$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft File: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft (raw, json) Hash identifier: NzsoHMbyOQ8I0J17jDciYMlflwyML3EiQ9PPDASCwwg= Subject key identifier: 15:9B:DA:5E:21:4C:B9:C4:F4:C7:DB:D1:F4:E8:A8:FF:BF:E3:C6:71 Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Certificate serial: 671B11E4022AFD3E1E512945D4C35D203BD0487C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft Manifest number: 04E3 Signing time: Fri 25 Apr 2025 06:11:30 +0000 Manifest this update: Fri 25 Apr 2025 06:06:30 +0000 Manifest next update: Mon 28 Apr 2025 11:48:30 +0000 Files and hashes: 1: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: 8JW2i4QARgl0zJX/bSzH4du3GV59x2527JCrnJKQbAc=) 2: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: n6DP+hj0ytP63iMEg7QfxbSfnpN9qL6B51j5r569ips=) 3: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl (hash: tClsiqN2eNTB0WttgdCTaHmpvj1mASZzX20VefCSq5g=) 4: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: U8zMaSQ7+KDj9JX6Jxw28z4BWL6cFt7T425dsrSW9yo=) 5: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: hvbDj3oW0Ulg1k85u9jkPnoGdFUSrxAWB+C8nIEEK6o=) 6: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: /OfdPYALZiupMxs8iF6+SD24UB/8ZrzibAD0LeJLOAs=) 7: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: it/SzipXfJLThyc3J7HfzvzUSlGSxUAWhA/O+pawjWg=) 8: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: yZc1iS4QoDixBleI5zCzNqJxlWUKStGiBLindHs1iEI=) 9: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: 3bTLU0r/kGjXKDq/4CyYvhxk4DKQ0m82aKinCx3VEv4=) 10: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: euk9OJMoqKJ/PoRjzKpkFgAP821pupDkAT5Pdi0akjA=) 11: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: vA7wUsbitPXQ/g+uEYWZCPKwK0C5BXMnrLidIFEb1Os=) 12: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: sWFHDQkTsVJom3rOu9Mf9y3OJpTKgRwn5bDfHA2Pw9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1b:11:e4:02:2a:fd:3e:1e:51:29:45:d4:c3:5d:20:3b:d0:48:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Validity Not Before: Apr 25 06:06:30 2025 GMT Not After : Apr 28 11:48:30 2025 GMT Subject: CN=159BDA5E214CB9C4F4C7DBD1F4E8A8FFBFE3C671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:93:c2:ac:ea:82:04:90:7e:a4:bc:fe:f8:cf: 3a:94:57:31:6b:4e:75:0d:22:7e:f0:04:d1:d9:e8: 4f:65:06:6d:68:6f:5a:ad:79:23:2b:78:a8:92:93: c9:9f:3c:ff:81:ba:60:16:5c:3e:87:40:6a:ba:36: f1:e8:c8:35:34:0c:a0:ec:81:1d:c3:29:d6:17:25: 7c:33:65:10:27:e8:05:b1:8c:90:48:e5:a2:61:b8: a5:a9:9b:5d:3f:6f:68:28:1c:3f:9f:95:e7:09:5d: 1c:c7:38:22:19:fd:47:28:b4:1f:f3:49:d3:f7:6e: 3e:75:91:8f:95:62:7d:7d:ca:9d:2b:10:3c:42:23: f9:b2:6a:ba:da:0a:65:cc:75:f8:1c:c7:1b:67:a8: 