$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: qt0P11GsbfLYNtX4L6bsChttBcQWOzk520pnDPl2mV8= Subject key identifier: 8B:8C:B8:96:20:0B:2E:A4:35:55:F4:26:16:9E:CD:DB:41:6C:69:8E Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 2896553E26B290C68ED1344CFEDAEF6084216B16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 012A Signing time: Fri 25 Apr 2025 14:32:03 +0000 Manifest this update: Fri 25 Apr 2025 14:27:03 +0000 Manifest next update: Tue 29 Apr 2025 02:24:03 +0000 Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: syZBvNAl4SaJ6rx4LVOaTT+9yR8o9UPWhBROvrn3mMU=) 2: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: HXXkmJg/I3QWIjWzkJcUlI9v+MWRL/i42q5SSLfbvow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:96:55:3e:26:b2:90:c6:8e:d1:34:4c:fe:da:ef:60:84:21:6b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Apr 25 14:27:03 2025 GMT Not After : Apr 29 02:24:03 2025 GMT Subject: CN=8B8CB896200B2EA43555F426169ECDDB416C698E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:b6:71:99:c7:b1:17:05:c4:f4:d7:b4:bb: 63:64:a8:be:82:7f:0c:3b:74:81:85:8e:89:6c:df: 5f:c7:ca:e3:f6:ff:b9:f2:dd:42:1c:5e:35:69:79: 24:29:97:5a:9a:58:eb:a7:aa:ee:5e:cb:48:b1:52: 02:5f:f5:6f:53:58:11:5f:09:6d:f2:e7:2c:e0:69: 00:cc:61:d7:af:85:03:88:e5:4a:65:88:25:b2:20: a1:07:b5:c2:da:34:cc:5c:3f:90:4d:fe:76:66:e0: b2:90:cb:50:4c:fb:20:44:c2:b4:0c:df:83:ee:df: 70:ad:47:11:93:8d:c9:c6:10:f9:97:ee:f5:a2:ac: c6:4f:e5:df:d0:e2:a7:de:91:29:3d:c4:de:bc:40: 2c:47:4c:fa:0c:9f:05:2d:e7:fb:ed:28:b3:d6:92: 0a:00:b2:68:9a:ad:28:2f:ad:57:78:92:2e:57:31: a9:57:30:bc:f1:db:a2:67:81:5b:5e:a7:dd:9b:4a: b8:83:ae:09:16:5c:90:14:ff:93:4d:e7:14:85:e3: cb:19:b5:ee:2e:9c:c7:41:71:df:32:bd:5a:80:43: 1d:d4:cc:fb:19:73:65:ab:69:ed:0c:a5:90:ed:28: a3:f4:32:59:89:13:f4:23:ea:97:14:39:9f:c2:ce: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:B8:96:20:0B:2E:A4:35:55:F4:26:16:9E:CD:DB:41:6C:69:8E X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:99:70:72:39:92:e2:a8:80:cf:28:f0:0b:5e:87:df:26:62: 59:d5:e4:88:ab:08:12:43:fc:86:26:97:50:4f:03:46:0f:29: 66:51:3f:23:92:be:5b:8c:1b:d6:4e:85:5a:aa:0d:cf:a2:df: 14:f1:63:70:01:4b:18:f8:07:fc:b7:18:70:1b:26:0d:90:1e: a6:bd:39:fb:84:dc:cf:84:6d:78:1c:9c:8a:7e:47:6e:eb:ec: a6:ec:27:ed:83:4b:d1:fe:c6:76:25:23:0f:15:66:64:27:f0: 02:13:6d:dc:db:95:07:40:bb:94:cd:a0:6b:81:9b:5b:3f:6e: a6:8b:76:48:43:12:0e:3a:a7:cc:8b:6c:b5:4e:a9:0d:96:ca: 0d:67:ac:58:32:bc:f1:8b:55:4e:15:ad:2a:0d:92:f0:ed:4b: e4:5c:d8:11:18:d8:67:d2:20:7e:1d:c0:bc:fe:8a:d7:e5:1f: d7:63:62:14:fb:c9:67:d3:78:e4:87:c1:4f:20:b8:2b:5b:d4: 8f:db:7d:44:fb:88:d9:e0:d8:7e:05:27:2d:cc:43:22:92:34: 5e:3c:30:30:3a:06:cd:62:89:91:a6:bf:85:07:8f:df:81:0b: d2:80:e0:0b:25:8f:a1:01:d3:88:cb:37:34:3b:01:cc:43:59: 00:b0:4d:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJZVPiaykMaO0TRM/trvYIQhaxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTA0MjUxNDI3MDNaFw0yNTA0MjkwMjI0MDNaMDMxMTAvBgNV BAMTKDhCOENCODk2MjAwQjJFQTQzNTU1RjQyNjE2OUVDRERCNDE2QzY5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChQLZxmcexFwXE9Ne0u2NkqL6C fww7dIGFjols31/HyuP2/7ny3UIcXjVpeSQpl1qaWOunqu5ey0ixUgJf9W9TWBFf CW3y5yzgaQDMYdevhQOI5UpliCWyIKEHtcLaNMxcP5BN/nZm4LKQy1BM+yBEwrQM 34Pu33CtRxGTjcnGEPmX7vWirMZP5d/Q4qfekSk9xN68QCxHTPoMnwUt5/vtKLPW kgoAsmiarSgvrVd4ki5XMalXMLzx26JngVtep92bSriDrgkWXJAU/5NN5xSF48sZ te4unMdBcd8yvVqAQx3UzPsZc2Wrae0MpZDtKKP0MlmJE/Qj6pcUOZ/CztrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi4y4liALLqQ1VfQmFp7N20FsaY4wHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWZcHI5kuKogM8o8Ateh98mYlnV5IirCBJD /IYml1BPA0YPKWZRPyOSvluMG9ZOhVqqDc+i3xTxY3ABSxj4B/y3GHAbJg2QHqa9 OfuE3M+EbXgcnIp+R27r7KbsJ+2DS9H+xnYlIw8VZmQn8AITbdzblQdAu5TNoGuB m1s/bqaLdkhDEg46p8yLbLVOqQ2Wyg1nrFgyvPGLVU4VrSoNkvDtS+Rc2BEY2GfS IH4dwLz+itflH9djYhT7yWfTeOSHwU8guCtb1I/bfUT7iNng2H4FJy3MQyKSNF48 MDA6Bs1iiZGmv4UHj9+BC9KA4Aslj6EB04jLNzQ7AcxDWQCwTZ4= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net