$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: Y3OHjkBMa+cpiXHjne7vzgrAqP+D0ownq1vT0hltUE8= Subject key identifier: 32:BE:44:0F:90:3A:92:93:9A:3D:47:CE:43:0E:AB:E5:3D:48:10:18 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 1C498BE514F928A7BF2409C36F3F0D25070716DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 04C7 Signing time: Sun 27 Apr 2025 14:32:18 +0000 Manifest this update: Sun 27 Apr 2025 14:27:18 +0000 Manifest next update: Thu 01 May 2025 00:56:18 +0000 Files and hashes: 1: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: Zb3AnlfbFhVJYgt+3s/L7gam23czVP4/MNsn6mEPSpA=) 2: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 7wk2FS1q0MY6UUysFgAzRf+hpYiSaDcdE1K4QdpVo+4=) 3: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: yVe8GXVmi9K8cMh9902KjJLW/Ty04NeW25WlVS+N6VM=) 4: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: N7KfbgNzn9QZjBrWNY/vOd1LXy+zev74M4aUhDPTnsI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:49:8b:e5:14:f9:28:a7:bf:24:09:c3:6f:3f:0d:25:07:07:16:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Apr 27 14:27:18 2025 GMT Not After : May 1 00:56:18 2025 GMT Subject: CN=32BE440F903A92939A3D47CE430EABE53D481018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:ca:7e:73:20:8b:3a:b9:47:09:b1:0a:48: 80:9b:b7:95:dc:ba:49:55:ed:be:07:b5:5c:e4:11: 9c:58:f5:e0:2f:21:92:f3:ad:2f:c5:dc:5e:ab:4e: 5f:cf:67:a1:c5:7e:6d:68:c3:bc:c2:27:f6:6d:8f: b2:62:f1:8b:ea:70:1e:3a:5e:f0:78:07:5a:67:a8: 90:f2:eb:e6:f3:1a:40:ed:cc:52:bb:c4:95:05:c8: f6:df:18:e9:3e:25:1f:46:24:09:cf:af:4f:98:50: 4c:e9:47:75:7b:be:cf:66:97:09:43:8f:87:91:1a: 1c:1a:e1:65:57:54:2b:c1:b4:9d:92:32:f8:a6:5f: 67:0b:d0:64:f5:f8:ad:d3:47:f8:a4:a9:dd:91:d2: 8a:12:69:76:a1:48:d6:0f:7a:1f:ab:6d:74:8d:b9: 5e:5c:f6:5e:6e:c7:fe:b6:95:80:5d:92:e5:87:df: 38:95:f2:7e:d6:d6:03:63:84:69:17:1d:d2:f6:1f: 04:a1:20:61:64:d6:35:a4:d7:4f:68:28:77:02:b6: d0:d7:80:b1:fb:b7:73:80:7f:cf:9c:23:92:cc:c1: 06:37:c9:04:e4:70:a0:b6:e2:7d:89:b4:e5:b7:40: 86:25:44:bd:32:aa:9e:12:d5:69:4f:50:1d:3a:37: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BE:44:0F:90:3A:92:93:9A:3D:47:CE:43:0E:AB:E5:3D:48:10:18 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e2:5e:57:eb:9c:ce:1e:5a:0f:45:32:95:15:13:34:71:5f: e6:37:cb:d8:8a:bc:24:19:d0:6d:57:61:46:66:77:05:a9:da: 59:f3:56:4d:9c:52:7c:85:ac:7a:42:c8:22:22:34:18:4f:f2: aa:9b:32:8b:47:1f:7b:e9:ac:ad:5f:43:af:11:29:d4:1c:dd: 9f:61:ee:8b:cc:6e:6c:dc:6c:b5:ea:70:23:7e:f9:20:81:07: 7a:f6:ed:6d:fd:c4:71:09:21:65:58:88:da:dd:5c:a1:f3:2e: 4c:33:91:4a:1a:50:4a:b8:f2:ff:a7:9b:af:05:43:56:96:94: 07:6e:38:28:3b:ad:4f:86:82:67:77:5a:d1:39:d3:63:99:ee: 4a:80:b3:37:3c:31:49:c9:13:11:ec:18:01:20:d0:b5:f0:f3: 08:62:b1:50:83:da:19:e5:3b:87:94:f2:6f:4a:62:70:f7:8a: a0:77:92:5a:d3:eb:70:3b:55:fc:6c:26:08:71:6e:7e:f9:8f: 70:6c:79:f5:00:a8:29:76:76:aa:17:6d:59:0e:12:0d:fc:77: c1:fa:be:21:41:48:25:aa:3b:27:40:fc:73:33:5e:5d:92:3b: 04:5f:46:56:e0:e6:1d:5c:cd:c4:ee:10:83:e3:26:0b:5c:9d: b0:c9:d6:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEmL5RT5KKe/JAnDbz8NJQcHFt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTA0MjcxNDI3MThaFw0yNTA1MDEwMDU2MThaMDMxMTAvBgNV BAMTKDMyQkU0NDBGOTAzQTkyOTM5QTNENDdDRTQzMEVBQkU1M0Q0ODEwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqusp+cyCLOrlHCbEKSICbt5Xc uklV7b4HtVzkEZxY9eAvIZLzrS/F3F6rTl/PZ6HFfm1ow7zCJ/Ztj7Ji8YvqcB46 XvB4B1pnqJDy6+bzGkDtzFK7xJUFyPbfGOk+JR9GJAnPr0+YUEzpR3V7vs9mlwlD j4eRGhwa4WVXVCvBtJ2SMvimX2cL0GT1+K3TR/ikqd2R0ooSaXahSNYPeh+rbXSN uV5c9l5ux/62lYBdkuWH3ziV8n7W1gNjhGkXHdL2HwShIGFk1jWk109oKHcCttDX gLH7t3OAf8+cI5LMwQY3yQTkcKC24n2JtOW3QIYlRL0yqp4S1WlPUB06N/wVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMr5ED5A6kpOaPUfOQw6r5T1IEBgwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATiXlfrnM4eWg9FMpUVEzRxX+Y3y9iKvCQZ 0G1XYUZmdwWp2lnzVk2cUnyFrHpCyCIiNBhP8qqbMotHH3vprK1fQ68RKdQc3Z9h 7ovMbmzcbLXqcCN++SCBB3r27W39xHEJIWVYiNrdXKHzLkwzkUoaUEq48v+nm68F Q1aWlAduOCg7rU+Ggmd3WtE502OZ7kqAszc8MUnJExHsGAEg0LXw8whisVCD2hnl O4eU8m9KYnD3iqB3klrT63A7VfxsJghxbn75j3BsefUAqCl2dqoXbVkOEg38d8H6 viFBSCWqOydA/HMzXl2SOwRfRlbg5h1czcTuEIPjJgtcnbDJ1mk= -----END CERTIFICATE-----Generated at Sun Apr 27 17:03:55 2025 by rpki-client on console.sobornost.net