$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: DJNxUvKAO00IY7SMeyzlGR2Ys9X/PafzG8b27OILdpY= Subject key identifier: 9D:6E:8B:4A:36:C7:F8:8E:3A:88:E0:DD:A6:8D:A3:46:25:DB:79:AB Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 744820CA15E599022196E53BA63ECDB337C41B98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 01A1 Signing time: Sat 26 Apr 2025 12:41:18 +0000 Manifest this update: Sat 26 Apr 2025 12:36:18 +0000 Manifest next update: Tue 29 Apr 2025 19:32:18 +0000 Files and hashes: 1: 32372e3132342e38332e302f32342d3234203d3e20313439343039.roa (hash: ArbJjYu5thYVcTZlpxbtFWhvtqqsI4lH8rKC1gB8oNc=) 2: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: JF25GsZLyzVMqdMpnO1WYlSsjR6hM621Mtm2BRDUvVE=) 3: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=) 4: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (hash: tDryOwBTBVZxPeCJINJ19f1hs1r6uQY2drXPiyvQ7m8=) 5: 3131392e34372e39352e302f32342d3234203d3e20313530323438.roa (hash: nIrbzR22XSry4Jrw3LIPGv150kbPZD6HPRMENEZHMHw=) 6: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: hSmHQriBgEB6G8euGPo5okmMfhhllZ1AqyrcnX9VlJE=) 7: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: hkmR47tLIa0UpaSyXZsSylBTviL6Lz0IpGfG+u4eitQ=) 8: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: ETJz1GlN0xqgrI/TiDRe3oL2wRqZlR8gI6HL/idn2yc=) 9: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gaK9TNDkDAX6rLbicLT8NaMu8dPZqEuVmgkAb8uim8M=) 10: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: 2gYjkNpQS7rIhX41LQ5E9ZRuFubPcLm5+1qbHYEWbNU=) 11: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: nFcoITtIiJ8OFT6DwBHGCFY6SRcCiphSoQyOwQxbdew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:48:20:ca:15:e5:99:02:21:96:e5:3b:a6:3e:cd:b3:37:c4:1b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Apr 26 12:36:18 2025 GMT Not After : Apr 29 19:32:18 2025 GMT Subject: CN=9D6E8B4A36C7F88E3A88E0DDA68DA34625DB79AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:2b:43:86:3f:7f:26:78:e4:9b:f9:8b:eb: 15:06:70:94:31:f8:9a:25:e4:c8:b8:ca:8f:b0:06: 6c:b4:5e:73:68:fa:e9:b0:c7:a6:d4:2a:e3:aa:b2: 55:4e:f6:91:83:f4:f2:80:af:9b:83:97:06:e2:34: 48:6f:cf:87:a9:d3:50:74:33:94:09:bf:6e:00:4a: 5f:72:54:ed:ac:30:c7:45:c1:2b:38:01:13:49:f2: 36:d1:2d:03:03:71:61:9e:2a:c6:a3:15:73:a7:2b: fe:c0:49:c3:2b:c7:95:f1:41:a9:d3:74:13:f1:3c: 8f:be:cf:7e:87:6a:46:02:f2:71:f9:a0:73:6e:ee: b1:99:13:fa:77:7b:8b:f6:c6:aa:09:41:59:8b:35: 0d:37:7b:25:0b:09:f2:48:98:ee:6d:86:93:b8:a7: 