$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: JWvncCxeM9N5zeDZ/DS4CnA0ePTr6MEUaQ2ZdXWPTCQ= Subject key identifier: 4D:CE:87:58:AC:35:6A:C6:EF:52:37:53:6E:4F:0E:6B:C5:79:26:61 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 4F531DDBF07E644F22CDB8FDCC56D51ACB71E784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 0175 Signing time: Sun 19 Oct 2025 18:22:17 +0000 Manifest this update: Sun 19 Oct 2025 18:17:17 +0000 Manifest next update: Thu 23 Oct 2025 04:46:17 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 2: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: 7M3hUM2Ibq+AKzC4KMmxN5a1xrM/m7cadA+VsK8SKt4=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:53:1d:db:f0:7e:64:4f:22:cd:b8:fd:cc:56:d5:1a:cb:71:e7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Oct 19 18:17:17 2025 GMT Not After : Oct 23 04:46:17 2025 GMT Subject: CN=4DCE8758AC356AC6EF5237536E4F0E6BC5792661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:13:7e:90:94:a6:a9:76:90:3a:28:94:44: 27:2b:54:c9:cd:c0:80:4e:56:39:cf:ae:b6:0b:6b: 93:9f:fe:58:4e:48:8b:39:d7:2a:2e:3f:79:cd:f8: fa:cb:0e:b3:f8:2c:f5:f9:89:40:a5:20:7c:98:14: 05:8c:e1:86:2a:1d:e5:a1:f5:05:9e:ba:13:8a:37: 67:e8:bf:43:47:b3:56:c8:38:c1:c7:92:b7:83:0a: a7:60:73:1f:1f:2b:d2:7d:d6:0f:ca:3d:99:64:70: ec:39:2d:ca:7c:7c:a5:d1:fc:e3:1f:ae:97:26:85: ee:2c:ea:ab:d5:96:c6:23:4b:73:eb:f4:f0:e3:b5: 00:ab:b8:ae:d3:a8:20:76:44:4f:c4:16:95:46:78: 0b:5b:bf:68:18:f9:cd:41:f3:0c:de:e6:0c:b6:59: 1e:59:74:a4:87:e8:c3:d7:e8:60:20:28:88:d0:06: 19:1c:b9:cc:b2:ee:36:30:0a:1c:2f:dc:59:3b:0a: c8:4e:f4:06:15:23:b0:04:29:3b:75:22:c4:52:a7: 1f:58:47:c4:70:99:71:e5:de:f3:44:ae:d0:94:89: 91:57:bd:2f:b5:22:30:89:7b:0c:3c:07:9d:88:7f: d9:62:d7:c4:44:2c:ba:e8:05:d8:b9:df:5a:aa:50: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CE:87:58:AC:35:6A:C6:EF:52:37:53:6E:4F:0E:6B:C5:79:26:61 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:dd:40:e2:d6:1e:a4:3b:44:76:d4:0b:fa:53:b2:09:60:df: 38:67:41:00:2d:f4:13:83:99:af:c4:cf:1a:18:38:8f:b3:22: 23:4d:8e:69:7f:8e:68:53:97:0a:c1:5b:bb:c6:ce:1b:01:97: cd:2c:1d:9c:31:48:b1:c6:b7:2a:59:18:22:63:20:09:e0:cc: c1:07:0b:09:4f:c2:7b:09:70:09:fc:ff:2a:20:a6:ea:77:be: 1a:e6:5c:ae:18:c2:35:41:0b:3d:2b:62:f6:6a:42:7b:2a:88: 6a:e6:1a:8b:dd:10:65:f2:42:9e:d7:18:12:ba:2d:57:d1:ff: 74:d7:67:ca:5a:08:59:9b:6f:8a:71:7b:c5:7c:b0:48:71:b2: 3f:8b:ea:e8:4f:a3:45:06:8e:36:f1:a4:10:3c:71:17:60:22: d0:2a:f0:47:77:9d:b9:5a:fd:0d:05:d4:57:08:23:8a:0f:83: 5a:25:5d:b4:02:6a:c8:43:f5:13:7f:4c:57:09:5a:8e:0f:86: 94:8a:86:02:1d:49:0f:55:e2:57:20:48:da:26:d9:5d:42:ef: d9:a9:cd:1a:77:7f:78:59:ea:86:d6:93:d9:00:3e:dc:3a:23: 8f:70:15:ba:16:3f:55:03:79:26:06:b7:17:dc:e0:9c:b6:5d: ed:df:b0:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1Md2/B+ZE8izbj9zFbVGstx54QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTEwMTkxODE3MTdaFw0yNTEwMjMwNDQ2MTdaMDMxMTAvBgNV BAMTKDREQ0U4NzU4QUMzNTZBQzZFRjUyMzc1MzZFNEYwRTZCQzU3OTI2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClBN+kJSmqXaQOiiURCcrVMnN wIBOVjnPrrYLa5Of/lhOSIs51youP3nN+PrLDrP4LPX5iUClIHyYFAWM4YYqHeWh 9QWeuhOKN2fov0NHs1bIOMHHkreDCqdgcx8fK9J91g/KPZlkcOw5Lcp8fKXR/OMf rpcmhe4s6qvVlsYjS3Pr9PDjtQCruK7TqCB2RE/EFpVGeAtbv2gY+c1B8wze5gy2 WR5ZdKSH6MPX6GAgKIjQBhkcucyy7jYwChwv3Fk7CshO9AYVI7AEKTt1IsRSpx9Y R8RwmXHl3vNErtCUiZFXvS+1IjCJeww8B52If9li18RELLroBdi531qqUEeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTc6HWKw1asbvUjdTbk8Oa8V5JmEwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbdQOLWHqQ7RHbUC/pTsglg3zhnQQAt9BOD ma/EzxoYOI+zIiNNjml/jmhTlwrBW7vGzhsBl80sHZwxSLHGtypZGCJjIAngzMEH CwlPwnsJcAn8/yogpup3vhrmXK4YwjVBCz0rYvZqQnsqiGrmGovdEGXyQp7XGBK6 LVfR/3TXZ8paCFmbb4pxe8V8sEhxsj+L6uhPo0UGjjbxpBA8cRdgItAq8Ed3nbla /Q0F1FcII4oPg1olXbQCashD9RN/TFcJWo4PhpSKhgIdSQ9V4lcgSNom2V1C79mp zRp3f3hZ6obWk9kAPtw6I49wFboWP1UDeSYGtxfc4Jy2Xe3fsCs= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:39 2025 by rpki-client