$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft File: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json) Hash identifier: PZwabt+PUIM1ZKbvnpsAUrFTBaMYWfHhv8Al8oD3Rkw= Subject key identifier: A6:41:90:69:DF:95:C1:C5:FD:C8:0C:10:E9:51:78:90:04:93:EA:D6 Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 726F54D74F5585AA605094E77EB0D7BA62AFF031 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft Manifest number: 0373 Signing time: Mon 21 Jul 2025 15:01:00 +0000 Manifest this update: Mon 21 Jul 2025 14:56:00 +0000 Manifest next update: Thu 24 Jul 2025 15:05:00 +0000 Files and hashes: 1: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=) 2: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=) 3: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=) 4: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: zYvYbf8KYmIanRGP6T0vTumudkkr7tLTBMCfNYroVaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6f:54:d7:4f:55:85:aa:60:50:94:e7:7e:b0:d7:ba:62:af:f0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Jul 21 14:56:00 2025 GMT Not After : Jul 24 15:05:00 2025 GMT Subject: CN=A6419069DF95C1C5FDC80C10E95178900493EAD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:38:25:62:90:05:3c:2d:ab:aa:b8:48:6e:6d: cc:e3:b2:73:b5:c6:c1:fd:05:13:66:69:ad:b5:f0: dd:61:d1:74:b3:4c:80:90:08:0b:9d:0e:92:7e:74: 6c:29:62:a4:7a:39:54:76:e6:45:6e:ab:16:a7:70: 02:77:c1:02:7b:35:53:e3:11:64:47:37:69:7d:1f: 8b:b7:a3:3a:52:28:37:d4:10:93:76:22:2e:39:80: 0f:a0:10:3a:cc:8f:70:5c:84:c8:29:25:df:2a:70: bb:22:7c:c9:f0:17:33:bc:2a:95:d3:ca:eb:a8:ea: d4:80:06:68:fd:ac:25:b8:4d:f0:ec:c0:fd:1c:37: 37:b6:fa:c5:be:fa:d8:95:58:69:94:41:2c:8a:90: 45:69:b7:ce:67:33:70:d8:01:aa:60:3b:e4:73:8c: 56:d1:90:55:29:e6:89:60:c5:7a:e7:08:04:cd:f4: 26:cd:7f:c7:7d:52:13:25:75:77:2e:61:5f:1b:8d: d7:e9:ec:aa:ba:d6:f1:46:8c:47:93:02:7a:fd:9b: 1a:de:46:f6:05:ff:1e:64:c6:1f:2f:4b:6a:29:00: d3:56:73:ba:9d:4f:6a:9d:34:1a:4d:d3:24:28:70: e4:69:31:93:d5:01:ce:11:1c:74:b5:07:2d:00:76: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:41:90:69:DF:95:C1:C5:FD:C8:0C:10:E9:51:78:90:04:93:EA:D6 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:aa:d0:5e:33:6c:60:54:bc:da:e4:3d:4b:90:ee:34:56:d9: d0:af:c0:83:99:09:ff:64:41:1b:f1:91:ac:ea:d0:b2:9e:30: 04:3e:98:bd:73:ff:62:28:60:8d:4d:0c:4a:7a:fd:33:11:ab: 32:30:f9:66:9b:39:a5:14:03:fe:ab:61:65:b2:fd:12:d9:39: b1:dc:aa:dc:4f:f8:8a:11:c6:5a:cc:eb:68:c1:3f:b6:87:39: 9f:a4:b8:2f:c6:92:39:aa:57:90:e7:07:2d:45:3a:3c:88:d3: fa:82:fc:f6:f1:c4:58:fd:c5:b4:f2:e6:80:b7:b0:b0:b3:5e: e6:e2:d0:7c:2d:91:d8:bc:23:d0:a1:33:58:67:95:42:8f:13: be:3e:f2:6e:ca:18:52:06:0c:0e:37:5a:af:1f:fc:7d:70:47: d5:88:8f:78:e2:01:c1:e3:cb:49:4b:9e:03:75:d2:70:8e:40: 88:fd:b6:b3:db:90:62:09:7f:e5:58:1f:40:e4:1e:0f:a2:29: ab:8c:85:09:be:f6:2b:69:9b:d5:63:1a:96:17:f9:fc:e4:0c: dc:ca:70:b3:2f:65:54:4e:15:04:05:a0:9a:d5:77:f3:8c:70: c2:5f:00:57:73:5c:b1:62:80:69:8f:12:84:06:41:77:50:9b: d6:f9:fb:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcm9U109VhapgUJTnfrDXumKv8DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNTA3MjExNDU2MDBaFw0yNTA3MjQxNTA1MDBaMDMxMTAvBgNV BAMTKEE2NDE5MDY5REY5NUMxQzVGREM4MEMxMEU5NTE3ODkwMDQ5M0VBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2OCVikAU8LauquEhubczjsnO1 xsH9BRNmaa218N1h0XSzTICQCAudDpJ+dGwpYqR6OVR25kVuqxancAJ3wQJ7NVPj EWRHN2l9H4u3ozpSKDfUEJN2Ii45gA+gEDrMj3BchMgpJd8qcLsifMnwFzO8KpXT yuuo6tSABmj9rCW4TfDswP0cNze2+sW++tiVWGmUQSyKkEVpt85nM3DYAapgO+Rz jFbRkFUp5olgxXrnCATN9CbNf8d9UhMldXcuYV8bjdfp7Kq61vFGjEeTAnr9mxre RvYF/x5kxh8vS2opANNWc7qdT2qdNBpN0yQocORpMZPVAc4RHHS1By0Adt9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkGQad+VwcX9yAwQ6VF4kAST6tYwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRG MTE2RTNENzNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN+q0F4zbGBUvNrkPUuQ7jRW2dCvwIOZCf9k QRvxkazq0LKeMAQ+mL1z/2IoYI1NDEp6/TMRqzIw+WabOaUUA/6rYWWy/RLZObHc qtxP+IoRxlrM62jBP7aHOZ+kuC/GkjmqV5DnBy1FOjyI0/qC/PbxxFj9xbTy5oC3 sLCzXubi0Hwtkdi8I9ChM1hnlUKPE74+8m7KGFIGDA43Wq8f/H1wR9WIj3jiAcHj y0lLngN10nCOQIj9trPbkGIJf+VYH0DkHg+iKauMhQm+9itpm9VjGpYX+fzkDNzK cLMvZVROFQQFoJrVd/OMcMJfAFdzXLFigGmPEoQGQXdQm9b5+90= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:19 2025 by rpki-client