$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft File: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json) Hash identifier: T+p34IoVnSpqp2mvhkfmYdxT9C10a0q36Q0bX/wzM10= Subject key identifier: 73:3F:A1:4F:C0:34:AE:6A:04:E6:14:EE:C3:95:FB:06:35:EB:CE:B3 Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 25285BFE323B63FD9099E137B93B14861FBC0D56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft Manifest number: 0387 Signing time: Thu 04 Sep 2025 08:31:01 +0000 Manifest this update: Thu 04 Sep 2025 08:26:01 +0000 Manifest next update: Sun 07 Sep 2025 12:54:01 +0000 Files and hashes: 1: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: r5sVzyXBud0YEhbhFW4VYOh0Y2qtg175UJ/8LvO/fSc=) 2: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=) 3: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=) 4: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:28:5b:fe:32:3b:63:fd:90:99:e1:37:b9:3b:14:86:1f:bc:0d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Sep 4 08:26:01 2025 GMT Not After : Sep 7 12:54:01 2025 GMT Subject: CN=733FA14FC034AE6A04E614EEC395FB0635EBCEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:1d:e2:b0:f5:a4:31:27:40:19:0e:26:f5: 6e:0a:50:3b:59:2a:cf:aa:c9:53:d3:d9:2d:3f:25: c4:1c:40:51:d0:39:49:45:5d:fd:b1:16:34:cb:bb: 23:57:cf:ef:97:f5:04:b6:1e:10:ed:72:9d:39:7b: d7:7b:2e:54:aa:21:1b:ea:2d:f2:d3:4a:49:37:d8: 72:a0:4d:7a:b5:2e:09:f4:88:b9:62:91:a6:83:5f: 6c:da:71:97:48:5c:e4:26:45:8b:c4:a5:2d:f0:1d: f2:27:45:64:4e:89:0d:69:e3:b5:b4:df:71:5c:3f: b7:c3:f6:68:ff:a3:86:b1:26:72:5e:ee:26:f1:48: 25:9c:02:6c:84:86:42:4e:c2:72:4e:f5:aa:ff:0c: 82:c0:3f:21:1b:4f:cf:68:07:e6:8a:f8:fc:d5:78: b8:a9:52:d2:be:f2:24:8a:60:3c:5d:65:35:97:ed: 20:54:48:79:74:6a:de:a2:17:91:3f:d2:42:74:df: ea:fa:2a:9a:1f:51:1f:71:d4:9c:11:2a:2a:1a:ee: 0c:42:dd:af:f0:0a:dd:45:80:4c:ac:0c:27:26:6f: f3:df:28:f8:ae:46:06:a9:17:3e:53:c5:8d:86:8c: 73:cc:03:08:e2:d8:96:8f:98:26:66:b8:6a:fd:24: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3F:A1:4F:C0:34:AE:6A:04:E6:14:EE:C3:95:FB:06:35:EB:CE:B3 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:98:ce:1a:33:4a:30:a2:c7:43:55:5c:f9:6d:31:59:6a:0c: 44:0b:af:f7:b5:4e:d4:6c:81:73:8c:f9:bb:c4:d9:4f:7b:43: da:e6:46:ad:4c:84:94:c5:03:db:63:1c:ec:47:3c:a0:00:3d: bb:cf:4c:2f:91:d4:5a:e9:f5:3f:de:23:6b:7d:8d:59:d2:c6: 64:e0:df:50:5b:22:17:67:2d:a3:5f:85:49:5d:69:ce:38:a6: 38:14:21:dd:c0:68:df:9b:60:df:47:5e:1f:d0:9f:79:c5:50: 6f:38:17:29:22:1a:71:d1:f2:d7:53:93:20:2f:d8:eb:4a:dc: 34:97:96:c1:5b:b4:25:93:98:68:66:72:80:ea:76:64:52:60: 85:04:80:0b:11:df:e3:a9:ec:91:e0:df:c1:41:64:ba:6f:70: 98:4a:18:86:5a:07:8c:01:62:d2:46:db:ed:fb:b3:55:82:55: 8b:7a:7e:b3:18:2f:da:b6:f6:35:b6:8f:3d:80:8e:e5:84:dd: 39:52:cd:ad:df:f8:5b:28:4b:ed:c2:62:4c:f4:01:62:a8:de: 69:b6:53:df:57:ea:21:a0:19:40:c7:05:f0:e7:5b:56:f8:74: 16:c0:54:c1:b7:6d:21:24:58:a1:c8:ac:c1:18:de:3a:06:25: f8:f7:1f:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJShb/jI7Y/2QmeE3uTsUhh+8DVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNTA5MDQwODI2MDFaFw0yNTA5MDcxMjU0MDFaMDMxMTAvBgNV BAMTKDczM0ZBMTRGQzAzNEFFNkEwNEU2MTRFRUMzOTVGQjA2MzVFQkNFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeaR3isPWkMSdAGQ4m9W4KUDtZ Ks+qyVPT2S0/JcQcQFHQOUlFXf2xFjTLuyNXz++X9QS2HhDtcp05e9d7LlSqIRvq LfLTSkk32HKgTXq1Lgn0iLlikaaDX2zacZdIXOQmRYvEpS3wHfInRWROiQ1p47W0 33FcP7fD9mj/o4axJnJe7ibxSCWcAmyEhkJOwnJO9ar/DILAPyEbT89oB+aK+PzV eLipUtK+8iSKYDxdZTWX7SBUSHl0at6iF5E/0kJ03+r6KpofUR9x1JwRKioa7gxC 3a/wCt1FgEysDCcmb/PfKPiuRgapFz5TxY2GjHPMAwji2JaPmCZmuGr9JOExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcz+hT8A0rmoE5hTuw5X7BjXrzrMwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRG MTE2RTNENzNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANaYzhozSjCix0NVXPltMVlqDEQLr/e1TtRs gXOM+bvE2U97Q9rmRq1MhJTFA9tjHOxHPKAAPbvPTC+R1Frp9T/eI2t9jVnSxmTg 31BbIhdnLaNfhUldac44pjgUId3AaN+bYN9HXh/Qn3nFUG84FykiGnHR8tdTkyAv 2OtK3DSXlsFbtCWTmGhmcoDqdmRSYIUEgAsR3+Op7JHg38FBZLpvcJhKGIZaB4wB YtJG2+37s1WCVYt6frMYL9q29jW2jz2AjuWE3TlSza3f+FsoS+3CYkz0AWKo3mm2 U99X6iGgGUDHBfDnW1b4dBbAVMG3bSEkWKHIrMEY3joGJfj3H8w= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:45 2025 by rpki-client