
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
File: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft (raw, json)
Hash identifier: uK+TsMwrYTI7drHLaM28NCquiSikj3ESOgh49N07QAM=
Subject key identifier: 17:31:EA:24:31:08:F1:77:15:7B:B4:3A:9E:A1:9C:BB:CB:36:25:D8
Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
Certificate issuer: /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Certificate serial: 2FFB00FFCE840AAB6D1D2440CECAFBCEEFA6A3C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 09:57:23 +0000
Manifest this update: Tue 02 Jun 2026 09:52:23 +0000
Manifest next update: Wed 03 Jun 2026 11:12:23 +0000
Files and hashes: 1: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl (hash: aujMbkDyc4M0jXsmUl7JuQfai4xWO77nS6W5tDyr/fw=)
2: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=)
3: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: esSysVtUva8+Yocw0kAhWf9PJYZT8IbRg2/i3Lll6kI=)
4: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: 2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:fb:00:ff:ce:84:0a:ab:6d:1d:24:40:ce:ca:fb:ce:ef:a6:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Validity
Not Before: Jun 2 09:52:23 2026 GMT
Not After : Jun 3 11:12:23 2026 GMT
Subject: CN=1731EA243108F177157BB43A9EA19CBBCB3625D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:53:15:01:f3:08:98:03:d7:a2:56:57:34:
7d:c3:15:79:83:f9:16:3d:b3:e3:34:3b:a0:85:5b:
30:44:3f:72:fe:a8:e7:27:0c:14:b0:84:34:a0:00:
dd:0d:ca:03:f3:c3:24:82:9b:1e:67:05:8b:a6:b6:
38:d1:f1:a3:ad:0c:70:c5:0e:da:34:c5:e8:5c:cf:
c2:57:42:91:cd:1b:9b:a6:a9:bc:fe:40:3d:95:0d:
d4:7a:60:ad:b4:77:0b:6d:98:bc:86:29:07:f4:f6:
d1:d8:9a:0e:5a:93:43:2d:9a:7f:72:b8:63:25:00:
29:73:43:c1:9d:6b:32:00:55:7d:f8:e0:4b:a0:a3:
6b:21:30:a0:6f:73:e0:20:fa:71:53:8d:4f:98:6f:
77:da:bc:39:dc:9e:bb:4f:bc:b0:57:5e:77:14:a5:
e5:69:37:bf:69:04:ae:ba:13:cc:d2:10:ae:ca:1b:
8e:80:10:30:a0:95:81:f9:9f:a8:5d:d7:82:7a:89:
5c:d3:b2:1a:f9:76:d9:e2:4a:62:d0:da:b8:51:45:
57:49:69:d1:00:5c:b6:4c:62:38:1a:d9:49:0a:d8:
fa:bb:1f:0b:c6:38:b1:7b:09:8e:4f:08:aa:e9:93:
f7:2c:3f:6d:89:1d:be:5d:a2:73:09:d9:4f:ee:c0:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:EA:24:31:08:F1:77:15:7B:B4:3A:9E:A1:9C:BB:CB:36:25:D8
X509v3 Authority Key Identifier:
keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:65:5e:fe:1e:c2:d2:4c:32:34:52:fe:41:db:21:42:66:79:
b9:36:c2:3f:3e:d6:0c:93:0a:82:15:af:a9:5d:25:13:40:f2:
c1:fb:4e:4b:8a:45:10:9c:37:2c:c2:d0:41:25:3d:a0:98:a8:
7e:56:a8:56:a4:01:be:95:02:c0:95:84:a6:16:7b:a1:fc:4c:
7d:70:8d:ea:2e:5d:bb:67:49:2c:28:d1:dd:b1:44:d6:05:c3:
ce:ee:cd:39:d9:53:03:7b:86:94:47:ba:04:d5:0c:7c:35:d7:
7c:31:8e:06:17:b4:d8:fc:63:38:b9:ac:9b:01:94:b7:21:6d:
e0:28:69:82:bd:b4:16:fd:d9:63:60:93:81:fc:7c:5e:61:22:
46:1d:45:5c:06:9d:7e:4a:7e:c0:2a:69:6e:9c:26:b2:43:20:
4b:51:3f:66:28:06:90:d1:5c:76:e7:c3:22:4d:2a:10:5f:52:
8a:29:01:8e:da:48:a9:e4:ac:9d:b0:a5:3a:29:ad:c6:5f:3d:
7c:02:ee:d7:28:98:bc:0b:ef:cb:76:7a:6b:91:f4:9b:bb:0c:
7c:06:2e:59:84:bc:05:4c:83:20:5d:7e:d2:2f:ae:27:54:6f:
f8:26:72:13:1d:ae:fb:5c:46:98:0f:3f:46:e5:7c:ab:2b:eb:
bd:fe:d5:7d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL/sA/86ECqttHSRAzsr7zu+mo8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJC
OUNCMzcwNzAeFw0yNjA2MDIwOTUyMjNaFw0yNjA2MDMxMTEyMjNaMDMxMTAvBgNV
BAMTKDE3MzFFQTI0MzEwOEYxNzcxNTdCQjQzQTlFQTE5Q0JCQ0IzNjI1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePlMVAfMImAPXolZXNH3DFXmD
+RY9s+M0O6CFWzBEP3L+qOcnDBSwhDSgAN0NygPzwySCmx5nBYumtjjR8aOtDHDF
Dto0xehcz8JXQpHNG5umqbz+QD2VDdR6YK20dwttmLyGKQf09tHYmg5ak0Mtmn9y
uGMlAClzQ8GdazIAVX344Eugo2shMKBvc+Ag+nFTjU+Yb3favDncnrtPvLBXXncU
peVpN79pBK66E8zSEK7KG46AEDCglYH5n6hd14J6iVzTshr5dtniSmLQ2rhRRVdJ
adEAXLZMYjga2UkK2Pq7HwvGOLF7CY5PCKrpk/csP22JHb5donMJ2U/uwGCvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFzHqJDEI8XcVe7Q6nqGcu8s2JdgwHwYDVR0j
BBgwFoAUSLAygPjgO18KHqvpEqrIS7nLNwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjVhOTZiODEtZDEyOC00OTY1LWExNzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBG
OEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJCOUNCMzcwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80OEIwMzI4MEY4RTAzQjVGMEExRUFCRTkxMkFBQzg0QkI5Q0Iz
NzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVhOTZiODEtZDEyOC00OTY1LWEx
NzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4
NEJCOUNCMzcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIRlXv4ewtJMMjRS/kHbIUJmebk2wj8+1gyT
CoIVr6ldJRNA8sH7TkuKRRCcNyzC0EElPaCYqH5WqFakAb6VAsCVhKYWe6H8TH1w
jeouXbtnSSwo0d2xRNYFw87uzTnZUwN7hpRHugTVDHw113wxjgYXtNj8Yzi5rJsB
lLchbeAoaYK9tBb92WNgk4H8fF5hIkYdRVwGnX5KfsAqaW6cJrJDIEtRP2YoBpDR
XHbnwyJNKhBfUoopAY7aSKnkrJ2wpToprcZfPXwC7tcomLwL78t2emuR9Ju7DHwG
LlmEvAVMgyBdftIvridUb/gmchMdrvtcRpgPP0blfKsr673+1X0=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:50:09 2026 by rpki-client