$ rpki-client -vvf repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft File: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft (raw, json) Hash identifier: 01avOp7GPyizEtqZgSA/d+tTKVG19hb9mPRPDlrzRyk= Subject key identifier: C5:77:34:61:8A:CE:71:31:98:66:A8:E0:F6:72:86:F6:13:93:7E:1F Authority key identifier: 44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 Certificate issuer: /CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Certificate serial: 211E12D92D7293792463569922AFEBED8039DC15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft Manifest number: 91 Signing time: Sun 20 Jul 2025 14:11:55 +0000 Manifest this update: Sun 20 Jul 2025 14:06:55 +0000 Manifest next update: Thu 24 Jul 2025 00:55:55 +0000 Files and hashes: 1: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: ABcl7hjRsw3Xa0yDPigEjdLuUfujbY1jm15mYQSG+s4=) 2: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl (hash: ZdCSXQPduJmXppGsAvqD6Q8Lc1SznNCDmUF5Vq+uJF8=) 3: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: xB/XqJ5dJTYe2nf2B7toQua0M24fdekoYi8o2PugdP4=) 4: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: TD2xB1HLXamIjjFpw2dotgVlnTzLq7PRhXP0sb7oneE=) 5: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: iiMZJOJE0I/AUErV1vyRCE+uPLpfCmgdzT+r6epJErs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1e:12:d9:2d:72:93:79:24:63:56:99:22:af:eb:ed:80:39:dc:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Validity Not Before: Jul 20 14:06:55 2025 GMT Not After : Jul 24 00:55:55 2025 GMT Subject: CN=C57734618ACE71319866A8E0F67286F613937E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:73:66:4e:46:e2:7a:7a:9c:9e:c2:e0:44: df:2b:4b:69:95:56:b7:d3:04:fa:1b:13:34:f0:56: 35:50:c4:c2:8e:e9:8b:6a:75:46:ec:54:53:2c:38: 16:69:3d:dc:39:ff:7b:70:c5:87:e6:39:d4:46:06: ed:26:99:ae:6f:b9:97:7b:99:75:65:25:d9:3e:3f: b5:82:61:1d:39:9f:36:03:43:31:1d:31:d7:97:15: 5c:b4:3b:a7:65:23:2c:26:fc:10:0b:da:94:27:b9: fc:73:f3:f9:40:73:93:b3:78:d5:e9:8c:15:e9:79: 37:34:f1:d7:be:c1:60:4b:63:ad:d1:92:d0:52:e0: f3:e0:9b:f9:d3:58:7c:7a:61:7e:7e:d0:01:ee:24: 99:69:68:6e:c3:62:f3:a0:2c:92:20:06:9a:de:c2: 11:9c:a6:26:43:12:ef:6b:e4:49:f7:fb:8f:4e:6c: 87:3e:28:f5:e4:83:4f:23:41:29:94:f2:da:ef:44: b0:4e:e0:01:e5:2a:30:5f:11:17:b1:d2:03:e5:a1: 0f:46:61:bb:af:1c:a8:68:6d:9f:58:44:9c:6f:e2: ae:be:ca:6e:bd:3e:64:b0:3e:21:49:6f:28:dd:7e: 30:bb:9f:e8:1e:d6:fa:82:90:80:d7:5d:cf:5e:37: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:77:34:61:8A:CE:71:31:98:66:A8:E0:F6:72:86:F6:13:93:7E:1F