$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: v5RryRj4ZZDH2xeXEjLr0UG1bdLItO+UeW20YFuir2k= Subject key identifier: 2C:48:86:45:24:B7:A9:E6:40:E3:E0:EB:BE:5C:2E:4C:FA:A7:15:DA Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 4B9622DDA6054C40CEA3F5339C8E29C574A65E65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 0487 Signing time: Sat 03 May 2025 16:50:50 +0000 Manifest this update: Sat 03 May 2025 16:45:50 +0000 Manifest next update: Wed 07 May 2025 03:01:50 +0000 Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: 39WgStNjcujok3gJcxf3Lmxu/HgE8KAxHE/RO9qQgxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 03:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:96:22:dd:a6:05:4c:40:ce:a3:f5:33:9c:8e:29:c5:74:a6:5e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: May 3 16:45:50 2025 GMT Not After : May 7 03:01:50 2025 GMT Subject: CN=2C48864524B7A9E640E3E0EBBE5C2E4CFAA715DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:e0:da:45:cf:0e:95:e4:b9:ee:7e:bd:3b: c4:1c:39:45:43:ed:b1:91:3f:35:1e:0f:0f:ed:62: 08:e6:22:f6:7b:40:f8:30:58:16:90:68:b7:f1:96: 18:49:3b:4d:f4:48:28:83:5c:e2:75:6b:7a:f1:18: 94:bd:4b:31:66:20:77:49:31:76:a7:57:ca:a9:a1: 50:7a:43:1e:bd:27:cd:e5:dd:31:15:bb:25:88:06: f1:8c:d6:5b:1d:ba:25:93:0b:1e:78:94:7f:4f:71: 42:b5:74:ac:67:ce:b7:90:0a:19:a9:78:bb:11:c4: 0f:7a:87:83:ca:dd:33:bc:1d:02:a1:2b:88:04:64: 71:27:cd:df:d5:b4:17:85:3a:ec:1a:0b:a1:bc:72: d4:3c:9c:b9:b7:56:62:a5:52:58:e5:23:7f:5e:79: a5:02:c3:24:24:fc:7a:cc:dc:af:c4:5a:c9:ad:fe: e5:51:b1:2c:f1:3d:3a:45:cc:6d:47:7c:cd:8b:24: 6d:47:c3:a6:fa:d9:a5:65:f6:c4:7e:7d:36:e9:a0: 8c:ef:84:f0:00:e4:8c:da:b2:e8:b1:b1:ca:0e:56: 88:f3:da:8f:b0:ae:0d:8c:a0:ba:1f:83:04:ba:ac: d8:dc:2f:01:55:15:02:7f:14:69:5b:5d:98:b8:43: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:48:86:45:24:B7:A9:E6:40:E3:E0:EB:BE:5C:2E:4C:FA:A7:15:DA X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3e:22:a6:ce:10:9d:3c:a2:ab:c2:a7:c2:1a:f0:41:96:9b: 24:1a:1d:89:39:58:32:af:b2:49:b5:6d:53:67:f3:14:2e:03: 17:b0:e0:e8:ae:9d:7a:ef:71:ff:2a:18:48:27:82:44:69:ed: 91:1e:ee:7c:f2:23:7b:15:81:23:de:0d:2f:99:ce:4b:ef:74: db:ac:ce:79:a6:30:76:36:8a:3d:b0:35:6a:f4:0c:e4:d0:5d: 02:ce:1a:2b:fa:22:1d:5f:7e:92:3e:62:a9:d8:c2:fd:fc:d3: 01:42:3f:67:db:1b:63:fd:85:13:41:d2:35:53:60:09:95:44: 19:3c:b6:1c:6b:c2:d2:58:96:31:89:c9:a7:f8:ee:47:46:45: 58:9c:67:e2:bb:b1:de:23:0d:c3:1f:4c:7a:d5:8d:d3:28:0b: 26:3e:86:0a:78:e9:c5:9f:85:a8:9f:cd:c6:ca:40:05:18:65: 0b:f9:68:f5:ef:ae:c3:78:77:28:21:79:99:6b:46:ec:ce:3f: 05:a8:30:4a:5f:9b:94:cb:99:64:e9:a4:80:ff:73:af:17:7a: ec:c1:89:14:bc:23:c3:68:a5:96:83:66:1f:09:6f:aa:df:49: 71:e4:51:6b:92:e8:f1:6d:fb:c4:1a:4e:80:0b:6e:ed:d8:ce: 4b:85:8e:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5Yi3aYFTEDOo/UznI4pxXSmXmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNTA1MDMxNjQ1NTBaFw0yNTA1MDcwMzAxNTBaMDMxMTAvBgNV BAMTKDJDNDg4NjQ1MjRCN0E5RTY0MEUzRTBFQkJFNUMyRTRDRkFBNzE1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0j+DaRc8OleS57n69O8QcOUVD 7bGRPzUeDw/tYgjmIvZ7QPgwWBaQaLfxlhhJO030SCiDXOJ1a3rxGJS9SzFmIHdJ MXanV8qpoVB6Qx69J83l3TEVuyWIBvGM1lsduiWTCx54lH9PcUK1dKxnzreQChmp eLsRxA96h4PK3TO8HQKhK4gEZHEnzd/VtBeFOuwaC6G8ctQ8nLm3VmKlUljlI39e eaUCwyQk/HrM3K/EWsmt/uVRsSzxPTpFzG1HfM2LJG1Hw6b62aVl9sR+fTbpoIzv hPAA5IzasuixscoOVojz2o+wrg2MoLofgwS6rNjcLwFVFQJ/FGlbXZi4Q4VvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULEiGRSS3qeZA4+DrvlwuTPqnFdowHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo+IqbOEJ08oqvCp8Ia8EGWmyQaHYk5WDKv skm1bVNn8xQuAxew4OiunXrvcf8qGEgngkRp7ZEe7nzyI3sVgSPeDS+ZzkvvdNus znmmMHY2ij2wNWr0DOTQXQLOGiv6Ih1ffpI+YqnYwv380wFCP2fbG2P9hRNB0jVT YAmVRBk8thxrwtJYljGJyaf47kdGRVicZ+K7sd4jDcMfTHrVjdMoCyY+hgp46cWf haifzcbKQAUYZQv5aPXvrsN4dygheZlrRuzOPwWoMEpfm5TLmWTppID/c68XeuzB iRS8I8NopZaDZh8Jb6rfSXHkUWuS6PFt+8QaToALbu3YzkuFjpg= -----END CERTIFICATE-----Generated at Tue May 6 06:41:14 2025 by rpki-client