$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: YOiDodspJ5ooiu6t33XcJ+81U4yF2zKMf/dZ3QoXgsY= Subject key identifier: AC:7C:33:A0:E5:CA:A1:7B:75:C5:F6:48:E8:88:7E:69:37:67:BC:00 Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 2D51E36DE14123EDDC52EA95B88655B8ACB63F67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 04BF Signing time: Sat 06 Sep 2025 00:30:50 +0000 Manifest this update: Sat 06 Sep 2025 00:25:50 +0000 Manifest next update: Tue 09 Sep 2025 03:50:50 +0000 Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: XD9J6u4Rdkh3sz4m9Pt5M9KT8/HYGXLX8FhNsI3pd8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:51:e3:6d:e1:41:23:ed:dc:52:ea:95:b8:86:55:b8:ac:b6:3f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: Sep 6 00:25:50 2025 GMT Not After : Sep 9 03:50:50 2025 GMT Subject: CN=AC7C33A0E5CAA17B75C5F648E8887E693767BC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:0a:be:59:07:0c:73:8c:07:b6:2b:6f:c4: 91:64:91:4b:17:f0:aa:95:a1:32:b1:63:8a:92:c0: 5f:4f:15:ef:19:a7:c8:18:c1:e7:6a:2d:38:e0:9c: 2c:77:58:31:61:7d:f4:5a:29:d1:c0:0c:0e:fb:50: 27:65:c8:82:ab:be:af:5f:6c:a2:4d:99:3f:47:3b: 84:43:b4:ca:e5:96:15:be:f1:29:7c:41:e1:f4:42: 57:cd:6f:e0:ce:f6:30:96:6a:4f:13:88:8e:e9:ff: aa:fd:cb:41:02:18:aa:53:ad:49:f1:c4:ee:7d:f1: 4f:ce:78:da:a5:3e:22:1d:f9:c3:7a:4d:8b:2d:a5: ca:0b:af:a3:2f:39:c5:a2:40:52:b2:29:5d:00:52: 18:65:06:b3:3a:fd:43:fb:9e:16:40:5f:22:15:c4: 9f:b9:34:95:75:05:0f:de:3f:d2:8c:7c:c4:20:43: e7:41:3e:52:c2:78:fe:00:20:a3:0e:a4:53:c2:86: 47:41:28:ce:01:3e:3c:3b:26:1a:b9:9d:02:48:1b: fc:ad:94:5b:55:33:38:e0:c5:62:b0:de:b1:f8:fd: fb:c7:87:72:f7:23:07:ea:76:c5:a5:33:30:26:ca: cc:a3:b2:4b:9f:b0:dd:57:df:aa:41:03:1d:ee:60: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7C:33:A0:E5:CA:A1:7B:75:C5:F6:48:E8:88:7E:69:37:67:BC:00 X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:68:59:0b:dc:9a:35:c1:a3:97:93:20:0e:58:86:48:93:1b: 7a:f7:e1:5c:21:c1:cb:1f:e6:fe:17:c6:22:66:f2:93:8c:bf: 92:68:be:ec:c3:4f:cb:28:76:36:5f:e7:f6:ae:e0:6f:eb:fc: 6b:4f:3a:d1:96:15:09:d0:1d:e3:40:1f:83:45:da:5b:b7:44: c1:6f:1c:90:3f:8c:65:c0:c3:f4:8b:d1:e6:25:80:25:d3:0c: 40:17:40:8f:49:49:ca:14:71:09:fc:46:07:b1:19:c1:a8:92: 53:b3:5f:ee:41:dc:f4:93:04:19:92:92:77:cd:9a:5c:ae:c0: 36:c3:f8:fb:55:be:ce:5d:72:2b:08:0c:10:61:e4:5d:0e:f3: ad:56:57:b0:eb:4c:e4:4e:4c:8f:1b:5b:52:89:09:06:35:a6: f0:40:b4:e5:a3:a3:da:fa:ed:1c:00:21:a1:e0:51:e6:c5:2c: 40:54:c9:d4:0c:71:53:9d:09:62:77:61:be:9d:c9:71:97:f0: f7:ec:9b:1d:32:53:ed:9d:ab:3c:40:9f:1a:ef:17:34:85:80: 32:df:31:84:ba:f3:d1:1c:cd:97:c2:f4:ce:34:4b:07:b2:75: f4:e6:b5:69:5b:45:c4:05:dc:be:4d:f0:9b:af:45:98:2b:dc: 68:ff:b2:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVHjbeFBI+3cUuqVuIZVuKy2P2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNTA5MDYwMDI1NTBaFw0yNTA5MDkwMzUwNTBaMDMxMTAvBgNV BAMTKEFDN0MzM0EwRTVDQUExN0I3NUM1RjY0OEU4ODg3RTY5Mzc2N0JDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFgq+WQcMc4wHtitvxJFkkUsX 8KqVoTKxY4qSwF9PFe8Zp8gYwedqLTjgnCx3WDFhffRaKdHADA77UCdlyIKrvq9f bKJNmT9HO4RDtMrllhW+8Sl8QeH0QlfNb+DO9jCWak8TiI7p/6r9y0ECGKpTrUnx xO598U/OeNqlPiId+cN6TYstpcoLr6MvOcWiQFKyKV0AUhhlBrM6/UP7nhZAXyIV xJ+5NJV1BQ/eP9KMfMQgQ+dBPlLCeP4AIKMOpFPChkdBKM4BPjw7Jhq5nQJIG/yt lFtVMzjgxWKw3rH4/fvHh3L3IwfqdsWlMzAmysyjskufsN1X36pBAx3uYAS7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHwzoOXKoXt1xfZI6Ih+aTdnvAAwHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVoWQvcmjXBo5eTIA5YhkiTG3r34Vwhwcsf 5v4XxiJm8pOMv5JovuzDT8sodjZf5/au4G/r/GtPOtGWFQnQHeNAH4NF2lu3RMFv HJA/jGXAw/SL0eYlgCXTDEAXQI9JScoUcQn8RgexGcGoklOzX+5B3PSTBBmSknfN mlyuwDbD+PtVvs5dcisIDBBh5F0O861WV7DrTOROTI8bW1KJCQY1pvBAtOWjo9r6 7RwAIaHgUebFLEBUydQMcVOdCWJ3Yb6dyXGX8Pfsmx0yU+2dqzxAnxrvFzSFgDLf MYS689EczZfC9M40SweydfTmtWlbRcQF3L5N8JuvRZgr3Gj/srQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:02 2025 by rpki-client