$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: 7TIn3mQMAYyuNI5JJtgLdfJp6ahYZWBIpoMLQqrzJos= Subject key identifier: D6:1B:2B:B4:72:11:B2:3E:9A:6F:0D:3E:F5:4F:E8:DE:CA:E3:62:F0 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 5D6204F3E077BB9133C4715F90BAC592B25B8701 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 02AF Signing time: Sun 15 Jun 2025 05:12:14 +0000 Manifest this update: Sun 15 Jun 2025 05:07:14 +0000 Manifest next update: Wed 18 Jun 2025 13:55:14 +0000 Files and hashes: 1: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) 2: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: KJeyo4pRgbgAPIRy6L/fS/3x9OhxYBRTb/78jSEGam0=) 3: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) 4: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: 4Ce67YL0bl40nJXMynzDOb6UG6RAWI//TFzIcKJFNZA=) 5: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 6: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 7: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: JkQA/oVx7nSJZSG/P9kFIu+xx/U2BTezfRvZq/eeJWQ=) 8: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:62:04:f3:e0:77:bb:91:33:c4:71:5f:90:ba:c5:92:b2:5b:87:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Jun 15 05:07:14 2025 GMT Not After : Jun 18 13:55:14 2025 GMT Subject: CN=D61B2BB47211B23E9A6F0D3EF54FE8DECAE362F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:e1:0a:21:38:77:0d:71:19:db:a0:ff:1d: 3d:57:50:5e:de:e2:4c:4b:74:59:33:70:96:61:f1: 5c:45:81:5f:65:bd:33:14:e4:25:91:34:28:34:0c: f3:68:4a:64:a2:5c:a9:7b:a5:5e:1c:d6:50:6a:f1: af:a2:e1:d7:75:3b:a0:ac:12:cd:ff:36:41:09:14: 56:82:44:6f:96:f1:2a:ed:93:2d:e1:da:3f:6d:16: 00:a3:e2:76:16:24:6f:33:22:72:77:7c:fb:da:84: bb:db:d0:0e:98:b9:29:da:9f:49:a9:59:28:3e:d4: 15:8f:a3:d8:51:19:08:41:b8:3f:24:bd:f8:e0:6c: 57:21:01:d0:cd:fa:49:c7:9e:96:c3:4a:b1:3a:d4: fa:7c:b4:62:0d:7a:8b:08:11:21:51:d7:2f:34:6c: a9:43:4f:8a:b1:89:0f:29:d8:07:48:1a:0c:85:8a: 8c:4a:9e:7c:21:70:0a:06:30:17:fc:95:2a:7a:3c: ef:9a:0f:90:74:7c:5e:4d:c1:00:09:fd:cf:66:7d: 54:74:14:31:0b:70:74:fe:d1:f7:35:eb:af:13:d0: 02:01:e9:fb:ef:6e:61:1d:0f:f6:21:69:ff:33:d3: 2b:8f:15:59:c4:c5:85:19:da:79:3c:81:c2:c5:49: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1B:2B:B4:72:11:B2:3E:9A:6F:0D:3E:F5:4F:E8:DE:CA:E3:62:F0 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3a:8a:e6:6e:bd:a9:81:60:49:01:05:2d:ba:af:5c:7f:0e: 46:a0:bf:87:08:b2:9c:57:8b:03:f0:34:2f:70:97:c4:4b:2e: f2:f2:39:56:32:e9:82:9a:bf:63:7d:b6:83:36:67:d6:54:6a: 59:8e:c3:ea:70:de:d3:90:a4:98:94:5c:97:dd:0d:57:ca:32: 43:d6:bb:61:b5:94:c4:8e:ea:69:80:a6:1a:fb:2b:b6:f7:b3: f0:67:1c:53:6c:7e:c4:15:f2:29:1c:be:b3:e2:99:0c:4e:18: 4a:42:88:be:b7:52:35:a2:8b:e3:a8:a2:88:2d:08:00:48:18: 86:98:df:9b:b3:06:e6:a7:7d:85:65:ea:eb:84:fc:93:3c:3a: 8a:04:9e:a7:96:01:42:e0:19:0a:2b:09:ba:fe:74:3e:cd:a2: 2c:a9:90:a9:15:43:6e:56:9b:6e:10:f8:b2:0a:d0:4a:d4:7c: 4f:bc:34:9a:ee:92:c6:a6:11:03:a9:90:a9:be:60:09:db:ec: 0d:91:73:ae:12:68:e6:ae:85:52:8f:9f:f1:21:82:e1:96:ff: 13:3d:39:ac:fe:d2:ea:dc:b2:6e:f2:8c:f4:e6:fe:16:55:a9: 62:9e:ee:01:20:40:c8:45:b2:d3:cc:16:5c:6c:57:3d:a6:cf: 26:d9:ea:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWIE8+B3u5EzxHFfkLrFkrJbhwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTA2MTUwNTA3MTRaFw0yNTA2MTgxMzU1MTRaMDMxMTAvBgNV BAMTKEQ2MUIyQkI0NzIxMUIyM0U5QTZGMEQzRUY1NEZFOERFQ0FFMzYyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcOEKITh3DXEZ26D/HT1XUF7e 4kxLdFkzcJZh8VxFgV9lvTMU5CWRNCg0DPNoSmSiXKl7pV4c1lBq8a+i4dd1O6Cs Es3/NkEJFFaCRG+W8Srtky3h2j9tFgCj4nYWJG8zInJ3fPvahLvb0A6YuSnan0mp WSg+1BWPo9hRGQhBuD8kvfjgbFchAdDN+knHnpbDSrE61Pp8tGINeosIESFR1y80 bKlDT4qxiQ8p2AdIGgyFioxKnnwhcAoGMBf8lSp6PO+aD5B0fF5NwQAJ/c9mfVR0 FDELcHT+0fc1668T0AIB6fvvbmEdD/Yhaf8z0yuPFVnExYUZ2nk8gcLFSbjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1hsrtHIRsj6abw0+9U/o3srjYvAwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB06iuZuvamBYEkBBS26r1x/Dkagv4cIspxX iwPwNC9wl8RLLvLyOVYy6YKav2N9toM2Z9ZUalmOw+pw3tOQpJiUXJfdDVfKMkPW u2G1lMSO6mmAphr7K7b3s/BnHFNsfsQV8ikcvrPimQxOGEpCiL63UjWii+Oooogt CABIGIaY35uzBuanfYVl6uuE/JM8OooEnqeWAULgGQorCbr+dD7NoiypkKkVQ25W m24Q+LIK0ErUfE+8NJruksamEQOpkKm+YAnb7A2Rc64SaOauhVKPn/EhguGW/xM9 Oaz+0urcsm7yjPTm/hZVqWKe7gEgQMhFstPMFlxsVz2mzybZ6kA= -----END CERTIFICATE-----Generated at Tue Jun 17 00:47:58 2025 by rpki-client