X509v3 Authority Key Identifier: keyid:44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:54:e4:de:58:c8:70:b6:60:9a:85:bf:9a:ea:4f:fa:89:d6: 63:f8:61:e2:24:1e:7d:bc:6c:e1:1f:11:1d:1c:5c:5b:92:f6: fe:c2:10:f4:fd:29:bf:ff:67:85:0b:39:f8:c9:b2:ae:4f:6c: 17:ba:3d:34:6f:a5:86:ee:dc:37:f0:e8:3c:e1:56:f5:e3:e1: 06:ba:aa:cd:e1:27:2e:5b:b7:7d:98:00:77:ad:72:1a:80:ae: 92:e1:bf:f3:95:d9:2e:6e:4c:1a:f5:bd:0f:ea:1b:c2:e1:59: 2c:8b:f3:18:e3:4e:40:f9:ea:c3:6e:71:cc:70:a8:55:1b:1a: 0b:cd:4f:d0:1c:a9:94:46:90:82:69:d5:c6:59:fd:eb:fa:5f: e3:30:ef:62:f3:68:0d:f6:09:02:a5:64:f0:24:e3:c5:80:29: c5:72:f8:92:3e:d5:d4:3a:fe:80:69:6e:bd:20:0f:6f:27:2b: 8f:f7:18:48:8b:50:f2:df:b2:a0:d8:c3:43:11:1e:c3:ec:9e: c2:59:2c:fb:fb:fe:14:8a:07:cf:93:e6:46:2a:c4:fb:e2:83: 91:d6:59:46:ac:f8:c6:5d:8b:54:c7:81:2c:35:00:71:7b:f9: 1c:a6:56:8c:49:5e:ca:a1:19:a8:1c:d5:4a:6f:29:f2:b3:47: 42:11:39:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIR4S2S1yk3kkY1aZIq/r7YA53BUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQz NEM0OEFGMjAeFw0yNTA3MjAxNDA2NTVaFw0yNTA3MjQwMDU1NTVaMDMxMTAvBgNV BAMTKEM1NzczNDYxOEFDRTcxMzE5ODY2QThFMEY2NzI4NkY2MTM5MzdFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrXNmTkbienqcnsLgRN8rS2mV VrfTBPobEzTwVjVQxMKO6YtqdUbsVFMsOBZpPdw5/3twxYfmOdRGBu0mma5vuZd7 mXVlJdk+P7WCYR05nzYDQzEdMdeXFVy0O6dlIywm/BAL2pQnufxz8/lAc5OzeNXp jBXpeTc08de+wWBLY63RktBS4PPgm/nTWHx6YX5+0AHuJJlpaG7DYvOgLJIgBpre whGcpiZDEu9r5En3+49ObIc+KPXkg08jQSmU8trvRLBO4AHlKjBfERex0gPloQ9G YbuvHKhobZ9YRJxv4q6+ym69PmSwPiFJbyjdfjC7n+ge1vqCkIDXXc9eN62fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxXc0YYrOcTGYZqjg9nKG9hOTfh8wHwYDVR0j BBgwFoAUREPkMjnT9blnTy9bWjdxFDTEivIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmM4YjNhOS00ZWZmLTQ2MGQtYjAxZC02YmE1ZDk5ZGFkYjkvMC80NDQzRTQzMjM5 RDNGNUI5Njc0RjJGNUI1QTM3NzExNDM0QzQ4QUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQzNEM0 OEFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcx MTQzNEM0OEFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtU5N5YyHC2YJqFv5rqT/qJ1mP4YeIkHn28 bOEfER0cXFuS9v7CEPT9Kb//Z4ULOfjJsq5PbBe6PTRvpYbu3Dfw6DzhVvXj4Qa6 qs3hJy5bt32YAHetchqArpLhv/OV2S5uTBr1vQ/qG8LhWSyL8xjjTkD56sNuccxw qFUbGgvNT9AcqZRGkIJp1cZZ/ev6X+Mw72LzaA32CQKlZPAk48WAKcVy+JI+1dQ6 /oBpbr0gD28nK4/3GEiLUPLfsqDYw0MRHsPsnsJZLPv7/hSKB8+T5kYqxPvig5HW WUas+MZdi1THgSw1AHF7+RymVoxJXsqhGagc1UpvKfKzR0IROag= -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:11 2025 by rpki-client