$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json) Hash identifier: PFMXbqu2QHjplTddZqidWjSHoajR+ICq8SCW0kmruAU= Subject key identifier: F8:9B:BD:1A:BE:41:0C:81:CA:42:7E:D3:26:1B:A1:DC:88:44:1D:48 Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Certificate serial: 30501E7244C40AF333D74FFA711FD53915AC1DF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft Manifest number: 01DF Signing time: Thu 24 Apr 2025 07:41:45 +0000 Manifest this update: Thu 24 Apr 2025 07:36:45 +0000 Manifest next update: Sun 27 Apr 2025 17:02:45 +0000 Files and hashes: 1: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: bu4LtbxxfvYhSmPVYXsHJnQ8u6QDASxNerDLPSby9+A=) 2: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: 4ocXgEuXLGqqEPNp67tBG3g+9sv4Bz+d26UTiyXM4SA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:50:1e:72:44:c4:0a:f3:33:d7:4f:fa:71:1f:d5:39:15:ac:1d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Validity Not Before: Apr 24 07:36:45 2025 GMT Not After : Apr 27 17:02:45 2025 GMT Subject: CN=F89BBD1ABE410C81CA427ED3261BA1DC88441D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2c:e7:b9:1e:58:72:4a:88:f7:b9:d1:d2:b3: e7:52:20:60:0a:8e:b2:1f:62:5d:22:52:42:46:f5: f4:8a:b9:2f:9a:a6:e9:12:c1:4c:b4:19:d8:a5:24: 3b:30:81:30:d5:66:c0:f0:58:71:c3:66:0a:aa:10: 38:8a:22:f8:75:c6:50:01:a2:db:89:d3:8a:15:40: 6b:48:7a:76:06:63:24:19:8d:ed:71:ec:c6:1c:4e: fb:61:77:2b:cc:88:00:67:da:9a:74:c6:f2:f4:44: ac:f0:b0:6f:69:bf:ae:75:7c:63:c0:4e:81:9a:09: 2a:ff:04:91:15:8b:ac:61:bd:6f:d3:6d:f3:e4:09: 25:30:e8:ec:3c:d5:8b:a8:79:fc:f2:6c:5c:34:46: f6:61:d3:df:be:82:85:24:c5:c9:57:26:ac:20:4c: 4d:90:63:6f:56:17:a1:34:b5:8a:e8:36:5d:d7:76: 49:7e:2e:ab:d5:dd:37:1c:85:78:de:32:ab:87:ad: 46:22:df:89:49:d1:07:ea:09:88:ee:1b:7b:f7:18: 3f:7d:82:74:9f:8b:49:d5:fe:15:79:1a:fd:ee:13: 3e:97:2b:5b:0c:7e:e3:95:c1:79:79:3d:ff:2f:4e: 5b:d3:7e:aa:d1:17:19:68:f6:45:65:26:48:5e:87: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:BD:1A:BE:41:0C:81:CA:42:7E:D3:26:1B:A1:DC:88:44:1D:48 X509v3 Authority Key Identifier: keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ef:fe:4f:a0:72:04:bc:0a:11:cd:cb:41:0c:e8:08:17:9d: a2:ef:5f:ce:9d:61:70:eb:99:1f:ae:45:50:fd:86:f0:84:86: b6:13:77:2a:43:00:bf:8d:30:cc:4d:be:bb:9a:e1:d7:46:ca: bd:2a:fd:3e:a3:0e:d3:7f:a8:f5:61:34:90:bb:75:6a:64:05: 7b:eb:28:58:76:0f:86:ac:d3:8a:2c:2f:98:68:4f:cd:1d:60: 56:d3:2d:9f:37:ea:71:69:0e:ef:5e:c3:07:11:ff:2c:44:cd: c2:72:62:85:62:91:41:9e:8d:7b:66:18:61:dd:d4:4f:e0:5a: 98:db:04:80:4d:fa:9c:ba:38:54:3a:8e:e5:37:58:c2:9f:8e: 5b:12:85:6d:dd:f1:a1:ea:91:a6:5f:e8:f9:4d:60:44:1f:fe: 22:3c:e1:e5:ad:a1:ba:60:17:c7:c4:2a:fb:8d:10:ba:9f:b8: 4b:6c:02:9a:ef:6a:e2:d8:a2:72:68:dc:44:f4:d4:76:12:51: f5:6d:d1:71:e2:cc:24:d8:44:9e:96:22:64:10:1d:53:e8:68: c2:28:c9:3a:3f:54:57:92:c2:10:14:56:b6:cc:57:64:9d:4e: 72:9b:90:ec:a4:08:bb:cc:f1:e7:32:a8:8d:78:2b:8d:d4:76: aa:4b:3e:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFAeckTECvMz10/6cR/VORWsHfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2 NEREOUYyNjAeFw0yNTA0MjQwNzM2NDVaFw0yNTA0MjcxNzAyNDVaMDMxMTAvBgNV BAMTKEY4OUJCRDFBQkU0MTBDODFDQTQyN0VEMzI2MUJBMURDODg0NDFENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLOe5HlhySoj3udHSs+dSIGAK jrIfYl0iUkJG9fSKuS+apukSwUy0GdilJDswgTDVZsDwWHHDZgqqEDiKIvh1xlAB otuJ04oVQGtIenYGYyQZje1x7MYcTvthdyvMiABn2pp0xvL0RKzwsG9pv651fGPA ToGaCSr/BJEVi6xhvW/TbfPkCSUw6Ow81YuoefzybFw0RvZh09++goUkxclXJqwg TE2QY29WF6E0tYroNl3Xdkl+LqvV3TcchXjeMquHrUYi34lJ0QfqCYjuG3v3GD99 gnSfi0nV/hV5Gv3uEz6XK1sMfuOVwXl5Pf8vTlvTfqrRFxlo9kVlJkheh7lJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Ju9Gr5BDIHKQn7TJhuh3IhEHUgwHwYDVR0j BBgwFoAU0ho1l9e169mlR2gPHC7XpGTdnyYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2M1NjA1ZC1mMTdhLTQwMTAtOTI1My0yMTBjNjRmMTQ4YmQvMC9EMjFBMzU5N0Q3 QjVFQkQ5QTU0NzY4MEYxQzJFRDdBNDY0REQ5RjI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2NERE OUYyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3 QTQ2NEREOUYyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXv/k+gcgS8ChHNy0EM6AgXnaLvX86dYXDr mR+uRVD9hvCEhrYTdypDAL+NMMxNvrua4ddGyr0q/T6jDtN/qPVhNJC7dWpkBXvr KFh2D4as04osL5hoT80dYFbTLZ836nFpDu9ewwcR/yxEzcJyYoVikUGejXtmGGHd 1E/gWpjbBIBN+py6OFQ6juU3WMKfjlsShW3d8aHqkaZf6PlNYEQf/iI84eWtobpg F8fEKvuNELqfuEtsAprvauLYonJo3ET01HYSUfVt0XHizCTYRJ6WImQQHVPoaMIo yTo/VFeSwhAUVrbMV2SdTnKbkOykCLvM8ecyqI14K43UdqpLPsA= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net