$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft File: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft (raw, json) Hash identifier: Gwnw4o09T7/+jphepJTGDEkPAXKam/Pu4qG74eeuRLE= Subject key identifier: 19:49:36:D2:A4:2E:42:CA:5A:53:07:C8:03:5F:82:4F:A3:EC:19:9B Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07 Certificate issuer: /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707 Certificate serial: 6D45923F58776906884A0E9476DF64B0889D37AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft Manifest number: BC Signing time: Sun 20 Sep 2026 17:23:30 +0000 Manifest this update: Sun 20 Sep 2026 17:18:30 +0000 Manifest next update: Mon 21 Sep 2026 19:49:30 +0000 Files and hashes: 1: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: 2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=) 2: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=) 3: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: esSysVtUva8+Yocw0kAhWf9PJYZT8IbRg2/i3Lll6kI=) 4: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl (hash: kV9CzrRefrEXTegi0/XuWDuQJiIyMWwlNBr7bk7BzPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:45:92:3f:58:77:69:06:88:4a:0e:94:76:df:64:b0:88:9d:37:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707 Validity Not Before: Sep 20 17:18:30 2026 GMT Not After : Sep 21 19:49:30 2026 GMT Subject: CN=194936D2A42E42CA5A5307C8035F824FA3EC199B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:41:41:c5:aa:79:12:0e:a2:ce:f4:a7:70:ff: 45:14:c1:15:c7:2a:3b:38:1e:a9:3b:fa:aa:e7:9f: ab:01:9a:bf:9e:7b:4f:28:56:6a:13:1f:f1:ae:0e: 59:e0:8e:4a:1d:cd:f4:8d:b2:fa:c3:a0:8f:e1:c4: 2f:2d:a0:ac:1a:5b:37:6b:b5:1d:79:ea:d4:ff:41: 88:49:97:62:46:dd:3a:ec:90:b9:b4:62:04:5c:d3: c4:59:2e:1b:0f:29:38:de:36:45:a4:5d:47:b1:ca: cc:ce:c3:4b:9c:4e:e0:2b:ce:91:3f:87:54:1d:46: 6a:bf:01:a4:a4:8b:f3:47:ad:5b:a0:5c:ef:dd:7d: f7:69:3b:b9:ba:d5:0d:e7:d5:99:b6:6a:db:3d:a3: 61:77:72:3d:00:b6:98:bb:f8:b2:b3:18:a8:1c:b2: d7:23:e5:3d:78:98:54:2c:f3:5c:55:46:32:04:93: 80:a8:a2:1a:a1:27:60:f1:ad:5f:18:f3:bb:a5:14: 53:f0:b8:ff:82:3c:38:5d:a7:c7:24:3a:ea:cf:d5: 1f:de:54:92:bc:34:f8:6d:b3:0a:34:0a:34:3a:38: 3a:49:d6:a6:f6:f3:db:20:75:20:ed:69:6a:f5:66: ae:e2:ee:16:1c:bf:ca:c2:26:33:9e:fd:88:72:e6: 10:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:49:36:D2:A4:2E:42:CA:5A:53:07:C8:03:5F:82:4F:A3:EC:19:9B X509v3 Authority Key Identifier: keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d7:92:d9:0e:df:73:2f:0b:f0:91:66:71:5b:cf:d0:c6:ad: be:87:d2:aa:af:4d:9d:43:9c:0a:c4:e7:ce:01:98:ab:51:85: 02:30:e6:0a:11:95:55:2e:9a:f0:e9:f5:25:15:a4:cc:49:76: 26:85:c8:c0:f4:6a:f4:21:c2:56:75:f2:51:05:3a:a6:3d:ee: dd:d7:e1:75:14:1a:a4:46:44:3b:35:98:21:ad:07:76:36:82: 65:d6:cb:23:e8:f6:57:cf:2c:00:9d:bf:29:c2:73:53:01:19: e3:42:dc:11:49:e5:64:da:40:9f:78:81:be:4b:0f:79:0f:53: 66:4f:56:cb:7c:e1:eb:be:0c:2c:d9:99:39:08:94:c5:12:d0: e4:8c:c6:0f:71:7c:25:0f:a3:4d:65:98:d3:0b:77:8e:e3:72: 64:df:10:cb:57:6a:08:2f:06:b8:49:e6:6a:7b:7f:fc:3b:59: 23:17:07:2c:33:48:2a:67:3b:42:40:17:a7:4b:67:92:2b:fa: 31:c7:8f:e6:1e:06:85:e2:b2:3d:d8:d7:d9:9b:e8:2f:22:4f: 04:5e:98:88:e5:f4:25:95:6f:43:61:db:d1:7b:07:6a:ce:a3: 4c:57:73:d5:ae:fe:4a:23:4a:30:b4:36:27:16:45:12:f5:07: 9e:81:55:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUWSP1h3aQaISg6Udt9ksIidN6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJC OUNCMzcwNzAeFw0yNjA5MjAxNzE4MzBaFw0yNjA5MjExOTQ5MzBaMDMxMTAvBgNV BAMTKDE5NDkzNkQyQTQyRTQyQ0E1QTUzMDdDODAzNUY4MjRGQTNFQzE5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxQUHFqnkSDqLO9Kdw/0UUwRXH Kjs4Hqk7+qrnn6sBmr+ee08oVmoTH/GuDlngjkodzfSNsvrDoI/hxC8toKwaWzdr tR156tT/QYhJl2JG3TrskLm0YgRc08RZLhsPKTjeNkWkXUexyszOw0ucTuArzpE/ h1QdRmq/AaSki/NHrVugXO/dffdpO7m61Q3n1Zm2ats9o2F3cj0Atpi7+LKzGKgc stcj5T14mFQs81xVRjIEk4CoohqhJ2DxrV8Y87ulFFPwuP+CPDhdp8ckOurP1R/e VJK8NPhtswo0CjQ6ODpJ1qb289sgdSDtaWr1Zq7i7hYcv8rCJjOe/Yhy5hCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUk20qQuQspaUwfIA1+CT6PsGZswHwYDVR0j BBgwFoAUSLAygPjgO18KHqvpEqrIS7nLNwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVhOTZiODEtZDEyOC00OTY1LWExNzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBG OEUwM0I1RjBBMUVBQkU5MTJBQUM4NEJCOUNCMzcwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80OEIwMzI4MEY4RTAzQjVGMEExRUFCRTkxMkFBQzg0QkI5Q0Iz NzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVhOTZiODEtZDEyOC00OTY1LWEx NzctZmFjZjM0MWU3Zjg5LzAvNDhCMDMyODBGOEUwM0I1RjBBMUVBQkU5MTJBQUM4 NEJCOUNCMzcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzXktkO33MvC/CRZnFbz9DGrb6H0qqvTZ1D nArE584BmKtRhQIw5goRlVUumvDp9SUVpMxJdiaFyMD0avQhwlZ18lEFOqY97t3X 4XUUGqRGRDs1mCGtB3Y2gmXWyyPo9lfPLACdvynCc1MBGeNC3BFJ5WTaQJ94gb5L D3kPU2ZPVst84eu+DCzZmTkIlMUS0OSMxg9xfCUPo01lmNMLd47jcmTfEMtXaggv BrhJ5mp7f/w7WSMXBywzSCpnO0JAF6dLZ5Ir+jHHj+YeBoXisj3Y19mb6C8iTwRe mIjl9CWVb0Nh29F7B2rOo0xXc9Wu/kojSjC0NicWRRL1B56BVcw= -----END CERTIFICATE-----Generated at Mon Sep 21 13:37:24 2026 by rpki-client