$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: l+azMkZgJYcJn5eQ0x9T/sFuBf90QxB2hzMAH0yuAAo= Subject key identifier: 1F:D2:3F:3A:D6:E1:EB:45:D6:81:5D:A7:F7:4E:C2:40:20:42:24:40 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 556ACB10F3CABA8E1C8B0B0C393ED477DF222444 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01BF Signing time: Fri 25 Apr 2025 06:41:48 +0000 Manifest this update: Fri 25 Apr 2025 06:36:48 +0000 Manifest next update: Mon 28 Apr 2025 09:47:48 +0000 Files and hashes: 1: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: zBmW9Bk2lLkpCt+UwsQR1DXBR9F91BW/SX5QBgtlozE=) 2: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: PNswQtrjg54SIj3qQouFieKWDv8pOg9XXiM5DlXJu2M=) 3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: MrMq1vmSsjx8+60pgP4jBoPEasKC/g1DeWLVozuft0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6a:cb:10:f3:ca:ba:8e:1c:8b:0b:0c:39:3e:d4:77:df:22:24:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Apr 25 06:36:48 2025 GMT Not After : Apr 28 09:47:48 2025 GMT Subject: CN=1FD23F3AD6E1EB45D6815DA7F74EC24020422440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:af:a0:67:4b:ea:02:4d:24:81:17:ff:af: 8b:25:70:c7:11:76:cb:86:d4:70:19:f3:21:99:7f: af:33:ac:49:b4:08:55:6b:55:ae:2f:26:7a:04:37: 77:fa:bf:78:2f:dd:b8:80:3a:b4:1e:94:ee:fa:f0: 29:6e:67:53:f6:3e:21:ec:94:2f:5d:b5:66:33:39: ef:ff:e2:12:f8:ae:40:27:bc:25:5a:4e:fe:80:50: 18:4e:f8:bc:b8:b4:79:38:33:e7:03:5f:e0:5f:f2: e4:1c:2c:96:03:0d:d6:36:18:16:5f:d5:a2:69:3e: ce:b4:a8:6c:e3:83:44:18:c4:c3:51:6d:47:67:d1: 32:49:44:23:09:00:ac:35:fc:d2:01:ae:df:85:df: 07:3f:16:c6:70:f1:e7:93:1e:72:f9:8f:e2:83:06: ac:d0:6a:8b:c4:b1:d9:73:c3:91:62:33:3d:e4:6d: 22:0a:fe:60:d6:b3:a4:77:dd:4a:31:aa:da:0b:c8: 5a:22:ec:3d:34:92:2b:6d:87:dd:ea:28:54:7a:93: 99:ee:6f:d7:ec:d3:84:4f:8c:04:b5:d2:65:16:8c: aa:bb:7d:04:62:e7:15:a7:a9:57:59:3a:5b:4a:11: df:d4:08:5b:be:dc:f8:04:48:0d:83:3f:db:2a:85: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:3F:3A:D6:E1:EB:45:D6:81:5D:A7:F7:4E:C2:40:20:42:24:40 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1a:db:a2:be:82:01:c4:9b:1c:73:d7:d1:96:cf:e6:f3:ac: 5c:e2:f6:c6:ee:4c:6f:5c:62:b1:ff:4e:6e:88:18:ef:a5:ef: 95:f7:5d:b8:64:0b:34:23:3f:1a:cd:57:ed:58:b1:db:cf:92: 1d:8b:45:62:11:68:c8:b5:da:6f:90:46:ba:8c:90:52:b7:7b: 19:b3:07:9b:88:c1:fc:99:a9:cb:b1:75:3e:25:b4:4a:c2:ab: 05:87:da:0a:9b:99:6e:51:a6:37:8d:13:8c:99:9b:7e:75:5e: e3:6b:76:9d:ea:ba:67:05:6d:46:f2:5d:0a:de:b1:ec:39:25: 45:2f:ef:9c:63:8a:6a:f2:ba:e6:24:91:96:7b:32:93:a8:62: f1:8a:45:d1:71:b4:1a:25:24:7f:f5:97:76:f3:1c:5a:ee:64: ac:17:69:a2:37:2e:80:ed:e9:bd:4d:c5:46:b1:1d:93:86:5c: af:a5:70:88:50:48:68:55:7f:50:4d:00:86:a8:0f:05:4c:7c: 5f:71:e1:31:a6:e0:4c:c9:15:20:b5:db:b2:c9:09:31:f2:6e: 0e:4c:af:1f:0e:8e:6f:c7:f2:c2:e8:aa:47:f1:98:ea:71:af: c1:ef:77:83:b2:4f:9d:01:c2:67:35:c1:70:1d:c8:e3:98:c0: 08:c3:bb:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWrLEPPKuo4ciwsMOT7Ud98iJEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA0MjUwNjM2NDhaFw0yNTA0MjgwOTQ3NDhaMDMxMTAvBgNV BAMTKDFGRDIzRjNBRDZFMUVCNDVENjgxNURBN0Y3NEVDMjQwMjA0MjI0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqa+gZ0vqAk0kgRf/r4slcMcR dsuG1HAZ8yGZf68zrEm0CFVrVa4vJnoEN3f6v3gv3biAOrQelO768CluZ1P2PiHs lC9dtWYzOe//4hL4rkAnvCVaTv6AUBhO+Ly4tHk4M+cDX+Bf8uQcLJYDDdY2GBZf 1aJpPs60qGzjg0QYxMNRbUdn0TJJRCMJAKw1/NIBrt+F3wc/FsZw8eeTHnL5j+KD BqzQaovEsdlzw5FiMz3kbSIK/mDWs6R33UoxqtoLyFoi7D00kitth93qKFR6k5nu b9fs04RPjAS10mUWjKq7fQRi5xWnqVdZOltKEd/UCFu+3PgESA2DP9sqhXl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9I/Otbh60XWgV2n907CQCBCJEAwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFga26K+ggHEmxxz19GWz+bzrFzi9sbuTG9c YrH/Tm6IGO+l75X3XbhkCzQjPxrNV+1YsdvPkh2LRWIRaMi12m+QRrqMkFK3exmz B5uIwfyZqcuxdT4ltErCqwWH2gqbmW5RpjeNE4yZm351XuNrdp3qumcFbUbyXQre sew5JUUv75xjimryuuYkkZZ7MpOoYvGKRdFxtBolJH/1l3bzHFruZKwXaaI3LoDt 6b1NxUaxHZOGXK+lcIhQSGhVf1BNAIaoDwVMfF9x4TGm4EzJFSC127LJCTHybg5M rx8Ojm/H8sLoqkfxmOpxr8Hvd4OyT50Bwmc1wXAdyOOYwAjDu1g= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net