$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: 2pLfPCogOLjuMUxSpAIbqyry3QfqBMzGCMkFbm5j9UY= Subject key identifier: F0:8B:B8:B4:1A:74:3E:BF:3D:C3:0B:9A:5C:C3:BF:56:B1:91:5C:8B Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 48CEDEEDBAADA05BEDACC4E2549626B41186DE2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 0249 Signing time: Fri 25 Apr 2025 09:00:40 +0000 Manifest this update: Fri 25 Apr 2025 08:55:40 +0000 Manifest next update: Mon 28 Apr 2025 15:15:40 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) 2: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: mlZU1ceNpM4G03bdDg3yUmnt0+hwimRAxl/iO4YUVi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ce:de:ed:ba:ad:a0:5b:ed:ac:c4:e2:54:96:26:b4:11:86:de:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Apr 25 08:55:40 2025 GMT Not After : Apr 28 15:15:40 2025 GMT Subject: CN=F08BB8B41A743EBF3DC30B9A5CC3BF56B1915C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:fc:00:7c:78:05:07:3e:38:e5:78:c5:d9: 87:ce:91:f2:ce:71:c6:76:68:c5:e8:19:53:d2:62: b7:57:56:30:54:a6:13:99:79:40:f6:28:cd:8b:88: a2:fb:c5:58:42:34:fe:e4:a4:2a:6d:a2:78:74:c4: 32:b0:fc:c3:06:08:b6:60:46:9a:52:3a:9f:f1:df: b5:cc:fa:df:e4:11:9d:e7:21:c1:09:cc:7f:4a:4b: 60:14:41:cb:ef:ea:d0:ba:fa:7e:b9:ab:35:86:80: a3:95:d8:f3:3c:36:a1:07:35:dc:7b:8a:9a:02:5d: e1:85:8d:52:35:71:e8:e0:19:82:42:80:e1:53:96: 6d:ad:fd:36:5f:7b:f5:88:35:c6:04:9b:fc:91:34: 17:ac:0a:4b:33:7e:7a:27:dd:5c:27:ac:9d:d8:a3: 37:0f:4c:9c:0d:f3:0e:69:d6:dd:5a:d8:19:89:9d: 83:7d:ee:c1:e6:6b:ac:8a:e4:75:58:ef:88:79:63: 0c:a4:7e:52:52:0b:66:74:60:98:89:4d:3d:37:36: 6a:a3:a1:00:7c:5c:24:44:4e:a6:b6:22:71:de:b2: 46:57:94:d3:e6:bb:45:1d:bb:92:b7:89:b5:96:4c: 88:40:07:e3:3c:d0:07:58:8b:a4:b1:7a:b6:aa:a9: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8B:B8:B4:1A:74:3E:BF:3D:C3:0B:9A:5C:C3:BF:56:B1:91:5C:8B X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c6:e2:84:34:77:7b:49:c4:a1:41:ea:47:bc:c3:60:23:da: 8f:19:20:4f:b4:95:f7:a8:42:06:50:43:75:f6:22:f2:61:bd: 40:ec:5d:27:f0:aa:64:7b:41:85:18:de:4a:14:8e:d7:b8:81: 82:ab:31:01:83:56:c6:08:ab:b5:72:0e:63:2b:c3:3d:e8:71: 6b:2e:3b:c2:ee:e5:07:3d:eb:58:b4:2c:fb:b5:99:51:eb:d6: 96:a9:06:21:4e:5b:6d:ae:6b:25:4f:5e:ea:23:47:6b:28:7f: 5c:b0:14:c4:8a:e9:43:56:0e:89:3d:2d:89:dd:16:bb:64:fd: 99:9b:b3:ca:28:fd:57:5d:c2:f0:18:2f:fe:a6:a7:37:e4:b9: e4:0f:b5:ee:75:6c:de:8a:7b:76:cf:27:0a:1d:9b:61:fd:95: c9:ab:81:a1:99:0a:04:73:9e:e4:4c:9d:f7:b6:17:bc:b5:3a: 62:6a:a5:55:f1:ca:b6:9a:f8:6f:33:17:c6:72:94:48:8f:eb: 53:13:02:69:93:af:38:e9:a4:ef:b6:ce:4f:68:b1:d0:20:94: 59:52:48:42:bf:d2:a8:3c:4b:5a:0f:3a:3f:a4:9c:cc:f3:0b: f6:ed:0b:3f:d4:31:67:47:d1:2e:8c:95:85:cc:67:98:5e:56: e7:8d:da:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSM7e7bqtoFvtrMTiVJYmtBGG3iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTA0MjUwODU1NDBaFw0yNTA0MjgxNTE1NDBaMDMxMTAvBgNV BAMTKEYwOEJCOEI0MUE3NDNFQkYzREMzMEI5QTVDQzNCRjU2QjE5MTVDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+vwAfHgFBz445XjF2YfOkfLO ccZ2aMXoGVPSYrdXVjBUphOZeUD2KM2LiKL7xVhCNP7kpCptonh0xDKw/MMGCLZg RppSOp/x37XM+t/kEZ3nIcEJzH9KS2AUQcvv6tC6+n65qzWGgKOV2PM8NqEHNdx7 ipoCXeGFjVI1cejgGYJCgOFTlm2t/TZfe/WINcYEm/yRNBesCkszfnon3VwnrJ3Y ozcPTJwN8w5p1t1a2BmJnYN97sHma6yK5HVY74h5YwykflJSC2Z0YJiJTT03Nmqj oQB8XCRETqa2InHeskZXlNPmu0Udu5K3ibWWTIhAB+M80AdYi6SxeraqqWCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Iu4tBp0Pr89wwuaXMO/VrGRXIswHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjG4oQ0d3tJxKFB6ke8w2Aj2o8ZIE+0lfeo QgZQQ3X2IvJhvUDsXSfwqmR7QYUY3koUjte4gYKrMQGDVsYIq7VyDmMrwz3ocWsu O8Lu5Qc961i0LPu1mVHr1papBiFOW22uayVPXuojR2sof1ywFMSK6UNWDok9LYnd Frtk/Zmbs8oo/VddwvAYL/6mpzfkueQPte51bN6Ke3bPJwodm2H9lcmrgaGZCgRz nuRMnfe2F7y1OmJqpVXxyraa+G8zF8ZylEiP61MTAmmTrzjppO+2zk9osdAglFlS SEK/0qg8S1oPOj+knMzzC/btCz/UMWdH0S6MlYXMZ5heVueN2tI= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net