$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: TuA1RbXltevCaYFdhQN2sPFx8PmYta3aKw/qF6yalRg= Subject key identifier: 84:61:E8:E3:9B:18:BD:BF:31:CE:CF:54:7A:FA:D1:05:19:4F:5F:7F Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 2FE1FD5119FFF8722E7B281FB13C20323179FEAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 0496 Signing time: Fri 06 Jun 2025 12:40:50 +0000 Manifest this update: Fri 06 Jun 2025 12:35:50 +0000 Manifest next update: Mon 09 Jun 2025 20:56:50 +0000 Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: DaP57BPmbPPVaQgQZdQ3lZl0beTStBWOF/wRTpFMY9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e1:fd:51:19:ff:f8:72:2e:7b:28:1f:b1:3c:20:32:31:79:fe:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: Jun 6 12:35:50 2025 GMT Not After : Jun 9 20:56:50 2025 GMT Subject: CN=8461E8E39B18BDBF31CECF547AFAD105194F5F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:d8:05:a1:d3:69:34:06:50:b7:1c:75:be: 36:cd:82:c1:7c:6a:43:20:c5:22:d9:9c:e4:aa:e3: 84:00:65:e9:db:c6:98:f2:8f:7a:39:fa:6e:ad:34: d5:0c:76:61:c2:0a:b9:79:34:15:85:93:cc:47:1a: 64:69:e9:5f:92:f0:34:b3:ac:f9:56:11:2a:a6:7d: a0:f4:8f:eb:b0:2f:b3:01:86:03:c1:d1:59:eb:ba: 40:80:dc:98:0c:f1:73:1d:ba:45:4f:ea:f1:7a:7f: aa:54:ef:c2:a0:87:a8:77:88:16:27:17:cb:34:24: f0:01:b7:5f:5b:57:10:da:9c:c9:9b:1c:44:54:cd: e5:bc:66:2b:be:47:62:8b:11:3c:f8:02:0a:59:f4: 75:d2:d6:82:34:4b:4b:5c:51:af:53:f9:9a:8e:1d: 29:97:7e:52:2d:f5:04:e8:6c:fa:c7:62:04:fb:2a: d1:24:c7:06:38:f7:81:2c:aa:e0:88:09:f8:65:4f: a4:d7:3b:7f:f9:10:d0:d6:d4:a7:d0:2a:5a:9b:c5: f1:3e:93:54:eb:8c:f2:d9:71:ae:fa:b7:73:cf:85: c3:86:92:25:33:a2:75:b6:7a:02:c8:a3:c6:5c:0d: 86:06:03:d0:b8:26:bc:17:d6:c9:2a:39:e7:38:c6: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:61:E8:E3:9B:18:BD:BF:31:CE:CF:54:7A:FA:D1:05:19:4F:5F:7F X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2f:bb:e8:bb:b3:d6:8c:39:f9:65:80:19:f4:4c:19:fb:04: 70:b6:36:f0:c2:8e:37:f7:24:65:ec:fb:cd:65:0e:51:9a:ee: 79:97:25:1f:16:20:28:f6:e3:cd:d8:b4:ed:df:e0:9c:d9:08: e7:7a:d7:5a:ab:41:a0:b8:11:9b:4b:62:cd:51:b9:e7:7c:96: ed:a5:04:4f:d8:14:56:d2:11:24:b2:2b:5a:53:98:19:ec:ef: c3:dc:73:8b:1f:27:33:16:3d:a1:1b:0b:1d:d1:99:2a:f5:a2: 17:ef:08:07:6c:b1:cf:d5:c4:a3:9b:bb:34:82:08:6e:85:56: 9e:ec:02:91:b3:57:db:a0:a4:ab:55:51:52:dc:76:60:77:cf: da:05:81:91:6e:d0:d6:60:cc:55:ee:76:9e:b3:f2:4f:71:7b: 48:ae:10:94:3f:72:a4:b2:6e:5e:8a:69:b4:ba:7e:ea:09:68: 4d:22:a7:58:ab:e0:33:de:ae:8e:71:67:b2:0f:11:b4:17:3c: 10:09:45:17:79:ae:da:21:d5:17:22:51:5f:67:a3:87:8d:67: 81:44:73:63:40:66:56:8c:0d:ed:c0:84:94:74:13:0a:b4:70: 30:81:3c:7c:5a:35:bd:68:f0:3e:c2:e6:16:21:34:5c:bf:5f: 07:61:3e:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+H9URn/+HIueygfsTwgMjF5/q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNTA2MDYxMjM1NTBaFw0yNTA2MDkyMDU2NTBaMDMxMTAvBgNV BAMTKDg0NjFFOEUzOUIxOEJEQkYzMUNFQ0Y1NDdBRkFEMTA1MTk0RjVGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4A9gFodNpNAZQtxx1vjbNgsF8 akMgxSLZnOSq44QAZenbxpjyj3o5+m6tNNUMdmHCCrl5NBWFk8xHGmRp6V+S8DSz rPlWESqmfaD0j+uwL7MBhgPB0VnrukCA3JgM8XMdukVP6vF6f6pU78Kgh6h3iBYn F8s0JPABt19bVxDanMmbHERUzeW8Ziu+R2KLETz4AgpZ9HXS1oI0S0tcUa9T+ZqO HSmXflIt9QTobPrHYgT7KtEkxwY494EsquCICfhlT6TXO3/5ENDW1KfQKlqbxfE+ k1TrjPLZca76t3PPhcOGkiUzonW2egLIo8ZcDYYGA9C4JrwX1skqOec4xmk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGHo45sYvb8xzs9UevrRBRlPX38wHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMvu+i7s9aMOfllgBn0TBn7BHC2NvDCjjf3 JGXs+81lDlGa7nmXJR8WICj2483YtO3f4JzZCOd611qrQaC4EZtLYs1Rued8lu2l BE/YFFbSESSyK1pTmBns78Pcc4sfJzMWPaEbCx3RmSr1ohfvCAdssc/VxKObuzSC CG6FVp7sApGzV9ugpKtVUVLcdmB3z9oFgZFu0NZgzFXudp6z8k9xe0iuEJQ/cqSy bl6KabS6fuoJaE0ip1ir4DPero5xZ7IPEbQXPBAJRRd5rtoh1RciUV9no4eNZ4FE c2NAZlaMDe3AhJR0Ewq0cDCBPHxaNb1o8D7C5hYhNFy/XwdhPpc= -----END CERTIFICATE-----Generated at Sat Jun 7 23:40:24 2025 by rpki-client