$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: ARb32gpAc377CvDvS/ZA5mAjhnz/2AbmI2Gij+SVTzw= Subject key identifier: F2:A2:6F:61:23:9C:BE:C7:44:DC:2B:2F:A3:FA:EF:C4:04:A6:EE:FA Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 3D0A9560B76536FA5604075B5E5A5FFDA38BB98B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 0518 Signing time: Tue 24 Mar 2026 10:41:00 +0000 Manifest this update: Tue 24 Mar 2026 10:36:00 +0000 Manifest next update: Fri 27 Mar 2026 21:45:00 +0000 Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: jVDINBPsq4L/XxLxScHLDtMNrclVnoOq7w/tJ6cyTBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0a:95:60:b7:65:36:fa:56:04:07:5b:5e:5a:5f:fd:a3:8b:b9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: Mar 24 10:36:00 2026 GMT Not After : Mar 27 21:45:00 2026 GMT Subject: CN=F2A26F61239CBEC744DC2B2FA3FAEFC404A6EEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:53:61:2f:94:9f:f3:b9:c4:ce:be:fe:cc:30: b4:dd:c6:03:96:1a:dd:ac:cf:ba:9c:77:1e:6c:a8: 3c:75:92:c6:10:76:53:a8:3c:1a:d3:c0:d5:0d:be: 17:d2:9d:6f:c1:e8:2a:82:76:a4:d5:9e:ba:73:2e: 59:42:4c:e1:75:d4:9f:58:53:d5:9b:24:d1:35:16: 0d:fb:45:83:4f:a4:cc:74:ed:7f:b2:ad:b3:2a:ae: 6b:c1:c5:78:45:5c:6d:de:42:b2:52:91:6d:e3:94: a9:09:8c:a2:cf:85:9a:1e:6a:83:b2:43:9f:d9:c2: bf:71:9c:f8:da:8e:ec:a1:1f:4e:ae:ac:5f:42:2d: 91:1c:a1:b3:9e:ef:95:a7:6d:d7:54:5d:4e:28:70: c6:73:4c:11:d1:ca:4c:1c:12:e7:43:23:02:1d:f3: 52:0d:3c:de:3d:21:37:2f:3b:bf:3c:2f:e4:20:0e: 8b:87:6c:b0:d5:8e:80:30:ce:c7:11:c1:a7:6a:fe: a6:26:25:c6:0b:a7:c1:f2:7a:af:4a:f6:95:dd:5d: b0:ed:c4:66:dd:be:9e:4c:85:57:0d:90:5f:6c:d4: ca:5d:97:08:f8:4d:dc:2a:2e:87:ba:39:dc:64:db: ac:06:5e:03:13:85:f9:68:eb:6e:f9:c4:c1:94:8e: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:6F:61:23:9C:BE:C7:44:DC:2B:2F:A3:FA:EF:C4:04:A6:EE:FA X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1e:a4:22:01:4d:28:e9:08:52:a1:09:12:78:b9:ba:25:c8: 96:d1:0e:0c:27:10:fb:08:e1:05:4d:10:97:96:0b:86:5d:fa: 4f:53:b2:96:5d:81:34:64:a2:a9:a1:ef:5c:b6:53:df:ea:34: 13:5d:02:b9:23:3c:46:1b:00:37:32:2a:eb:98:38:f4:e2:a2: 66:30:c7:d8:c9:4c:06:bd:42:d6:6c:a5:59:1c:2c:14:01:7e: 34:4c:df:56:c3:52:21:a9:66:ec:9a:36:c2:5a:d6:6e:6d:9f: cb:c1:c7:f1:1f:cb:6e:ff:6e:df:73:66:05:14:2d:6b:11:50: 9a:87:1f:d1:f6:de:9b:28:a4:ff:0b:47:9e:67:44:01:9f:50: 3d:7e:69:8d:d3:f7:a8:20:8c:1c:8c:c2:68:ee:c4:e8:df:93: 2f:68:04:cd:e8:ea:97:d8:c1:3f:d8:35:30:b4:9a:75:f9:e7: ea:8c:f7:da:88:69:34:ce:8b:39:65:46:b9:8d:80:45:87:98: 45:01:81:42:90:f9:86:79:98:17:3a:56:3b:05:dc:a2:98:bb: 3b:37:47:58:dd:d7:f3:02:dd:10:32:e6:e3:f3:8a:5a:67:22: 16:26:6f:1f:18:16:ae:46:63:2b:02:4b:53:04:e7:22:f4:9e: 5c:63:b1:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQqVYLdlNvpWBAdbXlpf/aOLuYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNjAzMjQxMDM2MDBaFw0yNjAzMjcyMTQ1MDBaMDMxMTAvBgNV BAMTKEYyQTI2RjYxMjM5Q0JFQzc0NERDMkIyRkEzRkFFRkM0MDRBNkVFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqU2EvlJ/zucTOvv7MMLTdxgOW Gt2sz7qcdx5sqDx1ksYQdlOoPBrTwNUNvhfSnW/B6CqCdqTVnrpzLllCTOF11J9Y U9WbJNE1Fg37RYNPpMx07X+yrbMqrmvBxXhFXG3eQrJSkW3jlKkJjKLPhZoeaoOy Q5/Zwr9xnPjajuyhH06urF9CLZEcobOe75WnbddUXU4ocMZzTBHRykwcEudDIwId 81INPN49ITcvO788L+QgDouHbLDVjoAwzscRwadq/qYmJcYLp8Hyeq9K9pXdXbDt xGbdvp5MhVcNkF9s1Mpdlwj4TdwqLoe6Odxk26wGXgMThflo6275xMGUjhAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qJvYSOcvsdE3Csvo/rvxASm7vowHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoepCIBTSjpCFKhCRJ4ubolyJbRDgwnEPsI 4QVNEJeWC4Zd+k9TspZdgTRkoqmh71y2U9/qNBNdArkjPEYbADcyKuuYOPTiomYw x9jJTAa9QtZspVkcLBQBfjRM31bDUiGpZuyaNsJa1m5tn8vBx/Efy27/bt9zZgUU LWsRUJqHH9H23psopP8LR55nRAGfUD1+aY3T96ggjByMwmjuxOjfky9oBM3o6pfY wT/YNTC0mnX55+qM99qIaTTOizllRrmNgEWHmEUBgUKQ+YZ5mBc6VjsF3KKYuzs3 R1jd1/MC3RAy5uPzilpnIhYmbx8YFq5GYysCS1ME5yL0nlxjsUM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:00 2026 by rpki-client