$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: u5j3VjmfRmbKN3iF6UHJuA0qzynOncXXuBW53JrC5t4= Subject key identifier: 72:1C:AF:8B:2F:8D:49:DD:76:B3:70:DD:D3:A5:E6:7B:D1:65:85:A1 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 7A3C11532AE9B1BC66CA353D121CE55986979C2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: 98 Signing time: Thu 24 Apr 2025 13:02:52 +0000 Manifest this update: Thu 24 Apr 2025 12:57:52 +0000 Manifest next update: Sun 27 Apr 2025 20:50:52 +0000 Files and hashes: 1: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: xuY76Y5YojyHRszQvYgjymoABm2rD8EGhLW0peHfQ8A=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3c:11:53:2a:e9:b1:bc:66:ca:35:3d:12:1c:e5:59:86:97:9c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Apr 24 12:57:52 2025 GMT Not After : Apr 27 20:50:52 2025 GMT Subject: CN=721CAF8B2F8D49DD76B370DDD3A5E67BD16585A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:dd:1b:5b:da:a4:c3:59:e6:d5:8d:f2:c2:79: 39:d0:73:8e:cc:1c:5d:c9:ce:f6:0d:1a:0f:6f:f6: 5b:1e:34:a5:cf:64:70:77:75:d6:2a:ce:a6:fc:ec: 4c:b0:45:87:05:e3:b6:88:0b:c4:34:e5:db:66:f1: 12:ee:9d:49:39:b3:d3:88:c1:8b:7f:12:bc:ff:a5: d9:bc:11:3e:30:77:59:8e:7c:9d:33:04:84:14:44: 86:d9:31:c7:4d:a4:7f:75:4d:48:c2:75:d6:c2:bc: cc:54:40:9b:c0:1c:8a:04:35:5e:a8:34:04:b4:21: af:69:0b:08:02:de:ef:dc:24:c0:00:7c:85:51:ea: d2:33:97:b3:1b:ae:70:33:07:29:2d:a0:10:6c:1f: a0:06:c8:98:e9:a4:f4:d2:98:12:e3:23:2f:0f:0e: 82:de:98:3c:d6:01:91:84:74:9f:88:33:70:64:6a: d4:51:e8:84:67:30:a6:05:29:18:7f:d4:76:b2:ab: 78:50:0b:d9:7f:e0:87:d1:a1:75:5a:e9:16:2d:0f: ba:e9:1e:1d:02:de:7a:e0:a7:89:ee:63:4c:f8:91: e7:00:fc:8d:30:5b:ac:a8:f6:33:e4:56:3c:b1:c3: 0f:2b:a2:d2:89:db:52:43:81:ce:da:da:ef:89:5a: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1C:AF:8B:2F:8D:49:DD:76:B3:70:DD:D3:A5:E6:7B:D1:65:85:A1 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:91:85:46:23:30:6e:8a:97:77:94:2f:0c:f0:b9:d7:1b: 59:88:ca:a4:14:6c:57:de:3a:51:e4:05:fb:c0:b4:ae:84:21: 28:52:c6:be:38:b5:d4:a9:b6:25:25:dc:fc:44:91:10:64:03: c2:30:9d:f0:9e:27:45:31:19:0b:6b:c3:ab:f3:88:72:78:68: 99:f3:8c:f8:c2:76:47:f2:6c:97:e8:49:58:3a:0d:ca:d0:9b: 19:df:d2:65:0e:b0:96:a3:c9:8d:ea:a5:97:2b:2d:ff:61:01: 9f:3d:1f:cc:09:53:2d:6c:d4:83:4c:d2:e2:d7:a9:42:3f:1d: 3b:46:02:0c:5d:57:e4:9f:af:09:2a:9b:35:1a:fa:73:d4:98: 43:9a:fd:35:07:4f:f9:4c:f7:ce:15:6d:56:a9:0f:ec:84:0a: 6e:fc:7f:0f:29:f4:24:24:b7:ef:79:d7:d4:51:a0:f4:d2:f7: fe:cc:67:40:74:50:09:1a:c6:66:13:dc:b9:94:f1:70:b3:fa: 75:bb:9e:e3:4f:51:ff:c7:b0:f1:85:4b:76:60:08:68:a6:1c: 30:6d:e5:4e:f7:8a:da:6a:d8:b4:9a:96:b5:48:2a:b7:df:b4: 01:dd:e2:a5:e1:36:b6:bb:42:53:0c:a9:d8:99:bc:35:b5:40: 77:65:2c:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejwRUyrpsbxmyjU9EhzlWYaXnC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTA0MjQxMjU3NTJaFw0yNTA0MjcyMDUwNTJaMDMxMTAvBgNV BAMTKDcyMUNBRjhCMkY4RDQ5REQ3NkIzNzBEREQzQTVFNjdCRDE2NTg1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD53Rtb2qTDWebVjfLCeTnQc47M HF3JzvYNGg9v9lseNKXPZHB3ddYqzqb87EywRYcF47aIC8Q05dtm8RLunUk5s9OI wYt/Erz/pdm8ET4wd1mOfJ0zBIQURIbZMcdNpH91TUjCddbCvMxUQJvAHIoENV6o NAS0Ia9pCwgC3u/cJMAAfIVR6tIzl7MbrnAzByktoBBsH6AGyJjppPTSmBLjIy8P DoLemDzWAZGEdJ+IM3BkatRR6IRnMKYFKRh/1Hayq3hQC9l/4IfRoXVa6RYtD7rp Hh0C3nrgp4nuY0z4kecA/I0wW6yo9jPkVjyxww8rotKJ21JDgc7a2u+JWiFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchyviy+NSd12s3Dd06Xme9FlhaEwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtMkYVGIzBuipd3lC8M8LnXG1mIyqQUbFfe OlHkBfvAtK6EIShSxr44tdSptiUl3PxEkRBkA8IwnfCeJ0UxGQtrw6vziHJ4aJnz jPjCdkfybJfoSVg6DcrQmxnf0mUOsJajyY3qpZcrLf9hAZ89H8wJUy1s1INM0uLX qUI/HTtGAgxdV+SfrwkqmzUa+nPUmEOa/TUHT/lM984VbVapD+yECm78fw8p9CQk t+9519RRoPTS9/7MZ0B0UAkaxmYT3LmU8XCz+nW7nuNPUf/HsPGFS3ZgCGimHDBt 5U73itpq2LSalrVIKrfftAHd4qXhNra7QlMMqdiZvDW1QHdlLNU= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net