$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft File: 25D788BD2A450C01354B9AB70826895FDFF56208.mft (raw, json) Hash identifier: n/s8WqchosuZEnPv7Nk1ZxaalY28X9HvDR0yfGD20vc= Subject key identifier: 20:5A:E7:22:72:19:76:E5:9A:5C:D2:18:F8:26:A9:0D:3B:FE:83:F8 Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208 Certificate serial: 23D9A718089582E8759AAA49201764EB06EA6E9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft Manifest number: 0318 Signing time: Wed 23 Apr 2025 23:01:01 +0000 Manifest this update: Wed 23 Apr 2025 22:56:01 +0000 Manifest next update: Sun 27 Apr 2025 07:32:01 +0000 Files and hashes: 1: 25D788BD2A450C01354B9AB70826895FDFF56208.crl (hash: gCPkYNf068cWdRVsKPU0iHRHMu+fgRKWTZQuzxfODpA=) 2: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: rd1DlMh/MYO7HpSHAI7Fm6/tPrgqiJvxbgj5UtMH0zE=) 3: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: fqCZ9+V4OhrivrL7rJsmVltpUel/D0iJtOWt/NWMlmg=) 4: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: wuLvX+Xgm0i3AJgZLRAJ8zSBRz4zFDFFXcC9P9aZOYA=) 5: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: LXUvF/9HV9LQjuPpMuWCi7neUUmU+exlVXTngKvHYow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d9:a7:18:08:95:82:e8:75:9a:aa:49:20:17:64:eb:06:ea:6e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208 Validity Not Before: Apr 23 22:56:01 2025 GMT Not After : Apr 27 07:32:01 2025 GMT Subject: CN=205AE722721976E59A5CD218F826A90D3BFE83F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:18:a1:af:a8:a5:52:b9:76:34:f8:c3:bc: 73:a6:ca:fb:b0:ab:ef:77:95:bc:f2:19:7c:65:6a: 56:0c:76:fe:3f:fa:8d:97:7e:26:6a:39:0c:ea:98: 35:63:b9:8c:cb:b0:49:71:c6:02:df:d3:fa:af:9f: de:a5:b5:99:91:34:40:ac:82:64:60:1a:42:17:bd: cc:8a:8a:f4:8a:6f:b4:b9:36:fa:9a:34:8c:f0:40: 14:17:8e:87:48:fc:fc:07:0e:0f:dd:ae:07:3c:97: d4:a9:62:3c:78:6e:a9:10:fc:99:9d:ac:a4:9d:52: f9:b2:11:ae:62:58:84:b2:3f:e2:a8:38:ef:81:af: dd:b2:43:c5:05:27:14:43:94:c5:e2:1c:c7:41:7c: 4d:c6:70:de:48:99:fb:e9:eb:22:9e:66:8e:87:3b: c9:52:de:e3:28:c8:8b:ec:08:2e:7b:e7:3f:59:65: 9e:7e:72:69:71:87:dc:bf:7f:44:3d:ae:28:f9:9f: c0:5f:16:ed:50:83:95:b6:b3:8a:36:37:63:cf:86: 6a:a9:54:9b:f4:0a:6d:0e:7f:0a:be:16:11:12:d1: de:b4:42:23:95:7b:ae:ea:ea:61:e7:9c:39:0d:70: be:b8:92:90:12:d0:f8:d8:90:34:66:40:3a:a7:79: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:E7:22:72:19:76:E5:9A:5C:D2:18:F8:26:A9:0D:3B:FE:83:F8 X509v3 Authority Key Identifier: keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ba:d9:51:17:ac:d4:fa:c3:29:69:e3:0e:46:22:82:95:e6: e7:c8:fd:53:3b:bc:9c:93:13:b2:b8:68:92:e0:da:bc:da:f8: 3d:39:6e:78:24:32:d4:b3:ed:31:4b:34:7b:48:76:d4:21:5e: a8:58:2f:94:f1:d3:5e:ab:6d:09:a2:92:2d:62:63:0b:a9:fb: 2c:db:7f:4e:7f:2f:14:d5:21:d2:81:ed:c8:65:51:ef:55:9b: 48:02:5d:bb:4d:d2:57:6a:75:fc:37:cd:ac:d5:39:23:34:83: 59:71:cc:9f:d5:3b:58:70:75:03:d3:69:0e:45:bb:40:2d:5b: 44:b4:50:07:6a:05:c3:85:dc:f7:73:6f:ef:b6:d6:41:43:a7: c2:5f:22:ee:45:80:32:cf:6f:49:24:f6:0a:37:e2:58:6d:3f: fc:7c:ff:08:e8:81:93:d0:49:ae:0a:69:3e:99:15:92:2f:f2: de:66:f4:88:0a:23:f0:0b:a8:5f:34:ca:1c:49:f4:48:6f:a5: 12:f8:3e:08:d6:75:58:1c:bf:12:2a:bd:a0:c9:c3:f2:26:93: f2:57:00:a3:e0:f7:19:94:57:2a:73:2c:5d:6b:32:f8:7d:af: a5:47:1f:8d:44:57:51:a9:10:ec:f6:75:e1:d2:0c:fc:9b:8a: 6f:de:92:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9mnGAiVguh1mqpJIBdk6wbqbp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZE RkY1NjIwODAeFw0yNTA0MjMyMjU2MDFaFw0yNTA0MjcwNzMyMDFaMDMxMTAvBgNV BAMTKDIwNUFFNzIyNzIxOTc2RTU5QTVDRDIxOEY4MjZBOTBEM0JGRTgzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/phihr6ilUrl2NPjDvHOmyvuw q+93lbzyGXxlalYMdv4/+o2XfiZqOQzqmDVjuYzLsElxxgLf0/qvn96ltZmRNECs gmRgGkIXvcyKivSKb7S5NvqaNIzwQBQXjodI/PwHDg/drgc8l9SpYjx4bqkQ/Jmd rKSdUvmyEa5iWISyP+KoOO+Br92yQ8UFJxRDlMXiHMdBfE3GcN5Imfvp6yKeZo6H O8lS3uMoyIvsCC575z9ZZZ5+cmlxh9y/f0Q9rij5n8BfFu1Qg5W2s4o2N2PPhmqp VJv0Cm0Ofwq+FhES0d60QiOVe67q6mHnnDkNcL64kpAS0PjYkDRmQDqneYUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIFrnInIZduWaXNIY+CapDTv+g/gwHwYDVR0j BBgwFoAUJdeIvSpFDAE1S5q3CCaJX9/1YggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmE3NjY1YS1iNTBiLTRhNDUtYThmOS0wZDY5YmQ3ZDc0M2QvMC8yNUQ3ODhCRDJB NDUwQzAxMzU0QjlBQjcwODI2ODk1RkRGRjU2MjA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZERkY1 NjIwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZhNzY2NWEtYjUwYi00YTQ1LWE4 ZjktMGQ2OWJkN2Q3NDNkLzAvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5 NUZERkY1NjIwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu62VEXrNT6wylp4w5GIoKV5ufI/VM7vJyT E7K4aJLg2rza+D05bngkMtSz7TFLNHtIdtQhXqhYL5Tx016rbQmiki1iYwup+yzb f05/LxTVIdKB7chlUe9Vm0gCXbtN0ldqdfw3zazVOSM0g1lxzJ/VO1hwdQPTaQ5F u0AtW0S0UAdqBcOF3Pdzb++21kFDp8JfIu5FgDLPb0kk9go34lhtP/x8/wjogZPQ Sa4KaT6ZFZIv8t5m9IgKI/ALqF80yhxJ9EhvpRL4PgjWdVgcvxIqvaDJw/Imk/JX AKPg9xmUVypzLF1rMvh9r6VHH41EV1GpEOz2deHSDPybim/ekkY= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:02 2025 by rpki-client on console.sobornost.net