$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: i/k/hAgALDp/hpuAmz6JNttm9777ti231taefdcvi0E= Subject key identifier: E9:B6:1A:F7:5A:96:B3:42:AE:AC:14:44:5A:5C:B5:70:FF:AB:6B:A2 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 65C5554377C3AA3FB01238D472A71A0A42832D4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 020B Signing time: Thu 24 Apr 2025 17:52:07 +0000 Manifest this update: Thu 24 Apr 2025 17:47:06 +0000 Manifest next update: Sun 27 Apr 2025 21:22:06 +0000 Files and hashes: 1: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) 2: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: qaUUk5XgZUEZNOWxmN359W4O6V7R4B+jgOAk7plfSTE=) 3: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c5:55:43:77:c3:aa:3f:b0:12:38:d4:72:a7:1a:0a:42:83:2d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Apr 24 17:47:06 2025 GMT Not After : Apr 27 21:22:06 2025 GMT Subject: CN=E9B61AF75A96B342AEAC14445A5CB570FFAB6BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:5d:47:39:41:38:7c:13:e3:e3:08:b6:55: 6e:6b:31:19:24:ef:aa:16:5d:47:7c:ac:a0:fe:8f: 36:00:e8:41:57:8f:1f:a4:22:85:77:55:8a:8c:b0: f1:ac:c2:4a:9e:25:37:62:11:3e:ff:50:3f:89:da: 34:27:d1:42:e3:fa:62:27:7c:f6:f6:d1:c0:c8:94: c5:17:40:af:21:26:5e:35:e1:ee:bf:ba:d8:e3:94: 93:ce:e2:f7:25:48:ee:33:3b:6e:4f:76:82:20:3c: 72:17:ca:aa:19:83:8a:2c:16:48:cf:7c:ea:02:2c: ae:69:60:60:b5:93:4f:df:45:6a:c1:bb:a0:00:70: 03:10:d2:cd:12:33:98:6d:61:da:0e:08:f8:b6:a7: 1b:0e:25:d8:bd:12:af:93:16:ca:10:7c:c7:de:d8: ae:20:22:6c:c1:fe:4f:2f:dc:62:a8:51:a1:fa:40: 68:37:40:fe:9b:aa:e7:16:0d:d0:11:48:46:f1:30: 20:12:d6:03:50:a4:ee:fa:ee:6e:0f:99:16:c8:a2: 7a:c3:3f:f6:00:3a:55:10:46:b1:3d:a6:39:a2:74: 1e:86:6e:08:83:b4:11:b7:3e:de:e5:16:62:2a:bd: 59:6d:0c:28:38:eb:4d:dc:59:72:ea:5b:ef:f9:e0: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B6:1A:F7:5A:96:B3:42:AE:AC:14:44:5A:5C:B5:70:FF:AB:6B:A2 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:54:69:f4:cf:e9:63:93:5c:21:d5:1d:a3:19:5f:07:06:6f: 3a:70:d7:34:fb:4c:48:c1:12:a6:86:14:2b:f9:31:d2:b2:43: 35:eb:52:72:fe:9b:5b:75:84:ff:48:68:51:c0:6e:fd:a9:d4: 7e:2d:13:a0:dc:3d:51:7a:59:bd:3a:03:21:ce:f8:73:c8:aa: 1e:34:c3:fc:56:0f:a1:6f:ca:11:a7:ef:94:c6:f0:f5:07:9d: a6:21:9c:48:3a:c1:2f:f0:4d:e0:c2:bf:b4:ae:d7:9a:4c:2a: 9a:4e:64:35:7c:69:91:1e:cd:68:ce:5f:2f:20:6b:6b:c5:02: 17:c4:da:89:5d:d3:ca:33:df:cf:96:72:fb:45:5d:a1:fc:6d: ce:1a:1d:19:43:d3:e7:c8:6e:e6:f2:d2:0f:87:c0:f7:ab:3a: 6f:d7:84:9c:05:c3:de:66:46:e1:11:6e:de:e1:38:d8:b9:65: 82:65:88:77:df:5d:64:47:d6:c0:62:f1:54:23:dd:73:89:8b: 1d:98:f3:a8:14:e5:34:ca:0e:8b:5e:78:2d:9a:fa:a6:05:b3: 8e:90:bd:87:28:50:65:b9:43:fa:f8:60:ca:42:7f:33:c7:a8: 01:2c:ff:d8:ad:63:ca:11:61:0a:32:b0:c1:0a:b2:5c:e8:d9: 93:ba:e3:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcVVQ3fDqj+wEjjUcqcaCkKDLU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTA0MjQxNzQ3MDZaFw0yNTA0MjcyMTIyMDZaMDMxMTAvBgNV BAMTKEU5QjYxQUY3NUE5NkIzNDJBRUFDMTQ0NDVBNUNCNTcwRkZBQjZCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOF1HOUE4fBPj4wi2VW5rMRkk 76oWXUd8rKD+jzYA6EFXjx+kIoV3VYqMsPGswkqeJTdiET7/UD+J2jQn0ULj+mIn fPb20cDIlMUXQK8hJl414e6/utjjlJPO4vclSO4zO25PdoIgPHIXyqoZg4osFkjP fOoCLK5pYGC1k0/fRWrBu6AAcAMQ0s0SM5htYdoOCPi2pxsOJdi9Eq+TFsoQfMfe 2K4gImzB/k8v3GKoUaH6QGg3QP6bqucWDdARSEbxMCAS1gNQpO767m4PmRbIonrD P/YAOlUQRrE9pjmidB6GbgiDtBG3Pt7lFmIqvVltDCg4603cWXLqW+/54BUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bYa91qWs0KurBREWly1cP+ra6IwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1UafTP6WOTXCHVHaMZXwcGbzpw1zT7TEjB EqaGFCv5MdKyQzXrUnL+m1t1hP9IaFHAbv2p1H4tE6DcPVF6Wb06AyHO+HPIqh40 w/xWD6FvyhGn75TG8PUHnaYhnEg6wS/wTeDCv7Su15pMKppOZDV8aZEezWjOXy8g a2vFAhfE2old08oz38+WcvtFXaH8bc4aHRlD0+fIbuby0g+HwPerOm/XhJwFw95m RuERbt7hONi5ZYJliHffXWRH1sBi8VQj3XOJix2Y86gU5TTKDoteeC2a+qYFs46Q vYcoUGW5Q/r4YMpCfzPHqAEs/9itY8oRYQoysMEKslzo2ZO6420= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net