$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: jt5JZMHvKi5OAsoCPtEeEnrPN7z8iPWgK2VdBh11IS8= Subject key identifier: 7E:E2:A8:F7:CD:4F:F3:F5:70:CF:9F:B4:C6:7D:2E:86:36:FD:BE:49 Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 4ABABB614089D212AEA80B8BEBB63D6D6DF0C952 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 0235 Signing time: Sat 19 Jul 2025 14:31:42 +0000 Manifest this update: Sat 19 Jul 2025 14:26:42 +0000 Manifest next update: Wed 23 Jul 2025 01:27:42 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: /yCFSReAo5p4hFNW5cD99ytJ3emHkwJSn1/EY2RJ/Ak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ba:bb:61:40:89:d2:12:ae:a8:0b:8b:eb:b6:3d:6d:6d:f0:c9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Jul 19 14:26:42 2025 GMT Not After : Jul 23 01:27:42 2025 GMT Subject: CN=7EE2A8F7CD4FF3F570CF9FB4C67D2E8636FDBE49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:2f:f2:a7:91:f7:06:63:95:bc:98:7a:22: dc:d3:ac:8f:4e:cf:5c:9e:16:dd:39:72:5e:5e:9d: d3:02:7b:d7:6a:5f:e9:fb:c5:a4:c9:dc:71:fe:b5: bc:f2:48:a7:bc:68:71:df:d1:19:5a:25:f2:f5:38: 33:f7:69:6d:e2:7d:e2:e9:35:b4:d0:53:75:9a:09: 15:33:a2:c4:e2:11:81:bb:1d:3c:ff:ec:2e:81:c8: d8:23:1a:62:7c:01:05:71:e1:83:1d:88:2d:a2:55: 58:35:a2:5f:01:ad:f9:8a:70:94:e7:ea:6b:b8:84: 67:a5:9a:98:4d:b8:b4:a6:75:d8:5c:da:b7:c4:93: 4a:c4:22:d3:9b:31:f7:85:40:94:c9:4c:ce:aa:30: b7:ad:1d:f1:a2:e8:ff:60:ac:1e:b2:5b:be:c5:11: bd:7d:a5:35:4a:56:97:a3:25:e9:1e:4d:ec:5a:6e: 4a:78:24:ee:77:04:f1:4d:e6:ef:27:32:5c:61:80: 4e:99:11:9f:50:62:25:90:05:2d:24:ec:50:13:2f: b0:a1:8d:4e:7d:12:1f:ac:0f:d7:16:2c:4d:af:82: c3:27:b0:a6:f9:80:d8:27:c3:e6:a2:61:32:1d:f0: 0a:bd:68:03:a1:89:c2:72:94:cc:ff:23:8d:fe:94: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E2:A8:F7:CD:4F:F3:F5:70:CF:9F:B4:C6:7D:2E:86:36:FD:BE:49 X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:1b:11:a0:1d:95:50:0f:93:94:e5:c1:03:b1:4f:ad:36:c7: ff:4c:05:7b:f4:9e:8d:6a:a3:95:e3:0b:2c:c3:3b:7d:8a:17: dd:d7:05:a0:45:1f:b4:8f:bf:43:3f:4b:57:35:62:2f:1f:f5: 3a:df:16:d9:61:09:98:0d:ff:12:8b:95:ed:54:6c:b2:4a:27: c2:da:54:3b:f0:e7:00:5d:d0:19:fe:da:36:f9:c5:91:37:8c: b9:8b:c2:53:54:bb:04:da:1c:58:d6:6e:6e:2b:b1:3c:0d:70: ff:d8:02:f3:76:ef:f2:33:da:0b:59:9b:d9:0b:bc:ad:45:ee: 66:d3:38:23:37:72:91:b7:01:27:84:26:2b:4a:7b:c9:6d:3a: 11:db:55:70:7b:e7:9c:d9:3e:13:80:7d:b1:ca:d0:8a:4f:3f: 01:01:b2:75:e9:c6:8e:fb:71:4d:8d:5d:e5:88:9c:04:14:d0: 30:e6:ec:1b:ec:82:e4:34:99:cd:a9:29:de:da:69:7d:a0:94: 24:bf:7c:2d:09:3d:79:b8:cc:43:40:e1:6a:62:32:a5:08:d6: 20:54:5d:81:25:8f:3e:9a:04:e3:cc:69:fd:ca:53:b2:57:dd: 9f:3c:ec:2c:69:0b:62:24:8d:c6:e6:f8:5b:9d:16:dd:ad:5e: ae:7b:66:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrq7YUCJ0hKuqAuL67Y9bW3wyVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNTA3MTkxNDI2NDJaFw0yNTA3MjMwMTI3NDJaMDMxMTAvBgNV BAMTKDdFRTJBOEY3Q0Q0RkYzRjU3MENGOUZCNEM2N0QyRTg2MzZGREJFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnC/yp5H3BmOVvJh6ItzTrI9O z1yeFt05cl5endMCe9dqX+n7xaTJ3HH+tbzySKe8aHHf0RlaJfL1ODP3aW3ifeLp NbTQU3WaCRUzosTiEYG7HTz/7C6ByNgjGmJ8AQVx4YMdiC2iVVg1ol8BrfmKcJTn 6mu4hGelmphNuLSmddhc2rfEk0rEItObMfeFQJTJTM6qMLetHfGi6P9grB6yW77F Eb19pTVKVpejJekeTexabkp4JO53BPFN5u8nMlxhgE6ZEZ9QYiWQBS0k7FATL7Ch jU59Eh+sD9cWLE2vgsMnsKb5gNgnw+aiYTId8Aq9aAOhicJylMz/I43+lI9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfuKo981P8/Vwz5+0xn0uhjb9vkkwHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQbEaAdlVAPk5TlwQOxT602x/9MBXv0no1q o5XjCyzDO32KF93XBaBFH7SPv0M/S1c1Yi8f9TrfFtlhCZgN/xKLle1UbLJKJ8La VDvw5wBd0Bn+2jb5xZE3jLmLwlNUuwTaHFjWbm4rsTwNcP/YAvN27/Iz2gtZm9kL vK1F7mbTOCM3cpG3ASeEJitKe8ltOhHbVXB755zZPhOAfbHK0IpPPwEBsnXpxo77 cU2NXeWInAQU0DDm7BvsguQ0mc2pKd7aaX2glCS/fC0JPXm4zENA4WpiMqUI1iBU XYEljz6aBOPMaf3KU7JX3Z887CxpC2Ikjcbm+FudFt2tXq57ZvA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:51 2025 by rpki-client