$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: dJ4WbnjFCZ9Cyde4RIVzK2QxVnkAQ6TSdWBAn4fSLZE= Subject key identifier: 96:6A:AB:46:5C:65:45:0E:CE:9B:0F:44:33:24:97:EA:31:5F:63:13 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 0AC1B3058A1084BD3A60852DAC15A596484FFA82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 0144 Signing time: Mon 30 Jun 2025 15:22:12 +0000 Manifest this update: Mon 30 Jun 2025 15:17:12 +0000 Manifest next update: Thu 03 Jul 2025 22:10:12 +0000 Files and hashes: 1: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: DdnUwsRnOSR4j2zaaaqJgwVlLxR+1c77hpjdQbpfeTg=) 2: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) 3: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c1:b3:05:8a:10:84:bd:3a:60:85:2d:ac:15:a5:96:48:4f:fa:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Jun 30 15:17:12 2025 GMT Not After : Jul 3 22:10:12 2025 GMT Subject: CN=966AAB465C65450ECE9B0F44332497EA315F6313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:6f:ec:60:fd:93:d7:25:e7:6f:39:3f:ea: 76:c6:49:d9:5f:ce:b6:f0:e4:5e:8a:c2:bd:14:ee: 41:cf:1a:46:4f:ee:82:96:e6:aa:14:92:18:fe:df: de:19:81:8d:aa:5a:63:ec:ea:1e:bc:f4:9d:29:97: ba:85:a6:fb:eb:2b:b2:8a:54:4b:f4:20:3d:a8:76: b1:3c:cc:f1:c1:e6:e6:88:20:3b:eb:4c:9e:e4:a6: ae:21:4b:58:6e:dc:6a:d8:55:28:0f:85:f2:db:c9: a2:2d:29:57:ba:86:f8:dd:b6:26:8b:cb:a2:1e:12: 82:f5:ee:a7:f4:88:d0:a1:98:59:db:1e:7b:0a:c0: 6c:9c:d1:02:bd:39:4e:66:d1:7d:e0:9c:64:c7:6e: 37:2c:5b:70:a1:ac:71:13:89:91:a7:de:c0:45:82: 17:67:d9:f2:28:21:75:50:10:46:09:3c:94:eb:d4: 41:20:54:43:1b:e5:f1:50:e4:d2:88:21:14:be:87: 89:25:52:f2:d2:2d:e1:45:fb:da:46:3f:e9:66:2a: a5:fe:f5:96:c7:35:f4:cc:28:74:29:74:47:8c:01: 65:f7:21:ad:79:c6:b0:77:e3:15:fc:1f:44:2a:4b: 89:43:f3:6a:8f:88:78:3f:ca:c9:af:49:25:64:cb: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:AB:46:5C:65:45:0E:CE:9B:0F:44:33:24:97:EA:31:5F:63:13 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:8a:6e:ac:33:cd:0c:3a:f0:7b:49:46:e9:d3:d5:96:df: 66:0a:c9:12:28:94:cd:1f:fb:c2:a0:f5:81:6c:74:42:fb:bd: 70:6a:21:48:d2:55:fa:a3:e5:6c:8d:9d:fc:4b:c7:df:9d:0e: 13:69:da:41:7b:57:fe:96:15:6e:d0:82:1b:72:74:e0:c3:a5: 3f:e4:e7:c8:2f:7b:16:fe:60:ac:84:b8:4b:cd:60:c8:87:c1: b7:7b:ff:33:49:3d:e2:ad:b5:dd:55:0c:ed:27:a1:58:cb:c6: 71:31:ae:5a:69:97:19:33:74:b4:15:66:e1:e6:b2:be:8c:3c: fd:54:b7:be:e0:6c:66:d6:50:a3:df:49:ce:3f:33:9b:7f:02: 1f:80:2a:53:d9:ef:34:ab:35:f5:7b:0a:a3:93:45:5f:ba:51: 89:59:61:3d:e3:cf:c3:36:97:10:80:33:be:67:10:17:4e:5e: 97:ab:04:34:f6:0a:5e:09:f2:f7:25:2a:53:80:1f:e4:fd:5f: af:6c:5e:6c:67:27:4a:16:8c:20:79:19:4d:d4:d7:cb:04:ef: d3:04:cc:e9:25:c6:2e:a4:03:63:69:70:47:2b:e5:73:57:5e: 93:2e:a1:0a:ad:61:74:e2:8f:42:9f:ee:f6:47:bf:54:a8:00: dc:87:e1:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsGzBYoQhL06YIUtrBWllkhP+oIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTA2MzAxNTE3MTJaFw0yNTA3MDMyMjEwMTJaMDMxMTAvBgNV BAMTKDk2NkFBQjQ2NUM2NTQ1MEVDRTlCMEY0NDMzMjQ5N0VBMzE1RjYzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXW/sYP2T1yXnbzk/6nbGSdlf zrbw5F6Kwr0U7kHPGkZP7oKW5qoUkhj+394ZgY2qWmPs6h689J0pl7qFpvvrK7KK VEv0ID2odrE8zPHB5uaIIDvrTJ7kpq4hS1hu3GrYVSgPhfLbyaItKVe6hvjdtiaL y6IeEoL17qf0iNChmFnbHnsKwGyc0QK9OU5m0X3gnGTHbjcsW3ChrHETiZGn3sBF ghdn2fIoIXVQEEYJPJTr1EEgVEMb5fFQ5NKIIRS+h4klUvLSLeFF+9pGP+lmKqX+ 9ZbHNfTMKHQpdEeMAWX3Ia15xrB34xX8H0QqS4lD82qPiHg/ysmvSSVky+jjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlmqrRlxlRQ7Omw9EMySX6jFfYxMwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC7im6sM80MOvB7SUbp09WW32YKyRIolM0f +8Kg9YFsdEL7vXBqIUjSVfqj5WyNnfxLx9+dDhNp2kF7V/6WFW7QghtydODDpT/k 58gvexb+YKyEuEvNYMiHwbd7/zNJPeKttd1VDO0noVjLxnExrlpplxkzdLQVZuHm sr6MPP1Ut77gbGbWUKPfSc4/M5t/Ah+AKlPZ7zSrNfV7CqOTRV+6UYlZYT3jz8M2 lxCAM75nEBdOXperBDT2Cl4J8vclKlOAH+T9X69sXmxnJ0oWjCB5GU3U18sE79ME zOklxi6kA2NpcEcr5XNXXpMuoQqtYXTij0Kf7vZHv1SoANyH4S4= -----END CERTIFICATE-----Generated at Mon Jun 30 19:47:31 2025 by rpki-client