$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft File: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft (raw, json) Hash identifier: YDFj1nf0KWexno1y/Ns9zDfUAY8zbfIyhwAy9pm+eOk= Subject key identifier: B7:C9:6A:B5:57:91:7D:34:AF:6A:C8:94:98:E0:48:F5:F1:9B:A5:D4 Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Certificate serial: 38580D0EE305CAFA702FF54E8C75F52D5956A0D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft Manifest number: A7 Signing time: Sun 19 Oct 2025 19:31:48 +0000 Manifest this update: Sun 19 Oct 2025 19:26:48 +0000 Manifest next update: Thu 23 Oct 2025 02:09:48 +0000 Files and hashes: 1: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: qv3evecT8eZzX3bUVJHE05QFEmJ8YwvyFd0dQ0gXUtc=) 2: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: d7SZXhA3MtIvsZoPKAEFGlIFwwbXCkHUGIXlm7+3ws0=) 3: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: jCMcTRKT9AZJevifSXh6jid95wyd/fIpOWD7LnrfE5Y=) 4: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl (hash: 5dsDI7SCT4VTgUeIuoKEr6B78H/JelPY2bnRrsFxRP8=) 5: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: Lj0hcqeyTQssBrCkzs3hGKwcyyQ8e4rZksVRkWRzAgo=) 6: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: RRjpYe+sCryGtP2L5KYhg6i9BBg+veNKIMjpWUEXvlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:58:0d:0e:e3:05:ca:fa:70:2f:f5:4e:8c:75:f5:2d:59:56:a0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Validity Not Before: Oct 19 19:26:48 2025 GMT Not After : Oct 23 02:09:48 2025 GMT Subject: CN=B7C96AB557917D34AF6AC89498E048F5F19BA5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:33:93:7e:d0:9c:de:0d:1a:9c:2b:e9:0c: 02:c8:4c:75:f0:a0:d3:38:00:48:f0:18:e3:a5:80: 44:5f:eb:52:f4:eb:e5:40:2d:d8:36:cb:34:d9:35: da:7c:a6:61:53:0d:10:16:72:c1:60:05:9e:2e:4e: 34:ec:0d:cf:9e:a3:ac:27:0c:bd:95:69:5a:4e:15: 79:97:e2:98:6c:c4:c2:e9:9f:1f:94:17:1c:60:e2: 14:62:e4:9a:84:e0:0c:8e:88:cf:b5:78:d4:06:76: 5d:50:43:3f:e3:44:78:a4:2e:db:c1:d6:8a:1c:07: 34:e5:73:a7:38:a2:9f:47:70:d5:40:d0:f3:b6:67: 0b:b7:b6:e8:67:9c:7c:84:e5:0b:af:8d:2e:fd:ee: 6f:b5:44:71:2f:eb:74:8f:f1:03:77:46:53:ed:7c: 1d:83:53:d5:0a:6d:59:73:8e:c5:cf:e0:9d:5a:67: ce:43:aa:12:4b:62:18:cb:f0:fe:06:70:51:7c:9f: 0f:01:bd:9d:30:83:aa:45:30:12:f3:4c:57:25:16: 65:6d:92:fb:18:16:56:6b:7f:6d:04:3f:8d:6b:09: a7:06:46:88:7f:9b:a7:35:2f:10:b6:21:5e:71:ca: eb:94:71:64:b6:04:48:c9:d6:0c:e4:28:5c:28:77: 5e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C9:6A:B5:57:91:7D:34:AF:6A:C8:94:98:E0:48:F5:F1:9B:A5:D4 X509v3 Authority Key Identifier: keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ca:a2:a5:c5:2f:c9:5d:66:94:58:f5:e9:6f:4d:ba:fa:65: 37:c3:78:42:9b:9b:ea:0d:ff:3c:c3:e3:19:b4:15:30:d1:9e: 52:b8:89:14:85:17:55:e1:b3:90:f5:ba:3a:01:cb:b5:01:68: 2d:f1:98:53:04:53:76:7b:40:de:38:2c:26:85:34:6d:21:71: 57:e5:f0:64:eb:14:4a:0c:56:ee:4e:43:9e:a1:4e:74:81:40: d0:eb:d8:73:14:a8:b4:9e:ca:86:66:cd:13:a4:65:cb:c9:e0: 41:14:b2:f0:ff:00:9d:29:c2:23:e4:37:76:37:fc:75:3d:9c: 21:84:94:24:ae:59:e4:b9:1b:f1:5b:a8:03:78:ec:a9:6f:21: f3:2b:4b:0a:3d:3a:b9:fa:ac:16:33:13:b9:01:4f:0a:2a:01: 08:5f:96:0d:ba:84:9e:c8:2a:92:60:b6:51:ec:a7:61:ca:c9: de:ae:33:41:66:d2:33:41:92:3a:7e:7f:8b:68:34:1f:2b:00: 35:7a:3e:c0:c5:20:ba:b7:00:06:31:b0:86:9c:45:6d:37:99: 9f:26:ef:dc:54:ba:73:bb:8a:30:5a:3d:71:74:30:e8:e6:88: 66:c2:b8:23:98:9e:3f:6d:db:95:75:18:88:02:a1:30:28:1d: 8c:48:9b:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFgNDuMFyvpwL/VOjHX1LVlWoNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE QzM0RUE2QTAeFw0yNTEwMTkxOTI2NDhaFw0yNTEwMjMwMjA5NDhaMDMxMTAvBgNV BAMTKEI3Qzk2QUI1NTc5MTdEMzRBRjZBQzg5NDk4RTA0OEY1RjE5QkE1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0zOTftCc3g0anCvpDALITHXw oNM4AEjwGOOlgERf61L06+VALdg2yzTZNdp8pmFTDRAWcsFgBZ4uTjTsDc+eo6wn DL2VaVpOFXmX4phsxMLpnx+UFxxg4hRi5JqE4AyOiM+1eNQGdl1QQz/jRHikLtvB 1oocBzTlc6c4op9HcNVA0PO2Zwu3tuhnnHyE5QuvjS797m+1RHEv63SP8QN3RlPt fB2DU9UKbVlzjsXP4J1aZ85DqhJLYhjL8P4GcFF8nw8BvZ0wg6pFMBLzTFclFmVt kvsYFlZrf20EP41rCacGRoh/m6c1LxC2IV5xyuuUcWS2BEjJ1gzkKFwod16LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt8lqtVeRfTSvasiUmOBI9fGbpdQwHwYDVR0j BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2 MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0 RUE2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJC Q0REQzM0RUE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnKoqXFL8ldZpRY9elvTbr6ZTfDeEKbm+oN /zzD4xm0FTDRnlK4iRSFF1Xhs5D1ujoBy7UBaC3xmFMEU3Z7QN44LCaFNG0hcVfl 8GTrFEoMVu5OQ56hTnSBQNDr2HMUqLSeyoZmzROkZcvJ4EEUsvD/AJ0pwiPkN3Y3 /HU9nCGElCSuWeS5G/FbqAN47KlvIfMrSwo9Orn6rBYzE7kBTwoqAQhflg26hJ7I KpJgtlHsp2HKyd6uM0Fm0jNBkjp+f4toNB8rADV6PsDFILq3AAYxsIacRW03mZ8m 79xUunO7ijBaPXF0MOjmiGbCuCOYnj9t25V1GIgCoTAoHYxIm90= -----END CERTIFICATE-----Generated at Mon Oct 20 21:02:47 2025 by rpki-client