$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: OIxU+e2ERt7Grl2XMdNQNOgo2g4n3Db4Wwgi07Zo1Us= Subject key identifier: 75:D4:DF:47:59:E4:7B:1E:AD:93:58:AA:A0:86:1B:E5:A8:81:3F:60 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 4135EBF9478FC479ED19BCC71A38708F93B4584C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 014D Signing time: Sun 20 Jul 2025 14:42:15 +0000 Manifest this update: Sun 20 Jul 2025 14:37:15 +0000 Manifest next update: Wed 23 Jul 2025 23:33:15 +0000 Files and hashes: 1: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: P+zE5ZDjVxuAXQU/uUrqUwHpsQBIwf+kmsT35ckJ6f8=) 2: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) 4: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:35:eb:f9:47:8f:c4:79:ed:19:bc:c7:1a:38:70:8f:93:b4:58:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Jul 20 14:37:15 2025 GMT Not After : Jul 23 23:33:15 2025 GMT Subject: CN=75D4DF4759E47B1EAD9358AAA0861BE5A8813F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:01:17:b5:39:20:39:4f:ff:59:85:9f:e0: 05:a4:8f:a9:4f:23:e3:d9:cf:9a:9a:e0:33:5d:4d: ac:40:4f:ba:0d:23:ec:91:fd:1c:31:29:0a:90:b3: f4:f9:fa:f5:12:85:8f:59:58:66:f4:57:ba:94:e5: 5e:12:1a:58:39:a7:9f:c9:d8:77:26:d0:ea:0f:2b: 13:ba:13:5d:d7:9e:b7:0a:3a:c4:de:9f:d2:f6:c1: b3:c9:7c:59:5e:90:1a:5e:1e:d1:56:f4:03:7e:9a: 33:25:fd:7a:68:ea:73:cc:e3:6c:42:79:7f:1f:eb: 49:0d:94:e4:51:ec:6f:65:f9:ae:54:17:da:d1:88: 1b:a8:a7:67:e9:8d:f4:72:92:3a:cf:c4:6b:2e:a6: 64:b8:84:36:68:f0:45:ad:96:40:28:97:31:5d:4d: 93:99:ca:db:b0:76:09:54:d0:93:2c:c6:55:ee:9c: d9:62:76:de:40:eb:ca:03:68:11:3c:3c:54:61:86: 2c:38:e2:02:a9:c4:ed:29:d7:05:91:54:fe:b3:03: 95:73:8f:40:05:a2:2b:85:f6:c3:97:4d:4e:f8:7a: b6:19:12:13:ba:90:23:9c:23:27:b9:bf:b4:85:a5: 32:54:73:c0:89:55:e4:54:ea:48:d1:86:b6:f1:d4: 75:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:DF:47:59:E4:7B:1E:AD:93:58:AA:A0:86:1B:E5:A8:81:3F:60 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:01:9a:02:be:2e:2a:60:80:a4:ed:c4:d5:48:a2:60:45:0b: b9:2c:41:fb:6d:fc:64:28:4c:29:f8:94:e8:a4:89:c3:32:5d: bb:7b:aa:6b:fe:ba:05:9f:d0:87:c1:18:ac:d9:92:63:ad:95: 1b:76:44:ba:97:f4:21:99:13:69:7f:26:7c:06:68:c0:c0:4a: e3:93:49:50:83:9b:6c:5c:dc:b1:99:99:d4:e3:d0:4b:96:c9: 04:1a:e9:3f:46:53:38:7c:b3:1c:d9:ce:bc:ca:12:fd:8d:be: 54:07:7d:96:f1:96:40:8f:34:7a:43:2e:47:9b:2f:90:56:b7: 91:67:61:ab:0b:15:c8:5a:a4:25:46:67:e7:c9:df:ce:ee:d4: 6d:55:3a:c0:1c:dd:24:5c:30:a4:8b:17:b6:06:2b:33:9d:a5: 2a:82:cf:88:01:8b:11:d7:aa:e3:7e:c4:61:8d:f2:d5:b7:fd: c0:14:26:44:23:b2:a1:59:b5:44:9c:a5:22:e1:97:66:8f:67: 13:de:97:fe:a6:48:3c:90:55:db:3b:6a:b7:0c:93:83:02:b8: 0e:23:e7:2d:04:4b:12:7b:50:fe:c6:22:9c:7e:44:7c:e8:e0: 27:d9:27:36:c5:7c:5b:3b:26:11:fd:62:a7:78:11:ff:fa:c4: 88:3a:95:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTXr+UePxHntGbzHGjhwj5O0WEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTA3MjAxNDM3MTVaFw0yNTA3MjMyMzMzMTVaMDMxMTAvBgNV BAMTKDc1RDRERjQ3NTlFNDdCMUVBRDkzNThBQUEwODYxQkU1QTg4MTNGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGwEXtTkgOU//WYWf4AWkj6lP I+PZz5qa4DNdTaxAT7oNI+yR/RwxKQqQs/T5+vUShY9ZWGb0V7qU5V4SGlg5p5/J 2Hcm0OoPKxO6E13XnrcKOsTen9L2wbPJfFlekBpeHtFW9AN+mjMl/Xpo6nPM42xC eX8f60kNlORR7G9l+a5UF9rRiBuop2fpjfRykjrPxGsupmS4hDZo8EWtlkAolzFd TZOZytuwdglU0JMsxlXunNlidt5A68oDaBE8PFRhhiw44gKpxO0p1wWRVP6zA5Vz j0AFoiuF9sOXTU74erYZEhO6kCOcIye5v7SFpTJUc8CJVeRU6kjRhrbx1HVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUddTfR1nkex6tk1iqoIYb5aiBP2AwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoBmgK+LipggKTtxNVIomBFC7ksQftt/GQo TCn4lOikicMyXbt7qmv+ugWf0IfBGKzZkmOtlRt2RLqX9CGZE2l/JnwGaMDASuOT SVCDm2xc3LGZmdTj0EuWyQQa6T9GUzh8sxzZzrzKEv2NvlQHfZbxlkCPNHpDLkeb L5BWt5FnYasLFchapCVGZ+fJ387u1G1VOsAc3SRcMKSLF7YGKzOdpSqCz4gBixHX quN+xGGN8tW3/cAUJkQjsqFZtUScpSLhl2aPZxPel/6mSDyQVds7arcMk4MCuA4j 5y0ESxJ7UP7GIpx+RHzo4CfZJzbFfFs7JhH9Yqd4Ef/6xIg6ld0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:32:11 2025 by rpki-client