$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: UbTQbq8rMfnbiSvHZLvhMoyCtZI1+GOX2hyU+pbzuyY= Subject key identifier: 86:1E:61:06:65:DD:C4:11:A3:A0:3D:81:24:01:3C:8C:14:F2:AB:D2 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 0C212E21DA1B8CAB8C286F47965364678C4B9CF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 0324 Signing time: Sun 01 Mar 2026 19:42:37 +0000 Manifest this update: Sun 01 Mar 2026 19:37:37 +0000 Manifest next update: Wed 04 Mar 2026 22:35:37 +0000 Files and hashes: 1: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) 2: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) 3: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: 9dsqG3njSJ3WwDLv//NK+Koe6w/EtEqOHt503f9zj2g=) 4: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) 5: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 6: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 7: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) 8: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:21:2e:21:da:1b:8c:ab:8c:28:6f:47:96:53:64:67:8c:4b:9c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Mar 1 19:37:37 2026 GMT Not After : Mar 4 22:35:37 2026 GMT Subject: CN=861E610665DDC411A3A03D8124013C8C14F2ABD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:13:54:ba:37:c1:8d:43:0b:99:15:1d:9f: 4c:f9:8d:4e:07:96:39:b6:30:71:4c:36:88:7d:7d: e5:ce:2d:b8:e0:6c:89:d3:ac:c0:1b:50:04:45:56: 2b:0b:f0:82:3e:59:2e:a2:06:a1:46:4f:54:b7:6c: 79:a6:a5:36:29:12:f5:73:9b:c1:f7:1f:5c:32:a3: 75:e0:02:b6:62:df:94:4e:85:ea:b8:a2:bf:b7:3f: d5:0f:68:86:05:68:10:f4:88:22:a4:61:0d:5b:92: 1c:2d:22:10:03:93:6d:9b:3b:fb:4a:18:56:92:50: d6:99:20:a6:a8:38:4b:c5:04:06:a6:73:1d:64:9c: 67:56:0f:0f:0e:99:77:39:b4:2a:ef:15:e3:bc:a9: 53:b1:53:14:be:22:61:ac:bb:4a:b2:35:c4:fc:50: 79:fe:96:e9:6f:dc:c1:bb:32:d6:d1:36:6b:33:42: 3c:93:72:69:1e:91:b6:2b:43:95:83:04:64:54:ad: 02:9a:52:e3:ea:2d:f3:31:b9:8c:a1:23:44:d8:74: b0:4c:ab:bb:94:f1:59:1d:66:90:a8:8c:7a:d1:07: cd:23:f4:28:59:5e:e1:30:e3:a4:2d:b0:ce:5a:57: 54:0a:5a:d1:f6:e6:a3:08:cf:b2:53:a9:4f:e8:0a: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1E:61:06:65:DD:C4:11:A3:A0:3D:81:24:01:3C:8C:14:F2:AB:D2 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:90:d8:67:7c:92:d6:89:e2:5f:a4:28:91:c5:1c:e1:cf:df: 28:57:2d:34:5d:32:70:6c:63:01:ae:87:72:51:1b:e6:47:4c: f6:34:c9:8c:41:99:4f:c9:51:96:2e:ae:49:72:34:f4:00:10: 51:22:d8:30:58:a3:4d:b6:f5:18:11:e6:35:f8:27:cb:37:db: 85:d8:ec:8f:a4:1f:38:30:79:15:99:ea:b0:21:a7:d6:ba:03: 56:58:fc:13:f0:04:ba:da:25:88:a6:3d:45:d5:a6:15:36:a7: 5d:3c:16:37:d5:ab:4b:6f:9c:96:24:d2:dd:0a:be:87:d7:0f: 82:97:0f:ed:ce:37:08:e2:47:0d:6c:33:a1:cc:ad:96:81:eb: f4:a1:5e:44:10:04:0e:a5:bd:bf:40:b4:10:fa:1f:7b:6a:86: 97:4b:05:d9:b8:84:b8:5e:03:f5:f9:2a:a4:39:f4:5d:8d:6e: 6d:4f:1d:82:ea:b0:e4:54:5f:bf:17:f9:bd:6b:04:19:89:7e: 19:aa:af:16:47:49:35:61:de:0d:89:30:0a:37:90:dc:c5:09: 3f:d1:25:5d:59:a4:68:9a:ba:c6:68:c7:76:af:ea:e6:93:7b: 5c:e7:60:f8:5d:62:31:fb:52:0d:e5:9d:d9:89:fa:23:1d:a7: 2d:cd:d6:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCEuIdobjKuMKG9HllNkZ4xLnPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNjAzMDExOTM3MzdaFw0yNjAzMDQyMjM1MzdaMDMxMTAvBgNV BAMTKDg2MUU2MTA2NjVEREM0MTFBM0EwM0Q4MTI0MDEzQzhDMTRGMkFCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYxNUujfBjUMLmRUdn0z5jU4H ljm2MHFMNoh9feXOLbjgbInTrMAbUARFVisL8II+WS6iBqFGT1S3bHmmpTYpEvVz m8H3H1wyo3XgArZi35ROheq4or+3P9UPaIYFaBD0iCKkYQ1bkhwtIhADk22bO/tK GFaSUNaZIKaoOEvFBAamcx1knGdWDw8OmXc5tCrvFeO8qVOxUxS+ImGsu0qyNcT8 UHn+lulv3MG7MtbRNmszQjyTcmkekbYrQ5WDBGRUrQKaUuPqLfMxuYyhI0TYdLBM q7uU8VkdZpCojHrRB80j9ChZXuEw46QtsM5aV1QKWtH25qMIz7JTqU/oClltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhh5hBmXdxBGjoD2BJAE8jBTyq9IwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeQ2Gd8ktaJ4l+kKJHFHOHP3yhXLTRdMnBs YwGuh3JRG+ZHTPY0yYxBmU/JUZYurklyNPQAEFEi2DBYo0229RgR5jX4J8s324XY 7I+kHzgweRWZ6rAhp9a6A1ZY/BPwBLraJYimPUXVphU2p108FjfVq0tvnJYk0t0K vofXD4KXD+3ONwjiRw1sM6HMrZaB6/ShXkQQBA6lvb9AtBD6H3tqhpdLBdm4hLhe A/X5KqQ59F2Nbm1PHYLqsORUX78X+b1rBBmJfhmqrxZHSTVh3g2JMAo3kNzFCT/R JV1ZpGiausZox3av6uaTe1znYPhdYjH7Ug3lndmJ+iMdpy3N1mY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:56:51 2026 by rpki-client