$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: U8UmIEFTl/kp1XvBnsMGX4oEWhYEU7dhBofL7VARtos= Subject key identifier: DA:64:BF:AC:95:34:84:E3:4F:E0:5D:E9:5C:2B:36:28:C2:32:78:F6 Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 4D0EA1904854A752F224B6F2812BB08989ED63D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 0441 Signing time: Thu 24 Apr 2025 08:01:24 +0000 Manifest this update: Thu 24 Apr 2025 07:56:24 +0000 Manifest next update: Sun 27 Apr 2025 16:36:24 +0000 Files and hashes: 1: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: i5iOPO5Jsn05UVRMGjnGNAX+lzhXKEHOjd501VzDCF4=) 2: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: XaJkhpMWFfQiHoigSzAOeB9OLJw8Q/0siNpjbvDEMi4=) 3: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: M4514PXfJTPhQt4OlK6IndpXXY1NhEUELHDBA5WVyuc=) 4: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: bF3yNWnrobMt6M6WVmO7fz+aU3HM2Cfravonu1UTCBk=) 5: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: 7zla6i/CdhAJ+rkrr0QnJT3TEbat42oScFtFbp306GQ=) 6: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: lJMQNYucnJrPY3dSbvBo/L6VOBHJNLkr/8+rBT1rHAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0e:a1:90:48:54:a7:52:f2:24:b6:f2:81:2b:b0:89:89:ed:63:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Apr 24 07:56:24 2025 GMT Not After : Apr 27 16:36:24 2025 GMT Subject: CN=DA64BFAC953484E34FE05DE95C2B3628C23278F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:ee:2b:ff:6d:c5:56:3d:52:bc:20:a4:aa: 26:9b:12:cf:de:b8:21:f1:f4:83:52:b5:c1:ce:0a: 12:ed:cd:77:d6:a5:94:51:5f:ea:31:5d:74:03:90: 85:70:e3:33:a0:1c:e9:64:f4:fa:45:c4:7a:a7:72: 68:c3:89:dd:39:24:ba:6b:c3:16:11:7b:75:88:6b: 33:4a:a4:8c:8d:6f:0e:e4:1d:00:03:6a:7c:0f:3a: a2:64:5d:3d:a2:35:30:b6:12:e1:f6:60:19:46:5a: b2:41:bd:63:3d:45:3e:c6:0b:a6:d1:c3:05:7f:0b: ec:46:39:54:23:60:23:49:9d:73:8f:30:6f:d6:f1: a6:90:21:0a:df:e9:94:93:e4:31:55:72:3d:32:ea: 5e:c8:a8:17:fa:8f:6e:c5:6c:e4:14:d0:cb:65:25: b8:fc:76:a7:49:b9:2e:89:b1:84:5f:70:82:6d:54: 53:9e:00:27:32:0b:77:1f:64:fa:10:27:13:d5:49: f1:98:25:af:60:20:44:a5:a4:af:63:ec:d4:36:f2: ce:ad:00:ec:38:ad:5e:0f:23:17:69:35:3e:42:3e: 47:bf:fb:d2:51:83:76:82:09:d7:b0:b0:80:3b:f2: f3:4b:86:61:e0:57:8b:34:f3:d6:0a:57:7f:4b:d1: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:64:BF:AC:95:34:84:E3:4F:E0:5D:E9:5C:2B:36:28:C2:32:78:F6 X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:23:4c:70:45:5d:a3:ef:7d:f4:ed:f3:5d:a2:ee:04:15:2c: 9f:38:d4:6d:8c:a3:32:28:52:09:45:8f:b6:ed:a8:6b:d9:10: 8d:1b:58:da:5f:13:32:5b:9a:28:21:2d:0f:63:34:64:89:72: 42:fc:c7:42:af:80:43:9b:b5:5e:b3:4e:6d:5b:e7:d4:2c:f6: 4c:56:a7:78:88:86:e3:bc:b8:a1:80:e6:ff:38:b7:be:ee:d7: 93:e9:3d:f6:3f:8a:7b:9a:b4:3a:15:3c:91:97:7e:9b:7c:28: 62:cb:43:84:54:b4:c7:ec:cc:b5:c3:80:44:a3:9e:98:1e:72: 63:79:38:a7:1d:08:5d:83:90:72:74:09:1f:75:a8:91:90:40: 37:e9:d0:e9:6c:5c:68:98:9a:1f:b3:f9:4c:45:a3:fd:85:4f: ea:ea:d7:67:9d:ec:3b:a4:ae:7e:da:ab:bf:d3:a0:38:db:b1: 59:2f:5d:f0:10:55:ed:d3:b7:ce:79:c4:f4:7c:8f:fb:96:e2: 69:1a:d5:c5:84:ba:77:3c:b0:d4:0e:73:37:62:e6:2d:a5:d6: 7e:8e:db:5f:10:82:2e:47:c0:3a:f2:f8:6a:ba:fe:ac:b3:22: 0b:2e:6f:47:e1:ba:e5:84:82:ff:5a:26:dc:fc:44:4f:a8:60: 96:09:d7:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQ6hkEhUp1LyJLbygSuwiYntY9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTA0MjQwNzU2MjRaFw0yNTA0MjcxNjM2MjRaMDMxMTAvBgNV BAMTKERBNjRCRkFDOTUzNDg0RTM0RkUwNURFOTVDMkIzNjI4QzIzMjc4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLO4r/23FVj1SvCCkqiabEs/e uCHx9INStcHOChLtzXfWpZRRX+oxXXQDkIVw4zOgHOlk9PpFxHqncmjDid05JLpr wxYRe3WIazNKpIyNbw7kHQADanwPOqJkXT2iNTC2EuH2YBlGWrJBvWM9RT7GC6bR wwV/C+xGOVQjYCNJnXOPMG/W8aaQIQrf6ZST5DFVcj0y6l7IqBf6j27FbOQU0Mtl Jbj8dqdJuS6JsYRfcIJtVFOeACcyC3cfZPoQJxPVSfGYJa9gIESlpK9j7NQ28s6t AOw4rV4PIxdpNT5CPke/+9JRg3aCCdewsIA78vNLhmHgV4s089YKV39L0ZYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2mS/rJU0hONP4F3pXCs2KMIyePYwHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkjTHBFXaPvffTt812i7gQVLJ841G2MozIo UglFj7btqGvZEI0bWNpfEzJbmighLQ9jNGSJckL8x0KvgEObtV6zTm1b59Qs9kxW p3iIhuO8uKGA5v84t77u15PpPfY/inuatDoVPJGXfpt8KGLLQ4RUtMfszLXDgESj npgecmN5OKcdCF2DkHJ0CR91qJGQQDfp0OlsXGiYmh+z+UxFo/2FT+rq12ed7Duk rn7aq7/ToDjbsVkvXfAQVe3Tt855xPR8j/uW4mka1cWEunc8sNQOczdi5i2l1n6O 218Qgi5HwDry+Gq6/qyzIgsub0fhuuWEgv9aJtz8RE+oYJYJ1zM= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net