$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: m+40ogL1gKTR69DB4FBgMiKBRl46W8p07ucD+87pPT8= Subject key identifier: DA:46:9D:C9:88:CA:55:BD:E9:A8:AA:30:FC:BE:69:A9:40:0C:BF:45 Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 5ED23B7CC86B80F8D9BDCF3F4315442D8EB9E8CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: C1 Signing time: Fri 04 Apr 2025 22:41:13 +0000 Manifest this update: Fri 04 Apr 2025 22:36:13 +0000 Manifest next update: Tue 08 Apr 2025 07:18:13 +0000 Files and hashes: 1: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: aigr7AXjhlr1b9qthFiLzHxaa/zDTfNBBw0X2eMOZro=) 2: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 2z42X43Ea7u6xKcdMj3FxNdE9A6gxBVfBgTimjuLHeI=) 3: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 07:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d2:3b:7c:c8:6b:80:f8:d9:bd:cf:3f:43:15:44:2d:8e:b9:e8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Apr 4 22:36:13 2025 GMT Not After : Apr 8 07:18:13 2025 GMT Subject: CN=DA469DC988CA55BDE9A8AA30FCBE69A9400CBF45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:0a:0d:2c:9a:ff:5a:ef:13:f7:11:57:ec: d6:4d:32:7c:42:6c:89:db:b9:4d:94:65:95:b6:a4: 73:6f:2d:12:33:77:0f:03:bd:51:e0:d6:d3:f7:3c: 43:8e:20:e9:d8:61:51:b0:dd:e7:0c:fd:f6:fd:e0: cc:79:c3:01:58:ce:47:95:a0:b0:f8:fe:f9:1e:d2: 49:f0:f3:85:16:b4:3e:63:48:83:1e:95:41:f9:3d: 04:45:83:34:89:80:b6:87:9c:05:01:42:e6:89:b5: dd:11:dd:b8:77:3a:05:ac:1a:77:4c:05:20:09:26: 7b:00:aa:2d:b9:79:9d:71:a5:45:fc:3a:79:df:b5: 42:bf:d8:ec:5e:47:c7:d9:1a:1f:2d:30:ee:88:9d: e2:8c:96:6c:9b:3c:3f:44:52:a3:81:b4:94:95:d7: 0f:c2:94:3a:e0:37:32:95:91:24:f0:87:c8:52:32: d5:73:76:40:a3:60:ff:50:0f:f8:fd:d9:f1:7f:c9: 42:b0:02:04:4d:e1:a2:07:81:2e:58:35:38:62:80: 63:75:0f:bb:49:91:d9:34:23:ac:fa:d0:cb:61:e7: 98:5b:29:e5:90:12:ac:8a:ef:77:1e:bb:83:20:f7: f0:00:32:6a:cd:e2:02:3b:25:2d:31:b5:d0:a6:cc: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:46:9D:C9:88:CA:55:BD:E9:A8:AA:30:FC:BE:69:A9:40:0C:BF:45 X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:90:ef:91:95:60:5b:57:d1:f8:a4:c9:59:c7:8c:01:5e:5f: 7b:56:a8:ff:49:06:ae:f3:42:77:37:a4:cc:1a:46:3b:2e:ef: 59:d2:da:38:e2:fa:25:59:73:2b:4c:23:aa:8f:41:c5:82:13: ca:2f:63:05:3a:2e:ac:3a:6a:17:33:25:aa:a2:fa:37:b9:0e: cf:50:7a:0f:11:dc:06:6a:01:3a:4f:83:df:63:f9:13:fa:6e: 75:e2:ad:c5:2e:83:cf:af:0f:fc:4f:85:b9:4e:52:b5:2e:70: b9:5e:e3:29:63:74:f2:fe:90:b2:8e:9a:5f:92:9b:f0:18:96: bd:9e:fe:57:15:74:e8:b1:29:ec:c3:6e:90:1d:f8:6f:e6:33: 7e:23:ab:72:75:95:a6:4a:a6:34:08:a8:b4:8a:29:6c:78:8c: 16:a0:70:6b:c5:d6:dc:85:a7:5e:c5:3d:c7:85:d5:3a:53:1f: a3:02:09:a4:30:bb:73:8b:7b:d9:32:3d:a5:65:53:83:17:29: f6:8f:33:c7:fc:88:56:86:e3:b1:f6:8b:10:7f:57:bb:1f:2c: 97:d8:d7:a2:30:7c:63:91:c1:ae:89:f6:73:37:16:f2:48:d7: b2:b8:ce:f8:76:8f:eb:f4:5c:ec:79:e7:2a:d8:3d:5e:61:4a: 6f:d7:da:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtI7fMhrgPjZvc8/QxVELY656M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTA0MDQyMjM2MTNaFw0yNTA0MDgwNzE4MTNaMDMxMTAvBgNV BAMTKERBNDY5REM5ODhDQTU1QkRFOUE4QUEzMEZDQkU2OUE5NDAwQ0JGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYowoNLJr/Wu8T9xFX7NZNMnxC bInbuU2UZZW2pHNvLRIzdw8DvVHg1tP3PEOOIOnYYVGw3ecM/fb94Mx5wwFYzkeV oLD4/vke0knw84UWtD5jSIMelUH5PQRFgzSJgLaHnAUBQuaJtd0R3bh3OgWsGndM BSAJJnsAqi25eZ1xpUX8OnnftUK/2OxeR8fZGh8tMO6IneKMlmybPD9EUqOBtJSV 1w/ClDrgNzKVkSTwh8hSMtVzdkCjYP9QD/j92fF/yUKwAgRN4aIHgS5YNThigGN1 D7tJkdk0I6z60Mth55hbKeWQEqyK73ceu4Mg9/AAMmrN4gI7JS0xtdCmzNybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kadyYjKVb3pqKow/L5pqUAMv0UwHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWQ75GVYFtX0fikyVnHjAFeX3tWqP9JBq7z Qnc3pMwaRjsu71nS2jji+iVZcytMI6qPQcWCE8ovYwU6Lqw6ahczJaqi+je5Ds9Q eg8R3AZqATpPg99j+RP6bnXircUug8+vD/xPhblOUrUucLle4yljdPL+kLKOml+S m/AYlr2e/lcVdOixKezDbpAd+G/mM34jq3J1laZKpjQIqLSKKWx4jBagcGvF1tyF p17FPceF1TpTH6MCCaQwu3OLe9kyPaVlU4MXKfaPM8f8iFaG47H2ixB/V7sfLJfY 16IwfGORwa6J9nM3FvJI17K4zvh2j+v0XOx55yrYPV5hSm/X2ns= -----END CERTIFICATE-----Generated at Sun Apr 6 09:43:00 2025 by rpki-client