$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: srYQcxkdNOstO3IHJBvoSJkWInkajGrCanZ1W+h8mmE= Subject key identifier: 8F:0E:FB:72:60:51:A7:4B:9A:3D:7E:22:FC:07:CC:52:90:FE:A7:89 Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 4AC7C77239D3F477360661915C202ACCAAD6F10C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 03AB Signing time: Mon 30 Jun 2025 23:41:02 +0000 Manifest this update: Mon 30 Jun 2025 23:36:02 +0000 Manifest next update: Fri 04 Jul 2025 02:16:02 +0000 Files and hashes: 1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) 2: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: 2Y+poc9S8yHr0WhmOTb6MYZF9kWBJ70RR+gQ/fgnGds=) 3: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 4: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:c7:72:39:d3:f4:77:36:06:61:91:5c:20:2a:cc:aa:d6:f1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Jun 30 23:36:02 2025 GMT Not After : Jul 4 02:16:02 2025 GMT Subject: CN=8F0EFB726051A74B9A3D7E22FC07CC5290FEA789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:8c:42:bf:db:3b:86:bf:d1:d8:76:a2:2a: b7:48:f3:14:cc:e2:ef:a9:87:87:01:25:01:df:7e: 3f:f8:43:9b:c1:b9:6b:33:2f:5c:38:4d:f1:3c:23: da:15:86:a6:7f:eb:23:78:93:8a:d9:8f:65:f3:38: 2b:e0:3f:54:17:84:03:7a:f0:cb:4a:33:9a:d8:9a: cc:2e:f1:a5:bf:e9:33:2e:4e:da:0d:e5:ca:b9:10: a8:44:a2:4f:cb:ed:46:ca:c6:48:c1:0c:86:e7:3a: 2b:24:f8:a4:62:1a:45:0e:36:10:2a:1e:23:b9:ec: cf:fa:98:4a:e3:b7:0e:61:31:df:9f:24:bf:c1:88: ac:1e:59:18:e5:a0:1d:dc:6d:2c:b2:10:2a:88:da: 9e:00:94:7f:61:fe:3e:89:e9:95:fd:6f:05:79:b1: ab:0d:0e:e8:03:54:bc:7c:fc:0f:e4:1a:dc:3f:18: da:7b:9a:0b:52:9f:3a:63:d0:da:bd:70:40:40:d7: be:8f:ad:4a:6d:85:2c:c5:0c:b8:a6:26:e8:a4:45: b4:9b:8d:6d:51:06:48:50:9b:2c:fa:9b:43:72:e4: 20:13:49:d8:1e:b5:2f:d9:f3:f9:e1:ba:fd:87:f1: e5:fb:83:97:e1:a2:b2:ad:06:59:f3:ec:ee:c4:50: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0E:FB:72:60:51:A7:4B:9A:3D:7E:22:FC:07:CC:52:90:FE:A7:89 X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a4:d2:c6:37:54:0a:87:5c:13:89:15:f1:2d:e7:0f:c0:f1: 32:dc:be:7c:98:58:21:3a:18:2e:01:ef:8b:95:60:fa:17:ea: d7:17:79:de:79:d5:1a:aa:76:73:57:c6:be:e6:e1:31:ec:c6: 6d:c2:3b:c1:44:d1:23:01:a7:00:89:42:2d:9e:ce:34:d0:d6: 6f:8e:ff:c6:a5:1b:a6:87:b6:4e:c5:37:0f:ce:36:53:91:46: 7f:c9:bb:57:ea:5d:2b:df:99:dd:30:f8:b8:c8:78:87:8f:1a: 4b:0e:ba:dd:a8:ab:4b:f6:f3:0a:58:b1:fc:0d:c4:50:af:83: 5f:b1:2d:4c:df:81:77:33:69:e9:3f:6e:c8:c2:1c:d6:8f:44: 29:05:54:9b:11:48:35:c7:2d:7d:87:b3:8b:86:a5:eb:93:b9: 00:b1:3a:a2:ea:64:da:55:15:88:7d:42:a5:9b:d8:34:80:ee: 75:dc:2d:c1:dc:6c:2d:2f:f9:ea:d8:87:da:46:39:7a:7e:74: ac:c7:69:9c:a5:90:f4:7e:c0:df:de:1a:5a:c1:97:02:c6:0e: c3:de:d8:46:45:fe:79:94:9f:c7:50:3a:0e:da:a9:0a:f6:0d: 73:1f:b4:3c:c5:9b:24:4a:09:3a:56:96:43:cf:e2:42:85:75: 28:ce:d8:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsfHcjnT9Hc2BmGRXCAqzKrW8QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTA2MzAyMzM2MDJaFw0yNTA3MDQwMjE2MDJaMDMxMTAvBgNV BAMTKDhGMEVGQjcyNjA1MUE3NEI5QTNEN0UyMkZDMDdDQzUyOTBGRUE3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjoxCv9s7hr/R2HaiKrdI8xTM 4u+ph4cBJQHffj/4Q5vBuWszL1w4TfE8I9oVhqZ/6yN4k4rZj2XzOCvgP1QXhAN6 8MtKM5rYmswu8aW/6TMuTtoN5cq5EKhEok/L7UbKxkjBDIbnOisk+KRiGkUONhAq HiO57M/6mErjtw5hMd+fJL/BiKweWRjloB3cbSyyECqI2p4AlH9h/j6J6ZX9bwV5 sasNDugDVLx8/A/kGtw/GNp7mgtSnzpj0Nq9cEBA176PrUpthSzFDLimJuikRbSb jW1RBkhQmyz6m0Ny5CATSdgetS/Z8/nhuv2H8eX7g5fhorKtBlnz7O7EUKDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjw77cmBRp0uaPX4i/AfMUpD+p4kwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCk0sY3VAqHXBOJFfEt5w/A8TLcvnyYWCE6 GC4B74uVYPoX6tcXed551RqqdnNXxr7m4THsxm3CO8FE0SMBpwCJQi2ezjTQ1m+O /8alG6aHtk7FNw/ONlORRn/Ju1fqXSvfmd0w+LjIeIePGksOut2oq0v28wpYsfwN xFCvg1+xLUzfgXczaek/bsjCHNaPRCkFVJsRSDXHLX2Hs4uGpeuTuQCxOqLqZNpV FYh9QqWb2DSA7nXcLcHcbC0v+erYh9pGOXp+dKzHaZylkPR+wN/eGlrBlwLGDsPe 2EZF/nmUn8dQOg7aqQr2DXMftDzFmyRKCTpWlkPP4kKFdSjO2I8= -----END CERTIFICATE-----Generated at Tue Jul 1 05:02:01 2025 by rpki-client