$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json) Hash identifier: cSZKdWKfAkcvL0XGS+i/9lXu6aK4dy9EycVugf5u2wE= Subject key identifier: B3:E9:79:9E:17:36:B8:D2:A9:26:56:65:3F:AD:5D:B7:66:CA:21:7C Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 4213435146B456D6B698E1241EED4612251BDC93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft Manifest number: 0356 Signing time: Thu 24 Apr 2025 09:40:38 +0000 Manifest this update: Thu 24 Apr 2025 09:35:38 +0000 Manifest next update: Sun 27 Apr 2025 21:16:38 +0000 Files and hashes: 1: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: WndG/jUkpCoORhbP8kh5IaBNujm++RTOCpRYeXZv8zg=) 2: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: ILlvOWLN9Xs8cUbwHU8Z2NUUNxyuB2q6+J4DPU9EvmQ=) 3: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: wa+1RTscgoKKgYWFX2arn9cWcToBF6A/kXjZvyHLVV8=) 4: 3131372e3130332e36342e302f32322d3234203d3e203435373138.roa (hash: dcaXEHmtpvgdp2B+61+9NSsaEhu3dJ+pR5a99XJxHq0=) 5: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: VoMnlv1vt+phfoqqSj3NlhfZbmojrA8l7T65WTVbYMM=) 6: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: w1mWD70iTqDZcL+qWJT3UxUlTEt3Oeyv9uC8w3hj0HU=) 7: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: jZW9pP83pfMfhNQAbPKjYIQIf3owIxez3BQ7EEpmyu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:13:43:51:46:b4:56:d6:b6:98:e1:24:1e:ed:46:12:25:1b:dc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Apr 24 09:35:38 2025 GMT Not After : Apr 27 21:16:38 2025 GMT Subject: CN=B3E9799E1736B8D2A92656653FAD5DB766CA217C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:90:bd:06:0a:6e:65:f9:93:e0:e5:d8:3c: 19:9a:28:a0:3b:ff:c0:55:3c:2a:bc:af:21:72:66: 9c:a4:41:df:b8:90:e1:9b:07:1b:e2:5e:a9:d0:d2: e0:a0:bb:c9:36:43:46:d7:d2:84:d1:3e:8c:96:cb: d2:ac:ec:3e:0e:a1:51:ee:87:1a:cf:4d:31:06:41: 8a:48:86:34:31:9b:0b:26:6d:ce:26:a4:af:0e:91: 70:d7:0b:f9:80:31:9b:f3:71:93:e4:95:c5:c7:a4: 33:6d:90:ad:5b:e4:e7:af:43:85:3d:d3:3a:4b:1f: 57:e7:09:98:69:a3:aa:ea:03:d1:85:58:2a:2b:46: 7f:ed:c7:0b:f9:07:03:5d:01:45:6d:aa:c9:10:aa: 16:df:9a:45:c2:13:3e:e4:86:b2:90:53:4a:c2:75: db:db:21:09:3a:31:a6:f6:b4:e3:c3:99:43:c9:0c: 00:40:c8:ae:e5:a4:7b:91:85:56:64:58:96:53:e8: be:23:88:22:80:b1:a5:66:d3:db:6a:27:a2:6c:a7: 4a:df:4a:c7:9e:0b:6a:1b:ac:c9:1c:4f:ea:ea:fe: 8a:ff:92:30:c6:93:a0:f4:70:f4:61:6f:9c:d4:41: b0:84:21:e4:03:de:38:85:fb:91:67:22:c3:7c:25: e5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E9:79:9E:17:36:B8:D2:A9:26:56:65:3F:AD:5D:B7:66:CA:21:7C X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:45:07:df:1c:11:b7:fe:a9:ed:0b:11:36:8e:a9:99:0d:5c: 66:8f:7d:07:ec:06:d1:c9:ab:07:b2:2a:e5:b6:c5:e7:17:e1: 0f:f8:d9:f8:d6:df:0d:fc:6e:f5:42:17:ac:3e:61:33:f9:81: d0:94:7d:76:06:42:e3:06:5b:4d:65:f4:4c:23:d5:12:ff:f7: a5:cc:db:15:2b:b6:14:59:b6:02:2b:ad:8e:91:f5:b8:86:c1: 6f:a7:4a:5b:9f:c6:5f:3b:72:6a:40:3f:87:d0:cf:65:8e:80: c1:ec:88:5e:6b:d0:35:cc:28:c2:2b:d6:67:d4:dc:89:15:bb: 47:de:c3:8b:53:2d:33:08:2f:6a:a9:65:03:61:1d:76:b8:f6: 4f:2b:62:c6:af:df:80:fa:b3:95:4a:74:6f:28:fb:48:8d:17: 5b:41:59:a6:12:6d:ab:2c:24:a7:47:84:eb:0f:4e:cc:e1:0a: 32:88:51:ad:3f:a4:d3:b5:f9:d9:2a:f5:05:36:02:a8:5b:c0: f1:2b:3d:5c:d4:16:f6:8c:01:4c:5b:85:7f:2a:d9:a3:10:d9: 43:4d:93:47:26:65:61:0b:8e:6e:bc:71:77:44:01:d9:91:1d: 69:d5:26:86:ef:82:ab:7e:35:fa:0f:22:de:d6:1d:dd:e4:49: 4e:5f:a1:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhNDUUa0Vta2mOEkHu1GEiUb3JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNTA0MjQwOTM1MzhaFw0yNTA0MjcyMTE2MzhaMDMxMTAvBgNV BAMTKEIzRTk3OTlFMTczNkI4RDJBOTI2NTY2NTNGQUQ1REI3NjZDQTIxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUpC9BgpuZfmT4OXYPBmaKKA7 /8BVPCq8ryFyZpykQd+4kOGbBxviXqnQ0uCgu8k2Q0bX0oTRPoyWy9Ks7D4OoVHu hxrPTTEGQYpIhjQxmwsmbc4mpK8OkXDXC/mAMZvzcZPklcXHpDNtkK1b5OevQ4U9 0zpLH1fnCZhpo6rqA9GFWCorRn/txwv5BwNdAUVtqskQqhbfmkXCEz7khrKQU0rC ddvbIQk6Mab2tOPDmUPJDABAyK7lpHuRhVZkWJZT6L4jiCKAsaVm09tqJ6Jsp0rf SseeC2obrMkcT+rq/or/kjDGk6D0cPRhb5zUQbCEIeQD3jiF+5FnIsN8JeWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+l5nhc2uNKpJlZlP61dt2bKIXwwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0 MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZFB98cEbf+qe0LETaOqZkNXGaPfQfsBtHJ qweyKuW2xecX4Q/42fjW3w38bvVCF6w+YTP5gdCUfXYGQuMGW01l9Ewj1RL/96XM 2xUrthRZtgIrrY6R9biGwW+nSlufxl87cmpAP4fQz2WOgMHsiF5r0DXMKMIr1mfU 3IkVu0few4tTLTMIL2qpZQNhHXa49k8rYsav34D6s5VKdG8o+0iNF1tBWaYSbass JKdHhOsPTszhCjKIUa0/pNO1+dkq9QU2AqhbwPErPVzUFvaMAUxbhX8q2aMQ2UNN k0cmZWELjm68cXdEAdmRHWnVJobvgqt+NfoPIt7WHd3kSU5foaA= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net