$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: oMGtAvXw/X1i5E12ftoT+x78Cqgc5KogKNdBFURy+wU= Subject key identifier: 34:8E:0F:11:88:DF:C6:CE:48:E3:06:26:70:64:E3:DE:07:15:94:FE Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 63EF8DEE33E95E79AB8D8EA41D823CFACD7CBD05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 04B9 Signing time: Sat 23 Aug 2025 07:40:52 +0000 Manifest this update: Sat 23 Aug 2025 07:35:52 +0000 Manifest next update: Tue 26 Aug 2025 13:23:52 +0000 Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: 1SxH3pkN+clyxMW3h231wFZBRp02i29h271zfDGY0QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ef:8d:ee:33:e9:5e:79:ab:8d:8e:a4:1d:82:3c:fa:cd:7c:bd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: Aug 23 07:35:52 2025 GMT Not After : Aug 26 13:23:52 2025 GMT Subject: CN=348E0F1188DFC6CE48E306267064E3DE071594FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:7a:e3:9b:68:58:a3:1a:c8:11:7f:be:58: 4d:56:91:a9:1c:af:dc:00:94:10:bc:47:39:77:87: 7e:47:d3:c9:3a:b5:a6:6a:1f:31:97:8b:f5:6f:75: b1:a2:a5:60:52:f3:9c:b6:46:d1:b5:0a:a3:7b:1a: fa:12:9e:93:e7:fe:a2:d2:db:63:fc:bc:6c:41:3a: 78:9c:74:3a:76:24:5e:2f:52:f4:41:59:58:4c:1e: 1f:9e:3c:bf:ec:a8:cb:14:d0:c1:6a:57:50:aa:09: 06:c1:51:8e:c0:10:d4:11:95:4f:54:d1:1d:b9:91: 7c:5b:aa:21:84:51:89:5c:fe:2d:b4:93:76:ab:02: 16:32:94:d3:de:6c:19:c8:2f:88:98:7b:d0:2a:f7: 24:12:9a:68:b5:28:c6:86:90:98:8c:21:98:b8:4e: 9f:04:81:e8:37:f5:ad:2b:08:68:a4:9c:43:66:50: b3:ef:4c:85:0a:41:93:6e:c8:47:85:90:63:60:eb: 68:de:90:21:f9:1f:4b:ab:89:63:25:1b:2c:a0:06: 4b:ea:8c:d8:51:67:b6:41:cf:f1:8f:b5:35:a7:29: d6:d1:74:d4:f4:31:35:e8:98:a4:14:0a:b2:52:60: ae:56:11:3d:54:b5:79:87:91:56:03:b3:64:14:64: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8E:0F:11:88:DF:C6:CE:48:E3:06:26:70:64:E3:DE:07:15:94:FE X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ac:ea:51:ee:f2:9e:69:f5:02:59:ff:70:98:0d:af:55:28: 47:9f:b9:e7:a0:b6:7f:7d:23:2d:f2:47:aa:71:6a:b5:73:52: 81:e8:ca:d2:1c:2d:3c:12:04:33:73:ea:b1:7c:0d:21:00:b3: 56:9d:61:91:9e:93:c9:24:e0:c0:fa:2e:46:21:df:61:f8:d3: 92:7d:ad:5c:06:7d:28:2e:76:43:38:b1:c0:d2:31:ee:61:da: f5:d8:b4:c1:55:f0:2c:b2:97:d8:79:d3:52:7d:c5:5e:8c:b5: 59:8e:ca:70:86:03:b6:38:cf:b4:3d:52:ab:79:e6:7f:6f:c2: 7d:52:8f:59:11:0f:5f:6d:72:30:f7:94:4e:ef:15:40:16:00: b3:0e:40:f8:78:d0:05:16:22:df:e0:07:79:dc:c0:43:5a:d9: 36:04:19:b0:0e:46:35:18:60:95:e4:92:bd:1d:f9:c3:69:c5: 6c:59:2d:18:ed:44:7d:ad:5a:a2:1b:3e:04:0e:76:9e:a6:83: 57:8f:ef:eb:3a:71:40:7c:b8:ec:1f:91:a9:27:2f:57:94:7f: 16:03:b6:6b:a8:77:15:06:d9:5e:1a:62:5f:cc:d7:b4:7d:45: 88:82:b4:c1:93:9c:77:83:25:2a:a5:db:f4:bd:87:dc:05:50: c0:82:c7:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY++N7jPpXnmrjY6kHYI8+s18vQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNTA4MjMwNzM1NTJaFw0yNTA4MjYxMzIzNTJaMDMxMTAvBgNV BAMTKDM0OEUwRjExODhERkM2Q0U0OEUzMDYyNjcwNjRFM0RFMDcxNTk0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4nrjm2hYoxrIEX++WE1Wkakc r9wAlBC8Rzl3h35H08k6taZqHzGXi/VvdbGipWBS85y2RtG1CqN7GvoSnpPn/qLS 22P8vGxBOnicdDp2JF4vUvRBWVhMHh+ePL/sqMsU0MFqV1CqCQbBUY7AENQRlU9U 0R25kXxbqiGEUYlc/i20k3arAhYylNPebBnIL4iYe9Aq9yQSmmi1KMaGkJiMIZi4 Tp8Egeg39a0rCGiknENmULPvTIUKQZNuyEeFkGNg62jekCH5H0uriWMlGyygBkvq jNhRZ7ZBz/GPtTWnKdbRdNT0MTXomKQUCrJSYK5WET1UtXmHkVYDs2QUZLYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNI4PEYjfxs5I4wYmcGTj3gcVlP4wHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2s6lHu8p5p9QJZ/3CYDa9VKEefueegtn99 Iy3yR6pxarVzUoHoytIcLTwSBDNz6rF8DSEAs1adYZGek8kk4MD6LkYh32H405J9 rVwGfSgudkM4scDSMe5h2vXYtMFV8Cyyl9h501J9xV6MtVmOynCGA7Y4z7Q9Uqt5 5n9vwn1Sj1kRD19tcjD3lE7vFUAWALMOQPh40AUWIt/gB3ncwENa2TYEGbAORjUY YJXkkr0d+cNpxWxZLRjtRH2tWqIbPgQOdp6mg1eP7+s6cUB8uOwfkaknL1eUfxYD tmuodxUG2V4aYl/M17R9RYiCtMGTnHeDJSql2/S9h9wFUMCCx34= -----END CERTIFICATE-----Generated at Sat Aug 23 11:56:42 2025 by rpki-client