$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: s9LyVyDhTlk762s/8Gn0Rz7/Lqthbt7LoTzoI/j0noU= Subject key identifier: 1B:6B:C2:44:55:DD:38:1C:61:C4:E2:77:70:9C:9F:64:08:11:92:D5 Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 601901E0A64B5DCE2CF345B0F786E76C50AC2848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 03DB Signing time: Sun 19 Oct 2025 05:31:04 +0000 Manifest this update: Sun 19 Oct 2025 05:26:04 +0000 Manifest next update: Wed 22 Oct 2025 16:35:04 +0000 Files and hashes: 1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) 2: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) 3: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: AiKZyuDZpf2A1V5+068b/NoVoMiTqiuK51nKweJzkI0=) 4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:19:01:e0:a6:4b:5d:ce:2c:f3:45:b0:f7:86:e7:6c:50:ac:28:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Oct 19 05:26:04 2025 GMT Not After : Oct 22 16:35:04 2025 GMT Subject: CN=1B6BC24455DD381C61C4E277709C9F64081192D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:89:30:05:86:5a:03:07:a2:2e:c0:7d:e2:12: 97:5a:4c:d6:00:4f:fc:0a:5e:b3:1f:6c:61:0c:da: 26:66:7e:a7:0c:ca:02:ed:b3:b8:50:83:3a:0e:07: d6:9f:e4:89:5e:71:19:16:30:e7:87:f1:0c:eb:7d: ab:da:54:88:08:c6:65:97:dc:b9:5f:5d:fc:d1:36: 17:55:e4:39:10:6a:0a:89:7e:df:0e:b5:53:13:8f: 36:58:c6:e3:df:3d:a1:70:f1:ad:24:fe:95:a1:bf: b4:54:d9:1e:c3:f6:58:8d:da:89:0a:7d:39:96:40: 45:ef:d9:2d:a2:37:0b:4a:06:04:0e:2b:63:75:8e: ca:97:53:7a:4e:e5:1c:9f:7e:17:d7:52:97:79:bb: 77:c3:4a:c7:f3:6b:8d:e1:f8:55:dc:e9:4c:0d:07: f5:45:65:e7:ab:35:19:f3:eb:ec:06:0f:e2:69:37: 8c:4b:f6:dc:ac:2a:16:cd:bf:eb:7d:00:3c:91:b8: db:c1:63:e4:17:67:be:0e:dc:83:bd:fb:3c:7c:a2: e3:36:dc:6f:db:61:72:f4:a6:4f:a8:a8:21:02:5d: 34:b4:fc:d5:38:cb:cb:63:3c:33:47:17:c1:f4:c6: 33:5e:96:50:a5:a7:5a:25:14:11:f3:d3:5a:f4:a0: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6B:C2:44:55:DD:38:1C:61:C4:E2:77:70:9C:9F:64:08:11:92:D5 X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:95:54:bd:c3:a7:2b:be:79:2b:84:b9:e8:3c:73:8c:c2:b3: ab:60:72:3b:6e:62:5a:2d:92:e9:1b:47:db:20:22:1f:da:04: 14:08:1f:2a:42:c0:54:28:cf:f4:93:20:83:7c:1a:44:10:1c: 2a:ee:58:96:c7:ac:eb:17:41:30:8c:b5:ea:ea:c6:43:3d:91: da:8a:5b:ab:17:36:cb:e3:2b:95:18:a3:08:b5:ee:dd:ad:27: 48:db:d5:39:4a:bf:ef:fc:25:db:65:b6:65:76:31:5d:e7:66: 1c:21:08:71:8c:2f:55:33:c4:0b:da:14:d5:b4:05:4a:0a:b4: 9a:23:f3:19:cb:32:d6:7d:0a:c7:2e:e7:a8:1c:1c:33:03:5d: 0f:e6:b0:7c:a2:64:b2:2a:10:db:16:da:21:1d:29:f9:07:a9: 18:92:a6:92:24:18:c4:29:8c:bb:f2:50:22:a4:b6:a1:d6:4e: 13:fc:60:53:fd:24:72:dc:a3:29:72:b6:71:4b:18:e2:c4:c8: f3:c8:69:74:cb:86:46:ad:77:e4:d4:7d:67:1f:7f:7b:f3:bb: 2b:f3:03:47:71:33:39:3e:fb:7d:e4:61:69:d7:fd:31:5b:9c: 70:5b:d2:4d:b6:ad:c6:05:03:56:b7:a5:7c:33:34:5a:96:26: e4:ad:4c:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBkB4KZLXc4s80Ww94bnbFCsKEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTEwMTkwNTI2MDRaFw0yNTEwMjIxNjM1MDRaMDMxMTAvBgNV BAMTKDFCNkJDMjQ0NTVERDM4MUM2MUM0RTI3NzcwOUM5RjY0MDgxMTkyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmiTAFhloDB6IuwH3iEpdaTNYA T/wKXrMfbGEM2iZmfqcMygLts7hQgzoOB9af5IlecRkWMOeH8QzrfavaVIgIxmWX 3LlfXfzRNhdV5DkQagqJft8OtVMTjzZYxuPfPaFw8a0k/pWhv7RU2R7D9liN2okK fTmWQEXv2S2iNwtKBgQOK2N1jsqXU3pO5RyffhfXUpd5u3fDSsfza43h+FXc6UwN B/VFZeerNRnz6+wGD+JpN4xL9tysKhbNv+t9ADyRuNvBY+QXZ74O3IO9+zx8ouM2 3G/bYXL0pk+oqCECXTS0/NU4y8tjPDNHF8H0xjNellClp1olFBHz01r0oKF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2vCRFXdOBxhxOJ3cJyfZAgRktUwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyVVL3Dpyu+eSuEueg8c4zCs6tgcjtuYlot kukbR9sgIh/aBBQIHypCwFQoz/STIIN8GkQQHCruWJbHrOsXQTCMterqxkM9kdqK W6sXNsvjK5UYowi17t2tJ0jb1TlKv+/8JdtltmV2MV3nZhwhCHGML1UzxAvaFNW0 BUoKtJoj8xnLMtZ9Cscu56gcHDMDXQ/msHyiZLIqENsW2iEdKfkHqRiSppIkGMQp jLvyUCKktqHWThP8YFP9JHLcoylytnFLGOLEyPPIaXTLhkatd+TUfWcff3vzuyvz A0dxMzk++33kYWnX/TFbnHBb0k22rcYFA1a3pXwzNFqWJuStTCI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:15:50 2025 by rpki-client