$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: G9WP0nr5qJO4Achz8icEhqhqJSMgdj3806oikesfXTM= Subject key identifier: 6B:48:62:B6:80:7A:A9:D9:9C:9A:0F:DB:30:B2:7C:86:D7:00:EA:A8 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 3B5DEF7B4596E87C96FF04DEB3E043036C39E543 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: DD Signing time: Wed 23 Apr 2025 22:51:02 +0000 Manifest this update: Wed 23 Apr 2025 22:46:02 +0000 Manifest next update: Sun 27 Apr 2025 03:34:02 +0000 Files and hashes: 1: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: ru1sWoVJH4ZCPN16vYfV6ZO5Hm1V9NurHOzm/d4IaNQ=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5d:ef:7b:45:96:e8:7c:96:ff:04:de:b3:e0:43:03:6c:39:e5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Apr 23 22:46:02 2025 GMT Not After : Apr 27 03:34:02 2025 GMT Subject: CN=6B4862B6807AA9D99C9A0FDB30B27C86D700EAA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c0:64:86:3a:da:cf:47:fd:4c:81:f9:d7:18: d0:13:19:a3:d7:20:d4:c6:a4:e9:3f:19:ed:12:bc: 62:75:21:4e:b3:1c:29:59:e6:a2:aa:30:9f:74:f1: b8:77:f8:7a:f3:45:3e:a8:ec:00:78:11:d4:ff:5a: 6e:a6:b8:1c:a4:75:26:1f:b6:b0:d8:2e:50:be:d6: 64:3b:da:8a:6f:a4:d8:15:ae:d0:e1:d5:76:23:48: 4a:b1:85:24:85:8a:31:3a:e7:f2:23:e6:60:b8:f6: 52:3f:c3:57:dd:46:eb:cb:a7:37:56:b9:37:7b:e6: 0f:4e:5d:b5:9d:75:71:bc:1e:f1:d9:f8:68:24:81: 76:6f:4b:cc:e1:ab:cc:a0:1b:ee:ce:cf:e1:39:c8: ab:6f:f5:bf:f9:e4:13:93:52:4d:b4:aa:c7:46:2d: c8:3c:bf:cf:4b:81:73:67:8f:01:fd:6a:14:bc:e2: 37:2e:2a:1b:d5:f2:aa:d6:15:50:fa:c3:70:ee:f2: 96:d6:4b:90:7a:c5:6a:36:10:d3:08:51:7f:e5:5f: 36:66:a7:e4:9b:54:58:1b:19:97:65:80:ad:69:53: c5:1e:d2:f5:3a:0a:a0:63:96:b6:77:54:5d:27:f6: 69:99:da:e2:67:a6:6a:34:ac:a4:3a:0e:4b:a1:92: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:48:62:B6:80:7A:A9:D9:9C:9A:0F:DB:30:B2:7C:86:D7:00:EA:A8 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7e:bf:dd:6c:c3:34:b9:2c:6d:b0:b1:48:17:0c:33:5e:76: a3:00:61:b5:b0:99:b7:a5:cf:33:2a:34:f2:34:8e:73:75:2b: 3b:a9:ef:a2:69:ab:21:f1:60:b1:a9:1a:78:52:23:9a:fc:df: ef:3c:b8:e1:be:96:42:28:43:76:14:e4:81:54:77:e9:cb:a8: e2:2b:42:ed:82:6e:d8:dd:c4:94:5e:94:d0:bc:fc:82:ec:23: 6d:ea:9d:66:69:bb:67:9f:53:9c:af:23:5e:84:25:60:5e:81: b5:fc:df:58:f1:2c:92:ce:57:ab:3e:40:91:a7:e9:bc:fb:26: ab:1c:e1:72:e0:68:89:5b:b1:38:85:9e:e0:66:e4:32:60:27: cc:87:51:61:44:ef:2b:8f:77:88:3c:6a:60:c9:5e:63:f2:ca: ef:6e:b4:87:0c:ff:a0:6f:58:fa:0f:9b:bd:ed:89:65:0e:56: 74:0d:17:9c:c2:c0:48:aa:8a:0e:26:8b:b6:a3:9f:58:c2:5a: a8:9b:62:9a:95:8b:85:17:ef:67:bd:a9:8e:e4:5c:3d:78:59: 6c:a0:1a:c6:a8:f4:ba:9d:e6:32:e6:e0:ea:32:9c:4f:e4:67: 34:03:7e:26:e0:bf:77:cf:09:48:70:f3:7a:bf:1b:89:4d:a7: 69:c7:1a:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO13ve0WW6HyW/wTes+BDA2w55UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTA0MjMyMjQ2MDJaFw0yNTA0MjcwMzM0MDJaMDMxMTAvBgNV BAMTKDZCNDg2MkI2ODA3QUE5RDk5QzlBMEZEQjMwQjI3Qzg2RDcwMEVBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvwGSGOtrPR/1MgfnXGNATGaPX INTGpOk/Ge0SvGJ1IU6zHClZ5qKqMJ908bh3+HrzRT6o7AB4EdT/Wm6muBykdSYf trDYLlC+1mQ72opvpNgVrtDh1XYjSEqxhSSFijE65/Ij5mC49lI/w1fdRuvLpzdW uTd75g9OXbWddXG8HvHZ+GgkgXZvS8zhq8ygG+7Oz+E5yKtv9b/55BOTUk20qsdG Lcg8v89LgXNnjwH9ahS84jcuKhvV8qrWFVD6w3Du8pbWS5B6xWo2ENMIUX/lXzZm p+SbVFgbGZdlgK1pU8Ue0vU6CqBjlrZ3VF0n9mmZ2uJnpmo0rKQ6DkuhkoEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa0hitoB6qdmcmg/bMLJ8htcA6qgwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt+v91swzS5LG2wsUgXDDNedqMAYbWwmbel zzMqNPI0jnN1Kzup76JpqyHxYLGpGnhSI5r83+88uOG+lkIoQ3YU5IFUd+nLqOIr Qu2CbtjdxJRelNC8/ILsI23qnWZpu2efU5yvI16EJWBegbX831jxLJLOV6s+QJGn 6bz7Jqsc4XLgaIlbsTiFnuBm5DJgJ8yHUWFE7yuPd4g8amDJXmPyyu9utIcM/6Bv WPoPm73tiWUOVnQNF5zCwEiqig4mi7ajn1jCWqibYpqVi4UX72e9qY7kXD14WWyg Gsao9Lqd5jLm4OoynE/kZzQDfibgv3fPCUhw83q/G4lNp2nHGsA= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:08 2025 by rpki-client on console.sobornost.net