$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: t22scUHfB/CCAmQH2nI8NSqTbXA4AngAQiBz3gduJpE= Subject key identifier: FF:60:FC:38:27:1D:9E:FF:C1:51:FE:24:6A:59:A3:D5:AC:F6:21:C3 Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 0CF6F8F2F9EBFD90249594ABC44FA9C75BB407A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 0243 Signing time: Thu 21 Aug 2025 04:31:47 +0000 Manifest this update: Thu 21 Aug 2025 04:26:47 +0000 Manifest next update: Sun 24 Aug 2025 11:41:47 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: yQaacodo5AESlmVxDfywQXc9xHqj+zaGdTTzHbEJ8k4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 11:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f6:f8:f2:f9:eb:fd:90:24:95:94:ab:c4:4f:a9:c7:5b:b4:07:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Aug 21 04:26:47 2025 GMT Not After : Aug 24 11:41:47 2025 GMT Subject: CN=FF60FC38271D9EFFC151FE246A59A3D5ACF621C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:2d:bb:f7:70:c5:d7:e3:13:b0:49:7e:ad: 7b:6e:cd:0d:f9:83:ec:90:74:c1:f3:ff:48:04:f3: 63:19:bc:34:b3:2a:59:0e:39:06:fe:39:af:88:0a: c3:12:01:28:7d:86:ff:27:c9:62:87:48:32:f6:db: 4d:72:eb:b7:73:b9:39:b2:a2:ef:a0:0f:4d:a1:4a: 20:90:56:f9:66:0a:3b:a5:40:da:16:5f:b9:7d:cb: 8d:2e:94:ce:45:3e:33:d9:b6:97:0d:ef:a8:f0:a8: 8d:33:83:f6:29:78:1d:6a:d7:3c:53:10:79:15:19: a0:8c:ac:03:6b:67:2e:44:54:81:57:7f:b9:be:f8: 96:04:f7:e5:5a:6a:09:01:2d:59:80:23:e2:37:20: 04:97:68:f9:c8:8c:e0:0c:1b:02:c3:6a:aa:1a:6b: d3:b3:ca:f6:02:d8:d4:54:3b:19:f2:f2:04:83:ab: 66:49:46:56:0d:37:30:30:5d:26:f5:7b:c6:02:12: a1:4f:e2:20:d1:2c:a4:96:5b:b5:c6:99:06:9f:54: 32:d2:e1:fc:a4:97:bf:8c:ab:ff:aa:9a:3b:a1:2e: 90:d5:5a:ee:97:86:23:30:84:11:78:5c:0d:2d:a8: 10:57:fa:95:c2:f0:e2:e8:58:3a:6c:14:35:60:4d: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:60:FC:38:27:1D:9E:FF:C1:51:FE:24:6A:59:A3:D5:AC:F6:21:C3 X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:55:8f:18:f7:5b:64:07:42:b4:40:45:e9:4e:cb:2b:cf:fe: c8:71:bc:61:59:ed:e8:07:65:c2:e3:52:18:90:a1:35:cf:68: 81:81:bc:1f:eb:68:53:20:75:08:29:23:19:04:82:f7:b4:19: 58:0c:48:b5:13:40:ff:c2:58:08:32:8d:df:f0:a5:a0:c1:76: 39:c6:b1:00:df:e5:e6:1a:46:7c:85:cf:72:20:24:cd:51:39: 1a:cd:d5:46:7d:43:57:78:fd:e2:70:1e:2c:a5:e8:19:0d:3a: 04:2f:98:a2:60:21:af:84:db:a8:7d:4c:5b:66:e3:d8:8e:9b: 61:a9:29:e4:be:e3:e7:d5:c1:e7:ad:fd:58:76:84:99:5c:5b: e8:fa:fb:6f:09:57:01:6b:5a:f1:0f:90:3f:69:ab:27:a6:23: 9a:64:61:e9:48:62:69:cb:63:bc:71:9d:db:b2:1b:16:b1:42: 0f:6f:2c:07:63:3b:b9:e8:ee:9b:01:18:25:12:d0:00:8a:ca: d3:ba:1f:2c:59:11:da:e4:47:9e:44:a6:89:38:32:2e:77:ec: cc:6a:17:70:83:7e:ab:71:58:37:bf:57:ba:8e:e0:04:b7:33: d0:9f:67:7e:58:30:c4:74:fa:92:16:4e:2b:78:eb:6b:78:e8: 3b:1d:87:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPb48vnr/ZAklZSrxE+px1u0B6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNTA4MjEwNDI2NDdaFw0yNTA4MjQxMTQxNDdaMDMxMTAvBgNV BAMTKEZGNjBGQzM4MjcxRDlFRkZDMTUxRkUyNDZBNTlBM0Q1QUNGNjIxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQoC2793DF1+MTsEl+rXtuzQ35 g+yQdMHz/0gE82MZvDSzKlkOOQb+Oa+ICsMSASh9hv8nyWKHSDL2201y67dzuTmy ou+gD02hSiCQVvlmCjulQNoWX7l9y40ulM5FPjPZtpcN76jwqI0zg/YpeB1q1zxT EHkVGaCMrANrZy5EVIFXf7m++JYE9+VaagkBLVmAI+I3IASXaPnIjOAMGwLDaqoa a9OzyvYC2NRUOxny8gSDq2ZJRlYNNzAwXSb1e8YCEqFP4iDRLKSWW7XGmQafVDLS 4fykl7+Mq/+qmjuhLpDVWu6XhiMwhBF4XA0tqBBX+pXC8OLoWDpsFDVgTXx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/2D8OCcdnv/BUf4kalmj1az2IcMwHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRVjxj3W2QHQrRARelOyyvP/shxvGFZ7egH ZcLjUhiQoTXPaIGBvB/raFMgdQgpIxkEgve0GVgMSLUTQP/CWAgyjd/wpaDBdjnG sQDf5eYaRnyFz3IgJM1RORrN1UZ9Q1d4/eJwHiyl6BkNOgQvmKJgIa+E26h9TFtm 49iOm2GpKeS+4+fVweet/Vh2hJlcW+j6+28JVwFrWvEPkD9pqyemI5pkYelIYmnL Y7xxnduyGxaxQg9vLAdjO7no7psBGCUS0ACKytO6HyxZEdrkR55Epok4Mi537Mxq F3CDfqtxWDe/V7qO4AS3M9CfZ35YMMR0+pIWTit462t46Dsdh7o= -----END CERTIFICATE-----Generated at Sat Aug 23 13:00:39 2025 by rpki-client