$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: Fe+u4CMYCjbfijEkyI5RnEJ+vsmWHtHW07PEkVTeSh4= Subject key identifier: D9:4D:32:DE:AD:99:7F:ED:5A:FC:86:45:BF:35:50:9E:98:F8:03:5A Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: CC7591744128FDA2A5B5936BFF3EA31AEFB7F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: 87 Signing time: Wed 23 Apr 2025 15:01:15 +0000 Manifest this update: Wed 23 Apr 2025 14:56:15 +0000 Manifest next update: Sun 27 Apr 2025 02:40:15 +0000 Files and hashes: 1: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: QnRJ2uTyElbf7k1wpeY2ebpOhKDECfc+5dRNroBDh1A=) 2: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: 8azGdsS6nwdFByJEsKJFeuJkknJX5/2A4vliUXi78+s=) 3: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: 26rnjK9eYkp33Y9bkl7edYflefIWXm8RJLQlXSnj6cQ=) 4: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: fSYAaBJeAhXypfTbKMG0EHTcxCrDe3+KTEel11RmWqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cc:75:91:74:41:28:fd:a2:a5:b5:93:6b:ff:3e:a3:1a:ef:b7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Apr 23 14:56:15 2025 GMT Not After : Apr 27 02:40:15 2025 GMT Subject: CN=D94D32DEAD997FED5AFC8645BF35509E98F8035A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:c9:de:24:e1:03:34:26:68:0d:a8:29:85: 48:a3:6d:60:9d:b6:8a:48:24:c5:32:3e:d7:8e:1e: 7b:43:fa:4a:e1:3f:ac:40:df:ab:38:60:c0:21:03: 38:ed:7d:53:a8:1e:aa:01:2f:d7:de:fd:61:fe:eb: 02:ff:98:f0:dd:ab:af:36:29:0c:cb:84:ff:77:f5: a2:2e:4c:0a:c2:8e:1d:fa:46:45:68:da:93:ca:76: 1f:a3:d0:3c:83:bc:1a:66:69:a9:6b:57:2d:23:d7: 4f:61:3b:b6:a2:6f:30:2a:d3:04:18:6c:83:32:fe: 8a:66:9b:8a:49:7c:3c:1d:8b:f8:4b:3d:53:15:e4: 57:7d:3d:b4:c4:2e:a4:77:e8:61:c3:be:d0:4f:a5: d1:f9:01:0c:39:b0:0d:31:82:39:ee:94:0c:2f:44: d0:47:1f:83:42:e8:6b:e4:ed:ef:e1:f3:56:e4:b0: 98:d2:67:0d:bf:34:53:b4:c1:41:10:2b:73:c3:36: 09:2a:02:f7:6f:ae:1a:b4:4b:7f:66:a1:2e:e5:fc: aa:30:7f:c8:57:a8:2a:9a:e1:43:58:6c:3c:d7:68: c8:d5:be:9a:3f:ee:95:18:ad:f3:49:43:6e:6a:5b: a6:86:7a:65:04:49:64:59:b7:d0:71:3b:fd:9a:76: 69:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4D:32:DE:AD:99:7F:ED:5A:FC:86:45:BF:35:50:9E:98:F8:03:5A X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a3:9d:a2:74:f5:fe:17:b7:cf:ed:93:01:8a:8c:78:cb:99: fa:4b:ba:21:2e:97:0d:99:94:d2:53:21:9d:b1:3c:b1:e4:99: 9d:14:7a:2b:41:f5:b0:9d:c1:28:c6:36:1b:24:29:43:6b:bb: 9d:7f:24:94:06:91:69:06:fe:a1:f8:12:fa:d7:b9:72:10:13: 34:0a:b6:c9:04:9e:52:2e:f5:e6:d1:da:e1:5b:7f:7b:01:60: 54:64:43:0c:4b:ab:68:ea:26:40:e1:3f:1c:11:11:0f:a7:0e: 8f:05:c4:8e:ea:56:ae:66:9b:08:fb:d8:65:2f:e6:56:d0:0f: 20:f7:62:4d:8e:a1:ce:cd:b8:c1:9a:bf:20:b0:56:7d:bd:d6: 3e:43:ad:ae:91:1f:2a:01:af:a4:17:76:de:69:8d:04:97:a6: 75:f2:60:af:fb:cc:a4:9f:0c:36:b6:c1:e4:46:59:35:61:59: d4:1b:a3:a9:b3:15:e5:7b:4f:fa:cf:e6:b2:4e:d5:92:f6:7d: 9d:6f:7c:b0:f5:e1:ee:b7:0a:36:fd:e8:5e:cb:12:cd:02:07: 21:96:a7:c2:70:0e:91:6c:b6:91:13:82:15:11:42:ab:e1:0f: d0:53:65:88:08:bd:14:17:74:36:ba:80:80:f8:b1:2e:22:05: f9:7d:a5:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMx1kXRBKP2ipbWTa/8+oxrvt/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTA0MjMxNDU2MTVaFw0yNTA0MjcwMjQwMTVaMDMxMTAvBgNV BAMTKEQ5NEQzMkRFQUQ5OTdGRUQ1QUZDODY0NUJGMzU1MDlFOThGODAzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyMneJOEDNCZoDagphUijbWCd topIJMUyPteOHntD+krhP6xA36s4YMAhAzjtfVOoHqoBL9fe/WH+6wL/mPDdq682 KQzLhP939aIuTArCjh36RkVo2pPKdh+j0DyDvBpmaalrVy0j109hO7aibzAq0wQY bIMy/opmm4pJfDwdi/hLPVMV5Fd9PbTELqR36GHDvtBPpdH5AQw5sA0xgjnulAwv RNBHH4NC6Gvk7e/h81bksJjSZw2/NFO0wUEQK3PDNgkqAvdvrhq0S39moS7l/Kow f8hXqCqa4UNYbDzXaMjVvpo/7pUYrfNJQ25qW6aGemUESWRZt9BxO/2admkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2U0y3q2Zf+1a/IZFvzVQnpj4A1owHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICjnaJ09f4Xt8/tkwGKjHjLmfpLuiEulw2Z lNJTIZ2xPLHkmZ0UeitB9bCdwSjGNhskKUNru51/JJQGkWkG/qH4EvrXuXIQEzQK tskEnlIu9ebR2uFbf3sBYFRkQwxLq2jqJkDhPxwREQ+nDo8FxI7qVq5mmwj72GUv 5lbQDyD3Yk2Ooc7NuMGavyCwVn291j5Dra6RHyoBr6QXdt5pjQSXpnXyYK/7zKSf DDa2weRGWTVhWdQbo6mzFeV7T/rP5rJO1ZL2fZ1vfLD14e63Cjb96F7LEs0CByGW p8JwDpFstpETghURQqvhD9BTZYgIvRQXdDa6gID4sS4iBfl9pfI= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:30 2025 by rpki-client on console.sobornost.net