$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: JY6zCgTAIcmrUZ6ZecBMr8/8q0Godm4lVFhRgWOnNdY= Subject key identifier: 62:CE:EF:16:CE:30:4E:0A:A9:BC:C7:A2:2E:F2:78:C5:6B:9F:1E:86 Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 2AD425BD162737CE21AA35BFE5DD9C7AD61F0A0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 0221 Signing time: Tue 03 Jun 2025 21:13:37 +0000 Manifest this update: Tue 03 Jun 2025 21:08:37 +0000 Manifest next update: Sat 07 Jun 2025 02:19:37 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: 0gwzUuXJKecwHFsVYSJObanLUPWhWSfTAdSnLlyA+wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d4:25:bd:16:27:37:ce:21:aa:35:bf:e5:dd:9c:7a:d6:1f:0a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Jun 3 21:08:37 2025 GMT Not After : Jun 7 02:19:37 2025 GMT Subject: CN=62CEEF16CE304E0AA9BCC7A22EF278C56B9F1E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:7e:95:d3:a3:11:68:6c:22:32:73:a0:3c: 2b:7d:c1:af:2b:91:6d:99:e7:b6:bd:20:ed:d9:95: 72:6e:90:01:c9:7d:2a:fa:46:06:d1:a4:61:b8:83: 9b:0a:32:65:e6:a9:e6:9d:0e:42:02:0a:bb:fd:da: d1:c9:dd:20:e1:bc:e4:fe:65:5c:07:48:7a:6c:42: 7a:a1:17:5b:68:ae:c5:eb:73:f1:e4:b6:d1:95:0c: 8d:44:d1:a3:78:45:95:79:fb:9b:e1:ba:49:35:59: 05:bb:67:0d:45:51:97:7b:ad:82:00:2b:f4:c6:b0: c2:94:2d:34:a2:30:8e:87:9f:aa:94:93:2b:24:5b: 1a:70:4b:09:e9:84:27:a8:60:ec:73:fe:d9:e1:41: 90:39:15:a8:67:ab:fc:4c:40:5b:13:d3:34:9d:93: 5f:85:0d:8c:32:72:b4:39:6f:c0:b5:16:ed:54:af: b5:41:78:7b:4f:80:7b:9f:fd:cc:c3:f2:2d:db:b4: e1:9b:75:eb:5d:a2:c7:de:19:cc:ba:75:a8:3f:b9: f5:51:66:bb:b6:30:50:07:bf:ec:41:a1:53:ae:90: e5:f7:3c:8f:7c:44:6d:b3:85:26:da:8f:94:9d:6d: be:7e:e7:a4:a5:85:43:63:a1:98:c7:91:04:e6:8f: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CE:EF:16:CE:30:4E:0A:A9:BC:C7:A2:2E:F2:78:C5:6B:9F:1E:86 X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9c:37:06:dd:2e:9d:91:e2:19:ba:c1:90:18:ba:62:5c:0d: 75:4d:c0:4d:c0:bd:58:71:46:b2:cc:66:ca:0a:1b:78:3c:a5: b6:3d:a0:84:fa:98:3e:25:d4:a1:e1:b0:63:0c:11:3d:1e:16: 75:0f:d0:b3:d9:7c:6b:3a:37:9a:dc:af:30:94:fe:e9:72:60: 07:f9:e0:ed:f4:d3:e6:15:83:b1:0a:df:b1:e9:58:b6:f3:c2: 5c:b8:ea:d1:53:d5:c4:85:88:90:b0:67:ff:1c:d8:07:38:6f: a9:c7:6c:74:ed:d1:c3:50:c6:22:b2:72:55:20:4b:b4:e3:b5: 04:44:c2:32:b5:fa:4a:f0:29:82:c8:37:fd:bf:ee:27:4b:a6: 5f:fa:2b:44:d8:6a:21:1c:39:e0:9e:c4:88:09:c7:71:db:f7: e0:3d:92:8d:28:5b:f2:f6:60:35:36:12:e5:53:c6:e9:d9:54: e2:ea:ea:fc:a4:71:36:66:f2:42:b1:50:05:34:f3:53:e0:d6: e3:88:97:17:be:d2:99:8d:cd:8c:c2:6c:5a:7b:0c:a7:fe:36: e6:dc:39:de:ff:96:27:3f:ac:54:98:ef:ae:09:e1:a2:55:a3: 67:52:74:47:9a:68:e0:a7:09:b6:87:44:de:37:4e:46:9e:22: 5c:6c:c8:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtQlvRYnN84hqjW/5d2cetYfCg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNTA2MDMyMTA4MzdaFw0yNTA2MDcwMjE5MzdaMDMxMTAvBgNV BAMTKDYyQ0VFRjE2Q0UzMDRFMEFBOUJDQzdBMjJFRjI3OEM1NkI5RjFFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcd36V06MRaGwiMnOgPCt9wa8r kW2Z57a9IO3ZlXJukAHJfSr6RgbRpGG4g5sKMmXmqeadDkICCrv92tHJ3SDhvOT+ ZVwHSHpsQnqhF1torsXrc/HkttGVDI1E0aN4RZV5+5vhukk1WQW7Zw1FUZd7rYIA K/TGsMKULTSiMI6Hn6qUkyskWxpwSwnphCeoYOxz/tnhQZA5Fahnq/xMQFsT0zSd k1+FDYwycrQ5b8C1Fu1Ur7VBeHtPgHuf/czD8i3btOGbdetdosfeGcy6dag/ufVR Zru2MFAHv+xBoVOukOX3PI98RG2zhSbaj5Sdbb5+56SlhUNjoZjHkQTmjyw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYs7vFs4wTgqpvMeiLvJ4xWufHoYwHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWcNwbdLp2R4hm6wZAYumJcDXVNwE3AvVhx RrLMZsoKG3g8pbY9oIT6mD4l1KHhsGMMET0eFnUP0LPZfGs6N5rcrzCU/ulyYAf5 4O300+YVg7EK37HpWLbzwly46tFT1cSFiJCwZ/8c2Ac4b6nHbHTt0cNQxiKyclUg S7TjtQREwjK1+krwKYLIN/2/7idLpl/6K0TYaiEcOeCexIgJx3Hb9+A9ko0oW/L2 YDU2EuVTxunZVOLq6vykcTZm8kKxUAU081Pg1uOIlxe+0pmNzYzCbFp7DKf+Nubc Od7/lic/rFSY764J4aJVo2dSdEeaaOCnCbaHRN43TkaeIlxsyJ0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:53 2025 by rpki-client