$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: HNbx5uZKNIljwJ7R/MivEQnOVGg/H3uTQyWHEfrh+nc= Subject key identifier: E4:4B:93:A9:41:8C:78:88:D2:79:6D:A9:12:27:40:38:56:CF:BD:C7 Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 7336054AD2C3255E1CB5451FE233DA1E908EFFE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 03E2 Signing time: Tue 04 Nov 2025 08:21:04 +0000 Manifest this update: Tue 04 Nov 2025 08:16:04 +0000 Manifest next update: Fri 07 Nov 2025 18:23:04 +0000 Files and hashes: 1: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: ruovJraerY0fM3M+tm0etJTY8qIH/N42by2CbxAZGPw=) 2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 3: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) 4: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:36:05:4a:d2:c3:25:5e:1c:b5:45:1f:e2:33:da:1e:90:8e:ff:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Nov 4 08:16:04 2025 GMT Not After : Nov 7 18:23:04 2025 GMT Subject: CN=E44B93A9418C7888D2796DA91227403856CFBDC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:66:f4:da:a0:06:f1:2d:6f:23:0b:ca:bd: f3:9c:6c:7b:09:83:3c:86:da:b3:fc:24:2c:8c:fe: 5c:99:21:b3:b2:e4:0a:b0:20:60:7a:20:04:f3:1f: 74:a4:0c:04:d0:00:80:20:df:10:55:68:1f:de:79: 98:56:66:8b:9d:11:22:2d:18:46:95:4a:29:00:7e: 07:09:25:ac:12:10:54:06:fc:79:01:6d:8e:bd:f7: d0:5c:3b:7b:8c:09:13:e6:88:0c:30:73:94:a1:64: ad:08:7f:6b:15:3c:77:09:a0:2e:ef:2e:6e:16:ed: 4d:a3:cf:6d:77:22:99:31:11:49:73:48:f6:81:17: f5:69:10:35:96:3a:bd:3d:fd:58:76:2a:5e:be:c8: 2f:28:88:79:91:67:03:14:13:aa:06:c7:67:cd:5c: ce:07:cb:15:55:db:d5:a5:ec:83:8d:89:31:5b:5f: 09:5e:b0:c8:04:79:84:c1:fc:72:de:9c:a7:d7:cc: 8b:b2:bb:d2:c0:32:3a:5e:c0:c4:0b:70:3c:c6:ff: ae:80:08:30:50:dd:fa:e9:03:d2:e7:47:b7:31:cb: e1:49:7b:47:00:7f:83:30:5c:fd:7a:d8:47:62:7e: 48:b0:7f:6c:68:b3:83:6d:1e:8c:6d:7e:ea:7a:25: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4B:93:A9:41:8C:78:88:D2:79:6D:A9:12:27:40:38:56:CF:BD:C7 X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:16:86:28:0b:bb:c6:70:ec:9e:de:23:c7:d2:b0:db:38:0a: 73:6f:a5:e1:82:16:63:1a:07:2b:7d:3a:ab:6f:09:1a:8b:25: 87:d7:a8:49:21:2c:ab:a9:07:17:f2:a4:df:9b:cc:64:10:62: e8:8b:1a:2f:a3:80:a0:3c:94:b8:aa:35:c3:a2:f5:5c:3f:ba: 7b:fb:ee:db:98:e0:a0:ba:86:c7:a2:32:61:f2:de:c7:27:bd: ff:68:72:8f:1a:57:01:68:74:90:c4:96:1f:4b:fb:06:29:22: 1f:58:09:f5:06:5e:4f:ca:91:3d:e4:3c:7a:09:e6:0c:a7:b3: 19:8f:6f:ee:71:33:6d:37:01:2c:3e:d4:fd:28:0e:fd:27:e1: 9b:4b:db:53:a4:c9:a5:ce:20:91:71:61:88:5a:07:14:17:6f: 01:5a:e8:1a:5f:4e:a5:15:11:05:f6:60:c3:57:8b:62:c1:48: 72:47:7f:92:ba:f4:59:c2:3f:3d:05:30:9f:c8:a7:c5:b5:40: 87:e3:72:f3:60:18:04:69:53:7d:b7:2e:c6:e0:cd:51:ec:8f: de:69:03:2f:29:ca:20:d3:b1:97:03:b2:49:00:68:d3:9c:d8: 26:ce:bd:c0:4e:33:1b:b6:e1:18:6d:82:91:88:7e:60:b9:26: cd:08:e6:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczYFStLDJV4ctUUf4jPaHpCO/+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTExMDQwODE2MDRaFw0yNTExMDcxODIzMDRaMDMxMTAvBgNV BAMTKEU0NEI5M0E5NDE4Qzc4ODhEMjc5NkRBOTEyMjc0MDM4NTZDRkJEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCipmb02qAG8S1vIwvKvfOcbHsJ gzyG2rP8JCyM/lyZIbOy5AqwIGB6IATzH3SkDATQAIAg3xBVaB/eeZhWZoudESIt GEaVSikAfgcJJawSEFQG/HkBbY6999BcO3uMCRPmiAwwc5ShZK0If2sVPHcJoC7v Lm4W7U2jz213IpkxEUlzSPaBF/VpEDWWOr09/Vh2Kl6+yC8oiHmRZwMUE6oGx2fN XM4HyxVV29Wl7IONiTFbXwlesMgEeYTB/HLenKfXzIuyu9LAMjpewMQLcDzG/66A CDBQ3frpA9LnR7cxy+FJe0cAf4MwXP162Edifkiwf2xos4NtHoxtfup6JYR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5EuTqUGMeIjSeW2pEidAOFbPvccwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkWhigLu8Zw7J7eI8fSsNs4CnNvpeGCFmMa Byt9OqtvCRqLJYfXqEkhLKupBxfypN+bzGQQYuiLGi+jgKA8lLiqNcOi9Vw/unv7 7tuY4KC6hseiMmHy3scnvf9oco8aVwFodJDElh9L+wYpIh9YCfUGXk/KkT3kPHoJ 5gynsxmPb+5xM203ASw+1P0oDv0n4ZtL21OkyaXOIJFxYYhaBxQXbwFa6BpfTqUV EQX2YMNXi2LBSHJHf5K69FnCPz0FMJ/Ip8W1QIfjcvNgGARpU323LsbgzVHsj95p Ay8pyiDTsZcDskkAaNOc2CbOvcBOMxu24RhtgpGIfmC5Js0I5t4= -----END CERTIFICATE-----Generated at Wed Nov 5 02:11:52 2025 by rpki-client