8b:8b:65:85:ca:7d:ef:12:0f:1a:c4:20:41:fd:8b: 2b:fc:f5:88:68:42:e4:22:17:65:ba:61:f2:76:26: 07:14:23:57:db:98:aa:3c:d8:19:b2:68:c7:92:d5: 56:98:63:47:74:d5:0c:b7:cf:05:7c:83:2b:c8:df: 13:4e:7e:49:5a:9d:9b:da:5b:e3:97:65:9a:66:d4: 7e:06:42:31:ff:73:6e:56:19:e1:cb:f1:0e:29:8c: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6E:8B:4A:36:C7:F8:8E:3A:88:E0:DD:A6:8D:A3:46:25:DB:79:AB X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f4:a9:36:f6:04:bb:67:a3:2c:9b:38:73:ef:87:87:91:38: 72:8b:a8:13:c5:bc:d2:35:ba:91:fd:2d:45:9c:f4:aa:27:0e: 6a:53:92:7b:80:b2:26:fe:75:7e:1f:02:0f:55:d5:df:9b:17: 1e:22:9c:f3:89:39:b0:96:d8:b9:d8:32:79:a0:7b:f7:fb:63: ba:5a:97:f1:7b:0d:41:4e:b0:22:50:ce:8f:00:b1:15:c0:c0: c7:b0:83:2b:90:62:43:c0:20:61:b9:9a:24:1e:e9:29:65:e8: d4:45:ea:88:7b:91:ba:00:09:ab:06:d5:a2:9d:7a:15:00:70: 45:a7:af:67:15:5e:b4:d2:98:89:56:1d:e6:3d:a5:af:7e:12: 80:68:15:82:9e:09:5b:fe:0e:c0:bc:ce:35:00:51:cb:84:0d: d6:74:08:c6:b0:28:bb:08:0a:bb:78:fc:d8:a9:a7:58:12:f2: 78:5d:c0:c8:08:f5:2c:f7:9c:91:0d:85:1b:b9:33:8b:33:ce: 3e:62:7d:49:62:a5:59:f0:b6:c2:de:48:fd:a4:67:d0:2e:1e: c0:f0:90:bb:a0:bf:44:36:d7:40:00:c1:88:97:6b:da:fc:05: 51:24:e4:10:76:f5:3d:d3:5d:c0:cc:0b:23:94:29:ce:07:80: e7:55:34:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEggyhXlmQIhluU7pj7NszfEG5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTA0MjYxMjM2MThaFw0yNTA0MjkxOTMyMThaMDMxMTAvBgNV BAMTKDlENkU4QjRBMzZDN0Y4OEUzQTg4RTBEREE2OERBMzQ2MjVEQjc5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsCtDhj9/Jnjkm/mL6xUGcJQx +Jol5Mi4yo+wBmy0XnNo+umwx6bUKuOqslVO9pGD9PKAr5uDlwbiNEhvz4ep01B0 M5QJv24ASl9yVO2sMMdFwSs4ARNJ8jbRLQMDcWGeKsajFXOnK/7AScMrx5XxQanT dBPxPI++z36HakYC8nH5oHNu7rGZE/p3e4v2xqoJQVmLNQ03eyULCfJImO5thpO4 p4uLZYXKfe8SDxrEIEH9iyv89YhoQuQiF2W6YfJ2JgcUI1fbmKo82BmyaMeS1VaY Y0d01Qy3zwV8gyvI3xNOfklanZvaW+OXZZpm1H4GQjH/c25WGeHL8Q4pjJHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnW6LSjbH+I46iODdpo2jRiXbeaswHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT0qTb2BLtnoyybOHPvh4eROHKLqBPFvNI1 upH9LUWc9KonDmpTknuAsib+dX4fAg9V1d+bFx4inPOJObCW2LnYMnmge/f7Y7pa l/F7DUFOsCJQzo8AsRXAwMewgyuQYkPAIGG5miQe6Sll6NRF6oh7kboACasG1aKd ehUAcEWnr2cVXrTSmIlWHeY9pa9+EoBoFYKeCVv+DsC8zjUAUcuEDdZ0CMawKLsI Crt4/Nipp1gS8nhdwMgI9Sz3nJENhRu5M4szzj5ifUlipVnwtsLeSP2kZ9AuHsDw kLugv0Q210AAwYiXa9r8BVEk5BB29T3TXcDMCyOUKc4HgOdVNFY= -----END CERTIFICATE-----Generated at Sat Apr 26 15:53:57 2025 by rpki-client on console.sobornost.net