3a:f3:ec:e1:43:50:d0:72:a0:a1:46:6f:13:ef:00: 2e:a4:92:7d:a3:da:ef:14:67:12:b3:11:34:b6:e9: ff:0c:62:37:64:00:25:f5:c3:8a:e3:5e:9d:b1:a0: fc:1f:5a:4b:b8:8b:00:6c:75:dd:2c:74:92:83:d7: d0:a6:78:15:d7:78:a7:a7:94:c2:9f:41:b1:03:bd: b8:f2:d7:11:c1:a6:6b:68:36:8b:28:2e:16:83:61: 3a:74:3d:fd:bf:7a:0c:7c:52:89:df:3c:d0:99:e3: e4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9B:DA:5E:21:4C:B9:C4:F4:C7:DB:D1:F4:E8:A8:FF:BF:E3:C6:71 X509v3 Authority Key Identifier: keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:93:c9:be:d8:e6:d0:12:49:e7:e6:27:41:d5:b0:14:73:d9: d6:59:f6:e6:ca:d3:db:e9:23:86:20:0d:af:4f:66:92:ac:3f: ad:38:d2:bb:e0:bb:58:ed:cc:12:42:ca:db:83:e9:4d:1d:c6: 71:8d:8d:62:c8:72:94:1a:03:e7:2a:7e:13:b0:13:21:c0:db: 33:79:14:b6:d5:00:e1:76:a2:53:f3:8a:3e:e5:2a:00:83:d4: 28:4e:61:6e:eb:f7:e8:52:fd:ef:98:d0:92:1f:48:5f:c1:9c: 6a:93:cc:a7:97:d1:0d:3b:03:1d:81:2b:95:d9:09:07:cd:bd: a2:14:38:86:8c:b8:dd:3e:1d:65:a2:5a:87:7b:3b:07:7d:d8: 34:46:8a:e6:22:c6:8a:74:a3:15:1d:4e:2a:61:f5:f6:19:3a: e9:d9:7f:9f:db:1c:b1:6f:38:99:5e:18:8f:8d:f4:da:d6:03: 0f:00:d0:24:3a:5b:40:33:f7:c4:4c:07:69:e3:03:29:5f:fd: f8:5f:12:94:97:a6:f1:a1:98:50:a6:e1:a9:ad:1d:bd:92:5e: 7a:03:0c:ec:c7:76:de:55:b1:d7:b7:13:69:d9:7f:89:6b:87: 26:b7:ad:03:27:ee:a7:c3:df:d3:54:e8:55:ee:5b:dc:bb:5a: 93:ee:13:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxsR5AIq/T4eUSlF1MNdIDvQSHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5 OERCRUI5ODAeFw0yNTA0MjUwNjA2MzBaFw0yNTA0MjgxMTQ4MzBaMDMxMTAvBgNV BAMTKDE1OUJEQTVFMjE0Q0I5QzRGNEM3REJEMUY0RThBOEZGQkZFM0M2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3k8Ks6oIEkH6kvP74zzqUVzFr TnUNIn7wBNHZ6E9lBm1ob1qteSMreKiSk8mfPP+BumAWXD6HQGq6NvHoyDU0DKDs gR3DKdYXJXwzZRAn6AWxjJBI5aJhuKWpm10/b2goHD+flecJXRzHOCIZ/UcotB/z SdP3bj51kY+VYn19yp0rEDxCI/myarraCmXMdfgcxxtnqDrz7OFDUNByoKFGbxPv AC6kkn2j2u8UZxKzETS26f8MYjdkACX1w4rjXp2xoPwfWku4iwBsdd0sdJKD19Cm eBXXeKenlMKfQbEDvbjy1xHBpmtoNosoLhaDYTp0Pf2/egx8UonfPNCZ4+QXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFZvaXiFMucT0x9vR9Oio/7/jxnEwHwYDVR0j BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC RUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm MjUtMGFmMjkwMjZiZDcwLzAvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYy NkU5OERCRUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGTyb7Y5tASSefmJ0HVsBRz2dZZ9ubK09vp I4YgDa9PZpKsP6040rvgu1jtzBJCytuD6U0dxnGNjWLIcpQaA+cqfhOwEyHA2zN5 FLbVAOF2olPzij7lKgCD1ChOYW7r9+hS/e+Y0JIfSF/BnGqTzKeX0Q07Ax2BK5XZ CQfNvaIUOIaMuN0+HWWiWod7Owd92DRGiuYixop0oxUdTiph9fYZOunZf5/bHLFv OJleGI+N9NrWAw8A0CQ6W0Az98RMB2njAylf/fhfEpSXpvGhmFCm4amtHb2SXnoD DOzHdt5Vsde3E2nZf4lrhya3rQMn7qfD39NU6FXuW9y7WpPuE9Q= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net