$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft File: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json) Hash identifier: 1XmPqtqzUOBL17PrxpjfWgyFL+kaYx3I1S/BflBpEbI= Subject key identifier: 91:1B:1B:05:E2:7D:76:4A:1D:C6:66:A2:0B:B7:69:04:B5:2D:DB:ED Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 77A137F763BB7F6043DACC95C477BBFC86EA888A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft Manifest number: 037A Signing time: Tue 05 Aug 2025 22:41:02 +0000 Manifest this update: Tue 05 Aug 2025 22:36:02 +0000 Manifest next update: Sat 09 Aug 2025 09:55:02 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=) 2: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=) 3: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: 3sPGMb4jouxpo0ADH/9Jkv5FahG79XsiVfrJ1B/Q7nE=) 4: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a1:37:f7:63:bb:7f:60:43:da:cc:95:c4:77:bb:fc:86:ea:88:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Aug 5 22:36:02 2025 GMT Not After : Aug 9 09:55:02 2025 GMT Subject: CN=911B1B05E27D764A1DC666A20BB76904B52DDBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:12:81:66:cf:b8:8a:44:2e:84:ea:9f:22:d4: fe:56:63:08:2d:4a:a3:68:76:72:ea:c7:b2:f1:8f: 04:2c:ec:2e:bb:44:91:e6:3e:44:e9:f4:c6:b7:07: 19:f2:15:80:83:f9:7c:29:a6:d7:e5:7c:09:f9:d5: 7b:c9:ac:e0:58:54:e8:e7:35:a8:32:95:e1:12:51: c7:80:86:7f:fb:af:a0:db:11:6a:91:96:9f:5f:70: a5:be:ef:da:86:f3:0b:99:2e:bb:a3:da:8d:fe:f3: 47:b3:f9:24:bc:44:e0:ab:90:70:6a:2c:12:26:35: 3d:7f:54:73:75:9b:37:79:10:16:07:eb:07:a0:f5: 7f:7c:e2:96:a4:f3:e3:f2:bd:fe:40:91:0d:6e:18: 45:27:3f:b8:72:cc:78:da:e5:dd:01:52:27:03:7a: 92:d9:47:95:d4:58:ef:df:00:fa:11:73:22:c4:c0: b2:3d:a5:9f:7c:2b:fd:5b:82:1f:f7:93:7c:ea:4c: dc:ea:81:19:b7:63:c3:f7:ef:e7:7d:82:e3:2b:53: 95:75:96:6c:c5:68:2b:6d:59:67:3d:fc:8d:e8:47: 4b:a5:d7:f7:08:93:2f:47:9d:ea:d5:9b:52:c8:8b: 8c:9a:a6:62:12:f7:c0:23:19:a4:70:99:c9:02:4b: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:1B:05:E2:7D:76:4A:1D:C6:66:A2:0B:B7:69:04:B5:2D:DB:ED X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:23:11:94:3e:ce:cf:7a:31:0b:d6:bd:c4:72:13:34:93:e9: 0e:29:1d:92:a8:62:b4:12:3a:32:1f:e9:eb:e1:25:22:50:94: 4a:cf:3c:71:c6:0c:ae:1e:85:b4:44:87:57:e0:1e:17:29:9d: 92:9c:96:35:dd:ca:68:ce:39:fe:34:0c:55:7f:cd:c7:2e:30: 12:40:49:50:b1:e2:f7:8b:17:f3:39:f6:ad:64:1b:fd:1d:5c: c7:cd:d8:15:e4:7e:09:a1:cb:25:fb:37:81:54:e5:b5:b4:dc: 06:87:49:31:a8:37:f0:29:5f:b7:ce:49:e5:e5:9a:af:6f:49: dc:95:0f:db:ed:bb:51:7f:73:8c:d0:b6:ea:4d:18:d0:cb:f5: 36:83:c5:ed:3c:f7:7b:c6:09:a3:e9:11:fe:f3:e2:60:12:24: 1e:ca:93:06:b9:90:fe:ea:44:a1:93:7d:3d:e9:e4:ec:88:11: 5b:8c:b9:14:b4:82:02:ef:d1:40:86:00:82:8f:66:48:90:41: 48:08:90:98:d9:68:41:80:1f:0a:8b:2e:32:1a:13:e7:d5:27: 98:c6:61:be:f5:4e:99:b5:df:9b:1e:79:6f:72:7b:49:7a:df: 71:75:55:b0:7c:df:e7:bc:c3:6a:de:a3:b5:b7:cb:c3:39:69: e1:fc:4b:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6E392O7f2BD2syVxHe7/IbqiIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNTA4MDUyMjM2MDJaFw0yNTA4MDkwOTU1MDJaMDMxMTAvBgNV BAMTKDkxMUIxQjA1RTI3RDc2NEExREM2NjZBMjBCQjc2OTA0QjUyRERCRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEoFmz7iKRC6E6p8i1P5WYwgt SqNodnLqx7LxjwQs7C67RJHmPkTp9Ma3BxnyFYCD+XwpptflfAn51XvJrOBYVOjn NagyleESUceAhn/7r6DbEWqRlp9fcKW+79qG8wuZLruj2o3+80ez+SS8ROCrkHBq LBImNT1/VHN1mzd5EBYH6weg9X984pak8+Pyvf5AkQ1uGEUnP7hyzHja5d0BUicD epLZR5XUWO/fAPoRcyLEwLI9pZ98K/1bgh/3k3zqTNzqgRm3Y8P37+d9guMrU5V1 lmzFaCttWWc9/I3oR0ul1/cIky9HnerVm1LIi4yapmIS98AjGaRwmckCSyk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkRsbBeJ9dkodxmaiC7dpBLUt2+0wHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRG MTE2RTNENzNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwjEZQ+zs96MQvWvcRyEzST6Q4pHZKoYrQS OjIf6evhJSJQlErPPHHGDK4ehbREh1fgHhcpnZKcljXdymjOOf40DFV/zccuMBJA SVCx4veLF/M59q1kG/0dXMfN2BXkfgmhyyX7N4FU5bW03AaHSTGoN/ApX7fOSeXl mq9vSdyVD9vtu1F/c4zQtupNGNDL9TaDxe0893vGCaPpEf7z4mASJB7Kkwa5kP7q RKGTfT3p5OyIEVuMuRS0ggLv0UCGAIKPZkiQQUgIkJjZaEGAHwqLLjIaE+fVJ5jG Yb71Tpm135seeW9ye0l633F1VbB83+e8w2reo7W3y8M5aeH8S7w= -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:28 2025 by rpki-client