$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: sV1sqakYE1Z2sK+tomPsKB8i7KncLljtziIHWmnk6LY= Subject key identifier: 58:C0:11:E5:A1:90:18:8E:26:03:A5:E3:6E:FF:DC:22:B6:94:6E:11 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 7FDE17F317B572DB830EF264302998CE8AC7546C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 02F0 Signing time: Tue 04 Nov 2025 11:12:16 +0000 Manifest this update: Tue 04 Nov 2025 11:07:16 +0000 Manifest next update: Fri 07 Nov 2025 15:39:16 +0000 Files and hashes: 1: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) 2: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 3: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) 4: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 5: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) 6: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) 7: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) 8: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: l09TfieX9J/MHxfCeojhogSUfx8VKmNnrnLw9TpuCaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:de:17:f3:17:b5:72:db:83:0e:f2:64:30:29:98:ce:8a:c7:54:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Nov 4 11:07:16 2025 GMT Not After : Nov 7 15:39:16 2025 GMT Subject: CN=58C011E5A190188E2603A5E36EFFDC22B6946E11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:c3:6f:70:bc:3f:c0:5d:3f:81:f2:1d:58: 6f:18:a1:9c:00:f8:de:92:09:db:75:5d:c9:a7:ec: 1a:3b:ed:b8:f1:c1:6f:1c:0e:76:7e:e2:f0:60:e1: b7:84:35:61:7c:6d:de:e5:14:42:8b:49:0a:f5:84: 46:53:84:54:cc:9e:13:c6:5f:95:b7:46:03:9b:e7: 22:d3:b2:d4:42:d8:6b:a9:17:e4:21:dc:9d:9b:eb: 75:a8:6a:1b:96:ab:1e:fc:cf:a2:15:6c:ac:44:f5: 5f:68:04:57:91:0e:68:e2:07:32:78:11:fc:06:76: 8f:e1:a6:32:a3:8d:cf:0e:c0:9a:c0:54:73:e3:21: 3a:0b:90:e0:2b:4f:83:fd:8b:78:d2:da:3b:87:e2: e4:28:9e:b4:99:50:c0:8a:d8:54:18:3b:c8:20:17: ac:29:5c:82:f9:c9:75:b0:40:33:53:b9:2b:4a:e9: 00:3d:88:f2:05:d4:7c:29:00:dd:4e:ee:7b:c9:c3: be:2c:fa:5b:93:b3:7c:95:02:89:14:3d:12:bc:c7: 62:52:93:d9:ad:b3:74:d8:19:20:e8:24:c7:74:ae: 3a:9e:2c:72:b2:71:1b:e6:c1:ca:09:2f:69:07:ad: 64:78:4a:89:73:6c:f4:90:24:87:27:e1:f6:af:72: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C0:11:E5:A1:90:18:8E:26:03:A5:E3:6E:FF:DC:22:B6:94:6E:11 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:44:3b:86:67:c6:02:92:d8:48:db:00:0b:41:bf:cd:a5:33: 00:00:b1:47:42:5e:e3:98:ab:b9:15:1d:9a:d8:2c:ee:8b:fe: 92:5e:d1:34:6b:e0:fa:de:15:26:47:86:8e:b3:87:da:0c:82: 10:9b:ae:2b:41:58:35:ec:5a:a5:4c:c6:47:9d:0c:47:d6:9f: 2e:7f:0b:d0:87:26:86:fe:cd:ca:cc:3d:ab:bc:6b:ad:f4:46: 53:c2:a2:e0:8e:73:54:a7:f1:86:cc:79:1f:1c:41:1c:80:f8: 21:15:f8:92:c6:dd:36:9d:1b:4a:98:ca:af:e3:ee:d7:1f:b5: 5d:eb:3e:e9:63:b4:02:7b:a0:bb:94:ba:09:d2:15:a6:a7:af: 21:ee:09:c3:18:aa:31:63:9e:a7:08:23:32:33:52:f1:b4:ec: 7f:c1:75:1e:5a:e0:c6:e8:e5:ea:e5:60:91:e2:7e:90:7e:03: f1:62:f8:a4:47:77:77:08:63:67:56:e3:03:4b:c8:5c:43:3d: 69:20:ff:c1:2c:c8:06:08:78:de:3b:d3:f9:61:69:6c:6e:0a: 41:ad:7b:df:ce:d3:e5:1c:47:73:6e:a5:a3:cb:4b:3b:ce:2d: f2:c4:c2:fd:78:35:e1:5d:5b:5b:ea:54:a0:3f:a1:b0:ce:8f: 5d:c5:26:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf94X8xe1ctuDDvJkMCmYzorHVGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTExMDQxMTA3MTZaFw0yNTExMDcxNTM5MTZaMDMxMTAvBgNV BAMTKDU4QzAxMUU1QTE5MDE4OEUyNjAzQTVFMzZFRkZEQzIyQjY5NDZFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpMNvcLw/wF0/gfIdWG8YoZwA +N6SCdt1Xcmn7Bo77bjxwW8cDnZ+4vBg4beENWF8bd7lFEKLSQr1hEZThFTMnhPG X5W3RgOb5yLTstRC2GupF+Qh3J2b63WoahuWqx78z6IVbKxE9V9oBFeRDmjiBzJ4 EfwGdo/hpjKjjc8OwJrAVHPjIToLkOArT4P9i3jS2juH4uQonrSZUMCK2FQYO8gg F6wpXIL5yXWwQDNTuStK6QA9iPIF1HwpAN1O7nvJw74s+luTs3yVAokUPRK8x2JS k9mts3TYGSDoJMd0rjqeLHKycRvmwcoJL2kHrWR4SolzbPSQJIcn4favcmrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWMAR5aGQGI4mA6Xjbv/cIraUbhEwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtEO4ZnxgKS2EjbAAtBv82lMwAAsUdCXuOY q7kVHZrYLO6L/pJe0TRr4PreFSZHho6zh9oMghCbritBWDXsWqVMxkedDEfWny5/ C9CHJob+zcrMPau8a630RlPCouCOc1Sn8YbMeR8cQRyA+CEV+JLG3TadG0qYyq/j 7tcftV3rPuljtAJ7oLuUugnSFaanryHuCcMYqjFjnqcIIzIzUvG07H/BdR5a4Mbo 5erlYJHifpB+A/Fi+KRHd3cIY2dW4wNLyFxDPWkg/8EsyAYIeN470/lhaWxuCkGt e9/O0+UcR3NupaPLSzvOLfLEwv14NeFdW1vqVKA/obDOj13FJrQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:55 2025 by rpki-client