$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: o/3YP2hRfXN9JUDjIjVVauUkbjndLpC2qHSR9c3MmWc= Subject key identifier: E1:E6:D0:C4:F6:0E:56:CA:BC:28:B4:A6:DA:91:F4:6A:4C:99:34:96 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 1A409504B3BD532EAA12792810838B7370F0BFED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: B1 Signing time: Thu 24 Apr 2025 11:41:48 +0000 Manifest this update: Thu 24 Apr 2025 11:36:48 +0000 Manifest next update: Sun 27 Apr 2025 14:49:48 +0000 Files and hashes: 1: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) 2: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: iU3lzmFen+OlXTmU1SDr1oT9GQkvxIbouRMu9spPtFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:40:95:04:b3:bd:53:2e:aa:12:79:28:10:83:8b:73:70:f0:bf:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Apr 24 11:36:48 2025 GMT Not After : Apr 27 14:49:48 2025 GMT Subject: CN=E1E6D0C4F60E56CABC28B4A6DA91F46A4C993496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:c0:cb:f7:f7:66:a0:bc:19:b5:c6:8a:bc: 66:bd:e5:62:d4:16:c7:59:1c:8b:2c:4e:45:4f:5f: e4:5c:9b:f0:12:fa:af:68:55:28:e5:01:a5:40:03: 5a:be:f7:c4:01:63:6c:cf:55:56:48:52:c2:7c:3f: 17:90:83:7b:3a:0b:48:d7:cd:01:ec:d2:e9:f2:71: 6a:1e:d8:dc:f0:a2:46:34:49:e4:91:60:ee:e1:52: 2a:e7:84:42:9c:72:a0:6b:57:39:7e:4c:89:98:5c: ea:7e:e4:72:6f:06:f7:a7:4d:0e:14:4a:54:7f:2e: 29:03:45:a1:b8:cc:0f:16:50:65:b9:40:f3:c0:1f: a7:f4:f9:66:32:5d:d6:bf:c1:92:4a:1e:c4:87:13: cc:b1:40:c4:cf:4a:9d:80:06:0e:eb:63:95:0c:21: 46:d8:53:3b:f3:7c:e9:5e:46:ae:73:78:53:7d:67: 6a:59:c6:9f:12:ed:1d:67:b4:37:d5:73:d9:31:c4: 6c:a5:be:ad:c3:92:b1:bf:b2:5e:8e:30:16:89:0d: c3:a2:f0:0c:0b:95:04:b9:eb:0e:97:bb:bd:3b:90: b5:45:6f:12:67:1f:df:0f:d3:a0:c7:9c:9f:48:81: 3b:76:28:d1:6c:b6:1a:a0:42:89:21:0c:9a:99:95: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E6:D0:C4:F6:0E:56:CA:BC:28:B4:A6:DA:91:F4:6A:4C:99:34:96 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ef:a1:0c:ff:34:ae:23:62:c1:84:03:e0:5f:3b:ad:d2:6d: 90:1f:5d:d4:dc:85:44:49:df:dc:6f:6f:7c:7f:a9:2e:2f:61: 65:5d:db:8d:49:a1:b4:aa:ee:da:90:3a:2b:31:12:00:aa:5e: 62:54:39:75:e4:a0:41:1d:75:42:2b:48:02:df:cc:90:24:18: aa:73:c9:ab:b4:13:68:a1:72:79:2b:a9:93:a8:5e:63:7b:c9: 34:6a:0a:08:9c:3c:86:c0:c5:8f:fa:67:af:24:cc:2e:53:1f: 89:7d:67:a9:81:7a:7c:20:7b:53:06:77:05:b2:98:7a:81:17: ea:6f:76:11:94:9e:e4:86:2a:64:bc:57:64:98:56:45:62:e5: b4:12:23:d0:0a:f5:9e:37:77:e7:0b:19:f3:be:b3:0b:83:3b: 3e:80:b1:d1:62:77:55:09:8a:be:43:fe:36:5a:41:43:f0:97: 86:00:fb:67:27:af:3f:dc:52:0a:b1:dc:29:dd:ca:c0:7e:4a: e8:8d:92:79:6c:61:24:b5:f3:f2:0a:8d:d2:66:2f:5b:8e:3b: 3e:84:94:6c:68:a2:f1:56:24:5d:3c:18:fc:c1:a2:69:e1:de: cd:d4:3a:68:c4:07:a5:86:23:07:73:e7:29:52:81:1d:bb:02: af:f6:41:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkCVBLO9Uy6qEnkoEIOLc3Dwv+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTA0MjQxMTM2NDhaFw0yNTA0MjcxNDQ5NDhaMDMxMTAvBgNV BAMTKEUxRTZEMEM0RjYwRTU2Q0FCQzI4QjRBNkRBOTFGNDZBNEM5OTM0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaM8DL9/dmoLwZtcaKvGa95WLU FsdZHIssTkVPX+Rcm/AS+q9oVSjlAaVAA1q+98QBY2zPVVZIUsJ8PxeQg3s6C0jX zQHs0unycWoe2NzwokY0SeSRYO7hUirnhEKccqBrVzl+TImYXOp+5HJvBvenTQ4U SlR/LikDRaG4zA8WUGW5QPPAH6f0+WYyXda/wZJKHsSHE8yxQMTPSp2ABg7rY5UM IUbYUzvzfOleRq5zeFN9Z2pZxp8S7R1ntDfVc9kxxGylvq3DkrG/sl6OMBaJDcOi 8AwLlQS56w6Xu707kLVFbxJnH98P06DHnJ9IgTt2KNFsthqgQokhDJqZlXC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ebQxPYOVsq8KLSm2pH0akyZNJYwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXvoQz/NK4jYsGEA+BfO63SbZAfXdTchURJ 39xvb3x/qS4vYWVd241JobSq7tqQOisxEgCqXmJUOXXkoEEddUIrSALfzJAkGKpz yau0E2ihcnkrqZOoXmN7yTRqCgicPIbAxY/6Z68kzC5TH4l9Z6mBenwge1MGdwWy mHqBF+pvdhGUnuSGKmS8V2SYVkVi5bQSI9AK9Z43d+cLGfO+swuDOz6AsdFid1UJ ir5D/jZaQUPwl4YA+2cnrz/cUgqx3CndysB+SuiNknlsYSS18/IKjdJmL1uOOz6E lGxoovFWJF08GPzBomnh3s3UOmjEB6WGIwdz5ylSgR27Aq/2QYQ= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:48 2025 by rpki-client on console.sobornost.net