$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: ek/PuTraJLfuNHiJzc43G333KqZ+GNr6/kQ4pkXQrKM= Subject key identifier: 5C:D0:B2:A9:6E:9A:0F:16:7F:BB:24:D5:5F:F3:78:80:70:5F:B8:A0 Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 68FB018AC3A06794A98BD59C7E6E8D9BC19D801E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 0158 Signing time: Wed 23 Apr 2025 19:21:05 +0000 Manifest this update: Wed 23 Apr 2025 19:16:05 +0000 Manifest next update: Sun 27 Apr 2025 05:11:05 +0000 Files and hashes: 1: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) 2: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: 9whQKit1/nAGWJzrTP4vI8wYhYCP6kwHszgKqiys86Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fb:01:8a:c3:a0:67:94:a9:8b:d5:9c:7e:6e:8d:9b:c1:9d:80:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Apr 23 19:16:05 2025 GMT Not After : Apr 27 05:11:05 2025 GMT Subject: CN=5CD0B2A96E9A0F167FBB24D55FF37880705FB8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:b4:7c:f0:3c:fd:6c:e6:46:02:96:09:b2: 56:50:00:d9:1a:c0:cf:6d:93:7b:3c:1b:22:ee:77: 90:40:f3:c4:36:ba:ba:54:ad:8f:9e:56:15:f8:ca: e0:0a:e1:78:6b:4d:ff:f2:1f:41:5d:05:61:d8:7b: 09:b6:fa:1b:aa:81:e2:32:a2:a6:a8:23:67:01:f5: 4a:dc:3c:d6:dd:c8:4b:70:2b:5c:c7:55:fe:d8:97: 49:5c:04:be:6a:a1:09:c2:9a:d3:66:ef:92:73:e8: 7a:68:ea:72:35:e3:bb:a2:9b:06:71:34:f2:e7:e6: ec:14:7e:8c:96:11:83:b8:2f:6f:18:64:d3:36:a4: 4a:8c:d4:53:49:41:b9:fb:45:c5:64:ed:6a:cd:7c: 75:e5:2c:ba:19:5d:1f:f7:51:9c:89:01:42:d5:6e: 91:72:80:08:d5:21:97:17:15:35:a4:21:06:de:7a: 9f:31:ae:18:7c:5e:9c:f6:d6:c1:d0:9b:c0:f9:6c: 2e:c9:a7:b3:d3:f0:c3:b6:ca:5d:c6:4e:41:b2:44: 5e:c1:f4:93:95:6f:f3:f8:30:7d:0b:08:0a:04:d9: 6f:e0:a3:20:c2:eb:98:0c:b7:8d:97:e1:5a:a7:d3: 17:d9:aa:c1:20:e2:e5:01:9b:7c:c6:0c:4c:89:79: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:B2:A9:6E:9A:0F:16:7F:BB:24:D5:5F:F3:78:80:70:5F:B8:A0 X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:97:a5:ac:1d:40:17:5f:a5:5a:49:f8:bf:b3:da:90:5e:c4: 4a:00:7c:c7:3c:c4:55:bd:a7:ac:03:16:8f:4a:a2:a6:00:20: 89:55:73:34:46:2a:0f:b7:72:f4:f3:d3:80:89:01:29:71:48: 51:05:52:28:6a:31:88:f2:3c:88:df:cb:48:b8:10:27:4b:84: fd:52:a5:ba:f1:31:2c:32:9b:54:3e:5b:bc:28:d9:29:9f:9b: 8f:68:6d:27:a3:0a:be:02:37:dc:f2:d3:23:47:2e:53:30:85: 73:6a:b0:cf:26:ad:fe:60:7b:a5:cf:fd:24:fd:f1:cb:b2:ec: 38:12:26:83:25:45:8a:8a:4d:a8:09:5c:b7:32:33:72:cd:36: 42:a7:9b:04:8c:e0:2d:c9:a6:8f:b9:a6:7c:39:f1:87:41:6c: 22:20:d4:6f:8c:cb:68:2d:e2:49:4c:0e:d1:46:bb:43:1e:fc: 1a:80:24:50:0d:e3:3b:c4:e6:6f:b7:2a:5d:94:d3:9a:33:dd: d4:34:07:a4:1a:4f:72:51:d7:31:41:58:22:dc:df:3c:35:3b: 2b:14:18:e2:78:52:e6:7f:1e:a2:12:55:80:50:83:32:70:4e: a0:38:ed:f9:8c:32:8e:4c:1c:4d:04:e6:94:2a:a7:cc:36:6f: c7:99:fc:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPsBisOgZ5Spi9Wcfm6Nm8GdgB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTA0MjMxOTE2MDVaFw0yNTA0MjcwNTExMDVaMDMxMTAvBgNV BAMTKDVDRDBCMkE5NkU5QTBGMTY3RkJCMjRENTVGRjM3ODgwNzA1RkI4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgp7R88Dz9bOZGApYJslZQANka wM9tk3s8GyLud5BA88Q2urpUrY+eVhX4yuAK4XhrTf/yH0FdBWHYewm2+huqgeIy oqaoI2cB9UrcPNbdyEtwK1zHVf7Yl0lcBL5qoQnCmtNm75Jz6Hpo6nI147uimwZx NPLn5uwUfoyWEYO4L28YZNM2pEqM1FNJQbn7RcVk7WrNfHXlLLoZXR/3UZyJAULV bpFygAjVIZcXFTWkIQbeep8xrhh8Xpz21sHQm8D5bC7Jp7PT8MO2yl3GTkGyRF7B 9JOVb/P4MH0LCAoE2W/goyDC65gMt42X4Vqn0xfZqsEg4uUBm3zGDEyJeUUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXNCyqW6aDxZ/uyTVX/N4gHBfuKAwHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiXpawdQBdfpVpJ+L+z2pBexEoAfMc8xFW9 p6wDFo9KoqYAIIlVczRGKg+3cvTz04CJASlxSFEFUihqMYjyPIjfy0i4ECdLhP1S pbrxMSwym1Q+W7wo2Smfm49obSejCr4CN9zy0yNHLlMwhXNqsM8mrf5ge6XP/ST9 8cuy7DgSJoMlRYqKTagJXLcyM3LNNkKnmwSM4C3Jpo+5pnw58YdBbCIg1G+My2gt 4klMDtFGu0Me/BqAJFAN4zvE5m+3Kl2U05oz3dQ0B6QaT3JR1zFBWCLc3zw1OysU GOJ4UuZ/HqISVYBQgzJwTqA47fmMMo5MHE0E5pQqp8w2b8eZ/IE= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net