$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: 9ikne35c7KRzUkiEy0iGVWbeOkSLqcrfV9l1qtbvNn4= Subject key identifier: 1B:FA:D3:E9:A4:61:D1:95:2E:BE:AB:EA:D2:2B:36:4C:C8:67:BE:97 Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 16A3F62D4BC13B0E101F1298207E00E1CFEB1B76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 03C2 Signing time: Sat 23 Aug 2025 07:41:04 +0000 Manifest this update: Sat 23 Aug 2025 07:36:04 +0000 Manifest next update: Tue 26 Aug 2025 11:44:04 +0000 Files and hashes: 1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) 2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 3: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: c3oum6P9SkpeR8UzZ37HVMpwHkyVgurd7oU6OfbuQfU=) 4: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a3:f6:2d:4b:c1:3b:0e:10:1f:12:98:20:7e:00:e1:cf:eb:1b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Aug 23 07:36:04 2025 GMT Not After : Aug 26 11:44:04 2025 GMT Subject: CN=1BFAD3E9A461D1952EBEABEAD22B364CC867BE97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:f9:e6:cc:c7:20:a4:a1:f3:0b:02:60:02: 71:e4:89:a5:44:01:1b:8e:99:68:6e:25:2f:cc:3a: 3d:61:74:61:3c:3b:4e:55:e6:7a:10:ea:7a:11:b9: 8b:f8:a6:3e:7b:d2:84:36:6a:8b:f7:dc:82:a4:58: 88:48:95:a3:df:5d:f8:34:d9:8d:4b:30:e5:24:d2: 5f:97:22:f0:e6:a6:bc:dd:45:b9:2e:15:21:00:6d: 9f:a3:91:04:68:23:34:4a:b9:39:b2:79:c6:0d:e9: 6b:c2:a6:f1:b7:14:da:25:94:2f:84:10:47:e3:e7: d9:9d:2e:ac:e0:9f:16:b5:00:f7:1a:68:e9:3b:46: f3:f4:c8:c1:3a:00:c9:b9:ed:35:dd:5d:a9:db:b4: 9e:d5:82:8a:57:b0:b3:f6:87:16:de:c2:a3:0c:da: f7:8b:74:df:61:e2:be:9d:aa:56:6f:30:87:3d:9e: 46:f2:28:64:23:a6:3c:25:ce:0f:c4:46:fb:ee:46: 61:9a:fa:b7:53:32:48:d5:a0:0f:18:13:9c:c8:05: bc:c6:04:db:d9:4e:b5:ce:a9:13:74:a3:7d:26:b1: 8a:22:1e:ed:4b:1e:b0:9f:02:b9:71:09:1e:ca:4a: f1:c4:5d:ff:d5:15:c8:7d:01:47:db:f3:7c:c0:1c: ff:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FA:D3:E9:A4:61:D1:95:2E:BE:AB:EA:D2:2B:36:4C:C8:67:BE:97 X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e1:34:05:0c:08:fe:40:f1:cf:5f:c2:78:a3:15:de:e5:6c: ac:cd:60:bb:03:e2:f6:38:27:2b:fa:62:d6:99:65:38:ef:e1: 7f:69:f1:85:53:fd:e2:6b:59:3b:a6:da:9b:67:24:68:f0:ff: 62:df:48:94:28:b0:51:19:7b:63:c2:93:e9:4a:f8:28:64:ba: 54:62:dc:89:ed:53:bb:88:07:58:b0:11:22:d2:ee:58:14:93: c8:bd:2f:f8:f5:c1:c6:a8:b6:e8:e8:1a:a0:9a:3e:aa:14:7b: 88:a0:30:09:50:79:db:45:d3:53:5a:9f:35:5c:95:f2:17:38: 3c:5d:04:0d:83:73:8a:b0:14:1e:92:13:37:38:a7:75:f3:47: 45:54:35:16:d7:05:f5:e6:70:7a:7f:b4:a9:67:41:f2:24:e2: e5:b1:19:80:8f:f6:53:94:fd:a5:28:c1:a6:7b:8b:85:92:b4: 72:1c:98:15:cc:4e:12:00:4e:f6:72:2a:ae:34:54:ca:32:61: 06:ec:88:2b:23:72:80:1b:9f:fc:7b:82:08:71:02:5e:a7:00: ff:83:2e:ed:e0:b2:37:15:26:69:58:0d:1a:d5:a2:9a:33:af: 60:7e:5d:67:cb:51:33:2a:18:ed:40:9f:46:60:66:78:eb:01: be:e6:86:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqP2LUvBOw4QHxKYIH4A4c/rG3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTA4MjMwNzM2MDRaFw0yNTA4MjYxMTQ0MDRaMDMxMTAvBgNV BAMTKDFCRkFEM0U5QTQ2MUQxOTUyRUJFQUJFQUQyMkIzNjRDQzg2N0JFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb//nmzMcgpKHzCwJgAnHkiaVE ARuOmWhuJS/MOj1hdGE8O05V5noQ6noRuYv4pj570oQ2aov33IKkWIhIlaPfXfg0 2Y1LMOUk0l+XIvDmprzdRbkuFSEAbZ+jkQRoIzRKuTmyecYN6WvCpvG3FNollC+E EEfj59mdLqzgnxa1APcaaOk7RvP0yME6AMm57TXdXanbtJ7VgopXsLP2hxbewqMM 2veLdN9h4r6dqlZvMIc9nkbyKGQjpjwlzg/ERvvuRmGa+rdTMkjVoA8YE5zIBbzG BNvZTrXOqRN0o30msYoiHu1LHrCfArlxCR7KSvHEXf/VFch9AUfb83zAHP9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/rT6aRh0ZUuvqvq0is2TMhnvpcwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvhNAUMCP5A8c9fwnijFd7lbKzNYLsD4vY4 Jyv6YtaZZTjv4X9p8YVT/eJrWTum2ptnJGjw/2LfSJQosFEZe2PCk+lK+ChkulRi 3IntU7uIB1iwESLS7lgUk8i9L/j1wcaotujoGqCaPqoUe4igMAlQedtF01NanzVc lfIXODxdBA2Dc4qwFB6SEzc4p3XzR0VUNRbXBfXmcHp/tKlnQfIk4uWxGYCP9lOU /aUowaZ7i4WStHIcmBXMThIATvZyKq40VMoyYQbsiCsjcoAbn/x7gghxAl6nAP+D Lu3gsjcVJmlYDRrVopozr2B+XWfLUTMqGO1An0ZgZnjrAb7mhtE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:10:47 2025 by rpki-client