$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: kCrtzjJHqGKxCd686E1+7uBk0w5nm4AAHlnYx8I6YTY= Subject key identifier: C9:C7:F3:51:E5:9A:85:71:FF:F9:69:F2:56:D9:11:B6:F9:55:E0:8E Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 589DD353C03E6A7A218C2BCA912D61F0A636F6FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 025D Signing time: Sun 19 Oct 2025 07:31:46 +0000 Manifest this update: Sun 19 Oct 2025 07:26:46 +0000 Manifest next update: Wed 22 Oct 2025 09:58:46 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: duDwhcCCmOfKuzaE9dGilJEPWE2o6btqIJB60+OuoZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9d:d3:53:c0:3e:6a:7a:21:8c:2b:ca:91:2d:61:f0:a6:36:f6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Oct 19 07:26:46 2025 GMT Not After : Oct 22 09:58:46 2025 GMT Subject: CN=C9C7F351E59A8571FFF969F256D911B6F955E08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:0b:76:6a:53:33:4c:24:d0:42:59:d4:f2: 5b:1f:7e:e7:04:cf:6a:e7:7f:19:1b:30:f8:20:f7: a2:1a:d1:ea:15:36:6a:6c:27:64:97:b0:aa:4e:29: c5:8b:b4:76:f4:a5:b6:f7:1e:14:1f:5c:b9:da:63: 2c:c4:2e:fc:63:12:f0:53:16:99:e7:22:0c:eb:5e: 54:33:61:e9:ae:63:41:2d:dc:22:3c:12:30:20:a4: 6a:01:41:ac:70:62:50:a9:c9:79:b6:f8:df:4b:54: ed:4c:3c:ca:cf:b6:f6:a9:4f:f7:04:a8:ef:8e:d4: 40:7b:98:ed:cb:14:83:6c:98:8a:92:89:f6:e8:08: 45:cd:08:53:6b:4b:d8:aa:16:6a:7d:bb:bc:ea:5a: b6:b4:3a:9f:d8:00:e4:85:c2:64:48:fe:47:89:f7: 63:9a:44:cd:11:68:cd:12:f5:bd:f5:15:b2:f0:69: 41:57:7b:bd:af:ba:52:3d:38:ae:62:10:66:9b:7a: 89:3b:74:8f:86:a2:13:20:17:91:c8:d3:f9:be:56: 7a:a3:1f:fe:09:85:41:1f:f5:57:3f:f9:49:20:78: 51:77:58:12:bc:cf:69:e9:8f:be:06:57:41:54:90: 20:72:08:1a:09:ff:8d:3a:18:fd:fb:fe:e2:8b:48: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C7:F3:51:E5:9A:85:71:FF:F9:69:F2:56:D9:11:B6:F9:55:E0:8E X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:1e:e5:86:35:d0:4f:2b:e9:8f:58:86:86:f3:d1:63:a7:7c: c0:78:3f:73:e4:37:c1:13:76:89:6f:fd:70:72:ab:1c:48:ce: 8f:a4:b4:5f:2e:b5:ef:3a:48:69:db:08:11:31:5e:0e:50:35: 67:db:92:83:05:6c:98:7f:3e:db:61:6d:99:9a:28:ee:59:e7: 3c:d5:db:7f:d5:4c:b0:58:8c:db:7c:9e:56:f5:f8:e6:5c:59: 25:0d:0e:99:ca:0a:b1:da:4c:4c:a7:f7:a2:23:37:39:8b:e0: 23:41:f0:71:ec:5b:7c:09:78:e9:38:27:b4:0d:33:22:d9:d3: b6:8a:e0:fa:82:5b:34:54:c5:61:14:59:23:e2:b0:19:57:8c: 76:c1:b7:e2:95:98:d9:06:21:b9:16:3f:97:91:ec:b2:cc:08: ec:5e:cf:42:8e:6c:c2:ae:2e:5f:50:f2:fc:d3:a7:6a:9c:05: 1a:dc:f3:38:c1:58:46:60:58:24:1c:a8:49:b4:a2:bd:fb:98: c9:99:14:c0:7a:73:bc:ed:6c:3f:c0:22:a8:9d:05:50:be:24: c8:b6:a7:96:75:b9:ab:e9:ac:99:8f:5b:fa:5a:2a:47:99:d8: e4:dc:3a:dc:09:bd:29:ab:c9:96:31:81:ee:d3:3d:4b:ad:50: cc:7c:1c:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJ3TU8A+anohjCvKkS1h8KY29v4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNTEwMTkwNzI2NDZaFw0yNTEwMjIwOTU4NDZaMDMxMTAvBgNV BAMTKEM5QzdGMzUxRTU5QTg1NzFGRkY5NjlGMjU2RDkxMUI2Rjk1NUUwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAAt2alMzTCTQQlnU8lsffucE z2rnfxkbMPgg96Ia0eoVNmpsJ2SXsKpOKcWLtHb0pbb3HhQfXLnaYyzELvxjEvBT FpnnIgzrXlQzYemuY0Et3CI8EjAgpGoBQaxwYlCpyXm2+N9LVO1MPMrPtvapT/cE qO+O1EB7mO3LFINsmIqSifboCEXNCFNrS9iqFmp9u7zqWra0Op/YAOSFwmRI/keJ 92OaRM0RaM0S9b31FbLwaUFXe72vulI9OK5iEGabeok7dI+GohMgF5HI0/m+Vnqj H/4JhUEf9Vc/+UkgeFF3WBK8z2npj74GV0FUkCByCBoJ/406GP37/uKLSATpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUycfzUeWahXH/+WnyVtkRtvlV4I4wHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIe5YY10E8r6Y9Yhobz0WOnfMB4P3PkN8ET dolv/XByqxxIzo+ktF8ute86SGnbCBExXg5QNWfbkoMFbJh/PtthbZmaKO5Z5zzV 23/VTLBYjNt8nlb1+OZcWSUNDpnKCrHaTEyn96IjNzmL4CNB8HHsW3wJeOk4J7QN MyLZ07aK4PqCWzRUxWEUWSPisBlXjHbBt+KVmNkGIbkWP5eR7LLMCOxez0KObMKu Ll9Q8vzTp2qcBRrc8zjBWEZgWCQcqEm0or37mMmZFMB6c7ztbD/AIqidBVC+JMi2 p5Z1uavprJmPW/paKkeZ2OTcOtwJvSmryZYxge7TPUutUMx8HJ0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:54 2025 by rpki-client