$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: DUHPcj3KwfJdtEhfO+nu+a1hGC4mxbETn86HoxRVMxw= Subject key identifier: 63:2D:13:4B:9A:8C:99:91:7B:F5:DF:04:F6:1D:67:B0:04:D1:15:19 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 349D99CA02E5C840327F4701B113DC9D5CA111A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 02D7 Signing time: Tue 09 Sep 2025 00:02:16 +0000 Manifest this update: Mon 08 Sep 2025 23:57:16 +0000 Manifest next update: Fri 12 Sep 2025 06:24:16 +0000 Files and hashes: 1: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) 2: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 3: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 4: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) 5: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: Z2JvKglvpuYcK5vHpC2hVLr9JgMiaed0XCcliB2M/lo=) 6: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) 7: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) 8: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9d:99:ca:02:e5:c8:40:32:7f:47:01:b1:13:dc:9d:5c:a1:11:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Sep 8 23:57:16 2025 GMT Not After : Sep 12 06:24:16 2025 GMT Subject: CN=632D134B9A8C99917BF5DF04F61D67B004D11519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:d7:43:d7:bc:56:f0:60:08:3b:87:00:79: 0c:2e:43:f2:56:a1:61:a2:82:63:89:7d:2b:d9:02: 51:9d:96:d0:cd:9d:78:1b:0a:8d:87:c5:7f:ce:57: eb:b3:7b:c1:0e:75:6b:48:13:ef:dc:f5:c2:1c:58: 5c:00:4a:48:c4:10:13:a9:38:5b:73:11:4a:66:9e: 7f:eb:c2:04:f2:04:36:ff:20:73:11:af:73:ca:c8: a0:a3:4b:d5:75:d2:80:ac:13:d8:fe:1c:c7:3f:0f: b6:76:cb:9a:de:7e:92:0a:37:10:3d:66:bf:06:16: c6:93:d9:1a:72:8d:de:bd:51:ba:64:6b:64:0e:d3: d7:b9:0a:c9:48:12:18:2b:3c:21:2c:08:66:62:90: cf:f5:88:91:ff:8e:65:70:77:42:c6:a6:ca:06:2a: e8:b0:96:dd:0e:b7:f3:1e:0f:03:f9:5e:4f:ee:24: 72:a3:c8:72:4f:23:64:a9:0f:93:45:d7:db:ed:39: 65:df:cc:c2:ff:02:e0:1d:a8:8f:46:8d:84:73:83: 34:87:52:bb:5f:81:76:2f:21:10:9f:4d:ef:8c:70: 11:75:05:2d:4c:cc:82:9b:d3:68:61:ea:50:c1:49: f8:2f:31:3b:be:da:87:07:4e:92:c4:12:e1:48:2f: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2D:13:4B:9A:8C:99:91:7B:F5:DF:04:F6:1D:67:B0:04:D1:15:19 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c0:99:65:6e:f1:6c:3c:1f:6c:50:d2:90:4f:a6:d9:e2:61: a2:55:cd:51:22:79:65:f9:b0:39:c9:2c:6e:8d:e7:f2:7d:03: 97:e2:e0:b9:7f:de:2c:71:94:c6:19:33:b6:90:31:fd:57:1b: 63:37:7c:3b:58:db:e5:b9:2a:ca:28:41:a2:10:7f:bb:5d:c3: 48:1c:c8:a5:21:fa:11:00:fb:82:c8:2b:7f:fe:b9:a6:f7:68: 88:b9:bb:93:2d:a4:15:0d:e8:4d:9f:3c:36:24:a2:b6:07:92: b1:4f:4c:bc:fd:65:f6:fe:4b:5e:25:79:b1:95:35:b1:6c:0c: ba:68:dc:2b:b0:15:68:76:b4:3c:e5:b3:e6:07:8a:50:06:dd: c7:4c:bc:2b:9b:ec:5d:93:ae:ea:05:ce:d3:51:f3:13:ce:31: d5:4a:42:45:26:76:62:59:56:0d:36:21:10:75:e1:c3:50:94: e0:b2:b8:27:e9:26:04:ba:53:80:59:a6:6e:2a:a5:83:38:32: 59:bb:d3:7e:7e:ae:06:51:f4:33:49:91:1e:57:4f:8a:e3:36: 49:cc:ca:0f:9e:0d:91:5e:b3:5c:93:9a:ea:6d:c3:a1:49:c0: 11:74:2b:fb:43:44:df:15:91:73:2a:ec:75:19:f3:3d:75:aa: 62:c2:c7:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJ2ZygLlyEAyf0cBsRPcnVyhEaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTA5MDgyMzU3MTZaFw0yNTA5MTIwNjI0MTZaMDMxMTAvBgNV BAMTKDYzMkQxMzRCOUE4Qzk5OTE3QkY1REYwNEY2MUQ2N0IwMDREMTE1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaNdD17xW8GAIO4cAeQwuQ/JW oWGigmOJfSvZAlGdltDNnXgbCo2HxX/OV+uze8EOdWtIE+/c9cIcWFwASkjEEBOp OFtzEUpmnn/rwgTyBDb/IHMRr3PKyKCjS9V10oCsE9j+HMc/D7Z2y5refpIKNxA9 Zr8GFsaT2Rpyjd69Ubpka2QO09e5CslIEhgrPCEsCGZikM/1iJH/jmVwd0LGpsoG Kuiwlt0Ot/MeDwP5Xk/uJHKjyHJPI2SpD5NF19vtOWXfzML/AuAdqI9GjYRzgzSH UrtfgXYvIRCfTe+McBF1BS1MzIKb02hh6lDBSfgvMTu+2ocHTpLEEuFIL6tLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYy0TS5qMmZF79d8E9h1nsATRFRkwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3AmWVu8Ww8H2xQ0pBPptniYaJVzVEieWX5 sDnJLG6N5/J9A5fi4Ll/3ixxlMYZM7aQMf1XG2M3fDtY2+W5KsooQaIQf7tdw0gc yKUh+hEA+4LIK3/+uab3aIi5u5MtpBUN6E2fPDYkorYHkrFPTLz9Zfb+S14lebGV NbFsDLpo3CuwFWh2tDzls+YHilAG3cdMvCub7F2TruoFztNR8xPOMdVKQkUmdmJZ Vg02IRB14cNQlOCyuCfpJgS6U4BZpm4qpYM4Mlm7035+rgZR9DNJkR5XT4rjNknM yg+eDZFes1yTmuptw6FJwBF0K/tDRN8VkXMq7HUZ8z11qmLCxxk= -----END CERTIFICATE-----Generated at Wed Sep 10 00:15:43 2025 by rpki-client