$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: bFrVlpbsvMvbL7fgNNAEWsaOmyj5ElemySvHqesjN6M= Subject key identifier: 1F:F8:7A:4F:E0:5F:35:EA:4E:F6:DE:6E:A8:BA:45:5F:C0:08:7C:0E Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 6ED2059387D2CF77F46E21C2798875B0C7FE53C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 0290 Signing time: Wed 09 Apr 2025 15:02:14 +0000 Manifest this update: Wed 09 Apr 2025 14:57:14 +0000 Manifest next update: Sat 12 Apr 2025 20:14:14 +0000 Files and hashes: 1: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: 4Ce67YL0bl40nJXMynzDOb6UG6RAWI//TFzIcKJFNZA=) 2: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: MusaVD8Rj5ogKmHgFDdrJrrSMHNpTmm2r0jTc52+4c0=) 3: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: bKrbBC55rwvL7th1EkrT2ahO/qEfrCcBth/UGnzXcLE=) 4: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: OG5Z9CpKWxd1W4YOSrj5Xk//pa9S5164fCU9LE6L+sg=) 5: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: pkPxXxlwyvQWXVdp2dENcK+tb3nTqH7lyMKDi9+HDPk=) 6: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: lco+WzxW3Iji0/qkTCFH+wsYzV3XvFCQHLZ/O4Vbnww=) 7: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: lx3+LLlQ4WnCMnKdcVANXgIMuP9AcgN7h+mv0gF7DvQ=) 8: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: JkQA/oVx7nSJZSG/P9kFIu+xx/U2BTezfRvZq/eeJWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 20:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d2:05:93:87:d2:cf:77:f4:6e:21:c2:79:88:75:b0:c7:fe:53:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Apr 9 14:57:14 2025 GMT Not After : Apr 12 20:14:14 2025 GMT Subject: CN=1FF87A4FE05F35EA4EF6DE6EA8BA455FC0087C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:10:23:c6:a8:4e:7b:27:46:6b:b7:a3:2e: d2:87:0e:7a:68:c7:5a:07:9a:f6:03:00:54:86:77: 15:db:a7:64:60:58:8c:07:6e:b6:1e:7e:ce:54:2f: 15:68:09:d6:b3:8d:b4:8c:b9:f3:14:c7:96:32:51: 9d:35:9d:48:d1:99:bd:e7:c0:31:f8:c1:0e:b2:9b: 0a:cf:04:a6:45:8f:37:65:fe:bd:40:0e:28:c6:36: 21:f6:e9:70:c2:68:cd:39:f2:ed:c2:32:79:9d:4b: 0d:74:b3:50:e0:45:6f:12:37:0a:47:40:10:15:23: fc:b4:82:9d:37:be:86:79:02:f6:f8:9b:ef:06:03: c4:9d:6e:e8:37:28:f5:74:93:d0:45:1e:02:de:b7: 1c:6a:08:cd:b7:f0:61:eb:3a:b9:86:23:44:59:b3: 07:a1:3b:a6:be:c9:f3:f1:4a:c9:a0:0b:d7:b7:13: 96:7d:16:20:ad:55:52:b7:30:bd:de:e1:0f:4d:0a: 6f:92:82:b6:48:6b:b6:a3:45:be:5f:4d:2e:ca:44: 5d:80:89:91:f0:ca:fc:88:47:c5:0f:c1:68:89:5d: ea:d9:0d:d9:cf:2b:d1:ce:33:9b:65:c9:0d:97:af: 5e:50:e9:b8:85:22:b0:c6:86:40:f6:35:45:94:96: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F8:7A:4F:E0:5F:35:EA:4E:F6:DE:6E:A8:BA:45:5F:C0:08:7C:0E X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6c:bc:74:73:ac:27:dd:98:00:94:c5:bd:4b:8e:72:18:8b: 70:46:a0:dd:09:ba:b4:26:a6:95:4f:e1:4e:6c:e0:61:8a:00: 4c:45:6a:21:db:d7:e3:92:57:d7:08:58:a9:70:13:75:7e:ea: 47:e0:cc:c3:72:d8:cb:ce:6e:c0:c3:45:02:9e:44:2d:41:35: e4:df:42:2e:bd:cd:8f:23:42:f1:1e:38:5d:93:5c:f0:84:6b: 6e:8d:1a:3d:e8:95:c5:92:5c:6f:c3:39:6e:52:a7:87:8c:a6: 43:8a:a6:f3:f9:9f:85:4d:72:74:c5:c1:6c:2f:2f:17:45:86: 22:31:66:af:6b:46:98:a1:ea:eb:e5:39:f2:b2:e7:58:42:4a: 98:be:4c:29:3d:4e:5a:13:91:0a:9d:05:44:15:fb:61:ba:df: 53:7c:38:05:91:ed:b5:e6:11:9c:36:f6:0a:39:0c:6b:e4:c4: 67:0a:36:64:e7:2d:e1:64:37:00:42:29:eb:4c:6d:eb:53:9c: b1:50:5c:35:92:f6:b6:93:3a:ed:53:a0:05:c0:f5:b8:d8:14: 09:cf:78:a6:cf:c8:c5:8b:f0:e3:ce:39:7a:60:eb:ad:ce:f4: fc:e3:6c:7d:e9:f5:f5:ca:3c:0d:6a:c8:e8:ae:a5:67:a6:c8: 1d:08:33:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtIFk4fSz3f0biHCeYh1sMf+U8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTA0MDkxNDU3MTRaFw0yNTA0MTIyMDE0MTRaMDMxMTAvBgNV BAMTKDFGRjg3QTRGRTA1RjM1RUE0RUY2REU2RUE4QkE0NTVGQzAwODdDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMxAjxqhOeydGa7ejLtKHDnpo x1oHmvYDAFSGdxXbp2RgWIwHbrYefs5ULxVoCdazjbSMufMUx5YyUZ01nUjRmb3n wDH4wQ6ymwrPBKZFjzdl/r1ADijGNiH26XDCaM058u3CMnmdSw10s1DgRW8SNwpH QBAVI/y0gp03voZ5Avb4m+8GA8Sdbug3KPV0k9BFHgLetxxqCM238GHrOrmGI0RZ swehO6a+yfPxSsmgC9e3E5Z9FiCtVVK3ML3e4Q9NCm+SgrZIa7ajRb5fTS7KRF2A iZHwyvyIR8UPwWiJXerZDdnPK9HOM5tlyQ2Xr15Q6biFIrDGhkD2NUWUlidxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/h6T+BfNepO9t5uqLpFX8AIfA4wHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtsvHRzrCfdmACUxb1LjnIYi3BGoN0JurQm ppVP4U5s4GGKAExFaiHb1+OSV9cIWKlwE3V+6kfgzMNy2MvObsDDRQKeRC1BNeTf Qi69zY8jQvEeOF2TXPCEa26NGj3olcWSXG/DOW5Sp4eMpkOKpvP5n4VNcnTFwWwv LxdFhiIxZq9rRpih6uvlOfKy51hCSpi+TCk9TloTkQqdBUQV+2G631N8OAWR7bXm EZw29go5DGvkxGcKNmTnLeFkNwBCKetMbetTnLFQXDWS9raTOu1ToAXA9bjYFAnP eKbPyMWL8OPOOXpg663O9PzjbH3p9fXKPA1qyOiupWemyB0IMxY= -----END CERTIFICATE-----Generated at Thu Apr 10 11:17:44 2025 by rpki-client