$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: tZgIzx/t2tq4stHc0BspHv+S6p+39gIOZPVFxaCoSXg= Subject key identifier: 29:FA:69:8F:D2:36:AB:D4:42:20:C8:A0:55:B3:18:8A:43:C3:32:D9 Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 34DA60D28AEF5432CCA22A83DCE1A966116943E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 04D3 Signing time: Mon 20 Oct 2025 06:40:51 +0000 Manifest this update: Mon 20 Oct 2025 06:35:51 +0000 Manifest next update: Thu 23 Oct 2025 16:37:51 +0000 Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: nF2uKAqi8QziRVo2g2I7t7cS0Sq+LP3C01JhAgtJS0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:da:60:d2:8a:ef:54:32:cc:a2:2a:83:dc:e1:a9:66:11:69:43:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: Oct 20 06:35:51 2025 GMT Not After : Oct 23 16:37:51 2025 GMT Subject: CN=29FA698FD236ABD44220C8A055B3188A43C332D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:1f:cc:49:fc:9a:9f:0a:2c:73:c4:5c:ce: 70:b0:f5:75:23:1a:38:c8:c8:c2:d0:bc:41:2a:14: 64:5f:46:7f:5f:64:7f:02:3c:a7:32:8c:f7:9b:e2: 9b:c0:ba:6a:05:2e:d0:3a:51:22:97:b0:65:e9:52: ef:b3:96:d5:79:ec:6f:a2:e4:98:5e:a3:9b:83:f9: 9e:f1:8b:e8:39:a9:70:a6:23:12:e8:7f:60:ee:f3: 95:fc:11:e3:05:d3:00:ab:d6:3c:e2:de:28:53:b4: 1d:80:45:c3:84:ec:d6:d6:11:3d:30:ab:bd:93:20: c3:b9:0a:ef:39:8f:4d:5c:05:c7:b5:fc:d3:1a:86: 41:79:5f:7c:de:e8:9f:fa:58:16:a3:18:24:24:cc: 0c:d1:e7:3d:76:8e:5e:07:46:f3:9c:77:13:c8:dc: 4d:50:92:ec:5d:4a:5f:7f:8c:ff:71:f9:e4:d3:46: 70:7e:55:2e:a8:fc:a7:e8:ad:ea:72:22:f5:38:0a: f7:f4:03:e5:7a:df:9a:1c:76:b9:93:78:ab:a9:b9: ef:84:71:87:ea:6a:0a:35:e1:24:40:8c:54:14:35: 78:99:6e:f3:cb:15:65:7b:07:db:02:9f:68:7f:e3: 07:c3:ad:80:d3:c2:49:2b:9d:a3:2f:1a:b7:00:17: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FA:69:8F:D2:36:AB:D4:42:20:C8:A0:55:B3:18:8A:43:C3:32:D9 X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c7:eb:8f:e4:a0:0d:52:b8:bf:ed:4c:e0:46:78:f1:70:44: 04:3c:2e:00:40:ce:ea:c2:96:50:c8:31:41:f9:fc:af:40:2e: 92:30:da:41:cb:6e:dc:2a:9f:f2:67:6c:34:ef:f2:12:e0:d1: 1c:bd:bb:d5:b3:7f:38:dd:88:15:09:98:b6:3a:f6:3f:2f:77: ce:fe:84:4b:d4:3a:fc:1c:0c:59:29:e2:83:58:f7:d7:a5:9d: 7d:9b:6a:58:e6:24:5f:73:6e:24:40:7f:7b:8c:27:d3:4f:4e: 9b:af:9b:8b:d7:d9:0f:11:2e:c0:08:65:ea:ef:02:41:0e:03: f7:3f:1f:40:92:d6:bf:81:e3:d9:dc:93:6b:88:a8:86:9b:4f: cd:c3:41:62:84:e0:9b:21:8b:c1:f8:b6:9c:66:c8:e1:66:06: d0:a4:a9:8d:2a:fb:2e:75:e4:96:c4:9e:fc:b8:c9:b0:14:a6: 31:5e:a5:8f:2a:07:cc:5d:38:0a:92:a7:ec:36:16:0b:73:5b: 32:74:44:48:50:ab:21:99:b2:43:40:11:79:d9:9d:6c:24:b7: f4:c0:cd:6f:35:02:fe:b3:f2:b6:b5:aa:d2:0f:5b:6c:c8:d5: 08:bb:2b:5c:cc:7f:25:68:af:a1:75:d3:b9:98:9f:b8:6d:d2: a9:09:6d:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNpg0orvVDLMoiqD3OGpZhFpQ+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNTEwMjAwNjM1NTFaFw0yNTEwMjMxNjM3NTFaMDMxMTAvBgNV BAMTKDI5RkE2OThGRDIzNkFCRDQ0MjIwQzhBMDU1QjMxODhBNDNDMzMyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+B/MSfyanwosc8RcznCw9XUj GjjIyMLQvEEqFGRfRn9fZH8CPKcyjPeb4pvAumoFLtA6USKXsGXpUu+zltV57G+i 5Jheo5uD+Z7xi+g5qXCmIxLof2Du85X8EeMF0wCr1jzi3ihTtB2ARcOE7NbWET0w q72TIMO5Cu85j01cBce1/NMahkF5X3ze6J/6WBajGCQkzAzR5z12jl4HRvOcdxPI 3E1QkuxdSl9/jP9x+eTTRnB+VS6o/KforepyIvU4Cvf0A+V635ocdrmTeKupue+E cYfqago14SRAjFQUNXiZbvPLFWV7B9sCn2h/4wfDrYDTwkkrnaMvGrcAF9YnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfppj9I2q9RCIMigVbMYikPDMtkwHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfH64/koA1SuL/tTOBGePFwRAQ8LgBAzurC llDIMUH5/K9ALpIw2kHLbtwqn/JnbDTv8hLg0Ry9u9WzfzjdiBUJmLY69j8vd87+ hEvUOvwcDFkp4oNY99elnX2baljmJF9zbiRAf3uMJ9NPTpuvm4vX2Q8RLsAIZerv AkEOA/c/H0CS1r+B49nck2uIqIabT83DQWKE4Jshi8H4tpxmyOFmBtCkqY0q+y51 5JbEnvy4ybAUpjFepY8qB8xdOAqSp+w2FgtzWzJ0REhQqyGZskNAEXnZnWwkt/TA zW81Av6z8ra1qtIPW2zI1Qi7K1zMfyVor6F107mYn7ht0qkJbRU= -----END CERTIFICATE-----Generated at Tue Oct 21 00:36:10 2025 by rpki-client