$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: THZYAyA08RsRWhjixXtMm1EIgBIwk5ZcghaVhEMm0dg= Subject key identifier: 7D:F8:22:80:63:3B:A2:36:E0:0B:AC:90:20:4A:3D:69:D9:BA:59:1E Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 2D96C866BA420224D6A7C1F8F82671CBE2165A8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: E9 Signing time: Wed 23 Apr 2025 23:22:16 +0000 Manifest this update: Wed 23 Apr 2025 23:17:16 +0000 Manifest next update: Sun 27 Apr 2025 10:04:16 +0000 Files and hashes: 1: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: eQwZ0HpEaRU5AO86abCZFFKH0HF0iLl7VUx7NHne24s=) 2: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: UkSU3ofAJMwQMSBV8CLkdD+7q/O7V/69EnZpNB0eiWY=) 3: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: osFwS3xf1DonSoJwht99d9Tc2cqBOTGD/HEV1v4fujI=) 4: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: qN+/yytCyBcfkHVb1ow3hFKG1NuEJgUdgg003K5J6rM=) 5: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: 2deZljQHRC+27lOtPHeNXwE5AsA5ouy4hMQ4YZL8z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:96:c8:66:ba:42:02:24:d6:a7:c1:f8:f8:26:71:cb:e2:16:5a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Apr 23 23:17:16 2025 GMT Not After : Apr 27 10:04:16 2025 GMT Subject: CN=7DF82280633BA236E00BAC90204A3D69D9BA591E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:43:13:6e:5a:e8:8f:c8:41:4e:cc:f9:45: bb:6c:6d:5f:ce:07:d1:5f:e2:8c:aa:ff:5b:1a:d0: 10:22:5c:29:2d:b3:0b:a5:68:ef:f2:53:7b:c1:ee: da:6a:73:4f:c2:7c:3a:59:53:d2:ee:2e:e7:46:8e: b5:69:3e:de:69:29:05:51:c4:9d:9c:24:18:38:e6: b6:ed:f2:4c:1d:d7:10:48:24:2a:74:30:9c:f3:f9: 1f:63:74:fd:69:99:8c:58:39:5c:eb:b3:d0:3f:e2: e3:34:7f:96:ef:d6:32:24:2e:6c:bc:0b:c6:5b:a6: 7d:e6:a0:6e:45:88:d8:8e:45:c6:a8:b0:cd:06:2d: 5b:4a:13:5c:5e:f1:ab:f2:a3:2e:b0:ec:ea:dd:20: 3c:44:7d:db:03:36:2f:82:3d:82:2e:99:7b:2b:98: 40:74:e0:6a:06:55:02:20:a8:5a:49:7c:5f:f6:42: b4:07:d5:46:87:b1:21:4a:0e:2d:d8:f9:5b:a1:be: 2c:27:e5:88:1a:6b:2f:ee:ff:18:ff:2e:a3:57:ee: 31:4b:cf:31:52:17:75:b2:c6:28:9e:54:d2:f3:57: 32:30:46:e2:bb:18:33:17:ab:9d:44:65:58:3e:a4: 8b:97:de:e7:ba:76:28:51:57:a1:a3:7a:83:0b:9b: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F8:22:80:63:3B:A2:36:E0:0B:AC:90:20:4A:3D:69:D9:BA:59:1E X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bd:fa:bc:a1:a5:dc:76:26:c6:74:56:57:a2:73:92:40:57: 9e:d1:88:fa:86:60:a9:b9:cf:94:31:79:72:ce:25:b2:83:ce: dc:f0:86:0e:b6:3a:af:2c:c6:cf:24:23:78:53:38:24:fc:56: db:0d:e0:d1:3e:0b:0d:3f:18:9d:5b:52:05:5a:a6:9d:13:38: 12:6a:95:f7:3d:70:5b:d3:7a:23:fa:58:46:e6:dd:63:55:6c: 1d:85:b9:9b:9b:ed:b4:8a:08:06:6f:4e:3d:8b:b1:b4:46:b8: 52:af:46:44:fd:22:44:5c:5f:b4:26:58:82:a3:17:2b:44:84: ea:37:b7:61:c9:96:39:f0:e4:99:13:ce:4c:46:78:53:c1:88: 5c:8f:c3:9d:9b:08:bd:42:99:a3:c5:bf:6a:47:73:ec:21:34: 8f:d6:71:25:57:d6:db:0e:84:c0:e4:39:1c:58:c4:da:ce:24: a4:ef:d4:0b:47:4c:bf:13:b8:13:39:ae:1d:ee:6d:83:4a:79: 97:38:a6:c8:e1:63:68:52:f3:17:c4:1c:cb:0e:96:ff:34:c1: cc:dc:ea:af:fe:41:ca:cd:e4:b1:8e:d7:f7:71:13:42:ee:3b: e7:80:3c:3c:7d:12:c3:23:c9:3b:09:6e:5f:dc:f2:58:4f:0e: 97:8e:b9:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZbIZrpCAiTWp8H4+CZxy+IWWoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNTA0MjMyMzE3MTZaFw0yNTA0MjcxMDA0MTZaMDMxMTAvBgNV BAMTKDdERjgyMjgwNjMzQkEyMzZFMDBCQUM5MDIwNEEzRDY5RDlCQTU5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkg0MTblroj8hBTsz5RbtsbV/O B9Ff4oyq/1sa0BAiXCktswulaO/yU3vB7tpqc0/CfDpZU9LuLudGjrVpPt5pKQVR xJ2cJBg45rbt8kwd1xBIJCp0MJzz+R9jdP1pmYxYOVzrs9A/4uM0f5bv1jIkLmy8 C8Zbpn3moG5FiNiORcaosM0GLVtKE1xe8avyoy6w7OrdIDxEfdsDNi+CPYIumXsr mEB04GoGVQIgqFpJfF/2QrQH1UaHsSFKDi3Y+Vuhviwn5Ygaay/u/xj/LqNX7jFL zzFSF3WyxiieVNLzVzIwRuK7GDMXq51EZVg+pIuX3ue6dihRV6GjeoMLm7hXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUffgigGM7ojbgC6yQIEo9adm6WR4wHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACe9+ryhpdx2JsZ0Vleic5JAV57RiPqGYKm5 z5QxeXLOJbKDztzwhg62Oq8sxs8kI3hTOCT8VtsN4NE+Cw0/GJ1bUgVapp0TOBJq lfc9cFvTeiP6WEbm3WNVbB2FuZub7bSKCAZvTj2LsbRGuFKvRkT9IkRcX7QmWIKj FytEhOo3t2HJljnw5JkTzkxGeFPBiFyPw52bCL1CmaPFv2pHc+whNI/WcSVX1tsO hMDkORxYxNrOJKTv1AtHTL8TuBM5rh3ubYNKeZc4psjhY2hS8xfEHMsOlv80wczc 6q/+QcrN5LGO1/dxE0LuO+eAPDx9EsMjyTsJbl/c8lhPDpeOuSI= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net