$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft File: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json) Hash identifier: AR9X3wLgHLdBG1QxCQa/n0E8CiWqIQU1G72uoyQppSA= Subject key identifier: 92:E7:97:03:06:69:C2:B2:84:85:1B:42:7A:DC:69:3D:E7:35:95:D4 Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 6CFFF1E64F7956210E2470C55B15D00AD9972363 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft Manifest number: 039B Signing time: Sat 18 Oct 2025 14:01:02 +0000 Manifest this update: Sat 18 Oct 2025 13:56:02 +0000 Manifest next update: Wed 22 Oct 2025 01:55:02 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=) 2: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=) 3: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: cTIx5MDoSFuYgMDmdq+TtmJghldwmRrxKC/HhiSFp58=) 4: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ff:f1:e6:4f:79:56:21:0e:24:70:c5:5b:15:d0:0a:d9:97:23:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Oct 18 13:56:02 2025 GMT Not After : Oct 22 01:55:02 2025 GMT Subject: CN=92E797030669C2B284851B427ADC693DE73595D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:c8:6b:b6:bb:e5:d7:a3:d1:fd:b3:3b:cf: 0a:e7:ba:ff:23:e9:80:f1:ba:f1:69:f1:88:fa:8d: 23:ac:0b:fc:ef:80:f1:bb:94:6f:4e:fe:a3:80:40: f9:e1:9c:51:5e:1d:a0:20:53:0e:cf:63:d0:1b:aa: 47:1f:00:75:d4:76:19:b7:74:d0:0b:60:54:2c:d6: 50:18:c4:fe:c4:87:cb:8f:79:9f:05:c2:93:7d:c7: 2c:73:b9:72:ca:c3:cf:87:a5:18:b8:d4:5e:32:ee: 9c:1c:b0:d0:97:b6:31:4e:05:fe:b5:df:74:a8:4c: d0:25:1c:25:f3:dd:c2:1c:81:99:4f:c1:fd:2b:99: 91:6b:5d:fa:25:c2:68:f8:59:87:10:3b:cc:c4:a3: cb:a6:ce:f8:ee:f7:53:f4:f2:2c:5b:08:f9:4a:46: 91:2a:37:c3:8e:b7:2a:cb:0c:bc:12:3a:0b:a3:d6: 8d:32:99:ce:17:15:0a:e2:eb:3d:87:a9:88:24:41: 81:69:cb:2d:89:7f:7c:f9:2e:e5:f9:23:6b:f3:89: 4b:6d:c1:b7:67:0c:03:72:1e:ef:e6:f6:48:77:1f: 89:c9:bb:00:c7:9e:52:fd:6e:cb:a6:f4:8b:76:1e: d7:47:ec:b0:84:8d:93:67:f2:7a:48:ea:66:4d:e3: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E7:97:03:06:69:C2:B2:84:85:1B:42:7A:DC:69:3D:E7:35:95:D4 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8f:b6:80:52:44:ea:52:ee:9d:f7:8b:d2:63:7e:df:7c:f4: 3d:25:a2:c0:1d:86:8d:58:71:00:bd:60:48:47:59:40:42:48: 5f:7f:b3:a6:39:f2:45:93:87:6c:72:50:04:ae:53:42:72:b9: 6a:40:7c:c5:c9:aa:0a:48:3b:4e:03:85:8b:65:d2:cc:5a:4f: 91:2e:14:fc:37:3f:9f:79:fd:4c:25:26:c7:1d:0f:8f:4b:0c: 57:c1:1a:90:84:48:a6:28:87:ef:f0:69:3b:f9:9e:43:c1:88: 35:40:14:34:5f:df:dc:29:b3:10:ff:38:eb:ba:fe:1b:b8:29: f1:51:d6:1d:31:aa:82:fa:c0:fd:a9:44:da:13:88:7a:8e:95: 22:25:86:51:f2:9a:66:f7:5f:24:d8:6a:4e:d5:b8:3f:81:6a: 9e:23:01:90:36:0c:ac:b7:23:72:77:3a:61:b0:11:f0:25:fd: 69:40:bf:a1:e4:96:db:ad:66:0a:52:3a:45:92:97:d8:dc:a4: 6c:a7:9c:32:1d:65:1a:07:3e:4f:30:17:57:3f:2f:8d:bd:2a: af:cf:48:d3:bc:07:01:cf:dd:a8:6d:2a:3c:b2:e1:01:be:61: 2d:c8:41:75:19:b4:53:6b:ce:c2:3e:2a:90:fd:3e:d4:10:57: f4:ea:c6:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbP/x5k95ViEOJHDFWxXQCtmXI2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNTEwMTgxMzU2MDJaFw0yNTEwMjIwMTU1MDJaMDMxMTAvBgNV BAMTKDkyRTc5NzAzMDY2OUMyQjI4NDg1MUI0MjdBREM2OTNERTczNTk1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdchrtrvl16PR/bM7zwrnuv8j 6YDxuvFp8Yj6jSOsC/zvgPG7lG9O/qOAQPnhnFFeHaAgUw7PY9AbqkcfAHXUdhm3 dNALYFQs1lAYxP7Eh8uPeZ8FwpN9xyxzuXLKw8+HpRi41F4y7pwcsNCXtjFOBf61 33SoTNAlHCXz3cIcgZlPwf0rmZFrXfolwmj4WYcQO8zEo8umzvju91P08ixbCPlK RpEqN8OOtyrLDLwSOguj1o0ymc4XFQri6z2HqYgkQYFpyy2Jf3z5LuX5I2vziUtt wbdnDANyHu/m9kh3H4nJuwDHnlL9bsum9It2HtdH7LCEjZNn8npI6mZN46h7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkueXAwZpwrKEhRtCetxpPec1ldQwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRG MTE2RTNENzNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSPtoBSROpS7p33i9Jjft989D0losAdho1Y cQC9YEhHWUBCSF9/s6Y58kWTh2xyUASuU0JyuWpAfMXJqgpIO04DhYtl0sxaT5Eu FPw3P595/UwlJscdD49LDFfBGpCESKYoh+/waTv5nkPBiDVAFDRf39wpsxD/OOu6 /hu4KfFR1h0xqoL6wP2pRNoTiHqOlSIlhlHymmb3XyTYak7VuD+Bap4jAZA2DKy3 I3J3OmGwEfAl/WlAv6HkltutZgpSOkWSl9jcpGynnDIdZRoHPk8wF1c/L429Kq/P SNO8BwHP3ahtKjyy4QG+YS3IQXUZtFNrzsI+KpD9PtQQV/Tqxps= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:17 2025 by rpki-client