$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: KLgv3Xjbx1vlTShCM6w/WWnC6cQVYKOU3lctFE94OKs= Subject key identifier: 01:2A:F1:84:EA:8B:30:A9:F9:17:E7:26:35:AE:66:DE:B4:D2:A3:06 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 3D97E62077F86702B69011C6678468D5392910DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 0133 Signing time: Thu 24 Apr 2025 14:41:39 +0000 Manifest this update: Thu 24 Apr 2025 14:36:39 +0000 Manifest next update: Mon 28 Apr 2025 00:18:39 +0000 Files and hashes: 1: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: 50x/CZrjURg5WO8zrrwyJmc1gPKEDeQmLP2aUApC4eY=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) 3: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:97:e6:20:77:f8:67:02:b6:90:11:c6:67:84:68:d5:39:29:10:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Apr 24 14:36:39 2025 GMT Not After : Apr 28 00:18:39 2025 GMT Subject: CN=012AF184EA8B30A9F917E72635AE66DEB4D2A306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:71:fa:0d:65:26:a4:3e:2b:96:76:10:b8:5c: 1f:ab:f5:2e:60:71:07:08:e8:df:a7:a8:2b:48:d5: f6:82:88:0e:0b:15:48:c3:8e:9f:10:7f:a5:28:1b: 87:47:ac:b0:62:05:da:07:74:0c:ee:35:c3:0c:43: 3c:b1:c8:d4:1c:5f:48:85:50:2c:48:42:23:a8:e0: 5d:19:89:72:b5:d8:7b:d6:4e:9a:0b:a7:74:a7:82: 7c:dc:94:a0:ae:42:c6:0c:df:9e:02:c9:ed:fd:a4: b3:94:da:72:14:fe:d1:70:65:71:79:17:2d:fb:e2: 8d:60:f8:55:3a:2c:1d:e3:4e:6b:db:7c:cc:a3:40: 48:c1:30:f3:a7:f1:cb:c7:59:64:62:de:dc:f3:58: 22:c6:a0:2a:f9:ba:75:05:cf:d2:cd:ae:3c:c6:cc: 61:cc:ce:0d:15:b2:32:30:1b:75:16:94:f3:19:a2: 9a:55:f7:cf:7c:0e:7c:12:1b:56:43:e9:de:b1:58: 47:75:fa:ba:72:4e:4d:1a:2c:49:3e:ee:20:78:7c: 15:c0:2b:dc:ec:24:8e:c8:55:ef:03:d2:80:33:d6: d9:df:11:b7:e0:94:52:60:f3:ae:96:66:10:9f:66: 5c:eb:a1:66:b6:13:1a:7a:d7:b6:70:95:fa:0c:d6: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2A:F1:84:EA:8B:30:A9:F9:17:E7:26:35:AE:66:DE:B4:D2:A3:06 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:98:55:d2:db:49:0d:6f:c2:63:40:ef:19:94:a8:a9:ad:ce: 82:61:6a:e5:b0:c9:ed:91:bd:46:4c:11:16:24:ed:d9:8d:c8: 64:93:3d:3b:10:e5:ee:72:59:8d:b6:70:d4:f8:5f:60:54:fa: 3b:52:a8:69:f0:9c:ca:fa:12:ba:fa:57:bd:87:78:6a:10:29: 41:b5:24:69:14:e3:41:28:7f:f6:6a:9c:cc:37:78:87:36:24: c4:18:5c:e8:40:cd:8c:77:23:b7:b8:85:69:e4:0e:6f:10:f2: 97:6d:fd:94:f0:5d:e8:21:6b:64:b8:ee:13:08:21:b1:84:44: 12:d8:15:88:c6:a7:06:73:f0:38:02:a9:57:97:47:59:c4:b9: 71:be:c3:00:49:33:0d:d8:d4:f2:07:bc:4b:95:35:dc:da:56: b3:03:96:39:24:c9:90:62:a9:ef:41:3c:06:f5:d5:08:d4:10: b2:a7:1f:b9:49:80:6f:db:ec:b5:ab:51:22:5c:42:e1:c9:e1: 01:80:13:ed:90:9e:09:6c:76:7c:c3:b0:6c:42:c3:67:6e:39: 8e:eb:89:12:1e:ed:ee:c6:8c:cd:e8:a8:92:c7:46:5b:25:c6: 3e:c8:ef:35:98:96:b8:46:37:f1:33:75:a2:8a:07:bd:50:b4: 9b:93:58:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZfmIHf4ZwK2kBHGZ4Ro1TkpEN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNTA0MjQxNDM2MzlaFw0yNTA0MjgwMDE4MzlaMDMxMTAvBgNV BAMTKDAxMkFGMTg0RUE4QjMwQTlGOTE3RTcyNjM1QUU2NkRFQjREMkEzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcfoNZSakPiuWdhC4XB+r9S5g cQcI6N+nqCtI1faCiA4LFUjDjp8Qf6UoG4dHrLBiBdoHdAzuNcMMQzyxyNQcX0iF UCxIQiOo4F0ZiXK12HvWTpoLp3SngnzclKCuQsYM354Cye39pLOU2nIU/tFwZXF5 Fy374o1g+FU6LB3jTmvbfMyjQEjBMPOn8cvHWWRi3tzzWCLGoCr5unUFz9LNrjzG zGHMzg0VsjIwG3UWlPMZoppV9898DnwSG1ZD6d6xWEd1+rpyTk0aLEk+7iB4fBXA K9zsJI7IVe8D0oAz1tnfEbfglFJg866WZhCfZlzroWa2Exp617ZwlfoM1uxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUASrxhOqLMKn5F+cmNa5m3rTSowYwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKYVdLbSQ1vwmNA7xmUqKmtzoJhauWwye2R vUZMERYk7dmNyGSTPTsQ5e5yWY22cNT4X2BU+jtSqGnwnMr6Err6V72HeGoQKUG1 JGkU40Eof/ZqnMw3eIc2JMQYXOhAzYx3I7e4hWnkDm8Q8pdt/ZTwXegha2S47hMI IbGERBLYFYjGpwZz8DgCqVeXR1nEuXG+wwBJMw3Y1PIHvEuVNdzaVrMDljkkyZBi qe9BPAb11QjUELKnH7lJgG/b7LWrUSJcQuHJ4QGAE+2QnglsdnzDsGxCw2duOY7r iRIe7e7GjM3oqJLHRlslxj7I7zWYlrhGN/EzdaKKB71QtJuTWOg= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net