$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: HuzSi+erDD23UMN6SkmbGa/SAndXLXS4kzZ3XNW628c= Subject key identifier: 4E:BF:7B:3D:25:C6:FF:99:D8:F5:01:A5:4A:74:18:3B:FA:09:2F:8E Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 48D5D15A5165E41E368B90B7FDD96D2A36F184A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 017B Signing time: Sun 02 Nov 2025 23:12:18 +0000 Manifest this update: Sun 02 Nov 2025 23:07:18 +0000 Manifest next update: Thu 06 Nov 2025 02:08:18 +0000 Files and hashes: 1: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) 2: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: ckx+3s4FjGcEaUVM3t7xAGCPgyA59Qi1BXsZnC5bbk0=) 3: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d5:d1:5a:51:65:e4:1e:36:8b:90:b7:fd:d9:6d:2a:36:f1:84:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Nov 2 23:07:18 2025 GMT Not After : Nov 6 02:08:18 2025 GMT Subject: CN=4EBF7B3D25C6FF99D8F501A54A74183BFA092F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:45:43:cd:0e:82:82:94:8d:51:8b:8c:fe:72: 0f:82:bc:a9:c2:36:41:d0:21:35:31:e1:92:24:ec: 10:73:aa:a9:93:eb:f7:5c:11:23:e1:82:42:71:16: dd:e2:75:63:b6:96:e8:0a:6e:76:93:ff:ae:d1:6a: 8b:bd:90:10:bb:5d:e4:f4:3c:07:d5:f1:2c:9c:e3: a2:ff:d6:7d:2d:15:4a:06:21:3a:04:1a:dd:b5:09: 29:4e:2e:99:7b:d4:ba:03:77:fa:95:a7:37:5f:c6: 46:3b:d9:70:e1:03:24:d8:8e:00:d1:92:3e:cf:1c: 02:ba:18:bd:d6:6e:d4:0c:ca:51:74:0f:1a:3b:22: ec:39:70:78:54:ed:8d:25:be:2b:8c:f4:fe:ad:15: d9:4c:e4:e6:22:eb:93:27:38:4a:0e:ba:92:69:89: b9:31:4b:84:0b:32:e3:f0:49:b8:54:b7:ac:8f:dd: 07:a6:c9:62:1b:4d:93:38:50:8e:81:36:3e:72:70: f6:4a:a4:74:73:f2:a6:6f:ef:37:5a:12:74:33:c1: 36:b3:a6:a9:88:33:7f:31:18:54:3e:79:82:6c:28: 4d:54:d0:cb:01:14:b0:6b:81:8f:14:6b:79:29:72: 9f:91:b6:53:e3:68:cb:87:c9:06:72:f2:5b:d4:94: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:7B:3D:25:C6:FF:99:D8:F5:01:A5:4A:74:18:3B:FA:09:2F:8E X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:95:07:3a:31:07:57:12:2a:a9:0c:24:5d:1e:24:de:48:6f: ee:58:29:a9:6e:67:50:28:4e:a9:0b:c2:20:77:f7:70:b0:d9: fe:13:a1:e0:b7:5d:45:55:63:12:36:04:8d:d8:fb:89:7b:52: 75:a2:f8:e3:78:f0:7a:ca:2c:a8:c0:44:b8:61:bf:98:97:6b: 98:69:89:90:9a:3a:16:f3:f0:64:80:20:50:26:1d:54:ff:39: 4f:25:65:f9:cc:3d:52:bc:74:59:38:34:1e:d9:d4:cc:81:b3: 3c:82:4e:9a:2b:7a:c1:83:2a:c9:66:a2:06:a1:94:e6:d2:44: e9:87:7d:b3:c8:29:90:cf:4a:0a:dc:f4:c4:82:09:be:9f:81: 19:e9:0a:46:a8:1b:fe:21:30:b7:b8:f5:9d:0f:80:29:1b:61: 9b:03:06:cf:d8:59:68:86:16:86:0c:66:79:14:97:5c:3d:41: 95:99:42:3b:37:9f:de:8c:82:cc:dd:fe:f9:27:df:d3:50:d4: 64:8a:bf:c2:6f:3a:1c:f5:33:31:3a:50:81:96:06:bc:9c:5a: ba:21:89:a0:e6:d9:14:46:59:5c:8b:0f:77:9d:87:1e:81:ec: d7:ed:3c:65:fd:3b:4f:db:6d:d2:96:95:6b:ff:1f:e3:c9:e4: 97:bc:d5:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNXRWlFl5B42i5C3/dltKjbxhKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTExMDIyMzA3MThaFw0yNTExMDYwMjA4MThaMDMxMTAvBgNV BAMTKDRFQkY3QjNEMjVDNkZGOTlEOEY1MDFBNTRBNzQxODNCRkEwOTJGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4RUPNDoKClI1Ri4z+cg+CvKnC NkHQITUx4ZIk7BBzqqmT6/dcESPhgkJxFt3idWO2lugKbnaT/67Raou9kBC7XeT0 PAfV8Syc46L/1n0tFUoGIToEGt21CSlOLpl71LoDd/qVpzdfxkY72XDhAyTYjgDR kj7PHAK6GL3WbtQMylF0Dxo7Iuw5cHhU7Y0lviuM9P6tFdlM5OYi65MnOEoOupJp ibkxS4QLMuPwSbhUt6yP3QemyWIbTZM4UI6BNj5ycPZKpHRz8qZv7zdaEnQzwTaz pqmIM38xGFQ+eYJsKE1U0MsBFLBrgY8Ua3kpcp+RtlPjaMuHyQZy8lvUlNWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTr97PSXG/5nY9QGlSnQYO/oJL44wHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqVBzoxB1cSKqkMJF0eJN5Ib+5YKaluZ1Ao TqkLwiB393Cw2f4ToeC3XUVVYxI2BI3Y+4l7UnWi+ON48HrKLKjARLhhv5iXa5hp iZCaOhbz8GSAIFAmHVT/OU8lZfnMPVK8dFk4NB7Z1MyBszyCTporesGDKslmogah lObSROmHfbPIKZDPSgrc9MSCCb6fgRnpCkaoG/4hMLe49Z0PgCkbYZsDBs/YWWiG FoYMZnkUl1w9QZWZQjs3n96Mgszd/vkn39NQ1GSKv8JvOhz1MzE6UIGWBrycWroh iaDm2RRGWVyLD3edhx6B7NftPGX9O0/bbdKWlWv/H+PJ5Je81SE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:44 2025 by rpki-client