$ rpki-client -vvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft File: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft (raw, json) Hash identifier: KWv6S1smbCl/j1+x7bA9KwGpoLaUjD1RW9lsB4X3CXg= Subject key identifier: 00:D3:9B:2F:02:98:25:75:2B:11:00:65:2A:E4:84:B2:1E:21:36:03 Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07 Certificate issuer: /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707 Certificate serial: 6CCBE59FB610C7660BDA5FA61AF686ADF29937F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 17:58:46 +0000 Manifest this update: Mon 20 Jul 2026 17:53:46 +0000 Manifest next update: Tue 21 Jul 2026 20:33:46 +0000 Files and hashes: 1: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl (hash: 5MkwmlvjFycpj8iz0NKoWcLJ7365jmjNNmkajRZ+Jaw=) 2: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: esSysVtUva8+Yocw0kAhWf9PJYZT8IbRg2/i3Lll6kI=) 3: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: 2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=) 4: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cb:e5:9f:b6:10:c7:66:0b:da:5f:a6:1a:f6:86:ad:f2:99:37:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707 Validity Not Before: Jul 20 17:53:46 2026 GMT Not After : Jul 21 20:33:46 2026 GMT Subject: CN=00D39B2F029825752B1100652AE484B21E213603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:84:41:a0:cd:42:7d:27:8f:9a:02:c9:48: 20:a2:75:2a:11:e9:58:07:a3:16:05:42:c3:8c:b6: eb:51:2f:0e:e1:d4:24:6c:ce:bc:e6:ab:5d:d5:2a: 55:26:fa:43:d2:a4:3e:ed:15:2e:99:e6:ae:93:31: 5e:32:e9:71:ec:5c:23:91:e6:10:1c:8a:07:cb:a9: 68:e2:60:d0:05:cc:9d:56:e1:f7:36:cf:8b:4a:7a: c6:d9:86:24:5e:17:30:1b:9e:0f:5e:e9:b5:81:c2: 88:1a:0d:9a:a6:9a:78:f1:78:e3:9a:bc:9e:b7:6f: 82:26:73:36:a2:06:be:09:a2:fc:8a:15:d1:fd:58: 67:82:e1:06:c6:9b:ae:21:79:15:7c:01:65:87:5f: 44:a5:16:8a:e0:f5:56:d9:dd:13:0e:4b:74:b4:90: 7d:9b:c5:0e:db:3a:90:8a:26:a6:4e:a6:9c:c4:f4: 19:62:64:0a:4a:9a:f9:35:0b:96:f3:95:6e:48:03: 55:04:a8:f1:d3:45:d8:46:7f:be:4a:09:69:4e:09: 20:d2:e6:13:ab:0d:b7:ea:08:d8:aa:47:4d:55:65: d3:e4:64:14:dd:4e:57:fb:bb:0c:8b:4b:71:98:5c: ea:77:24:df:1b:2c:3a:a3:58:45:c3:72:bd:17:ea: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D3:9B:2F:02:98:25:75:2B:11:00:65:2A:E4:84:B2:1E:21:36:03 X509v3 Authority Key Identifier: keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:59:33:35:30:1a:0a:1f:a5:c4:f8:12:05:a7:04:53:66:b2: fc:d8:6b:b4:c6:6c:54:9d:c2:1d:f0:a7:93:71:f4:80:53:6f: ab:47:63:fa:12:a2:a0:90:85:cc:ef:6d:28:69:28:13:4b:8b: f4:86:85:f7:6d:c7:00:97:2a:ec:88:c3:90:fc:be:39:df:dc: 80:34:d9:2d:d5:c2:02:4e:41:9c:84:66:f0:ec:d5:14:c0:0f: 4f:8b:ac:12:ea:27:7d:8a:46:75:79:4a:f9:34:d0:d9:20:62: 90:87:df:66:ee:ad:a8:db:d3:9d:aa:ea:be:6a:9c:d0:9c:c2: 3a:d8:f8:a1:bd:d6:be:dc:be:dd:8c:30:a4:07:9b:62:8b:b6: 3c:cd:60:c5:d1:9d:c6:d0:52:3d:59:c8:c7:15:3b:4c:f4:38: b3:9c:3d:db:ea:3a:f3:d8:a2:57:80:b9:d5:58:bf:e6:54:23: f0:e2:03:fb:61:ed:c5:3f:5c:8b:23:80:8c:f3:24:be:d7:21: e6:c8:3d:0e:3a:56:4c:63:01:18:68:c5:61:28:1e:58:d1:f9: dd:e4:06:15:2b:48:89:45:ca:0c:75:3c:b2:34:2b:1a:1c:92: 3c:69:fd:fc:ac:a6:c4:9b:26:00:8f:39:e8:32:fe:6e:fd:fd: 52:a1:8f:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMvln7YQx2YL2l+mGvaGrfKZN/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJC OUNCMzcwNzAeFw0yNjA3MjAxNzUzNDZaFw0yNjA3MjEyMDMzNDZaMDMxMTAvBgNV BAMTKDAwRDM5QjJGMDI5ODI1NzUyQjExMDA2NTJBRTQ4NEIyMUUyMTM2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnoRBoM1CfSePmgLJSCCidSoR 6VgHoxYFQsOMtutRLw7h1CRszrzmq13VKlUm+kPSpD7tFS6Z5q6TMV4y6XHsXCOR 5hAcigfLqWjiYNAFzJ1W4fc2z4tKesbZhiReFzAbng9e6bWBwogaDZqmmnjxeOOa vJ63b4ImczaiBr4JovyKFdH9WGeC4QbGm64heRV8AWWHX0SlForg9VbZ3RMOS3S0 kH2bxQ7bOpCKJqZOppzE9BliZApKmvk1C5bzlW5IA1UEqPHTRdhGf75KCWlOCSDS 5hOrDbfqCNiqR01VZdPkZBTdTlf7uwyLS3GYXOp3JN8bLDqjWEXDcr0X6tK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUANObLwKYJXUrEQBlKuSEsh4hNgMwHwYDVR0j BBgwFoAUSLAygPjgO18KHqvpEqrIS7nLNwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVhOTZiODEtZDEyOC00OTY1LWExNzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBG OEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJCOUNCMzcwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OEIwMzI4MEY4RTAzQjVGMEExRUFCRTkxMkFBQzg0QkI5Q0Iz NzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVhOTZiODEtZDEyOC00OTY1LWEx NzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4 NEJCOUNCMzcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtZMzUwGgofpcT4EgWnBFNmsvzYa7TGbFSd wh3wp5Nx9IBTb6tHY/oSoqCQhczvbShpKBNLi/SGhfdtxwCXKuyIw5D8vjnf3IA0 2S3VwgJOQZyEZvDs1RTAD0+LrBLqJ32KRnV5Svk00NkgYpCH32burajb052q6r5q nNCcwjrY+KG91r7cvt2MMKQHm2KLtjzNYMXRncbQUj1ZyMcVO0z0OLOcPdvqOvPY oleAudVYv+ZUI/DiA/th7cU/XIsjgIzzJL7XIebIPQ46VkxjARhoxWEoHljR+d3k BhUrSIlFygx1PLI0Kxockjxp/fyspsSbJgCPOegy/m79/VKhj8Y= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:01 2026 by rpki-client