$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: l2kR1lfZLaMsWXtU8UJycxpW1stOigrKAAtn+KjLgyY= Subject key identifier: 8B:C1:49:A2:A8:93:31:96:E5:C5:7E:D7:6D:7A:5A:F8:9E:5D:7E:55 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 4BE205346D2AAB0A45226B0E9F97185E2EEA4663 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 04C9 Signing time: Wed 23 Apr 2025 22:02:11 +0000 Manifest this update: Wed 23 Apr 2025 21:57:11 +0000 Manifest next update: Sat 26 Apr 2025 22:38:11 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: slhG6aE/lNA4aRVSDQs/dfGcG5yIePIerNTIUaHIm2A=) 2: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: oBj3bCkQJo9rLrF9OGTGyTbSJXfw9cJXWAq2NJNWYEA=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: dqqK2b30QcWDUvsFT2ynFnDCTSvisXhj5I9h/iJg6fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 22:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e2:05:34:6d:2a:ab:0a:45:22:6b:0e:9f:97:18:5e:2e:ea:46:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Apr 23 21:57:11 2025 GMT Not After : Apr 26 22:38:11 2025 GMT Subject: CN=8BC149A2A8933196E5C57ED76D7A5AF89E5D7E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:14:17:6c:cd:f0:bf:17:80:f9:3a:ae:50:b7: 22:a3:73:74:aa:c9:02:8a:f6:5a:13:d3:a2:ab:34: 11:e9:58:49:98:27:36:27:4f:12:4f:b6:be:80:07: 61:97:24:2e:73:6b:c0:19:55:99:de:6a:bc:ad:78: 4f:e2:15:8d:f5:52:01:82:25:ac:a3:eb:fe:1f:a6: 19:66:22:e1:e9:65:6e:07:0a:ad:05:92:f5:1c:11: 0d:7a:65:61:2e:26:91:4e:18:5f:b3:75:ea:68:f0: 4e:82:4d:1d:bc:8d:ca:5a:34:eb:33:b4:e6:52:8a: b7:d3:e7:07:90:85:3a:3f:0c:9b:90:be:40:f9:cc: f6:30:dd:68:97:08:0d:1f:4e:59:3d:7b:66:22:cb: cf:a0:00:93:8c:8b:d0:a1:e3:0b:30:80:66:25:7f: 3e:d0:f9:83:ee:3e:2b:58:1a:14:6c:44:4c:80:f3: 99:84:4b:fc:4a:09:7b:32:65:34:a5:de:0a:48:85: 43:b4:8c:60:a4:80:cf:5e:d7:11:58:02:78:7a:57: e3:ca:c8:7f:c4:8a:1f:4e:5c:47:fa:9f:2a:38:e0: 48:86:8b:a0:87:30:c6:d5:20:83:bb:e9:2c:35:98: a5:08:8c:ed:13:5e:4f:79:1f:c1:02:e4:ec:68:90: c5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C1:49:A2:A8:93:31:96:E5:C5:7E:D7:6D:7A:5A:F8:9E:5D:7E:55 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:97:5b:f0:e1:7b:49:68:2a:34:a2:c6:a8:76:2e:47:48:b3: bb:69:1d:e5:76:aa:f1:81:72:c9:f3:00:44:ac:08:69:76:10: 67:d0:e8:ed:9a:2d:73:4a:bc:01:06:67:b1:44:e4:dd:1b:1d: 0d:94:ed:bd:94:f8:d1:14:3b:7a:35:d1:b1:02:c4:87:66:d5: e2:22:3a:0d:bb:0c:6a:3d:fa:87:b2:71:ee:62:89:b8:c0:71: 3c:c3:f2:01:e0:16:d9:ca:ba:03:3a:1c:82:08:03:54:94:78: 0c:36:7a:ae:fa:ad:56:4c:10:e2:e9:f5:b5:c6:a4:db:36:e8: cd:35:4f:c2:c5:3f:2b:5d:42:63:f5:3d:40:2d:25:af:5f:49: ec:ff:08:79:f7:05:39:cd:6c:9c:50:db:01:ec:76:a9:3b:60: ab:b8:79:1a:e2:8f:f1:4c:ff:52:e7:95:ae:b4:80:c1:53:bf: 66:bd:6f:d1:28:bf:e5:47:81:54:21:dc:d2:a2:3f:27:fa:51: 46:e8:11:ca:46:b1:1c:22:ae:cd:cf:09:0d:6c:12:25:e7:e2: 1e:a5:be:04:a7:11:ee:8a:f6:a4:22:55:bf:8c:cb:d1:fb:fd: f5:13:b2:00:fb:32:f1:11:8d:f4:e7:68:5d:b8:ce:11:96:c4: 3e:3a:ac:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+IFNG0qqwpFImsOn5cYXi7qRmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTA0MjMyMTU3MTFaFw0yNTA0MjYyMjM4MTFaMDMxMTAvBgNV BAMTKDhCQzE0OUEyQTg5MzMxOTZFNUM1N0VENzZEN0E1QUY4OUU1RDdFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7FBdszfC/F4D5Oq5QtyKjc3Sq yQKK9loT06KrNBHpWEmYJzYnTxJPtr6AB2GXJC5za8AZVZnearyteE/iFY31UgGC Jayj6/4fphlmIuHpZW4HCq0FkvUcEQ16ZWEuJpFOGF+zdepo8E6CTR28jcpaNOsz tOZSirfT5weQhTo/DJuQvkD5zPYw3WiXCA0fTlk9e2Yiy8+gAJOMi9Ch4wswgGYl fz7Q+YPuPitYGhRsREyA85mES/xKCXsyZTSl3gpIhUO0jGCkgM9e1xFYAnh6V+PK yH/Eih9OXEf6nyo44EiGi6CHMMbVIIO76Sw1mKUIjO0TXk95H8EC5OxokMVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8FJoqiTMZblxX7XbXpa+J5dflUwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGXW/Dhe0loKjSixqh2LkdIs7tpHeV2qvGB csnzAESsCGl2EGfQ6O2aLXNKvAEGZ7FE5N0bHQ2U7b2U+NEUO3o10bECxIdm1eIi Og27DGo9+oeyce5iibjAcTzD8gHgFtnKugM6HIIIA1SUeAw2eq76rVZMEOLp9bXG pNs26M01T8LFPytdQmP1PUAtJa9fSez/CHn3BTnNbJxQ2wHsdqk7YKu4eRrij/FM /1Lnla60gMFTv2a9b9Eov+VHgVQh3NKiPyf6UUboEcpGsRwirs3PCQ1sEiXn4h6l vgSnEe6K9qQiVb+My9H7/fUTsgD7MvERjfTnaF24zhGWxD46rLo= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:05 2025 by rpki-client on console.sobornost.net