$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: OJOvExgmBuJpxDFFu8pG5Mnzb/QtmA0MR0/uncwfmek= Subject key identifier: B4:F1:54:7C:8D:0B:E0:F3:90:C1:6F:5C:3A:49:3B:8D:69:F1:55:F4 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 052C408FA7305B2E3A32FB48258E2D639EE56704 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 02C9 Signing time: Fri 08 Aug 2025 19:12:35 +0000 Manifest this update: Fri 08 Aug 2025 19:07:35 +0000 Manifest next update: Mon 11 Aug 2025 21:23:35 +0000 Files and hashes: 1: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=) 2: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) 3: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=) 4: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: uLHblAvvMym4gewsczrtu3/wNV4UIkCGQcxvbts3ytk=) 5: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=) 6: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=) 7: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=) 8: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2c:40:8f:a7:30:5b:2e:3a:32:fb:48:25:8e:2d:63:9e:e5:67:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Aug 8 19:07:35 2025 GMT Not After : Aug 11 21:23:35 2025 GMT Subject: CN=B4F1547C8D0BE0F390C16F5C3A493B8D69F155F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:10:d0:2c:fb:ed:d0:13:3a:04:68:29:eb: 91:75:8b:b2:66:92:15:73:e3:6d:f2:d1:39:96:96: f7:dc:dc:cd:a0:f4:47:81:37:b7:05:bf:0d:fb:ed: 52:43:bb:b3:67:76:74:a5:6b:03:ec:57:fd:d4:5f: f7:d8:41:e9:e0:e5:49:40:4c:86:2c:82:21:a0:a0: 28:44:41:fc:a9:e2:43:8b:60:f3:ce:9b:b3:96:ce: 40:c3:f9:e7:d6:44:bc:8b:1d:0c:59:54:dd:a6:a8: 92:7e:bf:29:c2:6b:7a:41:0a:df:1a:82:b5:d4:63: 6f:5c:c9:25:81:82:4f:bc:af:6b:12:d7:b4:a5:30: 2c:e1:97:4c:5b:af:4c:d9:93:45:be:28:c3:45:10: b9:d0:fe:14:db:f1:70:c3:59:e2:23:da:a5:60:f4: dd:d3:74:c0:00:a3:47:13:47:dc:43:7c:e3:13:cd: 71:79:a6:ff:0e:9e:70:c6:ed:95:b4:58:40:6a:a0: a3:fa:22:1c:b8:01:af:51:91:cd:7d:e9:5f:ac:dd: 45:eb:59:81:89:2c:f7:40:18:26:5a:71:1f:25:94: ba:15:c4:4d:b0:c2:17:c6:d1:3b:76:08:36:19:9d: 98:0e:78:70:14:38:fd:36:cb:bc:a9:ba:e0:88:9d: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F1:54:7C:8D:0B:E0:F3:90:C1:6F:5C:3A:49:3B:8D:69:F1:55:F4 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2b:15:3d:ce:7b:64:8d:b3:cb:30:c3:c7:b5:18:1c:08:56: 1a:b1:45:8d:e3:c3:b8:b4:36:93:67:1d:3f:bf:81:42:59:82: 24:fc:df:b9:4f:0b:1b:ca:20:a7:f9:49:93:08:43:e7:57:ac: 69:44:6b:c7:80:46:58:15:b9:b7:bc:e1:cd:d5:59:fd:fb:c0: 9f:f2:ee:8d:55:25:1c:d9:b4:63:2d:0b:d5:48:43:db:0a:94: b3:21:70:a3:1f:33:41:aa:3e:e0:f0:b8:39:c3:a6:01:d0:b0: 01:27:26:18:de:47:27:0c:3e:38:2e:1b:38:41:1e:81:e2:ff: 70:0a:69:69:3f:d8:d7:00:3a:e1:4c:d1:0d:32:bc:a6:59:af: 67:2c:94:f7:4d:66:e9:2d:6b:91:ed:6e:36:1e:1b:b3:78:94: 08:a7:94:d3:00:dd:70:a5:bb:14:3f:d7:89:4e:42:fc:38:6e: 51:7a:54:9a:f7:4e:96:80:e8:1e:cc:3b:ef:c8:96:84:2f:3a: e0:63:b1:e2:ba:da:43:11:c8:3a:a2:73:05:44:62:8f:b1:e0: 40:31:52:74:b8:d3:34:4f:d7:d1:4a:0f:05:18:be:b7:09:b6: 85:41:5e:11:3f:cd:34:49:06:6f:70:f6:e8:45:58:c0:c5:d4: b8:10:33:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSxAj6cwWy46MvtIJY4tY57lZwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTA4MDgxOTA3MzVaFw0yNTA4MTEyMTIzMzVaMDMxMTAvBgNV BAMTKEI0RjE1NDdDOEQwQkUwRjM5MEMxNkY1QzNBNDkzQjhENjlGMTU1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0BDQLPvt0BM6BGgp65F1i7Jm khVz423y0TmWlvfc3M2g9EeBN7cFvw377VJDu7NndnSlawPsV/3UX/fYQeng5UlA TIYsgiGgoChEQfyp4kOLYPPOm7OWzkDD+efWRLyLHQxZVN2mqJJ+vynCa3pBCt8a grXUY29cySWBgk+8r2sS17SlMCzhl0xbr0zZk0W+KMNFELnQ/hTb8XDDWeIj2qVg 9N3TdMAAo0cTR9xDfOMTzXF5pv8OnnDG7ZW0WEBqoKP6Ihy4Aa9Rkc196V+s3UXr WYGJLPdAGCZacR8llLoVxE2wwhfG0Tt2CDYZnZgOeHAUOP02y7ypuuCInVzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtPFUfI0L4POQwW9cOkk7jWnxVfQwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUrFT3Oe2SNs8sww8e1GBwIVhqxRY3jw7i0 NpNnHT+/gUJZgiT837lPCxvKIKf5SZMIQ+dXrGlEa8eARlgVube84c3VWf37wJ/y 7o1VJRzZtGMtC9VIQ9sKlLMhcKMfM0GqPuDwuDnDpgHQsAEnJhjeRycMPjguGzhB HoHi/3AKaWk/2NcAOuFM0Q0yvKZZr2cslPdNZukta5HtbjYeG7N4lAinlNMA3XCl uxQ/14lOQvw4blF6VJr3TpaA6B7MO+/IloQvOuBjseK62kMRyDqicwVEYo+x4EAx UnS40zRP19FKDwUYvrcJtoVBXhE/zTRJBm9w9uhFWMDF1LgQMxE= -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:03 2025 by rpki-client