1d:35:17:77:f4:09:f3:f8: 53:cb:59:29:fc:37:54:77:b1:42:46:6b:11:e6:f8: 85:8f:2c:9a:95:ba:bc:84:75:b0:26:89:7f:53:1f: cb:69:39:f0:b1:6d:39:d9:35:d2:b9:f0:be:6d:1a: 93:21:72:82:dc:16:ca:32:08:f1:bb:7a:65:2f:c5: 8c:ea:4f:36:d0:11:95:20:84:72:13:f1:95:cc:fb: e5:b5:22:63:5a:11:e9:6b:65:2a:2b:35:8e:23:29: 28:f4:80:00:1a:94:53:7d:1b:01:e3:f7:01:eb:0c: 26:e2:f8:37:33:24:f0:c0:5c:32:5d:75:bf:e0:8e: bb:05:69:a0:4c:74:33:ee:2f:bd:c3:a5:6b:ab:8a: 45:ad:1e:78:ff:68:6e:e3:27:a4:f3:af:1c:d2:17: 7b:db:14:cc:c1:02:a8:c3:64:6c:21:a1:8b:a3:44: 1d:ef:9c:d1:49:63:46:67:06:3f:82:35:6a:31:ec: 91:d0:13:41:ce:5d:8d:b8:50:a0:4a:1e:9e:77:15: 58:9f:7a:2c:0f:89:b7:97:8c:72:87:02:d9:33:b6: 9c:fa:8e:2c:fa:00:2d:13:35:4c:ad:0c:e3:82:80: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BA:61:A8:5E:3D:00:ED:5C:2B:CA:93:B9:64:55:D1:34:51:26:09 X509v3 Authority Key Identifier: keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a3:fb:46:ce:4b:f8:aa:ad:17:2e:d8:01:c2:07:48:a0:d6: 63:32:31:f6:e1:23:df:85:2c:13:4a:3d:8e:fa:4a:66:7c:cc: 77:39:d5:a4:21:f5:ec:62:40:8a:c8:f4:41:29:ca:8f:dc:ab: 41:34:98:d1:de:49:df:02:bc:42:e9:62:1f:ae:7b:68:17:ae: 42:6a:32:ce:7a:6a:ec:43:b8:f3:fc:8a:9f:da:91:b1:45:71: 22:7a:42:2e:01:85:70:36:5b:6a:9e:c4:fe:44:d2:5c:46:50: ba:e4:6d:0c:d4:56:e6:61:0a:b5:b9:fb:7b:e3:b4:cd:cf:35: 12:b5:a7:97:17:1c:c8:40:25:67:a6:64:8d:55:64:65:60:33: 3c:d2:47:9a:5b:f7:43:6c:64:03:59:72:29:ac:3a:03:c2:7e: 57:57:c2:65:21:f7:58:ab:5f:22:83:5e:a2:f5:80:c1:1f:fc: af:77:e2:cf:2e:fa:a4:f6:c7:bb:11:ff:be:f2:8d:8b:29:49: 4a:82:59:a2:03:48:b2:62:3f:d4:0f:ee:a4:88:ca:9e:f2:46: c8:45:87:32:12:d6:fa:35:ab:e1:25:08:f4:0f:16:81:89:a4: f2:d2:25:bc:31:d3:6f:e9:27:cb:d5:8a:ec:28:3d:6a:8f:5d: b4:d8:4f:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+u4oQTdwLSpxYqt6BCdZAu0uI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE QzM0RUE2QTAeFw0yNTA4MjMwMjA2NDdaFw0yNTA4MjYwMzA1NDdaMDMxMTAvBgNV BAMTKEI3QkE2MUE4NUUzRDAwRUQ1QzJCQ0E5M0I5NjQ1NUQxMzQ1MTI2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiuwASgnh0mubtFnatxfe1QszO MHgdNRd39Anz+FPLWSn8N1R3sUJGaxHm+IWPLJqVuryEdbAmiX9TH8tpOfCxbTnZ NdK58L5tGpMhcoLcFsoyCPG7emUvxYzqTzbQEZUghHIT8ZXM++W1ImNaEelrZSor NY4jKSj0gAAalFN9GwHj9wHrDCbi+DczJPDAXDJddb/gjrsFaaBMdDPuL73DpWur ikWtHnj/aG7jJ6TzrxzSF3vbFMzBAqjDZGwhoYujRB3vnNFJY0ZnBj+CNWox7JHQ E0HOXY24UKBKHp53FVifeiwPibeXjHKHAtkztpz6jiz6AC0TNUytDOOCgFq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt7phqF49AO1cK8qTuWRV0TRRJgkwHwYDVR0j BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2 MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0 RUE2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJC Q0REQzM0RUE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuj+0bOS/iqrRcu2AHCB0ig1mMyMfbhI9+F LBNKPY76SmZ8zHc51aQh9exiQIrI9EEpyo/cq0E0mNHeSd8CvELpYh+ue2gXrkJq Ms56auxDuPP8ip/akbFFcSJ6Qi4BhXA2W2qexP5E0lxGULrkbQzUVuZhCrW5+3vj tM3PNRK1p5cXHMhAJWemZI1VZGVgMzzSR5pb90NsZANZcimsOgPCfldXwmUh91ir XyKDXqL1gMEf/K934s8u+qT2x7sR/77yjYspSUqCWaIDSLJiP9QP7qSIyp7yRshF hzIS1vo1q+ElCPQPFoGJpPLSJbwx02/pJ8vViuwoPWqPXbTYT3E= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:50 2025 by rpki-client