$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: D6JMvN6pa81jmYvFdckF6URqB2/sXjcFoNXHEeWb710= Subject key identifier: AE:F9:6C:F7:0D:96:50:BB:DA:69:65:CB:87:C7:63:B5:5E:07:25:AB Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 2CE228494661B128FD165A04BE8F3402C5821A52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 03C7 Signing time: Wed 03 Sep 2025 14:31:11 +0000 Manifest this update: Wed 03 Sep 2025 14:26:11 +0000 Manifest next update: Sat 06 Sep 2025 18:12:11 +0000 Files and hashes: 1: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) 2: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) 3: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 4: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: u4nguqZPx0mR9O/IHfK+OQgGXZriS6Hy2NVwpodCidY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e2:28:49:46:61:b1:28:fd:16:5a:04:be:8f:34:02:c5:82:1a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Sep 3 14:26:11 2025 GMT Not After : Sep 6 18:12:11 2025 GMT Subject: CN=AEF96CF70D9650BBDA6965CB87C763B55E0725AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:7a:f4:49:76:d5:1c:e0:fe:66:f7:69:c0: 04:e0:8b:e7:6f:8e:75:f0:9a:16:e8:c7:c7:71:38: c2:f5:46:7f:09:f8:df:09:02:97:c0:c8:0b:42:9e: de:36:97:e8:0b:d0:20:86:89:8e:1e:a4:29:c4:df: 4c:12:a8:56:97:56:a6:99:db:0e:6d:a1:18:86:6e: cc:99:48:1d:58:02:89:00:39:4f:4e:8b:c2:9b:df: 6f:c6:19:24:82:e7:b3:f8:db:d4:e4:3d:cf:42:62: 5e:f8:28:2a:a6:b9:17:3a:05:44:98:1e:6d:a2:db: e1:aa:72:c1:23:d7:bd:b0:3e:12:16:95:3e:4e:77: b2:f1:e7:17:4d:42:8e:9a:89:5b:b6:95:e7:3d:d9: f5:fe:c2:59:9f:3f:4d:82:c0:de:71:ea:cf:91:15: 64:38:06:00:4c:d4:ab:9c:21:a6:86:6c:9e:81:9f: c8:fa:1f:88:88:4e:bb:c2:19:5d:6d:d7:ee:dd:d7: 8b:b8:e4:6a:58:ce:a5:20:c4:bf:06:01:fe:ce:2d: b9:92:80:0a:b1:8d:e0:ea:7d:76:68:15:05:68:f8: f3:d5:69:a0:9a:f8:9a:31:40:6b:bc:66:45:96:8f: 0a:c9:f8:8e:11:ff:8d:55:87:79:6a:68:d3:0f:46: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F9:6C:F7:0D:96:50:BB:DA:69:65:CB:87:C7:63:B5:5E:07:25:AB X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:47:23:30:20:c1:7b:7b:80:86:9f:9f:e3:a9:28:e7:b3:7f: 6f:f0:79:c6:cd:d3:2b:5f:82:8e:75:b3:37:fd:d7:ab:74:f6: b8:04:72:17:87:53:b6:ec:d4:49:d0:8f:90:af:ab:66:d6:2b: 6d:f8:76:37:b0:a7:ea:8c:a6:17:b2:70:5b:8c:bc:8e:2d:3a: 2f:2c:0b:d8:5a:1f:33:ad:5c:e9:d2:49:bc:6f:e2:ac:2c:6c: a1:00:0e:4c:d7:73:41:01:46:79:6c:4b:b0:fd:b5:85:b7:81: 96:88:91:25:d2:9e:70:59:51:e5:72:aa:b7:e9:13:28:ba:98: 9c:7b:c0:d7:3e:fa:1e:07:f0:5b:48:fd:fb:94:aa:88:57:c1: 3c:36:91:42:03:d5:2b:3a:3a:4f:bd:8c:5c:fb:28:45:72:81: 18:cf:f7:78:b2:28:85:55:20:e5:13:fd:eb:1d:a4:e7:1d:af: 87:72:1f:78:e8:5b:c2:34:48:c1:e7:52:d8:5c:94:ad:2e:ec: 93:a2:40:65:58:4a:bd:f5:f2:d7:e2:12:60:4d:59:08:55:fa: da:2b:41:aa:9e:e6:6b:b1:7a:71:fe:a3:2a:4d:de:6e:07:61: 03:17:a4:16:62:b3:4d:e6:5e:01:93:b2:25:85:36:68:76:3d: 4e:d4:ad:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOIoSUZhsSj9FloEvo80AsWCGlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTA5MDMxNDI2MTFaFw0yNTA5MDYxODEyMTFaMDMxMTAvBgNV BAMTKEFFRjk2Q0Y3MEQ5NjUwQkJEQTY5NjVDQjg3Qzc2M0I1NUUwNzI1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzXr0SXbVHOD+ZvdpwATgi+dv jnXwmhbox8dxOML1Rn8J+N8JApfAyAtCnt42l+gL0CCGiY4epCnE30wSqFaXVqaZ 2w5toRiGbsyZSB1YAokAOU9Oi8Kb32/GGSSC57P429TkPc9CYl74KCqmuRc6BUSY Hm2i2+GqcsEj172wPhIWlT5Od7Lx5xdNQo6aiVu2lec92fX+wlmfP02CwN5x6s+R FWQ4BgBM1KucIaaGbJ6Bn8j6H4iITrvCGV1t1+7d14u45GpYzqUgxL8GAf7OLbmS gAqxjeDqfXZoFQVo+PPVaaCa+JoxQGu8ZkWWjwrJ+I4R/41Vh3lqaNMPRr/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrvls9w2WULvaaWXLh8djtV4HJaswHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJHIzAgwXt7gIafn+OpKOezf2/wecbN0ytf go51szf916t09rgEcheHU7bs1EnQj5Cvq2bWK234djewp+qMpheycFuMvI4tOi8s C9haHzOtXOnSSbxv4qwsbKEADkzXc0EBRnlsS7D9tYW3gZaIkSXSnnBZUeVyqrfp Eyi6mJx7wNc++h4H8FtI/fuUqohXwTw2kUID1Ss6Ok+9jFz7KEVygRjP93iyKIVV IOUT/esdpOcdr4dyH3joW8I0SMHnUthclK0u7JOiQGVYSr318tfiEmBNWQhV+tor Qaqe5muxenH+oypN3m4HYQMXpBZis03mXgGTsiWFNmh2PU7UreQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:14 2025 by rpki-client