$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: tO4Lb2tdhV9YFbPRXcoNLXNoUMk2+553uaAj9UYMrIM= Subject key identifier: E8:D6:1F:83:0E:06:75:3C:A0:29:EF:DF:E4:AF:60:09:B9:86:A2:5D Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 79CD696F587D33D61B80E867CB06108D43CED067 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 04B1 Signing time: Mon 04 Aug 2025 23:40:52 +0000 Manifest this update: Mon 04 Aug 2025 23:35:52 +0000 Manifest next update: Fri 08 Aug 2025 06:33:52 +0000 Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: Y49FQCDrn1VVR/laE2/md3GsugOdXKd3VPrBhjHDdig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cd:69:6f:58:7d:33:d6:1b:80:e8:67:cb:06:10:8d:43:ce:d0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: Aug 4 23:35:52 2025 GMT Not After : Aug 8 06:33:52 2025 GMT Subject: CN=E8D61F830E06753CA029EFDFE4AF6009B986A25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d9:8c:83:52:0e:21:d4:51:c4:87:7b:1a:bc: 7d:21:9a:02:2a:a8:29:03:4f:62:25:c8:09:b3:f2: 7e:3e:ba:c7:46:16:51:01:db:1c:c1:29:75:a7:fa: 59:69:4e:bd:c7:6d:34:ce:93:46:11:79:af:8c:0f: bc:94:25:bc:b4:40:7c:5b:e5:8f:b6:f1:6b:85:79: 0d:7a:2f:1c:cd:d8:06:d2:9a:02:dd:04:f2:63:e7: b2:2b:02:9e:d6:59:97:26:9e:17:cc:11:64:53:21: 42:22:c2:e3:b4:9a:cf:04:c5:25:32:34:b7:90:35: 48:0d:77:6b:f9:00:0a:7c:c5:fc:00:2f:9b:a7:13: 90:ad:2f:75:44:81:9c:7f:df:6f:a3:7a:c6:bc:32: b6:aa:97:d9:df:e5:3b:cc:66:35:0a:45:ba:22:54: c2:0a:62:bf:a0:c6:6d:af:35:53:ea:f6:14:d8:4f: 17:3e:c0:8f:3e:a8:05:13:b2:8d:33:4f:58:fb:8c: 29:f3:47:44:84:04:68:b3:92:cb:e8:12:1c:21:94: 92:c0:d6:11:60:e5:51:b6:48:8c:eb:77:37:c1:20: 62:76:0d:01:99:43:8d:d6:91:1d:fe:f6:85:db:79: b7:38:ee:b4:e9:aa:54:eb:53:a5:4c:70:c1:a5:3d: 76:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:1F:83:0E:06:75:3C:A0:29:EF:DF:E4:AF:60:09:B9:86:A2:5D X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:40:30:45:ae:bd:0a:fc:4a:df:97:db:2c:fa:89:e3:31:1d: 32:34:db:b8:8d:78:57:f0:27:65:d6:21:86:1f:3c:56:1b:bc: b3:11:67:79:3e:f1:db:92:83:13:d3:1c:38:e4:fe:40:a4:a5: 48:32:a9:f6:b1:d3:77:5d:11:6e:bb:1d:5e:5d:91:a4:74:64: a0:4e:c6:68:fa:78:39:b7:3b:c7:40:11:7e:2d:36:41:77:dc: 84:1a:c5:e7:b1:00:bb:62:33:ef:c8:08:ab:d5:97:ad:78:bd: 17:18:94:5b:e2:68:ca:b7:4a:0a:0f:32:f4:c3:84:0b:f0:a8: 5e:22:0f:dc:cc:65:52:1f:53:9e:61:ac:59:92:10:33:65:03: ad:62:71:7b:55:44:93:1b:93:18:90:53:05:fb:a9:a8:0a:2a: f4:59:2b:92:3c:3f:73:7e:90:40:c5:c3:cb:87:f9:b1:43:29: c8:40:b6:07:b1:c2:d6:46:31:49:2d:b2:2f:15:7b:1a:38:69: 87:0d:9d:b7:ed:fe:f1:d2:d9:88:19:93:af:78:21:c6:64:eb: ef:f6:27:60:08:dc:9d:c2:ae:6d:95:f6:cb:fb:2b:20:cb:a5: d3:e4:37:89:47:75:de:9f:2a:7a:68:40:00:5f:a1:3d:14:c5: 1f:ba:5b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUec1pb1h9M9YbgOhnywYQjUPO0GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNTA4MDQyMzM1NTJaFw0yNTA4MDgwNjMzNTJaMDMxMTAvBgNV BAMTKEU4RDYxRjgzMEUwNjc1M0NBMDI5RUZERkU0QUY2MDA5Qjk4NkEyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2YyDUg4h1FHEh3savH0hmgIq qCkDT2IlyAmz8n4+usdGFlEB2xzBKXWn+llpTr3HbTTOk0YRea+MD7yUJby0QHxb 5Y+28WuFeQ16LxzN2AbSmgLdBPJj57IrAp7WWZcmnhfMEWRTIUIiwuO0ms8ExSUy NLeQNUgNd2v5AAp8xfwAL5unE5CtL3VEgZx/32+jesa8Mraql9nf5TvMZjUKRboi VMIKYr+gxm2vNVPq9hTYTxc+wI8+qAUTso0zT1j7jCnzR0SEBGizksvoEhwhlJLA 1hFg5VG2SIzrdzfBIGJ2DQGZQ43WkR3+9oXbebc47rTpqlTrU6VMcMGlPXavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NYfgw4GdTygKe/f5K9gCbmGol0wHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFAMEWuvQr8St+X2yz6ieMxHTI027iNeFfw J2XWIYYfPFYbvLMRZ3k+8duSgxPTHDjk/kCkpUgyqfax03ddEW67HV5dkaR0ZKBO xmj6eDm3O8dAEX4tNkF33IQaxeexALtiM+/ICKvVl614vRcYlFviaMq3SgoPMvTD hAvwqF4iD9zMZVIfU55hrFmSEDNlA61icXtVRJMbkxiQUwX7qagKKvRZK5I8P3N+ kEDFw8uH+bFDKchAtgexwtZGMUktsi8Vexo4aYcNnbft/vHS2YgZk694IcZk6+/2 J2AI3J3Crm2V9sv7KyDLpdPkN4lHdd6fKnpoQABfoT0UxR+6W0c= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:14 2025 by rpki-client