$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: aXbvulGRdqOgEpsrwHzCVHkellCs5uTtVjewOfLgyEY= Subject key identifier: C3:E4:9B:73:65:86:BC:D9:37:8C:77:72:EC:37:D7:E0:7C:70:82:0E Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 19091D2A88FCFC96C67CBB2707363E7438B2A996 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 03B4 Signing time: Mon 21 Jul 2025 03:41:03 +0000 Manifest this update: Mon 21 Jul 2025 03:36:03 +0000 Manifest next update: Thu 24 Jul 2025 11:24:03 +0000 Files and hashes: 1: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 2: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) 3: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: KDrkg+s/pWeGk6GpeHiBkrPgMCmegeU4TdVNDrPNCac=) 4: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:09:1d:2a:88:fc:fc:96:c6:7c:bb:27:07:36:3e:74:38:b2:a9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Jul 21 03:36:03 2025 GMT Not After : Jul 24 11:24:03 2025 GMT Subject: CN=C3E49B736586BCD9378C7772EC37D7E07C70820E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:49:8f:29:53:30:cc:eb:67:c9:c4:b3:c1:de: fa:42:35:9c:e6:3d:e7:fd:74:e4:32:78:98:2a:99: 67:bf:7d:3e:dd:16:67:4c:bd:06:99:6c:67:04:48: 92:0a:4d:6e:ce:7b:8d:17:75:db:33:93:a3:d9:a1: f7:ed:ca:4e:fc:d1:cd:b9:e9:3e:50:e2:98:f7:c3: 51:4e:e4:0b:78:8a:ff:1d:2c:d6:a8:16:b0:59:11: eb:76:05:57:89:00:36:d1:47:0d:84:c0:0f:45:84: ea:64:cc:71:0b:22:ba:7c:77:dd:07:93:24:9c:90: 3c:67:79:f3:7e:94:f2:da:1d:db:b3:05:17:f1:a1: 08:90:4f:47:ce:55:6d:b4:e7:d0:07:7c:b6:19:9d: 95:8d:ad:3b:74:86:e6:13:66:39:ed:fb:f0:bf:ee: 0a:71:57:99:f6:6b:c8:f3:16:70:60:6f:41:2d:e0: 54:75:8e:77:75:62:27:73:e6:52:19:5b:ba:09:a0: fe:d7:4d:b4:8e:ba:57:cb:91:46:b7:7c:e6:14:0c: e1:dc:83:6c:7c:38:93:00:0e:bd:dd:f7:13:c0:37: ec:19:b7:21:e7:95:58:a2:9f:68:9f:a7:ea:a0:59: 8f:31:5d:32:11:7a:82:87:0b:85:d8:d7:1b:fd:82: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E4:9B:73:65:86:BC:D9:37:8C:77:72:EC:37:D7:E0:7C:70:82:0E X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:41:d3:ee:ff:96:98:c2:55:4b:23:0e:ad:7c:0e:a6:9d:91: 57:50:8c:3a:e5:9f:de:c3:86:e5:0b:e3:eb:e1:23:c1:f3:9c: d1:4c:9b:da:6f:06:74:71:e6:28:5b:6e:df:63:1d:1c:9b:ce: d9:89:7a:1d:b5:8f:0c:04:3d:1c:2d:b4:c5:eb:bd:3f:59:55: 83:c5:8d:2c:fe:4e:15:46:8b:66:44:4d:08:16:b8:0d:d5:c4: 6b:ee:fa:5b:9a:c0:c5:df:f1:64:30:25:e3:1d:49:65:b6:68: de:8d:6c:80:93:37:75:77:e3:b6:ee:0e:17:7d:f6:cb:17:af: f4:15:a9:94:be:b8:93:fa:76:02:24:20:a1:d3:78:e9:6e:43: 99:b9:16:b2:0d:39:ad:fe:9c:75:0d:0a:b1:9d:52:e0:d8:64: 0b:b6:c8:6d:8e:e7:e5:0a:40:6d:70:d2:b8:8a:4e:46:c0:74: 51:c5:25:87:73:80:a5:85:89:d5:38:3b:41:21:c3:c1:37:5d: 2a:70:ae:a8:fc:17:9c:f2:8f:35:da:e2:cb:e8:ee:96:17:6b: 73:bf:e9:cf:e8:45:58:56:3b:bc:3e:90:57:f5:ff:96:d7:74: f4:22:1a:e7:fd:7c:61:d1:57:00:cd:d3:ef:dc:4d:04:11:09: f3:d3:11:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQkdKoj8/JbGfLsnBzY+dDiyqZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTA3MjEwMzM2MDNaFw0yNTA3MjQxMTI0MDNaMDMxMTAvBgNV BAMTKEMzRTQ5QjczNjU4NkJDRDkzNzhDNzc3MkVDMzdEN0UwN0M3MDgyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSY8pUzDM62fJxLPB3vpCNZzm Pef9dOQyeJgqmWe/fT7dFmdMvQaZbGcESJIKTW7Oe40Xddszk6PZofftyk780c25 6T5Q4pj3w1FO5At4iv8dLNaoFrBZEet2BVeJADbRRw2EwA9FhOpkzHELIrp8d90H kySckDxnefN+lPLaHduzBRfxoQiQT0fOVW2059AHfLYZnZWNrTt0huYTZjnt+/C/ 7gpxV5n2a8jzFnBgb0Et4FR1jnd1Yidz5lIZW7oJoP7XTbSOulfLkUa3fOYUDOHc g2x8OJMADr3d9xPAN+wZtyHnlViin2ifp+qgWY8xXTIReoKHC4XY1xv9gng/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+Sbc2WGvNk3jHdy7DfX4Hxwgg4wHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtB0+7/lpjCVUsjDq18DqadkVdQjDrln97D huUL4+vhI8HznNFMm9pvBnRx5ihbbt9jHRybztmJeh21jwwEPRwttMXrvT9ZVYPF jSz+ThVGi2ZETQgWuA3VxGvu+luawMXf8WQwJeMdSWW2aN6NbICTN3V347buDhd9 9ssXr/QVqZS+uJP6dgIkIKHTeOluQ5m5FrINOa3+nHUNCrGdUuDYZAu2yG2O5+UK QG1w0riKTkbAdFHFJYdzgKWFidU4O0Ehw8E3XSpwrqj8F5zyjzXa4svo7pYXa3O/ 6c/oRVhWO7w+kFf1/5bXdPQiGuf9fGHRVwDN0+/cTQQRCfPTEWk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:41 2025 by rpki-client