$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: FDbzagqJt81WT5MfAXP8BbzCDslzvTjcgIDiMpRkdcE= Subject key identifier: 0A:FE:06:CE:4F:53:A8:1A:EA:68:A7:EC:A3:B8:74:A1:AA:C4:77:F6 Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 2C2A4044C63BA6C46FC70A9EEE7671ABD13F0388 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: 0106 Signing time: Fri 05 Sep 2025 07:21:14 +0000 Manifest this update: Fri 05 Sep 2025 07:16:14 +0000 Manifest next update: Mon 08 Sep 2025 15:17:14 +0000 Files and hashes: 1: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=) 2: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: S1iCObdizcNgfovWSH47hMA3WIAhvYitEX1wDvvVatc=) 3: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2a:40:44:c6:3b:a6:c4:6f:c7:0a:9e:ee:76:71:ab:d1:3f:03:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Sep 5 07:16:14 2025 GMT Not After : Sep 8 15:17:14 2025 GMT Subject: CN=0AFE06CE4F53A81AEA68A7ECA3B874A1AAC477F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:81:e5:5c:e8:6f:aa:7b:96:83:4e:1e:92: 4e:90:4f:85:3a:11:6f:82:0e:25:bb:56:80:bc:58: 57:3f:43:18:44:97:c4:f8:7d:52:2b:0b:11:74:6e: 3a:64:fa:55:08:8b:b1:7c:af:86:b7:6e:8c:a3:27: 37:63:81:10:ab:6e:21:eb:5f:79:dd:43:37:16:c3: be:41:72:8f:a7:15:fc:4a:f6:da:29:81:cd:a6:dc: 29:06:1f:fb:2a:db:bd:3c:ef:b8:9a:e8:c4:81:32: d9:77:ef:78:e2:32:85:3b:c5:a9:cb:54:41:56:f0: 07:59:ed:c7:c4:69:61:4a:5d:9f:b6:4b:8e:a2:3f: 4a:1b:81:14:b3:8b:f6:7c:9d:81:58:61:09:a9:0e: 09:aa:e7:ee:4d:01:84:29:01:1e:e1:6d:0d:50:01: f9:77:88:ff:a6:02:0b:fd:7b:94:cf:dc:d9:ca:6d: 8c:44:a6:1b:ef:cf:96:b7:f7:74:78:3d:16:44:36: e6:e6:64:68:8a:2d:9d:88:7d:43:be:38:13:f6:45: c7:d3:12:18:59:60:b4:85:5d:b9:88:df:ea:02:de: 3c:46:f4:f7:26:32:5b:44:33:cf:7a:dc:ea:ab:b4: 68:1b:37:6c:20:68:14:83:23:fd:0d:a9:34:bc:d5: c1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FE:06:CE:4F:53:A8:1A:EA:68:A7:EC:A3:B8:74:A1:AA:C4:77:F6 X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ac:3e:d5:7d:15:bd:1f:30:a6:eb:ac:77:4e:db:68:91:c4: a1:73:e5:4c:bf:c6:39:17:a8:dd:8f:11:79:2b:7a:e0:9e:08: 70:ea:e6:ed:01:6c:92:49:ff:cb:b0:67:99:a3:78:81:5b:e4: b9:04:5e:74:83:95:0b:ef:70:d6:b5:08:9b:ad:8b:af:c8:6c: 1c:59:ab:d5:2d:24:cb:3a:f9:a8:6c:b4:e2:27:10:52:e6:5b: 00:2b:ac:11:ca:5e:29:23:f5:50:61:b3:42:e1:b8:fb:36:d4: fb:85:60:11:d4:42:4b:90:c6:cb:06:b1:ed:e4:fa:c9:2a:11: 9a:81:77:ea:17:41:e2:69:ff:9a:55:5b:29:7e:8c:98:ce:a3: 71:95:9d:cc:16:9f:49:89:77:cf:f9:25:85:0b:8e:20:81:7c: 03:e9:41:51:52:51:c4:bf:91:6a:0a:8a:17:30:8a:a1:3f:1e: ad:69:f1:22:1d:67:04:2c:ab:b3:d2:86:a6:7e:6d:95:41:ce: d2:11:0e:2f:54:60:c7:ac:4d:70:61:bd:67:db:6f:a7:50:5e: 96:4c:13:07:a3:e1:65:30:f2:7e:ab:e8:69:c8:c3:1f:19:66: ad:51:97:35:1a:3b:5e:a0:7b:1d:61:9b:21:a1:4e:f9:3e:15: 99:38:9a:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCpARMY7psRvxwqe7nZxq9E/A4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTA5MDUwNzE2MTRaFw0yNTA5MDgxNTE3MTRaMDMxMTAvBgNV BAMTKDBBRkUwNkNFNEY1M0E4MUFFQTY4QTdFQ0EzQjg3NEExQUFDNDc3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhcoHlXOhvqnuWg04ekk6QT4U6 EW+CDiW7VoC8WFc/QxhEl8T4fVIrCxF0bjpk+lUIi7F8r4a3boyjJzdjgRCrbiHr X3ndQzcWw75Bco+nFfxK9topgc2m3CkGH/sq270877ia6MSBMtl373jiMoU7xanL VEFW8AdZ7cfEaWFKXZ+2S46iP0obgRSzi/Z8nYFYYQmpDgmq5+5NAYQpAR7hbQ1Q Afl3iP+mAgv9e5TP3NnKbYxEphvvz5a393R4PRZENubmZGiKLZ2IfUO+OBP2RcfT EhhZYLSFXbmI3+oC3jxG9PcmMltEM8963OqrtGgbN2wgaBSDI/0NqTS81cEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCv4Gzk9TqBrqaKfso7h0oarEd/YwHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6sPtV9Fb0fMKbrrHdO22iRxKFz5Uy/xjkX qN2PEXkreuCeCHDq5u0BbJJJ/8uwZ5mjeIFb5LkEXnSDlQvvcNa1CJuti6/IbBxZ q9UtJMs6+ahstOInEFLmWwArrBHKXikj9VBhs0LhuPs21PuFYBHUQkuQxssGse3k +skqEZqBd+oXQeJp/5pVWyl+jJjOo3GVncwWn0mJd8/5JYULjiCBfAPpQVFSUcS/ kWoKihcwiqE/Hq1p8SIdZwQsq7PShqZ+bZVBztIRDi9UYMesTXBhvWfbb6dQXpZM Ewej4WUw8n6r6GnIwx8ZZq1RlzUaO16gex1hmyGhTvk+FZk4mmA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:44 2025 by rpki-client