$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft File: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft (raw, json) Hash identifier: Ak3oCCGlKEOpp7ymafmjvwpjvWGoHNzogkTGggLD7W0= Subject key identifier: FB:7E:05:D0:D7:51:12:75:5C:89:96:56:35:83:66:25:E6:02:CA:40 Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07 Certificate issuer: /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707 Certificate serial: 7C884ECCFD46B2D27638AF3F7702A88124C0AC80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 19:44:12 +0000 Manifest this update: Tue 29 Sep 2026 19:39:12 +0000 Manifest next update: Wed 30 Sep 2026 22:01:12 +0000 Files and hashes: 1: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: esSysVtUva8+Yocw0kAhWf9PJYZT8IbRg2/i3Lll6kI=) 2: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl (hash: 0EPc8ODw/REnNWiJhnnhVRLZrEazRwDefgWjNhtBENM=) 3: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=) 4: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: 2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:88:4e:cc:fd:46:b2:d2:76:38:af:3f:77:02:a8:81:24:c0:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707 Validity Not Before: Sep 29 19:39:12 2026 GMT Not After : Sep 30 22:01:12 2026 GMT Subject: CN=FB7E05D0D75112755C89965635836625E602CA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:f4:1e:ee:c1:05:f4:7c:c5:2c:70:ff:11: 06:2f:69:a7:9f:50:8f:cf:4d:8e:59:04:09:20:79: 2c:6a:14:41:b0:aa:0b:42:1f:2b:53:87:9a:e9:2f: 39:c6:16:1d:18:08:12:0a:08:8d:3a:2c:00:3e:af: 4a:9d:46:c9:e4:83:3c:ab:79:b1:1b:4c:89:c9:09: 6d:0d:39:6e:88:bc:8f:9c:3a:1a:1f:d2:a8:13:b6: c2:71:72:64:39:14:cf:04:fa:5f:17:3e:ce:14:0e: 78:7f:9e:60:f8:a4:ea:14:c3:da:db:bc:8d:d6:0c: a5:46:21:c5:e7:68:5b:81:26:c3:ff:87:c3:b2:80: 84:1e:1a:fd:13:97:75:32:ab:c0:a4:ce:60:cf:36: 1a:19:f8:90:00:11:5e:06:09:c3:70:5a:65:3a:a1: 7a:bb:63:45:c1:fd:36:06:1a:e9:b4:b8:b3:cf:43: 48:da:76:6d:28:cf:cb:00:0f:7f:02:04:db:ed:5e: c3:3e:4d:7a:50:2d:51:46:10:a9:9a:9a:4f:d9:c8: 00:d2:1f:d1:ae:43:ce:e8:22:14:1c:40:ab:69:86: 56:1a:92:51:5a:ee:a0:e2:1f:30:5b:a5:74:86:e1: 24:44:a5:bd:e5:d7:42:91:cd:81:8f:df:25:09:cd: 5b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7E:05:D0:D7:51:12:75:5C:89:96:56:35:83:66:25:E6:02:CA:40 X509v3 Authority Key Identifier: keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7f:7b:4b:2b:ba:53:3a:e2:46:02:a7:03:83:34:e8:aa:8e: 29:c5:b7:63:cc:80:31:59:5f:8f:d1:d2:fe:98:e8:d8:a8:9b: 6d:a2:c2:f4:dd:c6:c1:d7:5d:a1:11:35:1a:dd:1e:8e:f3:a1: 45:81:d9:c9:6d:25:56:4a:26:90:9b:31:c1:c0:1d:0d:f8:ee: 87:a1:ad:4f:b7:08:53:83:36:af:45:38:78:82:59:f3:af:1a: 40:c2:77:4a:d4:7d:43:41:c1:3a:a6:77:fa:76:64:d9:90:9c: 28:8c:70:7d:22:ba:13:88:30:f6:c0:41:18:1a:ec:bf:f8:a0: 58:37:8d:7d:4d:d1:f5:d5:49:3b:9d:25:7d:84:e5:b8:83:be: a3:e0:d4:a6:28:61:93:0a:a4:e3:54:2e:f8:33:f2:6b:19:7a: db:8b:56:df:c6:a5:e8:bb:05:88:d8:18:91:09:38:ba:2d:64: 9f:ab:4c:01:8c:b4:64:51:64:95:65:99:d4:b0:b4:d0:1b:78: 9f:d1:d7:0f:52:93:3b:71:5f:cb:5e:90:56:bf:90:31:09:62: 9d:ea:0d:43:bb:bd:6a:ad:b1:2e:aa:35:ed:13:a0:23:89:ab: 93:d7:1c:fa:1e:e9:4e:62:97:c7:99:93:36:a6:58:31:ab:e4: a1:72:fd:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIhOzP1GstJ2OK8/dwKogSTArIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJC OUNCMzcwNzAeFw0yNjA5MjkxOTM5MTJaFw0yNjA5MzAyMjAxMTJaMDMxMTAvBgNV BAMTKEZCN0UwNUQwRDc1MTEyNzU1Qzg5OTY1NjM1ODM2NjI1RTYwMkNBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITvQe7sEF9HzFLHD/EQYvaaef UI/PTY5ZBAkgeSxqFEGwqgtCHytTh5rpLznGFh0YCBIKCI06LAA+r0qdRsnkgzyr ebEbTInJCW0NOW6IvI+cOhof0qgTtsJxcmQ5FM8E+l8XPs4UDnh/nmD4pOoUw9rb vI3WDKVGIcXnaFuBJsP/h8OygIQeGv0Tl3Uyq8CkzmDPNhoZ+JAAEV4GCcNwWmU6 oXq7Y0XB/TYGGum0uLPPQ0jadm0oz8sAD38CBNvtXsM+TXpQLVFGEKmamk/ZyADS H9GuQ87oIhQcQKtphlYaklFa7qDiHzBbpXSG4SREpb3l10KRzYGP3yUJzVu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+34F0NdREnVciZZWNYNmJeYCykAwHwYDVR0j BBgwFoAUSLAygPjgO18KHqvpEqrIS7nLNwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVhOTZiODEtZDEyOC00OTY1LWExNzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBG OEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJCOUNCMzcwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OEIwMzI4MEY4RTAzQjVGMEExRUFCRTkxMkFBQzg0QkI5Q0Iz NzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVhOTZiODEtZDEyOC00OTY1LWEx NzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4 NEJCOUNCMzcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIF/e0srulM64kYCpwODNOiqjinFt2PMgDFZ X4/R0v6Y6Niom22iwvTdxsHXXaERNRrdHo7zoUWB2cltJVZKJpCbMcHAHQ347oeh rU+3CFODNq9FOHiCWfOvGkDCd0rUfUNBwTqmd/p2ZNmQnCiMcH0iuhOIMPbAQRga 7L/4oFg3jX1N0fXVSTudJX2E5biDvqPg1KYoYZMKpONULvgz8msZetuLVt/Gpei7 BYjYGJEJOLotZJ+rTAGMtGRRZJVlmdSwtNAbeJ/R1w9SkztxX8tekFa/kDEJYp3q DUO7vWqtsS6qNe0ToCOJq5PXHPoe6U5il8eZkzamWDGr5KFy/dE= -----END CERTIFICATE-----Generated at Wed Sep 30 05:56:51 2026 by rpki-client