$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: pxl0ZBwQMkigm7BePnCY8pNXOSfJR/1+BZ1D7HcAdE0= Subject key identifier: A7:A1:A5:96:A7:72:46:62:69:83:AB:93:E0:60:DE:E5:A5:6F:9A:04 Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 40941164AD52BF7EE5EE5AB714C2CAC882CC8EE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 04A0 Signing time: Sat 28 Jun 2025 15:00:51 +0000 Manifest this update: Sat 28 Jun 2025 14:55:51 +0000 Manifest next update: Tue 01 Jul 2025 16:07:51 +0000 Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: RvJ0tO8OxajfyEfkJ6MrGnnb1HTxv6OKV2FB6rfZ0yU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:94:11:64:ad:52:bf:7e:e5:ee:5a:b7:14:c2:ca:c8:82:cc:8e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: Jun 28 14:55:51 2025 GMT Not After : Jul 1 16:07:51 2025 GMT Subject: CN=A7A1A596A77246626983AB93E060DEE5A56F9A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:44:b2:ff:ca:02:df:df:7c:c3:42:9a:27:ed: 27:0b:f3:14:6b:57:4e:73:3c:8c:96:f8:31:06:9a: f3:a5:3d:c0:b8:b3:27:ba:3d:f4:81:11:52:5d:4e: 13:51:70:27:22:9e:b5:51:c6:aa:db:88:cc:bd:93: a4:47:4a:a5:20:a3:54:b9:87:1c:85:a4:87:2c:a8: d4:4a:2c:20:dd:e7:dd:10:38:89:2e:37:ae:0c:20: 94:ec:46:77:cc:f6:a7:cc:bb:d1:56:7e:65:dc:8c: c7:41:f3:e2:00:a3:24:f2:00:7c:6e:49:29:6e:c0: 07:e2:28:5c:8d:88:52:14:ec:2f:db:f9:c9:b4:e2: 50:c3:5a:c9:77:04:ab:d5:5b:40:b7:32:54:1a:6a: 7f:f6:61:67:40:f6:95:e5:91:51:2b:b7:3a:90:53: 67:5a:cc:fd:54:2a:7f:67:43:77:5f:19:57:23:bb: 04:86:8e:9b:c7:1e:ae:71:1e:aa:ac:9b:d6:02:11: 0b:4e:be:f7:e1:36:82:d6:54:27:45:b9:74:41:5d: 3a:a6:34:36:e9:88:7f:9b:70:06:69:72:a3:6d:1c: c8:67:0a:c4:df:8f:f2:28:2f:1b:35:bb:ff:b7:48: 6c:15:ac:5a:69:67:6a:72:8a:2f:2a:18:8f:8b:b5: f2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A1:A5:96:A7:72:46:62:69:83:AB:93:E0:60:DE:E5:A5:6F:9A:04 X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f0:3a:c9:4e:5d:40:84:c2:44:cf:14:70:82:48:7c:05:f4: c8:3f:f1:04:88:0c:82:a1:cb:93:11:c1:58:71:c1:28:fa:d5: 4d:3b:5a:8b:18:a1:55:67:c8:11:d0:10:71:2a:36:89:44:74: f5:a9:8f:92:64:21:cd:ba:32:02:e9:50:fd:07:b5:af:74:8b: e0:5e:f1:de:49:7b:80:17:7e:eb:1b:94:2e:b9:7b:61:e9:22: c6:11:02:f3:13:53:18:cf:0a:4e:3a:19:1e:d4:45:41:e9:6d: 83:fa:c9:90:2b:ef:5a:cc:7d:7e:4a:bd:85:06:7d:26:b2:81: bb:97:0c:f1:80:c3:ae:45:4e:d0:e7:48:c9:a0:55:9e:6f:d9: 2d:76:05:18:d1:f9:83:dc:93:41:c6:1e:00:81:3d:b7:e1:98: b4:78:c6:09:87:5b:a5:39:2c:a4:4f:a8:c7:78:f5:be:ad:01: a1:40:49:ca:3c:5f:c4:03:d7:48:2a:8d:7b:16:80:24:3e:2a: 84:b6:29:1c:18:78:1d:17:ae:96:c6:30:1f:fc:df:6d:17:d4: d4:b7:f3:05:a6:81:73:af:8c:16:4d:96:b4:61:2a:a4:22:f1: 35:19:f6:46:1c:b6:06:01:6b:2e:04:2c:db:d5:3a:bf:eb:52: d7:d7:bf:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJQRZK1Sv37l7lq3FMLKyILMjucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNTA2MjgxNDU1NTFaFw0yNTA3MDExNjA3NTFaMDMxMTAvBgNV BAMTKEE3QTFBNTk2QTc3MjQ2NjI2OTgzQUI5M0UwNjBERUU1QTU2RjlBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgRLL/ygLf33zDQpon7ScL8xRr V05zPIyW+DEGmvOlPcC4sye6PfSBEVJdThNRcCcinrVRxqrbiMy9k6RHSqUgo1S5 hxyFpIcsqNRKLCDd590QOIkuN64MIJTsRnfM9qfMu9FWfmXcjMdB8+IAoyTyAHxu SSluwAfiKFyNiFIU7C/b+cm04lDDWsl3BKvVW0C3MlQaan/2YWdA9pXlkVErtzqQ U2dazP1UKn9nQ3dfGVcjuwSGjpvHHq5xHqqsm9YCEQtOvvfhNoLWVCdFuXRBXTqm NDbpiH+bcAZpcqNtHMhnCsTfj/IoLxs1u/+3SGwVrFppZ2pyii8qGI+LtfLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6GllqdyRmJpg6uT4GDe5aVvmgQwHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDwOslOXUCEwkTPFHCCSHwF9Mg/8QSIDIKh y5MRwVhxwSj61U07WosYoVVnyBHQEHEqNolEdPWpj5JkIc26MgLpUP0Hta90i+Be 8d5Je4AXfusblC65e2HpIsYRAvMTUxjPCk46GR7URUHpbYP6yZAr71rMfX5KvYUG fSaygbuXDPGAw65FTtDnSMmgVZ5v2S12BRjR+YPck0HGHgCBPbfhmLR4xgmHW6U5 LKRPqMd49b6tAaFASco8X8QD10gqjXsWgCQ+KoS2KRwYeB0XrpbGMB/8320X1NS3 8wWmgXOvjBZNlrRhKqQi8TUZ9kYctgYBay4ELNvVOr/rUtfXv4U= -----END CERTIFICATE-----Generated at Sun Jun 29 18:07:52 2025 by rpki-client