$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: CbwqKKQcg2VKy1Ge4IfFobL1HKyBvB3CtPlUiDPccLI= Subject key identifier: 7A:47:AC:6B:FE:99:0E:00:14:FC:BA:82:CD:E3:EB:76:AC:06:B1:C7 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 7194154200F0B7B23753DFE6364777268D6AD72D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 012C Signing time: Sat 10 May 2025 10:32:15 +0000 Manifest this update: Sat 10 May 2025 10:27:15 +0000 Manifest next update: Tue 13 May 2025 13:33:15 +0000 Files and hashes: 1: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: 6pPrC5uILnQZk99327IMcU5bLuDeX+uzLa9rgvmh8yE=) 2: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: 7n9fLO69HtVTeGebJ4IwbAt3Dih0rBk5I+DqyVH3Pvc=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: ez2LC1r6bTj24Wy82rHkZPj1l/qpP3UX6fekdhBojt4=) 4: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: ZAYr5wm6M1zzmW0l6EsgawSZJfTDiZWgdh/sXE3rAP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:94:15:42:00:f0:b7:b2:37:53:df:e6:36:47:77:26:8d:6a:d7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: May 10 10:27:15 2025 GMT Not After : May 13 13:33:15 2025 GMT Subject: CN=7A47AC6BFE990E0014FCBA82CDE3EB76AC06B1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:b0:74:1c:de:ac:ed:3b:97:63:59:bd:4b: e6:8c:5f:1f:b9:b9:eb:0d:ec:f2:8a:7f:8c:c7:1f: 90:dd:98:86:79:5b:43:a6:0d:36:bb:e1:4c:0f:5c: 7f:8c:d7:8e:32:7b:e5:4a:22:9a:dd:a5:3b:8a:30: a7:69:d4:5c:44:c1:26:c7:36:37:54:34:9a:34:d2: 57:f4:cc:47:2b:7f:85:8f:72:f9:e9:d6:73:db:59: 72:48:92:88:7f:7a:3c:6a:4e:ef:41:89:88:5a:82: 48:65:8a:30:56:6f:ce:bc:0a:59:67:45:c8:76:55: 1b:b6:1f:07:e8:f8:80:5e:32:18:1c:e6:cc:2b:43: e5:2c:48:5e:65:49:ad:a4:39:65:5a:e8:4f:59:62: 2c:24:b7:7d:73:72:fe:10:eb:dc:ed:3a:59:b8:11: b9:22:c5:60:ee:e5:62:90:44:dc:31:44:a6:14:cf: 41:49:71:b9:cf:cd:90:21:ed:38:11:8d:41:44:eb: 15:0c:e9:93:c4:fe:a5:60:3f:d2:15:27:ec:af:59: bb:94:cb:43:69:95:85:02:f7:af:7b:60:84:51:fb: 65:18:e5:48:58:38:22:2f:db:da:c2:5d:60:2e:ea: 70:a4:01:3f:44:eb:f2:c2:eb:51:10:4a:4f:5d:94: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:47:AC:6B:FE:99:0E:00:14:FC:BA:82:CD:E3:EB:76:AC:06:B1:C7 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6e:07:75:58:94:49:54:88:de:a9:09:6c:2b:e3:77:6f:6b: 76:0b:a2:55:56:3e:14:47:b1:b8:b4:e5:8d:b4:e2:b0:fa:47: db:b8:b4:4d:0a:4c:c8:db:49:e3:80:ed:0b:ea:47:16:2b:aa: ad:b1:7e:db:91:f6:74:6a:2a:d3:21:58:6d:fd:79:d8:58:a8: bc:0d:49:6d:e1:1e:26:95:24:25:9c:7a:33:ed:65:90:f4:4c: bb:7f:c2:f5:03:89:18:37:0e:30:54:ef:c0:6f:4c:78:41:58: 73:70:5f:23:a2:bf:25:16:37:15:66:72:f0:09:6f:b0:fb:28: 08:32:d6:1a:f3:d1:e9:0e:45:26:bf:0f:20:1e:37:63:a0:9f: b3:98:4d:51:15:ea:c9:7f:0b:b1:6c:82:fc:d9:35:48:8e:91: ca:f3:76:c3:98:10:75:19:0c:c1:99:a4:a0:30:3a:00:b2:61: fe:5a:a4:7d:11:f4:e9:6b:dd:63:00:c3:24:c0:03:45:6d:6b: 09:d3:c9:4e:5b:49:bb:5c:87:8f:0e:9f:43:d7:a7:4d:35:46: f9:1f:f1:8e:1b:ea:8b:09:9e:ac:6d:e2:1c:2d:c4:10:ef:f1: ff:a2:45:5b:bb:22:fe:40:16:5d:17:47:14:8e:8b:11:99:0a: ff:b3:f7:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZQVQgDwt7I3U9/mNkd3Jo1q1y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTA1MTAxMDI3MTVaFw0yNTA1MTMxMzMzMTVaMDMxMTAvBgNV BAMTKDdBNDdBQzZCRkU5OTBFMDAxNEZDQkE4MkNERTNFQjc2QUMwNkIxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtC7B0HN6s7TuXY1m9S+aMXx+5 uesN7PKKf4zHH5DdmIZ5W0OmDTa74UwPXH+M144ye+VKIprdpTuKMKdp1FxEwSbH NjdUNJo00lf0zEcrf4WPcvnp1nPbWXJIkoh/ejxqTu9BiYhagkhlijBWb868Clln Rch2VRu2Hwfo+IBeMhgc5swrQ+UsSF5lSa2kOWVa6E9ZYiwkt31zcv4Q69ztOlm4 EbkixWDu5WKQRNwxRKYUz0FJcbnPzZAh7TgRjUFE6xUM6ZPE/qVgP9IVJ+yvWbuU y0NplYUC9697YIRR+2UY5UhYOCIv29rCXWAu6nCkAT9E6/LC61EQSk9dlL2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUekesa/6ZDgAU/LqCzePrdqwGsccwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhuB3VYlElUiN6pCWwr43dva3YLolVWPhRH sbi05Y204rD6R9u4tE0KTMjbSeOA7QvqRxYrqq2xftuR9nRqKtMhWG39edhYqLwN SW3hHiaVJCWcejPtZZD0TLt/wvUDiRg3DjBU78BvTHhBWHNwXyOivyUWNxVmcvAJ b7D7KAgy1hrz0ekORSa/DyAeN2Ogn7OYTVEV6sl/C7FsgvzZNUiOkcrzdsOYEHUZ DMGZpKAwOgCyYf5apH0R9Olr3WMAwyTAA0VtawnTyU5bSbtch48On0PXp001Rvkf 8Y4b6osJnqxt4hwtxBDv8f+iRVu7Iv5AFl0XRxSOixGZCv+z94k= -----END CERTIFICATE-----Generated at Sat May 10 18:54:12 2025 by rpki-client