$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft File: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft (raw, json) Hash identifier: dWFpMpZeny63AaqHjNILMM7xtdUZ6TvSNNi9ht3n4mU= Subject key identifier: 94:EC:F6:F8:5F:C6:45:AA:E2:80:8D:C5:AD:25:70:B7:51:10:21:E6 Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3 Certificate issuer: /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3 Certificate serial: 0DAD8359EC5147C2B14C06B391A5F4891E2EE48D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft Manifest number: 0223 Signing time: Fri 25 Apr 2025 18:22:21 +0000 Manifest this update: Fri 25 Apr 2025 18:17:21 +0000 Manifest next update: Mon 28 Apr 2025 23:06:21 +0000 Files and hashes: 1: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (hash: kwL1JREwxH10sgLMYdlWUdKS0D8gYxJYzVh+9DEMKo4=) 2: 3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (hash: Ai97/AeZ67d5F3AYWobNbu9wLgxWIRH2a6eXmHZgojQ=) 3: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (hash: 1AXu9VMwS+8knSVXl2hI8iHOcYa+VjnkUxjjL7VCI30=) 4: 40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl (hash: 5b+gC7KhYf6kvbiY6TwUkpXkZbLaWqE/GLMJSwYumcw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 23:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ad:83:59:ec:51:47:c2:b1:4c:06:b3:91:a5:f4:89:1e:2e:e4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3 Validity Not Before: Apr 25 18:17:21 2025 GMT Not After : Apr 28 23:06:21 2025 GMT Subject: CN=94ECF6F85FC645AAE2808DC5AD2570B7511021E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:df:d1:42:05:57:ba:05:15:56:d8:0d:97: 89:2b:b2:cd:a8:96:f9:8e:f4:bc:a6:ad:50:ad:5d: 72:22:27:7e:83:f2:be:61:8c:82:9c:c5:a0:6e:42: c7:62:2b:6c:0d:db:b2:df:2b:56:95:f9:c6:53:d2: a9:00:21:55:58:0e:cd:37:32:a8:cf:c3:71:29:52: 0f:5e:e6:42:72:b2:cf:07:ba:ca:41:65:71:32:7e: 38:ad:e1:ac:01:ef:78:75:e3:24:c4:31:13:86:47: d0:d7:60:5c:30:ea:31:c4:42:7b:5c:50:c9:fb:b2: d6:39:e3:76:0f:64:43:3d:76:e1:94:b7:13:03:d0: 50:fd:5e:91:2b:72:c1:26:80:04:c2:46:05:5d:0e: 6c:26:36:d2:8a:0f:bf:71:68:ba:5e:44:05:dc:aa: ab:17:88:75:fc:37:01:7d:49:da:4d:49:b2:be:62: e4:f2:b3:00:64:85:b0:27:b0:7a:52:32:66:91:d6: 8b:0f:15:9f:c1:5a:e3:11:18:d4:97:bc:86:a8:ad: 46:38:3d:15:0b:eb:ac:a8:56:d5:80:3c:cc:3d:c9: 6a:88:ea:e2:29:0e:0c:3f:dc:95:7d:fb:48:40:11: cf:c6:5f:9a:0a:9a:86:33:8f:16:5c:19:e7:88:74: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EC:F6:F8:5F:C6:45:AA:E2:80:8D:C5:AD:25:70:B7:51:10:21:E6 X509v3 Authority Key Identifier: keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c2:24:d4:00:b4:3e:a5:c6:1e:13:be:98:01:57:68:c1:2e: 1f:bf:6b:c3:55:32:73:83:1b:7a:e9:7b:c7:c2:03:8f:13:a8: 1d:a5:2e:b0:b7:1d:ed:b1:b3:16:8c:18:8a:30:84:5f:d6:54: 27:2a:76:c0:8e:02:e0:57:0f:59:b6:2d:dd:6a:0a:9c:96:1d: 22:e4:74:10:fb:f4:f3:c0:b5:9b:90:26:fa:dd:84:48:39:1b: c2:84:9b:4d:49:7d:b4:c1:50:fb:65:bd:bc:80:6f:07:3c:fe: 01:46:35:48:d8:e8:4b:36:70:7c:0d:b7:82:ea:60:d9:f3:d4: 03:05:9a:0e:5f:79:50:82:fd:8f:27:4f:af:51:f2:9c:7f:97: b8:df:a9:47:68:66:1c:42:67:89:a6:5b:bb:88:9d:95:ac:c9: 34:88:aa:a0:fb:9d:4a:8b:ea:74:84:37:cb:ec:f7:17:46:60: 2b:c0:97:8c:2f:a9:bc:4f:2b:2f:29:e5:1b:04:de:8d:64:d7: 1f:f4:56:76:b9:21:e0:9d:3b:b9:8a:2c:5d:42:35:7c:e3:65: 36:95:e7:0e:02:8a:84:8b:25:5c:6f:0e:f4:22:1b:86:4c:b7: cd:e4:18:d4:81:80:c1:ca:bf:8e:08:f7:bb:3d:37:17:01:1e: c8:53:bb:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDa2DWexRR8KxTAazkaX0iR4u5I0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0 NzBCNDFGMzAeFw0yNTA0MjUxODE3MjFaFw0yNTA0MjgyMzA2MjFaMDMxMTAvBgNV BAMTKDk0RUNGNkY4NUZDNjQ1QUFFMjgwOERDNUFEMjU3MEI3NTExMDIxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibN/RQgVXugUVVtgNl4krss2o lvmO9LymrVCtXXIiJ36D8r5hjIKcxaBuQsdiK2wN27LfK1aV+cZT0qkAIVVYDs03 MqjPw3EpUg9e5kJyss8HuspBZXEyfjit4awB73h14yTEMROGR9DXYFww6jHEQntc UMn7stY543YPZEM9duGUtxMD0FD9XpErcsEmgATCRgVdDmwmNtKKD79xaLpeRAXc qqsXiHX8NwF9SdpNSbK+YuTyswBkhbAnsHpSMmaR1osPFZ/BWuMRGNSXvIaorUY4 PRUL66yoVtWAPMw9yWqI6uIpDgw/3JV9+0hAEc/GX5oKmoYzjxZcGeeIdAe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlOz2+F/GRarigI3FrSVwt1EQIeYwHwYDVR0j BBgwFoAUQMBVPJCX7EpPI+7cBSBbxUcLQfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGNjNjllOS1lZjc0LTRiODEtOTFmNC03YmZkZjkzZjdiYWEvMC80MEMwNTUzQzkw OTdFQzRBNEYyM0VFREMwNTIwNUJDNTQ3MEI0MUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0NzBC NDFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRjYzY5ZTktZWY3NC00YjgxLTkx ZjQtN2JmZGY5M2Y3YmFhLzAvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVC QzU0NzBCNDFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnCJNQAtD6lxh4TvpgBV2jBLh+/a8NVMnOD G3rpe8fCA48TqB2lLrC3He2xsxaMGIowhF/WVCcqdsCOAuBXD1m2Ld1qCpyWHSLk dBD79PPAtZuQJvrdhEg5G8KEm01JfbTBUPtlvbyAbwc8/gFGNUjY6Es2cHwNt4Lq YNnz1AMFmg5feVCC/Y8nT69R8px/l7jfqUdoZhxCZ4mmW7uInZWsyTSIqqD7nUqL 6nSEN8vs9xdGYCvAl4wvqbxPKy8p5RsE3o1k1x/0Vna5IeCdO7mKLF1CNXzjZTaV 5w4CioSLJVxvDvQiG4ZMt83kGNSBgMHKv44I97s9NxcBHshTu/E= -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:24 2025 by rpki-client on console.sobornost.net