$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: AxCcSNlcEMlwmYp6FdY5fsnUpfVfkIRji8QvlyhechM= Subject key identifier: 9E:BA:A3:D1:F3:BB:B5:A1:6A:73:A6:BA:40:96:7E:05:51:8C:A4:F7 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 214BF53CF7BC52B150DFD1C42CAF1F7BD5058C92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 011C Signing time: Fri 04 Apr 2025 07:42:13 +0000 Manifest this update: Fri 04 Apr 2025 07:37:13 +0000 Manifest next update: Mon 07 Apr 2025 19:12:13 +0000 Files and hashes: 1: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: zFIjUP0RJGsJECjoZTT+oyQr80loAG09k+sMJau20Z8=) 2: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: 7n9fLO69HtVTeGebJ4IwbAt3Dih0rBk5I+DqyVH3Pvc=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: ez2LC1r6bTj24Wy82rHkZPj1l/qpP3UX6fekdhBojt4=) 4: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: ZAYr5wm6M1zzmW0l6EsgawSZJfTDiZWgdh/sXE3rAP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4b:f5:3c:f7:bc:52:b1:50:df:d1:c4:2c:af:1f:7b:d5:05:8c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Apr 4 07:37:13 2025 GMT Not After : Apr 7 19:12:13 2025 GMT Subject: CN=9EBAA3D1F3BBB5A16A73A6BA40967E05518CA4F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6c:b4:a8:44:93:87:b8:f7:f1:0b:a3:aa:46: 0e:a2:01:13:30:7b:50:0e:fb:27:26:1d:3a:15:a2: af:ec:ac:e0:01:8c:22:eb:0f:fc:d7:04:93:e1:fa: 9a:a4:a5:98:7e:97:8b:f4:d8:54:d2:10:6a:6a:42: 45:af:df:90:e6:d9:c0:91:98:35:5c:f0:d2:24:eb: c9:26:93:af:e3:8c:6f:73:18:d7:a4:b9:7c:6e:05: 5d:8a:3d:27:3a:67:14:7e:f9:8d:8d:5c:4f:a2:5f: c1:71:a8:a8:9e:7f:36:3a:05:2d:a7:0b:66:22:b1: b1:fb:b4:18:7b:4b:42:4c:22:c1:d5:7a:2d:2c:da: 89:fe:03:12:e5:c8:59:a8:d2:6c:20:a9:f1:b2:c0: e2:f6:5d:6e:92:cd:ee:ed:2d:f9:7d:6f:23:aa:98: 2e:a8:99:8f:3d:02:e3:47:60:3c:38:f5:7e:04:33: e4:92:cc:14:2a:03:25:a6:8a:54:11:48:50:e4:f5: 3b:85:7f:75:a1:f9:da:67:28:f2:e7:39:5a:bf:37: 22:47:a5:a8:97:6b:38:5d:37:0f:9a:73:11:af:0e: 66:29:8b:64:e5:0c:67:ed:5a:c6:fb:e8:ee:94:48: f5:c7:ff:40:98:6c:b8:7a:45:e2:2a:3c:06:e5:dc: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BA:A3:D1:F3:BB:B5:A1:6A:73:A6:BA:40:96:7E:05:51:8C:A4:F7 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:40:60:1c:b5:62:f1:bd:63:4e:19:a9:79:ad:e9:d4:38:db: 82:f6:50:db:3a:89:41:74:95:a6:35:b8:28:e0:6f:da:48:95: da:f8:f7:25:a1:d0:be:02:1e:a4:ab:0c:46:45:a2:68:bc:b9: 9d:99:19:f0:60:c6:b9:a5:c3:54:ae:e8:5f:fb:07:63:b4:33: 1a:e2:e8:9b:5c:f9:f4:60:5a:83:ae:7b:a5:f7:41:ba:2d:29: 13:14:7a:85:41:d4:9e:a9:e7:60:b9:56:68:58:06:07:03:ed: 2e:1e:15:51:64:0d:2a:5b:20:40:99:01:d6:54:0c:43:19:69: 79:23:11:02:74:2a:83:b1:b0:a3:78:2d:aa:7f:dc:20:82:48: 7c:08:ef:4f:88:68:c9:c5:77:e4:c0:49:38:ef:d9:6a:c1:10: db:23:b5:60:c1:55:68:8b:77:84:35:76:a8:52:c0:81:fe:50: 2b:8a:f3:d0:81:85:f4:9c:77:a3:c5:8a:15:e4:9d:4a:ba:49: 08:60:b6:fd:c5:a4:97:07:53:2d:fc:b1:6d:ef:11:49:c4:3b: f4:89:cf:df:38:07:fc:d7:be:d5:1b:8b:16:f1:f5:63:db:cc: 93:f2:3e:aa:ec:3c:6e:06:a0:f7:d8:7f:79:17:99:fe:1a:06: 55:5f:89:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUv1PPe8UrFQ39HELK8fe9UFjJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTA0MDQwNzM3MTNaFw0yNTA0MDcxOTEyMTNaMDMxMTAvBgNV BAMTKDlFQkFBM0QxRjNCQkI1QTE2QTczQTZCQTQwOTY3RTA1NTE4Q0E0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXbLSoRJOHuPfxC6OqRg6iARMw e1AO+ycmHToVoq/srOABjCLrD/zXBJPh+pqkpZh+l4v02FTSEGpqQkWv35Dm2cCR mDVc8NIk68kmk6/jjG9zGNekuXxuBV2KPSc6ZxR++Y2NXE+iX8FxqKiefzY6BS2n C2YisbH7tBh7S0JMIsHVei0s2on+AxLlyFmo0mwgqfGywOL2XW6Sze7tLfl9byOq mC6omY89AuNHYDw49X4EM+SSzBQqAyWmilQRSFDk9TuFf3Wh+dpnKPLnOVq/NyJH paiXazhdNw+acxGvDmYpi2TlDGftWsb76O6USPXH/0CYbLh6ReIqPAbl3GjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnrqj0fO7taFqc6a6QJZ+BVGMpPcwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdAYBy1YvG9Y04ZqXmt6dQ424L2UNs6iUF0 laY1uCjgb9pIldr49yWh0L4CHqSrDEZFomi8uZ2ZGfBgxrmlw1Su6F/7B2O0Mxri 6Jtc+fRgWoOue6X3QbotKRMUeoVB1J6p52C5VmhYBgcD7S4eFVFkDSpbIECZAdZU DEMZaXkjEQJ0KoOxsKN4Lap/3CCCSHwI70+IaMnFd+TASTjv2WrBENsjtWDBVWiL d4Q1dqhSwIH+UCuK89CBhfScd6PFihXknUq6SQhgtv3FpJcHUy38sW3vEUnEO/SJ z984B/zXvtUbixbx9WPbzJPyPqrsPG4GoPfYf3kXmf4aBlVfibI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:15 2025 by rpki-client