$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: F28qvNBBQit841Z1ijOkx1xyzDoX3D4GCabs8JKl8cU= Subject key identifier: 42:5A:F9:F8:F5:26:35:A3:5C:46:DF:BE:46:B7:AE:43:46:3E:8C:8C Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 617B03CED6C18FBDA462FF0B93C031C01A353C70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: FA Signing time: Fri 08 Aug 2025 23:01:17 +0000 Manifest this update: Fri 08 Aug 2025 22:56:17 +0000 Manifest next update: Tue 12 Aug 2025 06:53:17 +0000 Files and hashes: 1: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) 2: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 65o0DOggNTjLHcFcDRlMhe0oYRHC/QwrSAVc9jQxyHo=) 3: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: Gr/iwfLfZ/irznG6A3gLYfg2LAhyUQJdt+yfzjf+lx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7b:03:ce:d6:c1:8f:bd:a4:62:ff:0b:93:c0:31:c0:1a:35:3c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Aug 8 22:56:17 2025 GMT Not After : Aug 12 06:53:17 2025 GMT Subject: CN=425AF9F8F52635A35C46DFBE46B7AE43463E8C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:b4:c8:80:32:98:d3:de:d6:89:14:b5:f7: 5a:77:c9:6c:0a:d6:b4:17:14:d6:f6:d8:b3:db:65: 7a:21:3e:50:4e:b7:a8:df:f7:51:46:69:29:00:0e: 9c:97:f5:33:1a:84:71:6e:a7:ee:c2:cf:43:18:5f: cd:ec:ce:7d:2a:9e:32:3c:4f:8a:97:77:cc:da:88: f8:33:18:71:c5:6c:3a:dc:91:84:83:31:f3:7a:69: f7:93:8e:e4:b1:be:5f:cc:71:25:f8:d1:9e:b3:0e: 2a:30:93:bd:95:a8:a5:7c:0a:c9:a1:30:c2:2c:03: eb:c7:c7:e7:fb:8b:52:5c:b2:b0:9d:c8:fd:18:70: 44:64:c3:6f:b5:7d:38:d9:50:b2:bd:e5:b6:91:56: eb:cb:db:c2:2d:78:39:78:ff:f9:de:be:6d:83:04: c9:a2:a8:e1:2e:7f:ca:ac:75:5a:f3:bf:01:7c:66: ac:b1:90:13:0f:61:ab:95:ae:59:f0:9b:3b:f6:00: 52:82:3e:4b:3c:6a:32:e9:21:c0:a6:19:4e:c6:f5: 14:e5:38:d7:2a:62:ab:e4:36:1f:5e:60:e1:1a:60: 1d:35:e2:e0:b6:1d:86:87:55:b5:b8:2b:dd:71:d9: aa:69:7d:11:16:f4:b6:4b:3d:96:c1:99:0d:f9:2c: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5A:F9:F8:F5:26:35:A3:5C:46:DF:BE:46:B7:AE:43:46:3E:8C:8C X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:97:03:31:90:7d:b0:af:97:07:8e:ae:93:f7:e2:d6:d4:ea: ad:94:23:c9:72:88:e5:fd:0f:1e:81:9d:30:4f:7d:93:89:a2: ac:d7:00:83:56:2b:96:20:b2:44:8a:10:0a:99:60:db:57:a8: e2:82:00:60:5c:29:28:34:c8:7a:f0:23:cc:d5:74:84:b0:dd: a1:d5:44:c3:0c:4c:64:bb:53:b1:0d:ff:1a:a6:5b:e2:eb:26: 76:d3:c6:3c:4d:9b:ce:da:51:ab:73:ca:0b:23:ef:c6:3d:d7: c1:73:9c:1e:8c:4b:e3:de:12:14:dc:de:30:74:7a:6d:87:00: 6d:bf:7c:04:e4:a9:5a:89:b3:a8:f9:cc:9b:9a:81:a0:37:44: 8c:cc:3d:8e:05:98:b3:20:d6:69:dd:08:44:17:f4:04:f6:10: f3:2b:ca:95:4c:33:5d:bb:fa:25:31:70:19:7e:dd:d7:37:09: b4:b5:32:14:da:03:2d:c4:0f:4e:f2:f6:d7:57:cd:1a:f6:b3: 36:1c:b1:21:b8:3e:f4:b6:b7:bd:e0:b1:ce:8a:c0:d4:0d:88: 91:72:f4:89:95:7f:30:fc:6c:b8:9b:48:ef:20:aa:44:8c:ee: 44:cc:6f:3a:4b:03:59:92:ff:9c:0f:a7:f2:fa:cf:14:13:98: 51:0e:9f:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXsDztbBj72kYv8Lk8AxwBo1PHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTA4MDgyMjU2MTdaFw0yNTA4MTIwNjUzMTdaMDMxMTAvBgNV BAMTKDQyNUFGOUY4RjUyNjM1QTM1QzQ2REZCRTQ2QjdBRTQzNDYzRThDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gLTIgDKY097WiRS191p3yWwK 1rQXFNb22LPbZXohPlBOt6jf91FGaSkADpyX9TMahHFup+7Cz0MYX83szn0qnjI8 T4qXd8zaiPgzGHHFbDrckYSDMfN6afeTjuSxvl/McSX40Z6zDiowk72VqKV8Csmh MMIsA+vHx+f7i1JcsrCdyP0YcERkw2+1fTjZULK95baRVuvL28IteDl4//nevm2D BMmiqOEuf8qsdVrzvwF8ZqyxkBMPYauVrlnwmzv2AFKCPks8ajLpIcCmGU7G9RTl ONcqYqvkNh9eYOEaYB014uC2HYaHVbW4K91x2appfREW9LZLPZbBmQ35LPuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlr5+PUmNaNcRt++RreuQ0Y+jIwwHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSXAzGQfbCvlweOrpP34tbU6q2UI8lyiOX9 Dx6BnTBPfZOJoqzXAINWK5YgskSKEAqZYNtXqOKCAGBcKSg0yHrwI8zVdISw3aHV RMMMTGS7U7EN/xqmW+LrJnbTxjxNm87aUatzygsj78Y918FznB6MS+PeEhTc3jB0 em2HAG2/fATkqVqJs6j5zJuagaA3RIzMPY4FmLMg1mndCEQX9AT2EPMrypVMM127 +iUxcBl+3dc3CbS1MhTaAy3ED07y9tdXzRr2szYcsSG4PvS2t73gsc6KwNQNiJFy 9ImVfzD8bLibSO8gqkSM7kTMbzpLA1mS/5wPp/L6zxQTmFEOnxo= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:56 2025 by rpki-client