$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: ZxAaj5uMS330HKtH6RKZOBHBfXLDV2QEVGfU7YXD6VI= Subject key identifier: 3D:EC:D6:6A:D9:E1:FB:2B:50:C4:A2:85:70:5E:B3:3A:21:1C:B8:DF Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 5621BDD6DB368F05EA5498BBB96D92832E8C6703 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 0137 Signing time: Wed 23 Apr 2025 17:30:49 +0000 Manifest this update: Wed 23 Apr 2025 17:25:49 +0000 Manifest next update: Sun 27 Apr 2025 03:14:49 +0000 Files and hashes: 1: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: l9OL2QsEAMwF/Y3bVTLQz3xAHIdxdMsq70wopXRtO0o=) 2: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: huRfaxbhSwylLxpTR+qFQbNwgI1ST+DGQJKRH6CbwiA=) 3: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: rfmzRlsdAvNLiNI+69dQJvzwCRcUetfcXyg7dj9lLfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:21:bd:d6:db:36:8f:05:ea:54:98:bb:b9:6d:92:83:2e:8c:67:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Apr 23 17:25:49 2025 GMT Not After : Apr 27 03:14:49 2025 GMT Subject: CN=3DECD66AD9E1FB2B50C4A285705EB33A211CB8DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:b7:17:c8:4b:fb:f3:66:5d:a9:06:e2:7d: 63:60:0c:18:82:d9:47:6a:4e:9a:7e:73:ce:17:f4: 1e:10:09:d4:7b:3f:6b:bb:c3:9f:c9:e8:ab:98:f5: 95:bf:fa:35:61:96:d0:b2:65:13:77:1f:6c:9e:21: 56:56:ea:65:c1:3d:e7:97:20:95:e3:44:7a:c6:c2: dd:07:d0:dc:9d:a3:7e:1e:01:8f:3b:91:b7:b2:06: af:24:90:c8:6f:dc:26:dc:3e:44:93:40:a5:c3:b1: 6d:d3:5d:57:93:f1:3d:74:c1:b4:a3:34:be:cb:41: d3:7b:54:f4:e0:f6:03:2c:ee:81:fb:f4:6d:a2:de: f5:d7:39:05:13:01:ad:f1:93:c7:60:0b:29:48:c8: 46:b7:28:cc:5a:ce:ad:23:c2:60:fd:49:3c:fb:be: d0:c3:92:17:a2:77:f7:44:8f:1f:92:b0:72:38:ab: 41:af:0a:5b:2f:18:ed:33:4c:2d:c5:bb:7b:3d:30: 33:f4:28:da:6d:d5:93:68:20:5f:d1:0e:a9:b6:3d: 05:b2:78:d7:1f:95:ab:fd:63:36:c5:74:1c:b0:63: f0:df:a6:28:8d:49:9b:82:f3:52:b9:4e:74:94:37: ec:c3:67:dc:bc:bf:45:a8:9a:78:ad:a6:7b:e3:3c: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EC:D6:6A:D9:E1:FB:2B:50:C4:A2:85:70:5E:B3:3A:21:1C:B8:DF X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:46:c2:c9:a4:22:8c:ac:49:55:64:06:51:87:1a:76:40:4f: d9:05:c1:be:b6:6f:58:b0:43:19:60:5e:f3:dd:8d:d0:31:a2: 64:4e:58:d3:2b:8b:e0:d5:62:af:8c:9d:8a:d6:e8:29:9f:56: 5d:15:48:be:45:61:99:b4:0e:ce:4d:6c:5c:46:c1:38:9d:03: b7:c9:0c:c4:69:e7:b9:ce:87:a7:23:7c:98:d5:60:0a:d3:16: 10:ac:0b:33:75:84:31:28:a9:57:15:9c:c9:0f:ce:96:8c:4c: b4:52:11:23:92:29:f4:40:2c:70:96:66:55:76:06:30:31:17: f9:ed:6c:72:65:be:4e:27:9a:10:00:07:c3:fa:28:e4:48:0b: 40:0c:eb:56:ae:ee:0a:2c:c0:f1:12:ab:1c:e6:4a:b8:1c:7d: e1:2b:89:45:d7:56:7c:10:c8:9e:75:f1:eb:8d:9a:01:1f:50: eb:74:f9:f5:17:ca:91:fc:56:3d:43:81:d0:93:92:c5:a3:13: 7d:d5:7f:37:c8:f5:2f:9b:3f:f5:38:ba:a5:d8:0a:c1:29:2c: b7:fb:a9:32:c3:56:0c:d3:07:b8:fb:cb:d9:ca:6f:76:54:08: 5b:13:30:ee:7c:9d:61:71:87:ba:24:88:f2:6e:f2:32:e6:50: 7c:fe:c3:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViG91ts2jwXqVJi7uW2Sgy6MZwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTA0MjMxNzI1NDlaFw0yNTA0MjcwMzE0NDlaMDMxMTAvBgNV BAMTKDNERUNENjZBRDlFMUZCMkI1MEM0QTI4NTcwNUVCMzNBMjExQ0I4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC207cXyEv782ZdqQbifWNgDBiC 2UdqTpp+c84X9B4QCdR7P2u7w5/J6KuY9ZW/+jVhltCyZRN3H2yeIVZW6mXBPeeX IJXjRHrGwt0H0Nydo34eAY87kbeyBq8kkMhv3CbcPkSTQKXDsW3TXVeT8T10wbSj NL7LQdN7VPTg9gMs7oH79G2i3vXXOQUTAa3xk8dgCylIyEa3KMxazq0jwmD9STz7 vtDDkheid/dEjx+SsHI4q0GvClsvGO0zTC3Fu3s9MDP0KNpt1ZNoIF/RDqm2PQWy eNcflav9YzbFdBywY/DfpiiNSZuC81K5TnSUN+zDZ9y8v0WomnitpnvjPIrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPezWatnh+ytQxKKFcF6zOiEcuN8wHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxGwsmkIoysSVVkBlGHGnZAT9kFwb62b1iw QxlgXvPdjdAxomROWNMri+DVYq+MnYrW6CmfVl0VSL5FYZm0Ds5NbFxGwTidA7fJ DMRp57nOh6cjfJjVYArTFhCsCzN1hDEoqVcVnMkPzpaMTLRSESOSKfRALHCWZlV2 BjAxF/ntbHJlvk4nmhAAB8P6KORIC0AM61au7goswPESqxzmSrgcfeEriUXXVnwQ yJ518euNmgEfUOt0+fUXypH8Vj1DgdCTksWjE33VfzfI9S+bP/U4uqXYCsEpLLf7 qTLDVgzTB7j7y9nKb3ZUCFsTMO58nWFxh7okiPJu8jLmUHz+w5Q= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net