$ rpki-client -vvf repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft File: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft (raw, json) Hash identifier: 0cOKmb4tbEyrg72B2g8FDyNm2FCIv3X1CRvE1Q+xeCs= Subject key identifier: 0B:46:23:81:FF:18:D1:24:B3:B2:EF:BD:12:94:FF:CE:9A:18:EC:11 Authority key identifier: 48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 Certificate issuer: /CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Certificate serial: 1810F3FC3C4656A71B7751AE4821A7503B57CD07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft Manifest number: 023C Signing time: Mon 04 Aug 2025 18:41:48 +0000 Manifest this update: Mon 04 Aug 2025 18:36:48 +0000 Manifest next update: Fri 08 Aug 2025 03:23:48 +0000 Files and hashes: 1: 48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl (hash: S++4bfhWLpnmn17x82UTUj/M4W+bc11d9zI2YgYq0Hc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:10:f3:fc:3c:46:56:a7:1b:77:51:ae:48:21:a7:50:3b:57:cd:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C126F98EBA7D2FC4EA8578A5469BE90CAFF677 Validity Not Before: Aug 4 18:36:48 2025 GMT Not After : Aug 8 03:23:48 2025 GMT Subject: CN=0B462381FF18D124B3B2EFBD1294FFCE9A18EC11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:e8:17:32:40:6a:2d:19:12:a6:40:3d:98: 2f:3d:14:31:b3:6d:fe:fa:77:b7:95:5f:34:d8:6c: 1c:c3:77:c8:54:79:66:14:94:13:aa:53:f0:8c:5e: 29:77:6f:79:fc:13:07:b6:57:96:4a:57:b0:12:f2: 4d:49:b3:6d:38:3f:48:fe:b4:c7:4d:a0:1c:bc:8e: b2:c9:2a:3c:06:03:0c:c1:0a:79:90:45:d7:cd:79: a9:4e:38:70:98:95:d9:32:15:8e:97:6d:ae:47:34: 89:f8:ce:f8:8e:f7:16:21:d4:60:9d:13:ba:ce:1d: cf:51:a7:57:55:a9:8c:5e:27:d9:94:e5:0e:ea:ea: 6e:d2:b5:67:b7:40:98:c9:5d:de:fd:89:7a:b8:ac: 91:00:e7:e4:db:e9:05:c0:78:39:6f:1d:0c:46:3d: 79:90:62:f7:21:58:35:cd:b5:9f:1d:35:4a:cf:5e: eb:3f:76:81:85:25:db:97:7e:ef:5b:fc:46:14:b1: f3:24:92:85:6c:2b:03:95:83:0d:4e:af:37:66:74: 99:44:5c:c7:bb:a8:60:d2:73:f5:68:fd:4c:90:c1: 4d:3e:f3:55:c4:18:17:cf:22:51:db:53:f9:a2:12: fe:b3:84:4b:3c:2a:ad:1d:39:cd:83:fb:88:43:ba: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:46:23:81:FF:18:D1:24:B3:B2:EF:BD:12:94:FF:CE:9A:18:EC:11 X509v3 Authority Key Identifier: keyid:48:C1:26:F9:8E:BA:7D:2F:C4:EA:85:78:A5:46:9B:E9:0C:AF:F6:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/48C126F98EBA7D2FC4EA8578A5469BE90CAFF677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a9:5b:0c:0d:2c:05:a1:af:17:f0:39:7b:65:a3:45:cb:aa: ab:9f:4c:70:54:b9:01:e5:2b:1a:07:29:2f:fc:d9:69:68:c7: a5:13:44:08:bf:34:fc:8c:7d:d2:b8:04:b9:d7:49:57:c2:11: b1:48:12:a0:0e:fa:23:9c:fb:88:99:7d:6d:7e:d5:08:61:7b: 04:4b:ee:94:ba:1e:78:b0:ac:a6:15:8f:e1:33:6f:60:b5:6f: 2c:64:f1:88:f2:86:5c:ac:0a:31:f1:48:be:a3:31:24:8c:d5: 96:b5:a8:9b:6e:ef:b9:77:92:1d:ef:a2:9c:b5:7d:09:7f:92: 5d:40:b3:4c:c0:79:b8:04:c4:1a:3c:b4:e4:0e:f0:51:38:d8: c9:02:41:62:00:e4:64:20:11:de:a1:2a:04:32:00:39:8c:a3: 42:c4:ef:06:09:94:fb:50:e2:a2:f9:1a:48:a6:ee:df:f0:45: 7f:49:c0:e5:c1:59:2f:c9:a0:8d:a0:12:d4:3a:67:f0:cf:d3: d5:39:5c:51:32:1e:37:18:dd:22:9c:94:ca:ab:1a:da:cb:fa: f9:bc:81:11:6c:fa:2b:75:74:a6:77:50:1f:27:f9:55:58:21: e3:57:95:4f:f6:16:64:56:b6:1f:c8:38:b4:24:b8:3b:c5:1a: a1:a0:fb:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBDz/DxGVqcbd1GuSCGnUDtXzQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkw Q0FGRjY3NzAeFw0yNTA4MDQxODM2NDhaFw0yNTA4MDgwMzIzNDhaMDMxMTAvBgNV BAMTKDBCNDYyMzgxRkYxOEQxMjRCM0IyRUZCRDEyOTRGRkNFOUExOEVDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2+gXMkBqLRkSpkA9mC89FDGz bf76d7eVXzTYbBzDd8hUeWYUlBOqU/CMXil3b3n8Ewe2V5ZKV7AS8k1Js204P0j+ tMdNoBy8jrLJKjwGAwzBCnmQRdfNealOOHCYldkyFY6Xba5HNIn4zviO9xYh1GCd E7rOHc9Rp1dVqYxeJ9mU5Q7q6m7StWe3QJjJXd79iXq4rJEA5+Tb6QXAeDlvHQxG PXmQYvchWDXNtZ8dNUrPXus/doGFJduXfu9b/EYUsfMkkoVsKwOVgw1OrzdmdJlE XMe7qGDSc/Vo/UyQwU0+81XEGBfPIlHbU/miEv6zhEs8Kq0dOc2D+4hDunCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC0Yjgf8Y0SSzsu+9EpT/zpoY7BEwHwYDVR0j BBgwFoAUSMEm+Y66fS/E6oV4pUab6Qyv9ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDgyYmEwZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC80OEMxMjZGOThF QkE3RDJGQzRFQTg1NzhBNTQ2OUJFOTBDQUZGNjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlCRTkwQ0FG RjY3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvNDhDMTI2Rjk4RUJBN0QyRkM0RUE4NTc4QTU0NjlC RTkwQ0FGRjY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWpWwwNLAWhrxfwOXtlo0XLqqufTHBUuQHl KxoHKS/82Wlox6UTRAi/NPyMfdK4BLnXSVfCEbFIEqAO+iOc+4iZfW1+1QhhewRL 7pS6HniwrKYVj+Ezb2C1byxk8YjyhlysCjHxSL6jMSSM1Za1qJtu77l3kh3vopy1 fQl/kl1As0zAebgExBo8tOQO8FE42MkCQWIA5GQgEd6hKgQyADmMo0LE7wYJlPtQ 4qL5Gkim7t/wRX9JwOXBWS/JoI2gEtQ6Z/DP09U5XFEyHjcY3SKclMqrGtrL+vm8 gRFs+it1dKZ3UB8n+VVYIeNXlU/2FmRWth/IOLQkuDvFGqGg++0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:33:07 2025 by rpki-client