$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: TNW2lY5h1qxtfEotbFrYlO4ggwW2m/pjrek290x+XK8= Subject key identifier: DB:9D:BB:84:57:01:F4:9E:31:CD:3A:FE:1F:76:1D:7D:75:3F:DB:63 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 39233714513715E55F596AA99BD6B6BF0D8BBA9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 02AC Signing time: Sun 08 Jun 2025 00:02:15 +0000 Manifest this update: Sat 07 Jun 2025 23:57:15 +0000 Manifest next update: Wed 11 Jun 2025 06:25:15 +0000 Files and hashes: 1: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) 2: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: JkQA/oVx7nSJZSG/P9kFIu+xx/U2BTezfRvZq/eeJWQ=) 3: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: cJdFmetSpfboMXdRo/sIG4R9AqSqz69HiL624T+to/0=) 4: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: 4Ce67YL0bl40nJXMynzDOb6UG6RAWI//TFzIcKJFNZA=) 5: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 6: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 7: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) 8: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:23:37:14:51:37:15:e5:5f:59:6a:a9:9b:d6:b6:bf:0d:8b:ba:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Jun 7 23:57:15 2025 GMT Not After : Jun 11 06:25:15 2025 GMT Subject: CN=DB9DBB845701F49E31CD3AFE1F761D7D753FDB63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:fc:90:5b:21:b7:f7:8e:17:17:92:74:80: 1f:f3:e2:99:4f:84:52:e4:7d:ee:6d:64:95:c9:49: 26:14:71:6b:c5:a3:2d:7c:54:5d:c3:39:c8:19:7f: 40:86:2e:f4:66:26:0d:6a:22:18:60:b4:a3:4d:33: b8:db:55:7e:17:25:60:94:93:9d:81:03:8f:92:bb: e6:d7:c7:e7:a0:ff:bf:f5:2c:fa:c2:ce:c7:e5:26: 6d:97:9d:5a:46:1a:46:ac:38:08:25:c9:0c:1b:12: 48:3d:3e:64:f9:11:b3:a9:dc:8b:b6:09:33:d2:99: d5:5b:19:93:a3:83:c5:b9:46:72:d9:a4:a5:23:ab: 1d:47:ad:98:ef:1c:4c:af:50:d8:d1:ee:26:28:19: 8d:61:13:12:b2:4b:f5:7d:62:a8:72:9c:d8:c0:3e: 84:24:89:ae:5b:52:cf:79:69:3d:4f:4a:3f:ca:60: 1f:ae:12:39:10:c8:97:6c:a0:ef:2a:2e:a2:27:d0: f2:d4:63:85:f3:e1:92:38:3a:f9:98:b1:16:ad:29: e1:46:1e:41:19:d3:89:39:77:d2:df:c0:a2:0b:ae: 4e:f9:47:c2:73:ee:f5:b5:17:5a:dc:36:4f:fa:c4: 83:c6:2f:8d:ca:1d:bf:ba:c0:cb:8e:07:e9:56:de: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9D:BB:84:57:01:F4:9E:31:CD:3A:FE:1F:76:1D:7D:75:3F:DB:63 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d2:00:82:c4:e2:26:8b:eb:b3:db:55:99:46:fb:ac:74:9b: ea:9a:89:14:61:9c:1a:9a:d6:2b:ed:8b:ea:29:48:c9:76:98: 14:b5:f0:52:a2:82:fe:58:59:a5:58:d5:38:84:12:41:0f:6b: 8d:70:9a:6a:c9:f0:75:38:1b:f9:be:04:5c:bd:b4:39:87:ed: 11:5b:6c:e0:3f:74:48:76:82:f4:74:6e:ef:17:b7:f7:78:d5: e7:ec:9e:d3:fd:06:5f:44:26:24:59:b3:46:e1:96:6b:a0:22: 23:2f:a4:e1:73:ec:03:c0:c6:96:d4:e9:0e:bb:56:7b:40:be: bc:c6:8e:c3:84:13:e3:26:ab:39:10:eb:08:d4:86:b7:fa:46: 7b:35:b3:38:60:af:9f:ac:89:34:e4:b0:e7:a0:4e:d6:d2:21: ae:63:51:65:ef:81:4b:43:c6:60:2e:6a:94:0c:c5:d0:bf:26: 2d:8c:63:9a:ea:26:9e:01:a6:03:e5:84:15:cd:ce:39:2e:9b: b7:71:5b:3f:e7:23:9e:3e:17:b4:a4:b7:b8:16:3f:14:0f:4c: 2d:46:57:cf:d2:50:f6:f7:32:03:95:e1:b6:0e:f8:68:74:6c: 78:c1:8b:6d:8e:3c:2f:c0:8a:3d:9c:4b:af:95:05:78:5a:e6: 84:e0:ce:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSM3FFE3FeVfWWqpm9a2vw2Lup4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTA2MDcyMzU3MTVaFw0yNTA2MTEwNjI1MTVaMDMxMTAvBgNV BAMTKERCOURCQjg0NTcwMUY0OUUzMUNEM0FGRTFGNzYxRDdENzUzRkRCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNj/yQWyG3944XF5J0gB/z4plP hFLkfe5tZJXJSSYUcWvFoy18VF3DOcgZf0CGLvRmJg1qIhhgtKNNM7jbVX4XJWCU k52BA4+Su+bXx+eg/7/1LPrCzsflJm2XnVpGGkasOAglyQwbEkg9PmT5EbOp3Iu2 CTPSmdVbGZOjg8W5RnLZpKUjqx1HrZjvHEyvUNjR7iYoGY1hExKyS/V9YqhynNjA PoQkia5bUs95aT1PSj/KYB+uEjkQyJdsoO8qLqIn0PLUY4Xz4ZI4OvmYsRatKeFG HkEZ04k5d9LfwKILrk75R8Jz7vW1F1rcNk/6xIPGL43KHb+6wMuOB+lW3pbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2527hFcB9J4xzTr+H3YdfXU/22MwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbSAILE4iaL67PbVZlG+6x0m+qaiRRhnBqa 1ivti+opSMl2mBS18FKigv5YWaVY1TiEEkEPa41wmmrJ8HU4G/m+BFy9tDmH7RFb bOA/dEh2gvR0bu8Xt/d41efsntP9Bl9EJiRZs0bhlmugIiMvpOFz7APAxpbU6Q67 VntAvrzGjsOEE+MmqzkQ6wjUhrf6Rns1szhgr5+siTTksOegTtbSIa5jUWXvgUtD xmAuapQMxdC/Ji2MY5rqJp4BpgPlhBXNzjkum7dxWz/nI54+F7Skt7gWPxQPTC1G V8/SUPb3MgOV4bYO+Gh0bHjBi22OPC/Aij2cS6+VBXha5oTgzj4= -----END CERTIFICATE-----Generated at Sun Jun 8 13:33:38 2025 by rpki-client