$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: kFjmB32wFinElXbVHGS8IjBmoYdCQwq76lnHm7IFd20= Subject key identifier: 1D:95:6F:3C:86:B9:BB:25:B5:72:62:A1:7B:DF:9B:75:BF:D5:8A:C9 Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 259A1E583591602D676AFAF42842ECA60BC5F0CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 01DC Signing time: Thu 24 Apr 2025 13:32:14 +0000 Manifest this update: Thu 24 Apr 2025 13:27:14 +0000 Manifest next update: Sun 27 Apr 2025 17:46:14 +0000 Files and hashes: 1: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 2: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: KwoiM07Ap5BOKNwCK1Rbsd+YyvxAqfdXDQWJQqqXOlk=) 3: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 4: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 5: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9a:1e:58:35:91:60:2d:67:6a:fa:f4:28:42:ec:a6:0b:c5:f0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Apr 24 13:27:14 2025 GMT Not After : Apr 27 17:46:14 2025 GMT Subject: CN=1D956F3C86B9BB25B57262A17BDF9B75BFD58AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:8d:68:3d:0c:88:b2:a3:34:0e:c1:b4:bc: b9:9e:15:12:7a:f7:c0:b9:83:db:93:33:35:81:64: 8d:21:ea:32:32:95:a9:0e:ed:ec:f1:4b:54:6b:26: e5:4c:ed:94:a9:e4:55:73:2b:83:87:03:0f:9c:a0: 6b:06:8b:39:7d:31:96:80:43:1e:0b:99:34:21:96: b2:8a:ee:fb:de:5c:a8:f6:b0:fa:d1:4c:ff:bd:c7: 04:f7:a6:91:4d:13:3d:a9:cb:59:f6:d5:ae:b8:1c: c5:49:26:2a:06:f6:f2:5e:93:9b:82:fb:12:de:50: 6a:e6:b1:45:65:47:ad:41:3f:68:6e:18:a6:4a:20: 5e:05:4d:f1:d8:81:f9:5b:8d:77:fb:de:45:fb:96: ca:f3:6c:71:ea:a1:20:0b:fb:7b:9d:d5:ba:ed:58: ba:d8:40:c4:5e:ba:dd:ea:d0:37:09:29:e5:42:72: ef:6d:f1:a1:89:31:c3:89:13:2f:51:8c:64:ac:13: 11:63:bf:75:01:de:4b:ca:91:85:b5:70:58:a7:c0: 9e:a4:fa:27:f1:a3:e5:06:9e:0d:07:8a:a4:77:b5: 89:c2:05:82:78:a4:76:11:ec:85:1b:51:2a:0d:f5: 35:a6:ce:e4:d5:bd:1a:64:1f:d3:fe:eb:15:81:ea: 23:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:95:6F:3C:86:B9:BB:25:B5:72:62:A1:7B:DF:9B:75:BF:D5:8A:C9 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:08:0b:1e:3e:40:13:38:26:40:97:41:17:35:e4:5c:ad:75: 11:cc:31:98:58:c9:28:2d:72:13:25:62:76:8b:f9:52:0d:89: 69:be:a6:d1:80:09:ce:1e:a6:52:9c:04:32:1a:ca:fe:39:e3: 86:70:d0:75:b7:f9:07:c0:6c:9a:14:ef:55:78:20:84:88:b6: 24:4f:67:86:9c:eb:03:ef:3d:bb:fd:5b:70:cd:e2:f3:64:bf: d9:b2:26:97:c7:28:d2:46:6b:73:db:4c:cf:69:a5:b1:ed:80: a7:a4:f7:b6:08:97:c0:a2:d4:21:7b:da:47:be:69:b6:a6:8e: cf:c0:72:bd:6d:ee:21:9e:b1:9b:24:b9:e4:30:dc:1d:08:5b: e6:b5:6c:48:85:a7:6a:b2:b5:f1:2d:46:ad:1e:be:12:25:e7: 65:be:ae:1b:45:91:73:cb:ae:3b:e6:54:0b:97:df:a2:39:27: b0:e8:c9:49:23:1a:d1:08:25:a8:f9:54:93:56:54:e6:da:a8: 7c:c4:8a:30:ae:14:1a:db:2e:ac:84:63:40:4e:ec:5e:37:c7: cc:4a:32:ef:5b:1e:09:fe:c4:ef:1d:65:02:3d:2e:24:be:52: bc:c0:a9:a9:c0:65:c0:b0:7d:8c:e5:05:53:1f:36:1d:b0:24: 47:12:c6:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZoeWDWRYC1navr0KELspgvF8M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA0MjQxMzI3MTRaFw0yNTA0MjcxNzQ2MTRaMDMxMTAvBgNV BAMTKDFEOTU2RjNDODZCOUJCMjVCNTcyNjJBMTdCREY5Qjc1QkZENThBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQk41oPQyIsqM0DsG0vLmeFRJ6 98C5g9uTMzWBZI0h6jIylakO7ezxS1RrJuVM7ZSp5FVzK4OHAw+coGsGizl9MZaA Qx4LmTQhlrKK7vveXKj2sPrRTP+9xwT3ppFNEz2py1n21a64HMVJJioG9vJek5uC +xLeUGrmsUVlR61BP2huGKZKIF4FTfHYgflbjXf73kX7lsrzbHHqoSAL+3ud1brt WLrYQMReut3q0DcJKeVCcu9t8aGJMcOJEy9RjGSsExFjv3UB3kvKkYW1cFinwJ6k +ifxo+UGng0HiqR3tYnCBYJ4pHYR7IUbUSoN9TWmzuTVvRpkH9P+6xWB6iPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZVvPIa5uyW1cmKhe9+bdb/ViskwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8ICx4+QBM4JkCXQRc15FytdRHMMZhYySgt chMlYnaL+VINiWm+ptGACc4eplKcBDIayv4544Zw0HW3+QfAbJoU71V4IISItiRP Z4ac6wPvPbv9W3DN4vNkv9myJpfHKNJGa3PbTM9ppbHtgKek97YIl8Ci1CF72ke+ abamjs/Acr1t7iGesZskueQw3B0IW+a1bEiFp2qytfEtRq0evhIl52W+rhtFkXPL rjvmVAuX36I5J7DoyUkjGtEIJaj5VJNWVObaqHzEijCuFBrbLqyEY0BO7F43x8xK Mu9bHgn+xO8dZQI9LiS+UrzAqanAZcCwfYzlBVMfNh2wJEcSxmg= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net