$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft File: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json) Hash identifier: b9+3AyU4j69MoWz5FxCPto4r3PogPSwX1Fi8fVaNsHU= Subject key identifier: 54:0D:F9:DE:47:DE:2A:7F:9E:83:45:71:48:9D:EC:0B:0C:85:A2:D5 Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 44B409E1AC3E47E51F699137C586AA7F8D9DA387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft Manifest number: 03A2 Signing time: Mon 03 Nov 2025 04:01:02 +0000 Manifest this update: Mon 03 Nov 2025 03:56:02 +0000 Manifest next update: Thu 06 Nov 2025 07:23:02 +0000 Files and hashes: 1: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: EJzmd21yXfb5JcfrXk3QkVBisxDE+Xolr4eVLuwKBfU=) 2: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=) 3: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=) 4: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b4:09:e1:ac:3e:47:e5:1f:69:91:37:c5:86:aa:7f:8d:9d:a3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Nov 3 03:56:02 2025 GMT Not After : Nov 6 07:23:02 2025 GMT Subject: CN=540DF9DE47DE2A7F9E834571489DEC0B0C85A2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:0f:29:6b:be:24:6d:d7:e0:f9:1a:e8:b0: 6f:57:df:80:23:eb:f9:13:79:95:22:81:a1:5b:ca: 04:2c:ca:ce:76:0a:57:d6:0e:12:e5:82:35:eb:7a: 44:34:fa:77:63:5e:dc:e5:e9:98:05:c4:14:63:70: 03:35:a7:ae:5d:83:0d:66:3c:e9:d1:53:6a:e4:4f: e6:0e:3f:55:6d:87:41:b0:f0:67:32:bb:8e:5a:5a: 3b:f3:c6:1e:41:55:6a:ad:60:a7:0f:ab:3a:a9:4e: 22:e0:60:8d:d7:9f:19:78:b5:ca:ee:87:25:21:33: 17:39:84:18:23:8a:c5:a9:d3:7f:5b:34:a8:64:70: 35:84:9c:de:12:c9:d3:2d:69:35:35:50:50:3e:75: 84:41:a8:84:e6:0f:73:2a:8e:99:09:c6:51:58:65: 88:3e:fa:18:60:0b:e5:49:ca:48:4e:a3:8e:d9:70: 5c:b1:a8:b6:0a:19:6f:b0:7b:a7:22:a1:2b:43:28: f9:a4:ac:80:ec:41:e7:57:d3:cc:29:95:0d:cd:27: bf:a7:ba:72:68:8a:92:20:93:9c:bd:7b:1f:84:95: 3e:19:33:96:09:bd:bb:54:6b:06:5a:9b:a7:fd:27: 06:7f:4d:56:e6:a9:7c:e6:cc:c9:f6:7d:ee:a1:23: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:F9:DE:47:DE:2A:7F:9E:83:45:71:48:9D:EC:0B:0C:85:A2:D5 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8c:b7:ba:d1:82:5d:da:f7:b0:4b:cf:33:70:22:58:c7:ef: 9f:a9:1a:ef:54:57:78:f5:9d:42:3c:3b:39:f6:86:f4:20:b5: 3a:80:af:d2:60:2d:a4:4f:0e:89:0a:95:0a:d9:57:63:97:81: 53:8d:be:7f:5d:09:ec:81:e5:24:77:b3:d6:a2:fb:14:0e:80: c8:a3:42:97:dd:41:38:2b:c7:51:41:88:f4:c0:3c:4a:90:97: 82:9a:8d:34:4f:31:e7:e3:29:e6:7f:03:00:e5:98:91:65:8e: d8:1b:f1:e1:6b:5e:29:76:fb:71:34:9e:d2:80:0b:36:97:6d: 6f:00:5f:45:ef:f9:24:55:72:ff:2f:60:06:e2:a2:62:c3:ca: 74:19:0f:ad:67:b6:bf:a7:c0:0e:1d:66:0e:a0:3f:56:1e:73: 8a:b9:cc:64:19:46:0e:f6:6e:93:2b:2b:1f:60:51:0f:f0:3a: c5:2a:8e:ee:7c:73:16:c6:e3:94:43:a6:72:76:41:22:ff:a9: 8d:ad:85:23:7f:91:b9:33:64:85:c4:a0:ee:ea:f7:f1:db:fd: ef:5f:01:37:b8:34:9f:d0:ee:32:02:a0:8c:f9:29:ca:08:0e: 65:f7:a1:a4:ab:b0:e4:ac:39:94:70:b0:9f:f8:18:e3:c1:a4: b3:13:f6:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLQJ4aw+R+UfaZE3xYaqf42do4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNTExMDMwMzU2MDJaFw0yNTExMDYwNzIzMDJaMDMxMTAvBgNV BAMTKDU0MERGOURFNDdERTJBN0Y5RTgzNDU3MTQ4OURFQzBCMEM4NUEyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXA8pa74kbdfg+RrosG9X34Aj 6/kTeZUigaFbygQsys52ClfWDhLlgjXrekQ0+ndjXtzl6ZgFxBRjcAM1p65dgw1m POnRU2rkT+YOP1Vth0Gw8Gcyu45aWjvzxh5BVWqtYKcPqzqpTiLgYI3Xnxl4tcru hyUhMxc5hBgjisWp039bNKhkcDWEnN4SydMtaTU1UFA+dYRBqITmD3MqjpkJxlFY ZYg++hhgC+VJykhOo47ZcFyxqLYKGW+we6cioStDKPmkrIDsQedX08wplQ3NJ7+n unJoipIgk5y9ex+ElT4ZM5YJvbtUawZam6f9JwZ/TVbmqXzmzMn2fe6hIwhrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVA353kfeKn+eg0VxSJ3sCwyFotUwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRG MTE2RTNENzNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqMt7rRgl3a97BLzzNwIljH75+pGu9UV3j1 nUI8Ozn2hvQgtTqAr9JgLaRPDokKlQrZV2OXgVONvn9dCeyB5SR3s9ai+xQOgMij QpfdQTgrx1FBiPTAPEqQl4KajTRPMefjKeZ/AwDlmJFljtgb8eFrXil2+3E0ntKA CzaXbW8AX0Xv+SRVcv8vYAbiomLDynQZD61ntr+nwA4dZg6gP1Yec4q5zGQZRg72 bpMrKx9gUQ/wOsUqju58cxbG45RDpnJ2QSL/qY2thSN/kbkzZIXEoO7q9/Hb/e9f ATe4NJ/Q7jICoIz5KcoIDmX3oaSrsOSsOZRwsJ/4GOPBpLMT9us= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:39 2025 by rpki-client