$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: ufX5FbKf+COq0nTVE+UHDbHUHCG3aMnbPW+0ASJgyP8= Subject key identifier: 9C:64:14:E0:53:99:AE:79:51:35:D8:8B:A5:8D:79:A6:5B:27:80:88 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 0A04F48B54F84B4A1FAE4DFD580B391C125B4609 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 0156 Signing time: Sat 09 Aug 2025 15:52:18 +0000 Manifest this update: Sat 09 Aug 2025 15:47:18 +0000 Manifest next update: Tue 12 Aug 2025 20:27:18 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 2: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) 3: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: TaEnXFVwVVARxw3lK0wflBEHhe30IiA0Dn5ySXYZRwM=) 4: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 20:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:04:f4:8b:54:f8:4b:4a:1f:ae:4d:fd:58:0b:39:1c:12:5b:46:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Aug 9 15:47:18 2025 GMT Not After : Aug 12 20:27:18 2025 GMT Subject: CN=9C6414E05399AE795135D88BA58D79A65B278088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:d9:3f:73:4b:11:b5:b1:44:72:e8:b8:e5: 5d:7b:04:20:81:63:8c:0c:2b:61:e5:cd:9c:55:e2: 2a:0b:2a:07:1d:74:17:da:9f:13:00:73:84:7a:8e: 2b:bc:bc:05:a3:0e:bd:57:34:88:46:f5:9d:47:b5: 77:1a:8c:c5:f0:f0:67:d3:94:ee:f2:eb:e2:2c:42: 7b:03:a1:ab:fe:d5:ef:bb:2d:1d:a6:9f:5e:8d:ea: bc:8f:54:49:0f:b7:d4:aa:8c:dd:86:60:71:8c:6b: f9:7b:82:15:47:34:cb:7c:6a:2c:8b:a1:2f:41:9c: 9c:b6:be:16:d8:b0:e5:3a:16:0c:af:32:a7:50:dd: 0a:17:b4:82:44:9a:64:da:2f:38:46:75:7e:12:3a: f1:2f:3c:e7:1c:c7:87:e8:65:69:a8:75:df:5d:b6: 72:48:a0:74:b9:cf:5c:fb:64:86:9d:dd:95:f4:94: 01:1f:b5:7f:76:cd:f7:40:3e:8b:ba:d4:1d:33:ff: dc:6b:bf:61:42:7d:9a:48:f1:d8:30:4d:db:3f:76: 86:ad:e1:a4:4d:8f:2b:76:1e:3c:d7:64:1a:40:bf: 57:f4:af:a9:b7:81:c0:25:0b:e1:a8:33:d5:28:fd: 3d:b1:40:7d:02:bf:7b:a0:7e:99:b7:2a:bf:91:af: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:64:14:E0:53:99:AE:79:51:35:D8:8B:A5:8D:79:A6:5B:27:80:88 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:74:03:46:08:c4:e0:0f:50:e5:e9:44:ba:ea:78:80:be:49: 44:33:e4:1d:7b:23:89:72:3a:1b:98:ba:50:c1:4a:41:1a:b0: 7c:76:ca:8c:dc:f9:63:dc:11:6c:d7:9d:79:f7:45:25:35:86: 89:ab:15:5d:0b:f2:71:68:f7:0a:23:80:2d:4d:de:64:32:fb: 86:99:ac:96:76:fa:7c:01:f5:d4:a4:95:88:9f:a1:cf:05:83: c9:c0:2b:6c:2f:cd:27:14:cf:6f:97:83:6e:b5:5c:d1:52:5b: 11:ce:01:35:0f:aa:ce:f8:73:c1:e2:0a:89:2c:d2:ac:41:64: 75:a6:aa:f0:80:50:0e:ed:f0:e0:93:e9:49:69:44:d3:b0:f3: 15:34:13:dc:8e:ec:3d:3a:07:e2:e6:09:23:9f:3d:98:19:87: 0d:44:60:9a:88:45:a6:fb:ea:4e:4a:cc:aa:e7:3b:34:db:07: 77:47:d5:bc:9d:9b:7c:f0:fb:d3:f6:a1:07:3e:0d:8b:b1:07: 50:48:ac:bf:cf:03:bb:19:0d:8d:d2:73:e2:49:db:c0:db:8a: 6a:99:5a:31:58:1d:a2:c6:8c:76:2c:83:55:de:ee:0e:12:44: 5a:aa:43:80:5a:cc:fe:41:c3:c5:81:21:28:53:47:6c:fc:70: 61:87:c4:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgT0i1T4S0ofrk39WAs5HBJbRgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTA4MDkxNTQ3MThaFw0yNTA4MTIyMDI3MThaMDMxMTAvBgNV BAMTKDlDNjQxNEUwNTM5OUFFNzk1MTM1RDg4QkE1OEQ3OUE2NUIyNzgwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rdk/c0sRtbFEcui45V17BCCB Y4wMK2HlzZxV4ioLKgcddBfanxMAc4R6jiu8vAWjDr1XNIhG9Z1HtXcajMXw8GfT lO7y6+IsQnsDoav+1e+7LR2mn16N6ryPVEkPt9SqjN2GYHGMa/l7ghVHNMt8aiyL oS9BnJy2vhbYsOU6FgyvMqdQ3QoXtIJEmmTaLzhGdX4SOvEvPOccx4foZWmodd9d tnJIoHS5z1z7ZIad3ZX0lAEftX92zfdAPou61B0z/9xrv2FCfZpI8dgwTds/doat 4aRNjyt2HjzXZBpAv1f0r6m3gcAlC+GoM9Uo/T2xQH0Cv3ugfpm3Kr+Rr5jpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnGQU4FOZrnlRNdiLpY15plsngIgwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIN0A0YIxOAPUOXpRLrqeIC+SUQz5B17I4ly OhuYulDBSkEasHx2yozc+WPcEWzXnXn3RSU1homrFV0L8nFo9wojgC1N3mQy+4aZ rJZ2+nwB9dSklYifoc8Fg8nAK2wvzScUz2+Xg261XNFSWxHOATUPqs74c8HiCoks 0qxBZHWmqvCAUA7t8OCT6UlpRNOw8xU0E9yO7D06B+LmCSOfPZgZhw1EYJqIRab7 6k5KzKrnOzTbB3dH1bydm3zw+9P2oQc+DYuxB1BIrL/PA7sZDY3Sc+JJ28DbimqZ WjFYHaLGjHYsg1Xe7g4SRFqqQ4BazP5Bw8WBIShTR2z8cGGHxI0= -----END CERTIFICATE-----Generated at Mon Aug 11 06:09:04 2025 by rpki-client