$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: su/9TPLKuG6D2FbtmJRFH1K4L8m8nDkC2d8carLhbbI= Subject key identifier: CC:29:39:8F:90:1A:03:A1:B9:FD:F8:D4:A8:D9:5D:A5:96:11:08:B9 Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 3086EF227417CD0BCECB40FE4599131EFBA9F1AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 0207 Signing time: Wed 23 Apr 2025 23:11:21 +0000 Manifest this update: Wed 23 Apr 2025 23:06:21 +0000 Manifest next update: Sun 27 Apr 2025 03:10:21 +0000 Files and hashes: 1: 3130332e3136392e312e302f32342d3234203d3e20313432333235.roa (hash: QVwXZiEUDkzJTFJTP2kak0B1PFcbgFpWZtYiCacvLzc=) 2: 3130332e3136392e302e302f32342d3234203d3e20313432333235.roa (hash: BHsnMPpdFZL0d9XOfOmW0tnCHE686u/F/UGOnWHulsY=) 3: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: JsoINCPsCJ06EiCMiitzyU480i45+JoHMqT7QAihutQ=) 4: 3130332e3136392e302e302f32332d3234203d3e20313432333235.roa (hash: kS5BqB0fQsybN4YzA6LLybAUUgYhEkwegd5mZxZdL2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:86:ef:22:74:17:cd:0b:ce:cb:40:fe:45:99:13:1e:fb:a9:f1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Apr 23 23:06:21 2025 GMT Not After : Apr 27 03:10:21 2025 GMT Subject: CN=CC29398F901A03A1B9FDF8D4A8D95DA5961108B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:43:eb:f8:6e:82:9f:47:8b:2f:54:3e:1a: 7d:2b:f7:bf:e9:16:7d:01:f1:01:ca:20:3b:97:c3: 98:94:52:ee:4f:cf:1a:77:7d:65:0b:f7:a8:62:4e: 9e:de:b4:30:55:79:50:16:db:a4:4b:a2:22:43:e5: c4:71:54:3a:bd:41:c6:bc:fe:78:b7:a9:64:8c:3f: 2f:7e:08:b7:46:2d:b6:03:e1:06:5d:0f:ea:f9:3b: 68:9d:54:09:0b:90:6b:d3:51:23:67:69:99:e6:ea: 05:f2:03:7f:6f:b7:f3:a5:fb:b8:8d:71:5c:09:f6: f5:0a:7f:72:e1:d4:c9:00:de:44:f2:d5:4e:63:70: d1:ca:f9:d4:cc:e1:44:4a:71:17:fc:bc:e1:d3:3d: 8d:cd:3d:1d:e0:8c:96:b9:7a:09:94:74:39:0d:80: dc:4b:25:c6:85:83:9f:9f:18:83:dd:17:56:af:ac: 2e:6e:46:dc:0a:2e:b8:4c:56:95:24:bb:0f:37:8c: e7:04:dc:6a:6a:e7:e8:2e:28:59:31:31:13:48:32: ad:8f:3b:e7:3b:3b:c8:0e:08:b1:ac:9c:41:fc:44: 3b:de:05:ad:d5:b3:e9:2a:97:ca:15:65:9b:35:1d: 3c:20:49:4e:2c:3e:c4:7e:0e:22:92:6a:8d:7d:b4: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:29:39:8F:90:1A:03:A1:B9:FD:F8:D4:A8:D9:5D:A5:96:11:08:B9 X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:50:ca:9e:7e:20:1c:6c:24:01:fa:ec:89:0f:eb:7a:73:dc: 4e:c2:09:c0:9f:bb:59:06:e1:89:bd:e4:b5:d5:15:3a:06:d4: 19:a2:cc:8b:99:b2:af:28:88:29:53:ca:55:15:42:7c:29:99: 47:d2:a4:d3:8f:80:84:46:0a:01:ab:e5:3e:aa:21:d9:fe:ca: 92:5e:22:f6:2f:c9:97:2d:9c:05:c0:5c:fc:5f:d8:9c:06:d6: 4e:eb:fe:bb:07:32:43:31:09:f9:40:e3:71:33:f6:51:08:58: 44:99:c4:18:3a:1e:03:2e:f3:58:98:13:22:e7:96:fe:1d:d8: e2:be:05:95:47:76:1b:a9:c8:29:36:a5:3f:7e:95:71:2f:11: 44:cd:1d:52:1f:6b:22:ac:d9:a2:b5:f0:78:38:e5:04:56:20: 9d:35:c0:85:ce:68:a0:51:9d:43:e4:5b:db:8f:79:ad:35:b4: cc:9a:8c:11:1b:68:3b:e4:17:33:b2:13:dd:55:2d:6b:7f:3f: 52:38:7a:93:fd:5c:ac:1f:67:1a:86:e2:fc:74:d6:6f:0d:fa: 06:d2:0a:5c:e1:41:9a:ca:70:75:b3:ec:34:55:99:9e:3e:1a: 9b:1c:d7:ca:4a:4a:b8:7d:b8:eb:25:e1:97:16:83:dd:7a:bc: e4:73:44:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIbvInQXzQvOy0D+RZkTHvup8aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNTA0MjMyMzA2MjFaFw0yNTA0MjcwMzEwMjFaMDMxMTAvBgNV BAMTKENDMjkzOThGOTAxQTAzQTFCOUZERjhENEE4RDk1REE1OTYxMTA4QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1kPr+G6Cn0eLL1Q+Gn0r97/p Fn0B8QHKIDuXw5iUUu5Pzxp3fWUL96hiTp7etDBVeVAW26RLoiJD5cRxVDq9Qca8 /ni3qWSMPy9+CLdGLbYD4QZdD+r5O2idVAkLkGvTUSNnaZnm6gXyA39vt/Ol+7iN cVwJ9vUKf3Lh1MkA3kTy1U5jcNHK+dTM4URKcRf8vOHTPY3NPR3gjJa5egmUdDkN gNxLJcaFg5+fGIPdF1avrC5uRtwKLrhMVpUkuw83jOcE3Gpq5+guKFkxMRNIMq2P O+c7O8gOCLGsnEH8RDveBa3Vs+kql8oVZZs1HTwgSU4sPsR+DiKSao19tMK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzCk5j5AaA6G5/fjUqNldpZYRCLkwHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFQyp5+IBxsJAH67IkP63pz3E7CCcCfu1kG 4Ym95LXVFToG1BmizIuZsq8oiClTylUVQnwpmUfSpNOPgIRGCgGr5T6qIdn+ypJe IvYvyZctnAXAXPxf2JwG1k7r/rsHMkMxCflA43Ez9lEIWESZxBg6HgMu81iYEyLn lv4d2OK+BZVHdhupyCk2pT9+lXEvEUTNHVIfayKs2aK18Hg45QRWIJ01wIXOaKBR nUPkW9uPea01tMyajBEbaDvkFzOyE91VLWt/P1I4epP9XKwfZxqG4vx01m8N+gbS ClzhQZrKcHWz7DRVmZ4+Gpsc18pKSrh9uOsl4ZcWg916vORzRGM= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:04 2025 by rpki-client on console.sobornost.net