$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: Rz7MF3PbtegsG+p6Az+MtM4hV/wpwm1P8SXYm5QSDFc= Subject key identifier: B6:7C:DA:CB:12:47:A2:7D:C7:13:46:2E:18:D6:C3:7D:71:D3:A0:85 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 584E5676366E6CFAFF350B16A310D78497255BB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 033A Signing time: Fri 17 Apr 2026 14:01:09 +0000 Manifest this update: Fri 17 Apr 2026 13:56:09 +0000 Manifest next update: Mon 20 Apr 2026 17:21:09 +0000 Files and hashes: 1: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: cRM97GaLq+yg7Y/tZ49v1KCMaCyvkEqRI2ekhh5PAv4=) 2: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: ud49FXeRe72XxYEMKiYhkFOzmvzEUz+AuBntxaesnoo=) 3: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=) 4: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: DovYtj30KiaJx3+oDfcvuaBUocMI9pFAplupkokbxLE=) 5: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=) 6: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: hrtyoUVyxjGUoc4c+SRJ00U9MXaoGjVn1D1QYUoQ4fA=) 7: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: pqhQD3CBfzEo8QJY3EX8U5yRFUjwJXcQZwDlQZgUPvc=) 8: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: JrzqCZ2W3zixGDlzSlopvMa8Mkim/eO8+TGGdft9KsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4e:56:76:36:6e:6c:fa:ff:35:0b:16:a3:10:d7:84:97:25:5b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Apr 17 13:56:09 2026 GMT Not After : Apr 20 17:21:09 2026 GMT Subject: CN=B67CDACB1247A27DC713462E18D6C37D71D3A085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:d4:e9:51:af:ca:10:ba:c3:97:65:4b:27: 57:4e:4b:10:1b:23:42:e8:35:19:f6:9e:5d:87:7b: bf:ba:ef:c0:c9:0c:38:70:6e:5d:5d:62:4f:3e:be: 89:2f:30:e0:27:9d:84:7d:8c:48:c4:24:f5:9c:f1: 7d:5a:ea:80:0a:b3:09:a9:ce:ab:ba:dc:6f:52:ac: 98:8e:24:24:67:19:ac:9e:13:7a:35:64:3b:c6:b8: df:3b:6d:41:79:43:f2:00:c2:eb:5a:56:7f:87:d4: 35:47:13:bc:8e:57:c5:60:2c:7b:6a:d0:3b:cd:98: 5c:1b:02:5e:56:e6:39:6d:d3:c7:62:ec:d2:63:29: c6:4b:94:42:1f:4f:43:ed:85:15:96:2f:0e:cb:53: 03:b6:06:e2:c1:b9:cb:f6:22:dd:76:3f:c1:42:2c: f1:f8:6a:d2:47:5f:44:ce:83:92:d3:81:ed:6f:1b: 71:ae:ad:52:2c:dd:cc:d2:24:8c:7f:1f:b6:2f:e0: 2f:16:09:eb:c9:8e:53:0f:cd:8f:fd:33:7b:fd:9c: 98:6e:d8:fe:b8:49:0a:bb:57:cb:63:fa:f0:89:f9: a2:2d:b3:1f:20:3b:1e:a5:50:d4:6f:f0:01:15:b7: 68:55:00:42:6e:a4:3d:67:2e:c1:e4:43:7b:1b:cd: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7C:DA:CB:12:47:A2:7D:C7:13:46:2E:18:D6:C3:7D:71:D3:A0:85 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a6:f7:d8:13:18:24:07:a4:d3:79:84:e1:ca:00:cf:d8:fa: 79:3e:03:b5:91:7f:a3:5f:02:59:b7:55:4d:4f:77:2f:60:3f: 63:f3:77:56:a8:e6:9f:3d:83:bd:c5:be:7a:78:d4:e8:f3:79: 58:f9:6c:17:65:8d:f2:e2:fc:89:51:63:32:19:4f:23:61:11: cc:1b:a6:cf:54:7d:dc:f0:c9:74:ac:9f:79:ab:68:2e:39:04: ce:1f:ad:eb:a3:c6:68:2b:4d:e6:31:87:75:f9:15:42:be:b5: 39:be:de:c5:5a:40:af:01:32:1c:08:6a:bc:69:43:62:59:0d: 8a:d1:43:56:3d:ef:18:c2:41:6d:bf:38:85:1e:ad:42:b0:6f: 37:b1:ae:1a:33:d9:1a:88:17:5c:bf:12:90:6b:74:b4:db:05: 71:95:f7:26:bb:3a:4f:1e:f3:f4:77:2e:e4:7c:06:da:fa:a1: 62:c0:5b:26:df:f1:2a:3d:55:64:82:6c:de:78:60:ad:65:5b: ce:70:19:26:e5:d4:45:e3:18:d6:b2:c1:e2:35:43:e1:3e:6a: 33:c8:4b:a2:c8:1b:cc:53:d5:8a:40:bb:a9:f0:fb:60:21:4c: 3c:86:21:43:94:c9:cc:1f:31:87:39:6e:ca:6f:f5:f3:3e:05: 97:73:1c:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWE5WdjZubPr/NQsWoxDXhJclW7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNjA0MTcxMzU2MDlaFw0yNjA0MjAxNzIxMDlaMDMxMTAvBgNV BAMTKEI2N0NEQUNCMTI0N0EyN0RDNzEzNDYyRTE4RDZDMzdENzFEM0EwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMS9TpUa/KELrDl2VLJ1dOSxAb I0LoNRn2nl2He7+678DJDDhwbl1dYk8+vokvMOAnnYR9jEjEJPWc8X1a6oAKswmp zqu63G9SrJiOJCRnGayeE3o1ZDvGuN87bUF5Q/IAwutaVn+H1DVHE7yOV8VgLHtq 0DvNmFwbAl5W5jlt08di7NJjKcZLlEIfT0PthRWWLw7LUwO2BuLBucv2It12P8FC LPH4atJHX0TOg5LTge1vG3GurVIs3czSJIx/H7Yv4C8WCevJjlMPzY/9M3v9nJhu 2P64SQq7V8tj+vCJ+aItsx8gOx6lUNRv8AEVt2hVAEJupD1nLsHkQ3sbzc1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtnzayxJHon3HE0YuGNbDfXHToIUwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6m99gTGCQHpNN5hOHKAM/Y+nk+A7WRf6Nf Alm3VU1Pdy9gP2Pzd1ao5p89g73Fvnp41OjzeVj5bBdljfLi/IlRYzIZTyNhEcwb ps9UfdzwyXSsn3mraC45BM4freujxmgrTeYxh3X5FUK+tTm+3sVaQK8BMhwIarxp Q2JZDYrRQ1Y97xjCQW2/OIUerUKwbzexrhoz2RqIF1y/EpBrdLTbBXGV9ya7Ok8e 8/R3LuR8Btr6oWLAWybf8So9VWSCbN54YK1lW85wGSbl1EXjGNayweI1Q+E+ajPI S6LIG8xT1YpAu6nw+2AhTDyGIUOUycwfMYc5bspv9fM+BZdzHA0= -----END CERTIFICATE-----Generated at Sat Apr 18 00:34:19 2026 by rpki-client