$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: lgpGUbcu8jeS5BqTd43smBEt4WSAkT5fIQSLgfkmw6E= Subject key identifier: 42:D9:30:8D:C5:E5:DF:59:80:D3:F7:6C:5F:B3:73:CE:33:0F:DF:8C Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 65A37CF37EED0F839BD127A1DD343A2828854982 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: CF Signing time: Thu 24 Apr 2025 11:50:57 +0000 Manifest this update: Thu 24 Apr 2025 11:45:57 +0000 Manifest next update: Sun 27 Apr 2025 15:03:57 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: 4RXuI/vLVPD+jVnmvuNkpCo1MTvQEuU+8kdix+1fA3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a3:7c:f3:7e:ed:0f:83:9b:d1:27:a1:dd:34:3a:28:28:85:49:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Apr 24 11:45:57 2025 GMT Not After : Apr 27 15:03:57 2025 GMT Subject: CN=42D9308DC5E5DF5980D3F76C5FB373CE330FDF8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:26:41:10:d0:0f:ab:b3:17:51:77:86:86: 80:95:8a:76:eb:91:7b:84:43:56:54:86:85:a1:0f: 10:29:54:ed:db:bd:1e:2a:32:47:ae:8d:71:38:55: b7:b0:36:f5:55:75:89:90:23:3c:e0:86:7b:91:0c: 54:74:e7:00:04:98:43:c7:9a:5e:29:d1:f8:c8:43: 9b:0a:57:12:d0:88:c4:07:e2:38:c1:5f:06:0f:95: bc:08:e9:7d:de:da:30:e0:23:08:38:53:5b:03:5e: 07:88:f5:6f:09:c8:4f:6f:a9:9b:3d:8b:b2:a1:e5: 45:c1:cf:a5:b2:16:84:98:77:ed:85:43:2f:a6:60: a7:a3:cc:aa:72:5d:05:d4:1e:81:cb:d4:d1:03:5b: c1:ad:e5:82:30:e8:7f:28:dc:da:e5:7a:70:c1:81: 81:3e:9b:63:46:8d:c4:82:24:f5:d2:14:50:1f:4d: 27:e2:9f:f6:45:58:37:62:9e:d9:76:04:d5:45:a4: 4d:0d:03:c1:01:6b:eb:57:b7:54:07:99:ac:5a:47: 7f:95:c7:96:4e:6d:c8:37:23:db:28:b5:3c:4b:be: 5d:4c:65:27:65:ae:33:87:20:fb:05:02:b8:b6:99: d5:4d:20:19:fe:0b:89:c6:dc:81:5c:46:5f:d5:db: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:30:8D:C5:E5:DF:59:80:D3:F7:6C:5F:B3:73:CE:33:0F:DF:8C X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8f:dd:5f:fa:ca:c9:a6:45:ca:0b:3a:aa:2f:a3:fc:73:0d: ad:85:0c:eb:e2:a5:1a:b0:99:70:fe:d7:5f:78:d7:37:82:82: 3b:64:cc:0a:5f:18:9c:54:78:d9:b4:dd:d0:b7:f7:e8:b9:92: 9a:82:3d:2b:83:1f:8c:29:55:78:a6:75:65:7f:be:7a:4f:80: eb:2b:e3:39:4a:01:36:5e:7f:3a:aa:35:2b:22:fe:58:ec:da: 97:4c:2e:2d:26:27:05:36:f7:4e:4c:be:f0:20:78:d3:42:7f: c8:06:59:ef:44:04:16:3c:c8:d3:ba:d3:92:97:35:6f:80:bc: 39:8f:f3:75:5d:71:dc:4f:e9:a5:d6:c9:5c:1a:d5:3d:94:fe: 34:f3:d3:d7:b0:c1:54:1e:07:f0:66:de:de:84:07:42:68:3a: 7b:4c:38:90:f5:fb:ed:84:5d:30:b4:2d:61:29:ee:27:4b:33: fb:06:21:3e:b3:5b:30:31:98:85:da:80:a8:4d:78:d0:da:0d: 79:10:c8:eb:7c:45:a1:38:92:fa:6b:67:90:bc:fc:42:e7:a9: e2:3c:a4:4b:c2:98:bd:79:97:46:da:3a:b1:dc:13:c9:8f:71: 82:63:16:4d:c1:31:9d:c3:3f:87:28:40:a6:88:a1:f8:83:49: 37:ed:e5:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaN8837tD4Ob0Seh3TQ6KCiFSYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTA0MjQxMTQ1NTdaFw0yNTA0MjcxNTAzNTdaMDMxMTAvBgNV BAMTKDQyRDkzMDhEQzVFNURGNTk4MEQzRjc2QzVGQjM3M0NFMzMwRkRGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cCZBENAPq7MXUXeGhoCVinbr kXuEQ1ZUhoWhDxApVO3bvR4qMkeujXE4VbewNvVVdYmQIzzghnuRDFR05wAEmEPH ml4p0fjIQ5sKVxLQiMQH4jjBXwYPlbwI6X3e2jDgIwg4U1sDXgeI9W8JyE9vqZs9 i7Kh5UXBz6WyFoSYd+2FQy+mYKejzKpyXQXUHoHL1NEDW8Gt5YIw6H8o3NrlenDB gYE+m2NGjcSCJPXSFFAfTSfin/ZFWDdintl2BNVFpE0NA8EBa+tXt1QHmaxaR3+V x5ZObcg3I9sotTxLvl1MZSdlrjOHIPsFAri2mdVNIBn+C4nG3IFcRl/V26BBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQtkwjcXl31mA0/dsX7NzzjMP34wwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6P3V/6ysmmRcoLOqovo/xzDa2FDOvipRqw mXD+11941zeCgjtkzApfGJxUeNm03dC39+i5kpqCPSuDH4wpVXimdWV/vnpPgOsr 4zlKATZefzqqNSsi/ljs2pdMLi0mJwU2905MvvAgeNNCf8gGWe9EBBY8yNO605KX NW+AvDmP83VdcdxP6aXWyVwa1T2U/jTz09ewwVQeB/Bm3t6EB0JoOntMOJD1++2E XTC0LWEp7idLM/sGIT6zWzAxmIXagKhNeNDaDXkQyOt8RaE4kvprZ5C8/ELnqeI8 pEvCmL15l0baOrHcE8mPcYJjFk3BMZ3DP4coQKaIofiDSTft5Xk= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:48 2025 by rpki-client on console.sobornost.net