$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: x8gqallfuZUA4fRb6dK+OsFdnc3KJ+uri0z+RzDfBhs= Subject key identifier: B7:FA:08:C2:84:BF:7D:9A:1C:31:EB:46:96:8F:9C:8C:45:AC:B9:CF Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 7E7C5F2FC8DF2C282FCA92B89EFDD30843B86E75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 02AC Signing time: Fri 17 Apr 2026 15:12:01 +0000 Manifest this update: Fri 17 Apr 2026 15:07:01 +0000 Manifest next update: Mon 20 Apr 2026 23:52:01 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: +w8naEmN+w0MXfZFbpal2pwUi7cKyLwZZNoWPYHJPOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7c:5f:2f:c8:df:2c:28:2f:ca:92:b8:9e:fd:d3:08:43:b8:6e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Apr 17 15:07:01 2026 GMT Not After : Apr 20 23:52:01 2026 GMT Subject: CN=B7FA08C284BF7D9A1C31EB46968F9C8C45ACB9CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:67:7a:52:ea:26:7f:1b:92:22:1d:40:a2:d3: d3:32:0d:26:99:20:c2:82:b6:65:63:35:2d:2a:85: 22:b1:d6:6d:25:9b:83:6f:5c:7b:5d:e1:de:c8:0b: a4:e7:7a:d9:46:f6:39:03:fa:8a:30:f9:77:84:7a: a1:74:c1:4e:85:b4:60:4b:c1:5a:93:bb:54:5f:09: c5:2b:92:4a:5f:cb:30:27:1b:55:17:3c:29:cf:c5: cf:7e:2f:04:b4:a3:e4:ab:f7:e4:53:08:fa:4d:d4: 57:a2:f4:d4:bc:b0:00:59:3d:4a:03:c2:d6:7f:8b: 23:02:f5:85:2c:63:7e:05:33:7b:92:60:47:a7:e3: 0b:71:a4:95:ab:fd:3b:1e:26:fb:b2:53:ee:9a:9f: d9:a7:61:c0:33:93:70:ee:17:9e:bc:fb:78:ba:10: 32:ef:d3:cc:6a:b2:26:09:17:11:dd:5e:9c:4e:4d: dc:6a:55:75:40:fd:31:c4:cc:f2:0f:1f:5b:d3:26: 8a:0b:61:5b:f7:f6:d2:37:6f:8d:74:04:55:08:3c: 32:58:25:6e:a3:a6:88:0a:03:0f:ba:46:b3:44:c5: e5:28:7f:0b:73:f3:61:00:f8:b3:73:db:bc:88:ae: a5:a1:22:1e:50:86:e2:ec:1a:93:e9:0e:5a:94:c8: 40:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FA:08:C2:84:BF:7D:9A:1C:31:EB:46:96:8F:9C:8C:45:AC:B9:CF X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:83:63:5a:44:48:1e:bb:9f:b6:03:bd:8a:dc:33:40:50:8d: 50:6b:7a:8c:da:a5:c4:47:0c:fc:4a:73:51:48:41:48:1f:57: 4e:e6:61:3e:31:b7:ba:cf:fb:e0:15:a7:db:9b:dc:d8:36:92: 6c:66:5d:ac:ea:e4:d4:9e:7a:af:71:35:c9:74:8e:56:27:7a: 8d:43:ca:a0:17:56:a9:e6:1f:85:a5:9f:70:f2:1d:d6:1d:2e: 6c:cf:c5:23:7e:f2:5d:1a:01:e2:70:36:f5:9a:78:01:c4:45: 3d:0c:8a:d3:42:da:c4:b3:db:30:d3:d1:d1:91:0b:12:3f:86: 7d:12:ef:87:f2:72:b1:ad:ed:ea:7b:32:be:0a:1e:59:05:f4: 0b:35:e3:5b:20:56:7c:35:1f:84:c9:60:b6:33:9b:45:94:d2: 35:c6:83:43:d2:b2:fe:33:9e:4a:3c:5f:d9:7b:c3:5b:65:d8: 36:16:db:ed:79:93:73:58:7d:fb:05:ad:d3:82:aa:b5:56:c3: ac:73:75:36:68:4a:90:09:4f:b4:dc:e7:5c:a9:1a:92:01:0d: d7:50:50:7a:21:8c:0f:06:12:58:3b:7e:0d:d5:c9:6b:ff:dc: 60:d9:a8:af:ba:5b:d4:1f:b6:b3:28:6f:8b:11:df:7f:a0:2e: bd:a5:f1:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnxfL8jfLCgvypK4nv3TCEO4bnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNjA0MTcxNTA3MDFaFw0yNjA0MjAyMzUyMDFaMDMxMTAvBgNV BAMTKEI3RkEwOEMyODRCRjdEOUExQzMxRUI0Njk2OEY5QzhDNDVBQ0I5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZ3pS6iZ/G5IiHUCi09MyDSaZ IMKCtmVjNS0qhSKx1m0lm4NvXHtd4d7IC6TnetlG9jkD+oow+XeEeqF0wU6FtGBL wVqTu1RfCcUrkkpfyzAnG1UXPCnPxc9+LwS0o+Sr9+RTCPpN1Fei9NS8sABZPUoD wtZ/iyMC9YUsY34FM3uSYEen4wtxpJWr/TseJvuyU+6an9mnYcAzk3DuF568+3i6 EDLv08xqsiYJFxHdXpxOTdxqVXVA/THEzPIPH1vTJooLYVv39tI3b410BFUIPDJY JW6jpogKAw+6RrNExeUofwtz82EA+LNz27yIrqWhIh5QhuLsGpPpDlqUyEBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/oIwoS/fZocMetGlo+cjEWsuc8wHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2DY1pESB67n7YDvYrcM0BQjVBreozapcRH DPxKc1FIQUgfV07mYT4xt7rP++AVp9ub3Ng2kmxmXazq5NSeeq9xNcl0jlYneo1D yqAXVqnmH4Wln3DyHdYdLmzPxSN+8l0aAeJwNvWaeAHERT0MitNC2sSz2zDT0dGR CxI/hn0S74fycrGt7ep7Mr4KHlkF9As141sgVnw1H4TJYLYzm0WU0jXGg0PSsv4z nko8X9l7w1tl2DYW2+15k3NYffsFrdOCqrVWw6xzdTZoSpAJT7Tc51ypGpIBDddQ UHohjA8GElg7fg3VyWv/3GDZqK+6W9QftrMob4sR33+gLr2l8Rs= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:01 2026 by rpki-client