$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: L2ubiz5pfvYZne43s4Lav1uYUUP/Fcq9qNSCJFMsH00= Subject key identifier: ED:EF:2A:BC:6E:06:3B:D5:28:68:44:FB:A1:4B:BC:05:6B:64:6B:D0 Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 70C662EE2E96418A0CA747DC8D1B3AA0A62F72B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 03A0 Signing time: Wed 23 Apr 2025 22:41:59 +0000 Manifest this update: Wed 23 Apr 2025 22:36:59 +0000 Manifest next update: Sun 27 Apr 2025 05:54:59 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: +emVWYMLLQfEwObe7zFKml6YXEDEz5VitmFS9JS3hfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c6:62:ee:2e:96:41:8a:0c:a7:47:dc:8d:1b:3a:a0:a6:2f:72:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Apr 23 22:36:59 2025 GMT Not After : Apr 27 05:54:59 2025 GMT Subject: CN=EDEF2ABC6E063BD5286844FBA14BBC056B646BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:3e:96:c9:76:e5:08:6e:4a:99:84:52:e9: 59:93:5f:a1:85:0c:64:7a:1a:a4:87:0e:fc:fb:2b: a8:0b:c8:58:f3:6b:d0:b3:2e:f8:35:34:06:70:5b: 4d:23:4d:c5:2d:7f:e1:e7:6e:6f:54:a7:e1:bd:2d: 59:ee:92:12:29:f4:74:24:3b:d4:48:b7:de:72:f4: 5e:de:e0:9e:4b:c6:c5:51:55:97:eb:8b:e0:54:9e: e7:73:81:37:e3:95:42:e0:bc:4c:93:2e:58:6a:b5: 81:28:6b:71:dd:e4:e6:3e:b4:ae:98:b2:b0:e2:47: 5e:9f:81:ed:e0:12:10:06:27:e9:db:ed:22:82:c0: 20:53:0e:cd:f4:8b:49:67:42:24:3a:0e:31:02:58: f1:27:7b:1c:9c:19:ad:dd:e6:b1:aa:39:a6:4d:71: 9c:b2:e1:e5:02:a6:c8:82:41:f8:54:99:86:c0:19: 71:62:f8:fa:52:00:d7:e7:60:b7:c3:9c:0e:88:0a: 52:7f:c0:1e:53:fe:e4:f7:c2:82:1f:fc:51:6e:b4: 82:8a:ad:70:f1:e3:fa:78:6b:35:30:de:15:f8:6a: 75:0d:17:0d:85:52:37:3c:27:8b:c7:f0:53:a6:52: 5c:f1:ac:da:e8:80:68:a3:79:6f:d4:21:19:4c:d8: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EF:2A:BC:6E:06:3B:D5:28:68:44:FB:A1:4B:BC:05:6B:64:6B:D0 X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:46:1d:67:19:e8:e3:ac:e8:c0:ab:9d:d4:de:01:9c:ef:f6: 62:0f:c8:ba:fc:38:69:29:62:01:d5:c9:ba:35:7b:cb:f9:7d: 35:5d:e3:1a:92:06:25:47:54:fb:84:2b:bc:32:cd:90:d4:68: db:21:9c:1d:33:dd:d0:b6:01:be:5c:e5:07:5b:e1:25:32:63: a9:72:5f:00:ef:a6:e9:f7:15:13:32:8a:c9:70:74:c8:43:a9: 51:b5:a7:7d:ab:cd:6d:3f:43:c2:6b:2b:d4:28:c2:2c:9c:83: 33:68:71:26:de:29:f2:16:c6:e0:e6:df:c2:2b:1f:c1:93:cd: 57:20:ae:91:1b:22:f5:b7:cd:0c:39:c3:62:e8:5f:c4:37:9e: cb:96:44:cb:c7:ef:d8:88:de:22:a1:ea:0b:f8:96:e4:84:60: 9c:71:a2:55:cb:cf:17:f3:0b:09:12:49:ce:b9:ac:48:f9:74: 30:a5:3c:88:78:50:02:3c:78:dd:a7:dc:79:e1:79:83:31:86: 54:3a:ab:72:58:88:63:56:8e:c6:ee:8f:58:38:d6:3a:89:5c: de:26:af:8a:36:f0:0d:0a:df:1d:a2:d4:f3:34:e3:64:2b:b0: be:2e:d6:09:29:15:5f:3b:c6:81:e2:4d:77:1c:5b:63:6f:95: 2f:f3:76:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMZi7i6WQYoMp0fcjRs6oKYvcrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTA0MjMyMjM2NTlaFw0yNTA0MjcwNTU0NTlaMDMxMTAvBgNV BAMTKEVERUYyQUJDNkUwNjNCRDUyODY4NDRGQkExNEJCQzA1NkI2NDZCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vj6WyXblCG5KmYRS6VmTX6GF DGR6GqSHDvz7K6gLyFjza9CzLvg1NAZwW00jTcUtf+Hnbm9Up+G9LVnukhIp9HQk O9RIt95y9F7e4J5LxsVRVZfri+BUnudzgTfjlULgvEyTLlhqtYEoa3Hd5OY+tK6Y srDiR16fge3gEhAGJ+nb7SKCwCBTDs30i0lnQiQ6DjECWPEnexycGa3d5rGqOaZN cZyy4eUCpsiCQfhUmYbAGXFi+PpSANfnYLfDnA6IClJ/wB5T/uT3woIf/FFutIKK rXDx4/p4azUw3hX4anUNFw2FUjc8J4vH8FOmUlzxrNrogGijeW/UIRlM2ORvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7e8qvG4GO9UoaET7oUu8BWtka9AwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1GHWcZ6OOs6MCrndTeAZzv9mIPyLr8OGkp YgHVybo1e8v5fTVd4xqSBiVHVPuEK7wyzZDUaNshnB0z3dC2Ab5c5Qdb4SUyY6ly XwDvpun3FRMyislwdMhDqVG1p32rzW0/Q8JrK9QowiycgzNocSbeKfIWxuDm38Ir H8GTzVcgrpEbIvW3zQw5w2LoX8Q3nsuWRMvH79iI3iKh6gv4luSEYJxxolXLzxfz CwkSSc65rEj5dDClPIh4UAI8eN2n3HnheYMxhlQ6q3JYiGNWjsbuj1g41jqJXN4m r4o28A0K3x2i1PM042QrsL4u1gkpFV87xoHiTXccW2NvlS/zdqg= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:02 2025 by rpki-client on console.sobornost.net