$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: CJLTP2QUTsGiWHqg1T2ZwnIyB/2rf2TGng44/aBey2U= Subject key identifier: B3:94:67:7E:E3:12:F0:AC:FF:27:5E:C6:06:EF:9C:3B:A2:E6:B3:8C Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 093029510A3FE0E7E7AE69C712A18DCA9BE1A64D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 015C Signing time: Fri 22 Aug 2025 19:22:29 +0000 Manifest this update: Fri 22 Aug 2025 19:17:29 +0000 Manifest next update: Tue 26 Aug 2025 02:44:29 +0000 Files and hashes: 1: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: 3mBBNtV+Xkew3JYY7zPIIaA2kuin8+fyfq11kQuAFs0=) 2: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) 3: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:30:29:51:0a:3f:e0:e7:e7:ae:69:c7:12:a1:8d:ca:9b:e1:a6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Aug 22 19:17:29 2025 GMT Not After : Aug 26 02:44:29 2025 GMT Subject: CN=B394677EE312F0ACFF275EC606EF9C3BA2E6B38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:17:de:da:d3:52:af:9d:d4:27:c5:5d:48: 7b:9e:6e:66:54:78:3a:88:d9:23:ba:7b:69:cb:96: 45:93:94:fb:91:56:1b:c7:be:82:4f:7f:d5:d7:f3: 2b:e3:06:3a:12:bf:95:b3:a9:f4:e0:a2:15:2a:f1: 96:5e:b4:53:87:18:51:8b:c2:d4:98:50:d8:b7:f3: 40:17:de:05:ef:b6:ee:61:eb:7c:24:d0:c9:50:d3: 17:f7:12:e2:0e:b2:c0:62:f7:87:64:7c:02:05:fa: f6:36:84:bd:b7:42:f8:3e:d3:c3:01:fa:25:20:dc: 74:2b:c9:a0:ca:98:b3:d6:78:3b:1a:9c:54:68:4f: a1:5d:85:ee:b5:b6:18:11:ce:06:32:1a:85:46:6f: bf:5f:ab:90:21:f8:5a:7d:ec:6a:b8:ab:da:a3:17: 65:80:d8:4c:65:6b:dd:d0:b7:ed:50:65:07:f1:7e: 15:78:77:4f:f8:d9:f4:f3:d1:da:fc:b7:52:fd:5d: 8d:2f:b1:6d:d1:2a:fd:48:be:c9:1b:ad:0a:e9:75: 00:46:e2:7b:44:92:43:ae:bd:b2:0c:f0:ed:be:63: 80:43:7d:01:73:e7:a5:50:5c:56:23:64:c8:37:25: 07:57:e3:e8:ad:59:3a:99:eb:69:9d:b8:38:de:c7: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:94:67:7E:E3:12:F0:AC:FF:27:5E:C6:06:EF:9C:3B:A2:E6:B3:8C X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d2:35:fd:29:b4:ea:46:7f:c2:17:3e:e2:a5:d0:b3:da:aa: c2:38:ad:eb:39:b2:94:51:46:01:7f:9c:2c:9e:32:fb:dc:95: 3a:5a:4e:19:0f:a9:a2:94:da:99:54:fb:05:f7:74:1c:0f:3b: 8c:87:44:2b:57:44:a7:7d:11:49:bd:08:03:39:de:a7:9b:bf: 6f:6c:19:de:d5:e0:23:da:31:60:12:5e:0e:3f:1e:81:14:ae: 70:79:4d:94:06:79:ef:56:bd:2f:7f:75:4c:a2:d0:21:79:af: dc:83:d4:c3:53:b4:8c:1c:e3:0f:94:7f:de:ba:2e:47:30:28: 38:93:36:bb:65:72:27:13:c0:0d:59:5b:6c:3e:c2:3f:c5:71: f0:ec:2f:67:63:cf:2b:24:a7:d3:c2:35:6d:09:80:c7:75:44: 41:4f:d9:52:d1:5b:76:89:0d:14:ec:3e:ad:cf:93:39:d5:58: 77:22:86:6e:4f:ae:fb:5d:b4:bd:5b:63:a1:ae:7d:fb:76:1f: a2:45:06:45:d9:b3:26:b7:4b:3e:a2:1d:52:46:cf:75:5b:b2: b3:8f:e1:18:1d:28:4c:57:b2:66:f1:fa:a7:60:ca:63:f1:91: 25:c9:a4:33:fe:20:61:dc:42:30:5d:63:fa:6a:ee:ca:34:88: 2c:a5:67:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTApUQo/4OfnrmnHEqGNypvhpk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTA4MjIxOTE3MjlaFw0yNTA4MjYwMjQ0MjlaMDMxMTAvBgNV BAMTKEIzOTQ2NzdFRTMxMkYwQUNGRjI3NUVDNjA2RUY5QzNCQTJFNkIzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1Rfe2tNSr53UJ8VdSHuebmZU eDqI2SO6e2nLlkWTlPuRVhvHvoJPf9XX8yvjBjoSv5WzqfTgohUq8ZZetFOHGFGL wtSYUNi380AX3gXvtu5h63wk0MlQ0xf3EuIOssBi94dkfAIF+vY2hL23Qvg+08MB +iUg3HQryaDKmLPWeDsanFRoT6Fdhe61thgRzgYyGoVGb79fq5Ah+Fp97Gq4q9qj F2WA2Exla93Qt+1QZQfxfhV4d0/42fTz0dr8t1L9XY0vsW3RKv1IvskbrQrpdQBG 4ntEkkOuvbIM8O2+Y4BDfQFz56VQXFYjZMg3JQdX4+itWTqZ62mduDjex3OZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5RnfuMS8Kz/J17GBu+cO6Lms4wwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnSNf0ptOpGf8IXPuKl0LPaqsI4res5spRR RgF/nCyeMvvclTpaThkPqaKU2plU+wX3dBwPO4yHRCtXRKd9EUm9CAM53qebv29s Gd7V4CPaMWASXg4/HoEUrnB5TZQGee9WvS9/dUyi0CF5r9yD1MNTtIwc4w+Uf966 LkcwKDiTNrtlcicTwA1ZW2w+wj/FcfDsL2djzyskp9PCNW0JgMd1REFP2VLRW3aJ DRTsPq3PkznVWHcihm5PrvtdtL1bY6Gufft2H6JFBkXZsya3Sz6iHVJGz3VbsrOP 4RgdKExXsmbx+qdgymPxkSXJpDP+IGHcQjBdY/pq7so0iCylZ4Y= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:33 2025 by rpki-client