$ rpki-client -vvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft File: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft (raw, json) Hash identifier: 3C9nng/b251TcLWBghXnnNtkecfBuGWZMZKK4Vp5WeQ= Subject key identifier: 0F:6F:BB:85:E8:40:BE:B2:B3:5B:7F:68:83:98:97:74:CE:1C:54:8F Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07 Certificate issuer: /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707 Certificate serial: 5B6E0E03821DDF5ADEDF5DBB73690D1731FD1BAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:25:50 +0000 Manifest this update: Tue 12 May 2026 09:20:50 +0000 Manifest next update: Wed 13 May 2026 11:07:50 +0000 Files and hashes: 1: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl (hash: VNpws0f+0YB+p4TOcDFwFOy70gaovMr5qp/IrQOcV6Q=) 2: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: esSysVtUva8+Yocw0kAhWf9PJYZT8IbRg2/i3Lll6kI=) 3: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: 2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=) 4: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6e:0e:03:82:1d:df:5a:de:df:5d:bb:73:69:0d:17:31:fd:1b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707 Validity Not Before: May 12 09:20:50 2026 GMT Not After : May 13 11:07:50 2026 GMT Subject: CN=0F6FBB85E840BEB2B35B7F6883989774CE1C548F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:65:2c:25:c0:57:19:67:a3:9f:ce:16:12: 59:2e:8a:52:e9:64:59:75:18:8b:40:49:15:d5:5f: 89:b2:53:44:9f:9b:87:90:26:72:a9:4d:81:fc:59: 3a:ee:de:e4:7f:01:e9:67:80:9b:72:8b:57:a1:db: c3:fa:0b:cd:a5:c0:8f:83:03:17:ba:e3:b9:71:94: 2d:03:8d:24:66:f4:8e:37:16:83:38:51:9e:5c:f0: 02:90:f0:ac:67:f7:d4:e0:b8:ad:8e:44:d6:ca:23: a3:ec:be:52:f7:b2:2e:f2:d8:9a:28:b1:80:5a:ab: f1:f0:19:71:6d:64:b3:a3:c2:5a:3f:6e:46:18:49: 5b:1a:81:f5:29:32:9c:4d:86:6f:d7:8e:9f:45:97: 39:fa:b6:78:5a:cd:b0:63:25:49:9a:79:b3:34:9c: b0:49:b7:13:da:8f:63:b3:2d:5a:b2:9d:fc:90:84: 17:ae:d6:9b:69:46:f1:ab:7d:cf:7b:70:3d:53:c5: 1f:db:41:81:69:9b:e9:73:11:db:ab:9b:08:fe:dc: c3:b6:6e:19:46:cc:33:6e:e9:e6:47:7e:ee:ca:a1: 1b:49:d7:62:a9:04:a5:2e:17:a8:b0:c1:49:0a:d2: dd:db:dd:c5:3a:29:18:72:04:9d:b8:ba:e3:01:87: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6F:BB:85:E8:40:BE:B2:B3:5B:7F:68:83:98:97:74:CE:1C:54:8F X509v3 Authority Key Identifier: keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a9:29:f2:1d:09:26:c6:70:76:96:c6:53:98:be:59:ff:2b: 56:b9:c0:e7:95:15:bb:b2:09:52:3b:13:40:7f:5f:36:b6:b6: 80:3b:ea:14:df:75:08:ad:de:ad:01:6d:bb:cf:7c:cf:3a:9a: 2d:a2:db:d9:1d:f0:22:cc:66:91:b3:bc:67:74:ba:26:6b:b5: ad:e5:f9:37:27:b2:8b:55:b5:15:e0:64:ab:5e:b1:ac:f4:8b: 69:82:e9:0c:ef:b4:32:ba:22:dd:ea:7e:0c:0b:d0:e6:9d:47: e2:ed:25:90:5c:12:96:60:bf:ec:61:06:bd:8e:6e:2b:5b:ec: 0b:fe:f7:62:0b:35:4f:14:ad:e8:1f:09:4b:6e:31:fa:79:e4: 34:f1:9d:50:2f:7e:d1:a7:43:26:5c:70:75:62:d2:39:7c:fa: 1f:d2:19:74:41:22:6e:66:2d:01:d1:86:e0:13:b1:f7:4e:ec: 79:0e:fd:f1:ef:1f:9b:2c:e1:c1:ac:84:24:48:e7:00:15:7e: 16:b7:03:74:3b:4c:a6:be:f0:f0:f1:27:c2:38:d7:3d:67:11: 5f:6d:7c:34:ad:ca:ad:70:90:ed:d0:7a:ad:37:fc:be:7c:53: c0:20:8a:ad:3f:06:80:26:8b:23:c4:1e:0e:87:09:04:3a:f8: 79:fc:3a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW24OA4Id31re3127c2kNFzH9G60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJC OUNCMzcwNzAeFw0yNjA1MTIwOTIwNTBaFw0yNjA1MTMxMTA3NTBaMDMxMTAvBgNV BAMTKDBGNkZCQjg1RTg0MEJFQjJCMzVCN0Y2ODgzOTg5Nzc0Q0UxQzU0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQsWUsJcBXGWejn84WElkuilLp ZFl1GItASRXVX4myU0Sfm4eQJnKpTYH8WTru3uR/AelngJtyi1eh28P6C82lwI+D Axe647lxlC0DjSRm9I43FoM4UZ5c8AKQ8Kxn99TguK2ORNbKI6PsvlL3si7y2Joo sYBaq/HwGXFtZLOjwlo/bkYYSVsagfUpMpxNhm/Xjp9Flzn6tnhazbBjJUmaebM0 nLBJtxPaj2OzLVqynfyQhBeu1ptpRvGrfc97cD1TxR/bQYFpm+lzEdurmwj+3MO2 bhlGzDNu6eZHfu7KoRtJ12KpBKUuF6iwwUkK0t3b3cU6KRhyBJ24uuMBh1UDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD2+7hehAvrKzW39og5iXdM4cVI8wHwYDVR0j BBgwFoAUSLAygPjgO18KHqvpEqrIS7nLNwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVhOTZiODEtZDEyOC00OTY1LWExNzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBG OEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJCOUNCMzcwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OEIwMzI4MEY4RTAzQjVGMEExRUFCRTkxMkFBQzg0QkI5Q0Iz NzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVhOTZiODEtZDEyOC00OTY1LWEx NzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4 NEJCOUNCMzcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2pKfIdCSbGcHaWxlOYvln/K1a5wOeVFbuy CVI7E0B/Xza2toA76hTfdQit3q0BbbvPfM86mi2i29kd8CLMZpGzvGd0uiZrta3l +TcnsotVtRXgZKtesaz0i2mC6QzvtDK6It3qfgwL0OadR+LtJZBcEpZgv+xhBr2O bitb7Av+92ILNU8UregfCUtuMfp55DTxnVAvftGnQyZccHVi0jl8+h/SGXRBIm5m LQHRhuATsfdO7HkO/fHvH5ss4cGshCRI5wAVfha3A3Q7TKa+8PDxJ8I41z1nEV9t fDStyq1wkO3Qeq03/L58U8Agiq0/BoAmiyPEHg6HCQQ6+Hn8OnU= -----END CERTIFICATE-----Generated at Wed May 13 03:16:18 2026 by rpki-client