$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: d7d6HBtvGnIl0/Q73nHyUWQNCm0bRaEzZekRzNY8Nmc= Subject key identifier: 14:3C:3C:6A:D4:C3:EF:E9:E8:A0:5C:EE:F4:A2:23:94:96:99:88:E4 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 249C32948738BDE253C511D22174C1F6EC4D1ED0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: 80 Signing time: Wed 23 Apr 2025 09:02:00 +0000 Manifest this update: Wed 23 Apr 2025 08:57:00 +0000 Manifest next update: Sat 26 Apr 2025 19:39:00 +0000 Files and hashes: 1: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: YzMeBHl/gp0hPsD74Syrnw/fYYcZ9K46SBc/IU62Y+g=) 2: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: XtPU1LVNN/xxVQLRFWa7uZ8wkkl9eUKnD9dLl+hLcKY=) 3: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: ihMnpcM8C+9KA0tMwmz+wN2Pjt87gWD8o1eHc6RRFFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9c:32:94:87:38:bd:e2:53:c5:11:d2:21:74:c1:f6:ec:4d:1e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Apr 23 08:57:00 2025 GMT Not After : Apr 26 19:39:00 2025 GMT Subject: CN=143C3C6AD4C3EFE9E8A05CEEF4A22394969988E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:ba:a9:f2:48:ae:04:53:27:a7:01:0c:81: 23:c1:fc:b4:62:06:09:7e:f6:3c:73:bf:6d:4f:09: b7:e5:eb:c7:cc:7b:9d:5e:ae:63:5b:20:56:9a:d0: ee:85:ee:eb:54:f1:d0:22:f2:79:ca:84:32:a5:2b: 6c:f2:43:d0:08:59:bc:c7:5b:fb:ad:b4:73:22:b3: f4:e4:e2:58:89:f4:6d:b0:e2:b7:b0:e1:a0:e9:07: 51:5d:13:ae:27:9d:32:d1:6c:9f:c8:25:b4:d8:54: 73:27:80:cd:3e:c8:84:72:b7:80:1f:6c:cc:28:98: 66:38:41:90:d3:08:9e:2b:56:74:88:0b:78:b1:89: f5:83:6c:94:7b:9b:d6:ee:87:c3:ac:47:f6:23:17: bd:b6:f5:63:c5:cf:e8:02:29:6f:25:db:41:68:38: 06:69:29:23:ff:86:a1:de:bb:f6:4a:d8:52:30:50: 64:32:81:2e:52:98:47:ab:de:0f:fc:7c:30:f1:e0: 65:ee:4b:ba:16:03:cc:07:56:54:ff:e9:60:1d:0a: d3:88:4f:eb:81:b8:6c:03:55:86:91:34:3f:d5:48: 8a:70:3c:13:01:f9:38:65:14:1b:cc:a8:c8:6e:0e: 04:2d:d6:61:a1:10:57:c0:d5:5e:a6:fb:ef:32:ff: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3C:3C:6A:D4:C3:EF:E9:E8:A0:5C:EE:F4:A2:23:94:96:99:88:E4 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8c:37:28:8a:eb:3a:fc:41:c6:12:f9:ed:a4:ac:c3:28:9d: 47:9d:ac:45:db:05:13:5f:08:3b:35:64:c5:c9:84:b9:07:49: a0:a3:90:39:50:6c:44:d6:7f:02:a4:7d:6b:82:b9:c6:88:71: ef:cf:e2:b8:42:ef:81:9f:f7:42:88:c3:a4:5d:2a:24:d6:f9: d4:d5:6c:05:98:30:08:eb:9b:cc:9c:4c:f5:c1:eb:7e:1c:e4: b4:86:17:1a:77:48:c4:70:44:23:6f:2f:a0:c6:c2:2b:03:0f: 73:a6:31:3c:bc:ab:2f:4a:fb:db:3c:34:7d:f0:3c:80:4b:40: 6d:d2:0d:dd:f4:81:f5:f6:ef:0c:f3:19:33:f9:3b:34:4e:76: 62:45:32:dc:9c:37:b6:2d:08:54:e3:c5:59:40:b8:60:34:4f: df:dd:c0:c8:c9:8d:8d:b6:42:70:1c:c5:b7:2a:78:d0:82:7d: 05:c6:15:69:90:22:d9:ae:e4:b4:65:78:6b:28:d4:17:b1:ae: 01:81:03:be:e4:ba:fa:b3:e4:10:3c:d3:51:24:fb:bc:88:12: b0:90:ed:46:83:dc:48:59:9d:32:a3:fc:22:41:d1:40:90:fd: 45:03:c9:65:ef:c3:7d:ce:0a:40:6c:9f:0f:8c:be:71:53:ad: 6d:1e:75:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJwylIc4veJTxRHSIXTB9uxNHtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTA0MjMwODU3MDBaFw0yNTA0MjYxOTM5MDBaMDMxMTAvBgNV BAMTKDE0M0MzQzZBRDRDM0VGRTlFOEEwNUNFRUY0QTIyMzk0OTY5OTg4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2grqp8kiuBFMnpwEMgSPB/LRi Bgl+9jxzv21PCbfl68fMe51ermNbIFaa0O6F7utU8dAi8nnKhDKlK2zyQ9AIWbzH W/uttHMis/Tk4liJ9G2w4rew4aDpB1FdE64nnTLRbJ/IJbTYVHMngM0+yIRyt4Af bMwomGY4QZDTCJ4rVnSIC3ixifWDbJR7m9buh8OsR/YjF7229WPFz+gCKW8l20Fo OAZpKSP/hqHeu/ZK2FIwUGQygS5SmEer3g/8fDDx4GXuS7oWA8wHVlT/6WAdCtOI T+uBuGwDVYaRND/VSIpwPBMB+ThlFBvMqMhuDgQt1mGhEFfA1V6m++8y/zKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFDw8atTD7+nooFzu9KIjlJaZiOQwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqMNyiK6zr8QcYS+e2krMMonUedrEXbBRNf CDs1ZMXJhLkHSaCjkDlQbETWfwKkfWuCucaIce/P4rhC74Gf90KIw6RdKiTW+dTV bAWYMAjrm8ycTPXB634c5LSGFxp3SMRwRCNvL6DGwisDD3OmMTy8qy9K+9s8NH3w PIBLQG3SDd30gfX27wzzGTP5OzROdmJFMtycN7YtCFTjxVlAuGA0T9/dwMjJjY22 QnAcxbcqeNCCfQXGFWmQItmu5LRleGso1BexrgGBA77kuvqz5BA801Ek+7yIErCQ 7UaD3EhZnTKj/CJB0UCQ/UUDyWXvw33OCkBsnw+MvnFTrW0edeM= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:11 2025 by rpki-client on console.sobornost.net