$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft File: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json) Hash identifier: 4sD84OgXnoTJo9f/y5f/7gQ7gT/IEGDguMBoLaNv6lI= Subject key identifier: 25:90:36:48:65:4A:50:AC:BE:29:9D:29:A1:16:A1:FE:D3:D3:B5:F4 Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 69A111D68D84D835AE51C4D00C109A2F22D29FAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft Manifest number: 0381 Signing time: Fri 22 Aug 2025 07:31:59 +0000 Manifest this update: Fri 22 Aug 2025 07:26:59 +0000 Manifest next update: Mon 25 Aug 2025 08:03:59 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=) 2: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: gombTXmsI6Ji62qqI20pjmSL48LjFvxhNh0xae6ev2A=) 3: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=) 4: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a1:11:d6:8d:84:d8:35:ae:51:c4:d0:0c:10:9a:2f:22:d2:9f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Aug 22 07:26:59 2025 GMT Not After : Aug 25 08:03:59 2025 GMT Subject: CN=25903648654A50ACBE299D29A116A1FED3D3B5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:a7:c3:da:ef:c3:09:25:eb:26:d8:45:46: e8:30:37:f9:e1:75:a6:b4:61:88:48:5c:d8:45:a7: ea:62:e7:bd:9b:66:66:46:bf:3a:cb:86:46:82:c6: 41:cf:4b:2e:c5:78:fb:3e:da:e8:da:e5:27:c5:29: b4:c4:87:59:48:21:57:6d:4a:92:83:86:74:d7:1e: cd:72:a8:af:5f:88:e1:b7:20:5b:39:f0:0f:bf:e3: 58:99:45:dc:89:d9:7f:3b:15:d9:8a:0f:6a:8d:1e: e9:de:b2:df:ad:fc:65:5d:36:cc:58:27:45:3e:0c: 10:58:5b:06:d7:55:ea:c9:0d:42:2c:c5:18:6b:b1: c1:42:2f:ce:15:d4:42:27:eb:75:7c:09:07:d1:dd: 75:c8:cf:67:00:1b:02:af:c4:93:09:95:1e:28:2d: e8:78:99:c1:ae:6f:88:8b:ea:37:72:ae:5a:59:7d: ec:50:f5:5d:88:bc:d7:05:ac:33:1f:60:bf:ad:4a: 77:ab:a9:52:22:da:cb:da:db:0d:6e:1a:de:77:f0: 45:0f:49:c4:d5:44:70:0f:83:ca:87:b2:e7:73:76: ee:5b:29:7a:31:f4:84:47:68:82:eb:6c:b8:96:74: 9a:bf:4b:fa:41:a8:e6:d7:10:bc:93:8c:ce:fd:c3: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:90:36:48:65:4A:50:AC:BE:29:9D:29:A1:16:A1:FE:D3:D3:B5:F4 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:a9:a8:37:09:54:37:20:88:12:10:36:1f:e2:a8:b1:74:e9: 0c:32:8f:3b:d3:5c:27:4c:8d:95:b5:40:83:8a:50:15:a9:d1: ed:ff:59:51:f0:3a:ea:31:75:85:57:e9:98:00:ae:09:41:a4: 95:16:bb:4e:77:98:98:9e:75:cb:bc:a3:e8:7b:dc:c6:01:ea: 13:b7:db:b1:ef:ee:cd:e5:dc:9f:81:86:00:36:51:90:54:3a: 50:6e:72:36:9e:60:f9:dc:0b:97:23:cb:7a:80:5f:d3:1d:34: 76:68:fa:36:82:50:cd:21:48:1f:8d:a4:2b:21:aa:54:32:f2: 39:9f:92:30:94:e3:5c:eb:e0:58:15:70:61:e3:d7:3b:63:66: 53:05:ef:5b:93:18:02:c9:af:39:bb:f5:63:59:53:ef:d7:0f: 9b:10:58:0d:18:91:18:99:0d:44:95:d7:64:87:1d:7d:10:e0: 0d:3e:4f:44:35:4d:f3:24:34:f3:31:12:ec:03:44:e7:03:43: ea:86:65:c0:47:8d:36:e2:7c:cc:36:d1:df:98:93:17:36:d7: a0:c6:1b:53:71:90:3a:5f:77:b4:bb:fc:6c:9a:c0:7a:90:53: 90:b5:d7:87:cf:4d:3b:9f:50:4b:d3:83:3f:eb:2f:d9:0b:56: 66:01:a3:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaER1o2E2DWuUcTQDBCaLyLSn6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNTA4MjIwNzI2NTlaFw0yNTA4MjUwODAzNTlaMDMxMTAvBgNV BAMTKDI1OTAzNjQ4NjU0QTUwQUNCRTI5OUQyOUExMTZBMUZFRDNEM0I1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykafD2u/DCSXrJthFRugwN/nh daa0YYhIXNhFp+pi572bZmZGvzrLhkaCxkHPSy7FePs+2uja5SfFKbTEh1lIIVdt SpKDhnTXHs1yqK9fiOG3IFs58A+/41iZRdyJ2X87FdmKD2qNHunest+t/GVdNsxY J0U+DBBYWwbXVerJDUIsxRhrscFCL84V1EIn63V8CQfR3XXIz2cAGwKvxJMJlR4o Leh4mcGub4iL6jdyrlpZfexQ9V2IvNcFrDMfYL+tSnerqVIi2sva2w1uGt538EUP ScTVRHAPg8qHsudzdu5bKXox9IRHaILrbLiWdJq/S/pBqObXELyTjM79wyPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZA2SGVKUKy+KZ0poRah/tPTtfQwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRG MTE2RTNENzNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMapqDcJVDcgiBIQNh/iqLF06QwyjzvTXCdM jZW1QIOKUBWp0e3/WVHwOuoxdYVX6ZgArglBpJUWu053mJiedcu8o+h73MYB6hO3 27Hv7s3l3J+BhgA2UZBUOlBucjaeYPncC5cjy3qAX9MdNHZo+jaCUM0hSB+NpCsh qlQy8jmfkjCU41zr4FgVcGHj1ztjZlMF71uTGALJrzm79WNZU+/XD5sQWA0YkRiZ DUSV12SHHX0Q4A0+T0Q1TfMkNPMxEuwDROcDQ+qGZcBHjTbifMw20d+Ykxc216DG G1NxkDpfd7S7/GyawHqQU5C114fPTTufUEvTgz/rL9kLVmYBo20= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:21 2025 by rpki-client