$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: HZJNgqMQQGu9YEuKBzY5e1hZzIeS5/3/Fdx7kagBk14= Subject key identifier: 4A:C9:05:16:00:30:EE:2A:6C:CE:0B:95:DE:CA:61:77:96:6C:8D:3D Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 4073790921C43665A2C0FC0207B8129D5848FE6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 02A2 Signing time: Thu 26 Mar 2026 00:31:59 +0000 Manifest this update: Thu 26 Mar 2026 00:26:59 +0000 Manifest next update: Sun 29 Mar 2026 01:07:59 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: /vb/eXV14Md/zXL71GSNhLpEYFLSnJPBSyqDsd/j/4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:73:79:09:21:c4:36:65:a2:c0:fc:02:07:b8:12:9d:58:48:fe:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Mar 26 00:26:59 2026 GMT Not After : Mar 29 01:07:59 2026 GMT Subject: CN=4AC905160030EE2A6CCE0B95DECA6177966C8D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:c9:d0:ad:fa:26:b1:a3:1e:5c:db:65:e7: 79:10:5c:70:30:3a:dd:c5:8f:c3:6a:68:63:5a:6a: 31:59:fe:52:d1:06:94:49:90:77:8f:40:e2:c4:45: c4:41:59:ad:a4:b3:c6:dc:2b:f0:fb:fb:f1:35:64: 93:06:3c:b9:66:5b:c5:c4:3c:98:32:f4:02:21:2f: b6:ff:d5:9a:da:90:3b:8b:63:db:d6:a2:b9:68:b3: b8:81:42:4d:ce:ca:e8:aa:3d:29:74:49:62:56:44: 8b:62:2c:10:dd:ce:aa:60:bd:e6:32:42:a2:81:42: 86:ec:ad:70:40:32:4a:f8:0d:c4:6d:6f:b8:d9:c8: 42:15:a6:bb:bf:2c:11:cc:61:07:52:d0:2b:3c:9f: 69:33:38:7e:d1:c3:a0:b0:97:fc:fa:3f:4e:ce:16: 1c:d2:1a:0f:a1:9e:69:96:12:f4:8f:b4:1e:e5:c3: c3:1a:a4:03:a0:d0:5e:77:06:7e:2d:74:21:57:df: a5:49:6b:2e:0c:26:07:ba:38:a4:a8:cf:15:96:da: cb:1a:1a:ba:33:88:c1:2e:8b:d0:f6:3a:ba:83:a4: 19:36:fe:1b:1f:d1:b7:dc:03:79:d3:a4:00:49:29: dc:2c:f1:69:78:b3:e7:51:26:65:84:21:6d:74:cb: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C9:05:16:00:30:EE:2A:6C:CE:0B:95:DE:CA:61:77:96:6C:8D:3D X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d8:2e:b1:7f:3a:58:f0:1a:9d:3d:3e:57:a7:31:99:22:84: c6:50:e3:20:06:fb:04:7b:02:50:7b:2c:ca:ce:b2:00:14:7f: da:aa:74:78:10:8e:73:6a:0d:ef:ae:0d:2d:47:f4:76:86:c4: 98:90:3b:af:e6:ec:bb:be:ae:2a:81:ed:f7:29:2b:58:16:85: 48:49:dc:7a:fe:83:5d:01:69:e0:35:d5:89:a6:54:c2:b9:be: 04:e4:2a:67:24:49:8e:d9:f5:f8:77:7b:f7:b9:02:3b:a8:92: 1b:cb:a4:45:85:c7:b9:ea:f1:1d:5f:70:6a:5f:83:0a:5a:82: 69:2c:f2:b6:f7:37:64:61:42:8d:40:2f:2b:42:b0:e1:53:77: 8a:9e:74:ac:7b:f2:e2:df:8f:f1:d3:d0:ff:6d:c0:92:b1:ea: 75:b1:06:46:29:92:7b:26:b9:80:ae:83:4c:e2:17:e6:ac:c3: 8f:99:5c:4b:31:c8:98:1f:f3:22:94:4c:91:87:7c:37:51:6f: 42:56:f2:a2:5b:da:cd:1a:e3:af:78:80:f0:a0:df:be:4f:d3: 18:1e:5a:e5:26:76:bb:35:a5:17:b8:b5:fa:3a:12:db:b5:4f: fe:12:49:95:23:93:c9:17:c6:10:68:6d:93:a3:ea:75:4e:e0: 3c:e7:b0:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQHN5CSHENmWiwPwCB7gSnVhI/m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNjAzMjYwMDI2NTlaFw0yNjAzMjkwMTA3NTlaMDMxMTAvBgNV BAMTKDRBQzkwNTE2MDAzMEVFMkE2Q0NFMEI5NURFQ0E2MTc3OTY2QzhEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64cnQrfomsaMeXNtl53kQXHAw Ot3Fj8NqaGNaajFZ/lLRBpRJkHePQOLERcRBWa2ks8bcK/D7+/E1ZJMGPLlmW8XE PJgy9AIhL7b/1ZrakDuLY9vWorlos7iBQk3OyuiqPSl0SWJWRItiLBDdzqpgveYy QqKBQobsrXBAMkr4DcRtb7jZyEIVpru/LBHMYQdS0Cs8n2kzOH7Rw6Cwl/z6P07O FhzSGg+hnmmWEvSPtB7lw8MapAOg0F53Bn4tdCFX36VJay4MJge6OKSozxWW2ssa GroziMEui9D2OrqDpBk2/hsf0bfcA3nTpABJKdws8Wl4s+dRJmWEIW10y4cbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSskFFgAw7ipszguV3sphd5ZsjT0wHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDYLrF/OljwGp09PlenMZkihMZQ4yAG+wR7 AlB7LMrOsgAUf9qqdHgQjnNqDe+uDS1H9HaGxJiQO6/m7Lu+riqB7fcpK1gWhUhJ 3Hr+g10BaeA11YmmVMK5vgTkKmckSY7Z9fh3e/e5AjuokhvLpEWFx7nq8R1fcGpf gwpagmks8rb3N2RhQo1ALytCsOFTd4qedKx78uLfj/HT0P9twJKx6nWxBkYpknsm uYCug0ziF+asw4+ZXEsxyJgf8yKUTJGHfDdRb0JW8qJb2s0a4694gPCg375P0xge WuUmdrs1pRe4tfo6Etu1T/4SSZUjk8kXxhBobZOj6nVO4DznsOw= -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:42 2026 by rpki-client