$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: 3uIQmSKaNzNSpSbsNNrRSwjlMDosGH+tKYcznd0XOyk= Subject key identifier: DB:77:0F:E1:AA:27:A0:88:30:CF:2A:38:57:DF:2D:3E:7E:DB:14:58 Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 56F5DEA0BD0EB31CF9299D6E4463F957D1D4E0BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 0297 Signing time: Sun 01 Mar 2026 01:12:01 +0000 Manifest this update: Sun 01 Mar 2026 01:07:01 +0000 Manifest next update: Wed 04 Mar 2026 09:53:01 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: zJT7/sNA+D5gd3ZZUgLoFts4Ok8hJmR3ATT36XhjSIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f5:de:a0:bd:0e:b3:1c:f9:29:9d:6e:44:63:f9:57:d1:d4:e0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Mar 1 01:07:01 2026 GMT Not After : Mar 4 09:53:01 2026 GMT Subject: CN=DB770FE1AA27A08830CF2A3857DF2D3E7EDB1458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:30:60:aa:b8:d9:c4:be:50:3c:bc:61:bb:b5: e9:d4:47:5d:92:20:43:e2:c3:d7:ec:f8:07:cc:bb: 26:32:d8:4f:af:61:db:2c:68:f0:d1:60:73:5a:e3: 76:73:22:5f:fb:67:16:4f:72:7c:d0:34:51:77:10: 69:36:24:2d:2a:05:43:37:ad:e6:c0:15:50:71:00: 8c:f0:ea:43:0e:08:14:83:06:fa:98:83:05:89:f4: 37:7b:7f:bd:78:68:8d:23:56:40:e0:0b:ce:75:f9: 9d:58:2f:42:51:d1:2d:6f:f4:89:00:43:63:e6:05: 49:fa:c8:48:d9:f2:de:39:53:43:19:82:5a:70:cf: 85:ff:22:81:9c:5b:2e:c4:1e:5f:88:9f:3e:d2:32: 49:77:83:f2:fd:21:70:b5:ff:08:df:bb:a2:2b:86: 14:75:16:dc:76:39:8a:77:19:23:81:1a:0b:c2:c4: d5:dd:45:00:05:7d:81:03:d1:29:68:08:70:23:68: db:e5:6d:89:ad:f5:c2:e9:b3:42:00:5c:e9:70:dc: ba:25:55:ef:8a:fa:f8:38:61:ea:20:56:a7:db:d7: 1a:a3:46:8e:27:44:d9:33:37:91:3c:11:f6:61:86: ec:25:b9:2c:84:5e:c9:51:12:1b:1e:87:e7:a8:5b: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:77:0F:E1:AA:27:A0:88:30:CF:2A:38:57:DF:2D:3E:7E:DB:14:58 X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a0:55:33:43:b1:ec:db:b0:ca:23:36:8b:86:ba:5d:55:cf: 01:f4:47:14:ab:2c:43:e6:c3:63:50:09:14:91:0c:ef:c7:1c: e0:4d:f1:0a:64:53:22:aa:a0:e5:0e:47:27:f8:95:a0:64:83: 19:a7:64:0a:c5:93:90:fd:8b:fe:00:8a:f7:14:d6:e5:89:5c: 4a:c2:89:03:25:a2:8b:69:c3:97:32:13:d5:98:e6:1a:19:02: 74:7b:ba:9c:ef:0d:ad:7e:14:ec:a0:a7:85:62:6d:02:29:ce: dc:65:c4:0e:40:5a:1c:3d:50:93:1e:fa:ed:05:35:6c:ff:83: 14:8d:95:45:02:80:c0:6b:de:0c:a5:26:ae:ac:79:89:3d:9b: 0f:c8:8b:9e:5e:37:74:2a:b6:53:54:b2:d5:41:6c:26:e6:55: 02:c0:a6:f2:4e:52:06:60:59:d5:7d:44:7a:96:d0:32:13:4f: 36:75:98:0e:c9:f3:2b:d9:18:9a:4c:38:24:f2:a9:79:7e:a9: ac:fe:7d:fb:31:24:03:c9:87:e9:8f:e8:97:bc:d7:73:6a:32: 50:03:5d:9b:bf:ee:3e:3c:e8:c6:2c:73:34:7d:62:ed:2e:d4: cf:c3:a7:7e:ec:5d:f1:5b:10:f9:7a:6a:df:02:8a:9a:95:ee: ec:1d:79:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvXeoL0Osxz5KZ1uRGP5V9HU4LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNjAzMDEwMTA3MDFaFw0yNjAzMDQwOTUzMDFaMDMxMTAvBgNV BAMTKERCNzcwRkUxQUEyN0EwODgzMENGMkEzODU3REYyRDNFN0VEQjE0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkMGCquNnEvlA8vGG7tenUR12S IEPiw9fs+AfMuyYy2E+vYdssaPDRYHNa43ZzIl/7ZxZPcnzQNFF3EGk2JC0qBUM3 rebAFVBxAIzw6kMOCBSDBvqYgwWJ9Dd7f714aI0jVkDgC851+Z1YL0JR0S1v9IkA Q2PmBUn6yEjZ8t45U0MZglpwz4X/IoGcWy7EHl+Inz7SMkl3g/L9IXC1/wjfu6Ir hhR1Ftx2OYp3GSOBGgvCxNXdRQAFfYED0SloCHAjaNvlbYmt9cLps0IAXOlw3Lol Ve+K+vg4YeogVqfb1xqjRo4nRNkzN5E8EfZhhuwluSyEXslREhseh+eoW86nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23cP4aonoIgwzyo4V98tPn7bFFgwHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWgVTNDsezbsMojNouGul1VzwH0RxSrLEPm w2NQCRSRDO/HHOBN8QpkUyKqoOUORyf4laBkgxmnZArFk5D9i/4AivcU1uWJXErC iQMlootpw5cyE9WY5hoZAnR7upzvDa1+FOygp4VibQIpztxlxA5AWhw9UJMe+u0F NWz/gxSNlUUCgMBr3gylJq6seYk9mw/Ii55eN3QqtlNUstVBbCbmVQLApvJOUgZg WdV9RHqW0DITTzZ1mA7J8yvZGJpMOCTyqXl+qaz+ffsxJAPJh+mP6Je813NqMlAD XZu/7j486MYsczR9Yu0u1M/Dp37sXfFbEPl6at8CipqV7uwdeeU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:52:09 2026 by rpki-client