$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: Bput2L+3t2G1IiELUp64KzYAfae2sJt/Uz5hQRDCOEE= Subject key identifier: E4:82:B4:7F:95:DA:32:97:7C:7C:94:10:90:91:46:3B:30:8D:74:E8 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 6035BF87EB9026EB0175A2861360E315C97FA44E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: 9C Signing time: Fri 25 Apr 2025 04:52:14 +0000 Manifest this update: Fri 25 Apr 2025 04:47:14 +0000 Manifest next update: Mon 28 Apr 2025 08:30:14 +0000 Files and hashes: 1: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: eVKQ4TDBfCZiwGoqFh5aJPiJPPRkqfbeafJrT0EB0gQ=) 2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: K3ZH6ZIWAcw45r2g/qdIM9HAVNibF7452ItmA+/7HTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:35:bf:87:eb:90:26:eb:01:75:a2:86:13:60:e3:15:c9:7f:a4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Apr 25 04:47:14 2025 GMT Not After : Apr 28 08:30:14 2025 GMT Subject: CN=E482B47F95DA32977C7C94109091463B308D74E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:56:25:c6:aa:04:47:af:e4:4f:93:d5:c3: 74:40:16:d1:4e:2c:21:b4:06:bf:85:15:08:60:d8: 67:e3:cb:fb:29:5d:d4:e1:3b:75:0b:da:bf:0a:d1: 11:ce:7c:33:5c:50:42:54:ce:39:52:fd:7d:33:50: c2:05:d5:c3:3e:2d:2c:ea:e8:49:a9:a2:b0:48:97: 3b:77:05:34:b0:7a:e5:b1:9a:af:7b:0d:11:0c:b4: 3e:4d:20:c1:5f:43:c7:92:8d:4b:4d:14:3d:cd:20: 82:c8:f3:b2:74:49:6c:43:e3:19:4e:6f:5f:fc:99: b3:96:b9:97:f0:9a:1e:5b:53:8d:a8:82:a3:1e:e2: 91:80:75:59:90:0d:eb:dd:a1:d9:3e:0d:1a:89:f4: 51:a7:76:c2:f6:d3:c9:77:77:1e:8a:08:b9:24:e3: a4:12:90:67:b3:79:2d:01:0d:58:12:cd:58:a4:fb: 5f:55:74:88:75:15:17:1d:1b:6a:99:0e:d6:04:56: 26:61:f6:59:03:b6:b7:8f:35:cd:dc:12:39:e8:2a: 0f:83:d7:9b:4d:c0:b7:c7:1e:fb:67:04:a4:5f:9d: a2:f9:89:0a:7b:5e:ad:94:3e:91:c6:cf:1b:7c:8b: 44:73:e4:e3:ff:c0:45:6c:a2:b9:9c:2f:ba:72:54: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:82:B4:7F:95:DA:32:97:7C:7C:94:10:90:91:46:3B:30:8D:74:E8 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e2:e6:cd:fe:46:41:93:7a:df:3d:58:e4:0f:97:21:18:1d: 0c:55:f4:24:a9:c2:d8:0c:df:45:ee:b4:58:68:44:e3:8f:6b: c1:75:fd:9d:17:de:25:0a:7b:8a:cd:00:e3:b2:94:cc:5c:03: 8a:45:bf:d2:c2:5e:14:de:d1:37:ee:45:d9:f1:f7:70:3f:8d: 3f:2a:42:e9:01:30:f9:1a:66:71:e0:13:24:eb:a8:bf:bd:8c: d2:13:0b:2b:eb:6b:7b:fd:20:8f:8d:73:34:4c:55:63:e5:91: 01:62:9d:a9:33:87:77:9a:db:12:20:a5:2f:bf:41:3b:dd:1f: 31:e9:cf:84:35:b2:31:1e:3e:e5:72:ec:1b:e4:7f:59:89:4f: 27:4a:c7:46:b8:83:93:1e:b0:30:0f:87:83:6f:df:dd:e5:16: 52:e6:80:da:3a:c6:2e:39:5c:7a:15:09:38:d8:fb:57:fc:71: c6:81:4e:5a:94:f5:82:dc:a7:ef:4a:c3:0e:20:ab:15:f0:11: 80:5c:b0:b2:6a:d6:ab:e9:89:b4:52:11:63:d0:54:6a:2b:7e: f2:55:47:87:dd:de:d2:22:f0:83:05:c4:91:44:72:76:e1:e7: 8e:bd:67:b1:ae:69:36:ed:ab:fd:e3:8a:80:fc:6d:99:7b:87: b9:4c:39:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDW/h+uQJusBdaKGE2DjFcl/pE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNTA0MjUwNDQ3MTRaFw0yNTA0MjgwODMwMTRaMDMxMTAvBgNV BAMTKEU0ODJCNDdGOTVEQTMyOTc3QzdDOTQxMDkwOTE0NjNCMzA4RDc0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8FYlxqoER6/kT5PVw3RAFtFO LCG0Br+FFQhg2Gfjy/spXdThO3UL2r8K0RHOfDNcUEJUzjlS/X0zUMIF1cM+LSzq 6EmporBIlzt3BTSweuWxmq97DREMtD5NIMFfQ8eSjUtNFD3NIILI87J0SWxD4xlO b1/8mbOWuZfwmh5bU42ogqMe4pGAdVmQDevdodk+DRqJ9FGndsL208l3dx6KCLkk 46QSkGezeS0BDVgSzVik+19VdIh1FRcdG2qZDtYEViZh9lkDtrePNc3cEjnoKg+D 15tNwLfHHvtnBKRfnaL5iQp7Xq2UPpHGzxt8i0Rz5OP/wEVsormcL7pyVMk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5IK0f5XaMpd8fJQQkJFGOzCNdOgwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvi5s3+RkGTet89WOQPlyEYHQxV9CSpwtgM 30XutFhoROOPa8F1/Z0X3iUKe4rNAOOylMxcA4pFv9LCXhTe0TfuRdnx93A/jT8q QukBMPkaZnHgEyTrqL+9jNITCyvra3v9II+NczRMVWPlkQFinakzh3ea2xIgpS+/ QTvdHzHpz4Q1sjEePuVy7Bvkf1mJTydKx0a4g5MesDAPh4Nv393lFlLmgNo6xi45 XHoVCTjY+1f8ccaBTlqU9YLcp+9Kww4gqxXwEYBcsLJq1qvpibRSEWPQVGorfvJV R4fd3tIi8IMFxJFEcnbh5469Z7GuaTbtq/3jioD8bZl7h7lMObk= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net