$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: dptQ8W6r7qXXOPi1q7ewUrdq/TF9ODRuBZuoF3XCV6c= Subject key identifier: 8C:2C:E2:79:EE:46:F4:D9:C2:15:4B:53:81:D6:7C:65:F0:78:11:FA Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 769BDF4ABE787F8740B7D316F3886F403411F212 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: F1 Signing time: Sat 19 Jul 2025 16:41:16 +0000 Manifest this update: Sat 19 Jul 2025 16:36:16 +0000 Manifest next update: Tue 22 Jul 2025 19:30:16 +0000 Files and hashes: 1: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: opvv2VGzBuIUQ92szEuPK84m1R+0+cyEbCADPXIUw/g=) 2: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) 3: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9b:df:4a:be:78:7f:87:40:b7:d3:16:f3:88:6f:40:34:11:f2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Jul 19 16:36:16 2025 GMT Not After : Jul 22 19:30:16 2025 GMT Subject: CN=8C2CE279EE46F4D9C2154B5381D67C65F07811FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:b0:72:a5:8d:3f:9a:a1:88:88:b9:d3:16: db:c7:e4:0b:c5:41:c9:d0:f2:bc:24:8a:67:e1:fc: 58:fd:cd:38:08:52:a2:dc:86:2f:88:74:69:62:33: 71:05:48:f1:61:eb:2a:dc:33:bf:61:4b:02:80:ea: 01:fa:92:81:03:15:95:9e:04:cf:a4:5c:94:12:6a: 5e:4b:ba:52:cd:a1:e4:f9:e5:02:e8:09:3c:02:9e: 30:47:1a:b0:2e:e8:fc:79:e8:f2:db:6f:cf:27:a3: 60:88:47:8e:b6:5a:a8:d2:8a:0e:14:1d:91:64:61: 11:e3:9b:82:c9:cd:32:37:26:1d:85:b4:19:3b:cf: 1c:c6:2b:d4:82:50:3f:5f:12:64:0d:69:70:3d:fe: 29:73:72:72:c5:76:41:58:0b:ab:70:2e:c3:d4:89: d0:68:8b:4e:a5:36:46:4d:3b:12:f0:8e:c7:5d:ed: a8:da:7e:69:5a:71:75:d7:22:f9:82:6d:1e:3d:9a: d6:cf:3c:c0:dc:e3:01:c2:dc:4a:6d:2e:d9:21:a0: 74:21:53:ad:1b:61:a3:e7:3f:b7:d5:a6:cc:ee:02: eb:bd:b3:ea:55:32:e0:c9:e9:48:69:63:7b:a9:cf: e7:9f:ae:1d:a1:9d:68:37:a7:96:27:b3:2d:4e:14: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2C:E2:79:EE:46:F4:D9:C2:15:4B:53:81:D6:7C:65:F0:78:11:FA X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0b:63:40:d3:b0:b2:b4:cc:86:07:fb:1c:e8:28:98:d1:22: 86:19:90:f0:5c:a8:99:e3:ef:cf:d2:78:37:6e:f6:98:94:9b: e8:2f:23:f0:45:d2:4d:8c:b3:7f:9e:24:98:f7:aa:0b:a3:18: 65:73:f9:a9:c1:9e:2b:db:be:bc:94:e5:03:af:a4:2f:bd:d6: f2:f6:4a:e6:f9:b7:f3:54:52:4a:47:bc:12:21:ca:f2:03:ab: 30:56:56:0f:ac:de:25:e2:af:e6:dd:fd:b5:5a:75:36:e3:26: 3d:99:1f:11:16:55:a6:9b:0c:0a:09:ac:27:f0:55:c1:fc:85: b2:d2:fd:0a:37:9b:67:6d:23:71:b4:4a:90:c9:28:23:c1:19: fc:89:7d:8f:28:e0:67:5a:22:f1:77:4c:47:ba:dd:4c:e6:19: 66:de:18:91:1a:0d:f9:96:20:b9:0d:3a:92:0d:bc:ae:84:75: cc:ef:ec:7c:23:69:61:76:17:d7:c7:8e:e5:34:1f:4e:63:6d: cc:07:a7:c5:cb:41:f7:b1:d6:13:63:7b:f4:75:c8:89:7d:29: 56:2d:a8:dc:64:3d:6b:ff:38:a6:cd:d9:28:68:ca:82:2f:8f: 4b:ee:36:08:7c:ee:ef:cb:50:b1:73:83:29:c8:c5:05:09:fa: 68:9c:13:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdpvfSr54f4dAt9MW84hvQDQR8hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTA3MTkxNjM2MTZaFw0yNTA3MjIxOTMwMTZaMDMxMTAvBgNV BAMTKDhDMkNFMjc5RUU0NkY0RDlDMjE1NEI1MzgxRDY3QzY1RjA3ODExRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoLBypY0/mqGIiLnTFtvH5AvF QcnQ8rwkimfh/Fj9zTgIUqLchi+IdGliM3EFSPFh6yrcM79hSwKA6gH6koEDFZWe BM+kXJQSal5LulLNoeT55QLoCTwCnjBHGrAu6Px56PLbb88no2CIR462WqjSig4U HZFkYRHjm4LJzTI3Jh2FtBk7zxzGK9SCUD9fEmQNaXA9/ilzcnLFdkFYC6twLsPU idBoi06lNkZNOxLwjsdd7ajafmlacXXXIvmCbR49mtbPPMDc4wHC3EptLtkhoHQh U60bYaPnP7fVpszuAuu9s+pVMuDJ6UhpY3upz+efrh2hnWg3p5Ynsy1OFL51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjCziee5G9NnCFUtTgdZ8ZfB4EfowHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQLY0DTsLK0zIYH+xzoKJjRIoYZkPBcqJnj 78/SeDdu9piUm+gvI/BF0k2Ms3+eJJj3qgujGGVz+anBnivbvryU5QOvpC+91vL2 Sub5t/NUUkpHvBIhyvIDqzBWVg+s3iXir+bd/bVadTbjJj2ZHxEWVaabDAoJrCfw VcH8hbLS/Qo3m2dtI3G0SpDJKCPBGfyJfY8o4GdaIvF3TEe63UzmGWbeGJEaDfmW ILkNOpINvK6Edczv7HwjaWF2F9fHjuU0H05jbcwHp8XLQfex1hNje/R1yIl9KVYt qNxkPWv/OKbN2ShoyoIvj0vuNgh87u/LULFzgynIxQUJ+micE34= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:11 2025 by rpki-client