$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: I1wFowiNRiMDjwAEjmvi5FCOA/OwKaetfiSqxk16z2g= Subject key identifier: 21:F6:64:26:06:79:C1:4E:32:AE:3B:B8:AF:EA:A1:61:BB:C8:C6:9D Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 27BE619C2C580BA70D5F45BA2D720C8A44988FF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 01A5 Signing time: Thu 24 Apr 2025 03:32:11 +0000 Manifest this update: Thu 24 Apr 2025 03:27:11 +0000 Manifest next update: Sun 27 Apr 2025 04:51:11 +0000 Files and hashes: 1: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: q2JzAJ4KWuMy8UNkflOx1INP6Nh24QMXd1+kRMj9Nio=) 2: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: TT7MUwzbMrgBN8oEIAyXqU2sblUIPBHys6QVI7/dQqE=) 3: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HyOmqTBNJysFk0nvijg1y0JCQQaN+Dk9utcTlFmaQHY=) 4: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: Cry5tI26ZFq+xJIM45fHnqWQpQQD1hwh8FhbwaGJxgw=) 5: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: UUqUhVxo4riOoAS8LfSUq3H3CWxdpGF4ZToXB6Mfx1U=) 6: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: DPykOYeFqNoag7xb92W8/PrEblwWpE1eWB5cwaAPFZY=) 7: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: Jdxi2ld+DrcEuncfblvPGye54qLDFL//BHCw7NiVlyE=) 8: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: T7PGyiQmXloKZ6VuGeCUoDv/ii/k1ydJeAm43hYiG44=) 9: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: KvURdCiLhHkbUOwAzv8M2lOHWbthmo9CgPxXvVYh4Sg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:be:61:9c:2c:58:0b:a7:0d:5f:45:ba:2d:72:0c:8a:44:98:8f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Apr 24 03:27:11 2025 GMT Not After : Apr 27 04:51:11 2025 GMT Subject: CN=21F664260679C14E32AE3BB8AFEAA161BBC8C69D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:61:45:ef:0d:2b:75:85:89:f6:0d:e5:e1: bc:4d:ad:ab:e6:36:41:0a:a6:8e:1f:77:63:ee:78: 68:99:fa:00:41:69:8d:44:64:10:1d:49:f8:d2:ba: 9b:2d:65:37:76:cf:2e:a6:6d:b7:6b:d2:3a:19:86: ea:6d:57:a5:49:48:83:ec:6e:00:19:7f:d7:4e:7c: 40:87:01:b3:ba:5f:9e:57:17:18:1d:d5:9d:91:2d: b1:2b:77:a2:fd:dd:de:9b:17:ff:e4:7f:3c:18:31: 2d:5f:f6:bb:18:50:10:06:34:2b:3e:68:1b:31:e7: ae:af:d7:d4:64:d0:25:0f:ab:77:6c:8c:e5:e8:dc: 44:75:0c:bf:4e:5f:65:f0:71:67:d7:26:c5:32:ae: 7e:0c:86:50:c2:c2:5c:8a:c6:37:b3:50:50:cd:08: aa:71:40:c3:ee:6a:f8:a2:b4:77:c1:db:3f:9d:af: 94:4a:4f:de:ba:61:27:13:94:8a:3e:91:83:77:30: 84:f5:a0:6e:70:57:84:1c:f0:5d:41:f2:de:d6:ec: 9d:92:f7:07:77:46:48:25:43:83:21:7b:c6:c2:30: 96:31:ee:15:6c:a1:93:fb:f9:22:24:6c:e1:dd:9f: 75:6c:28:99:02:89:ec:14:fc:a0:80:1c:81:a5:e6: ff:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F6:64:26:06:79:C1:4E:32:AE:3B:B8:AF:EA:A1:61:BB:C8:C6:9D X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:89:dd:13:cd:ba:1e:61:a1:b2:d1:a5:53:f4:f5:4e:ad:b4: 96:25:a9:34:88:c2:02:ec:c2:c7:ab:f0:c4:e4:a1:22:54:fa: ba:4d:63:23:52:c6:be:81:e3:d1:ac:49:4f:50:5c:28:13:97: 3f:e4:2a:e3:f9:6f:61:d0:26:31:39:1e:f5:8b:10:3b:2f:76: 71:92:82:c2:72:8d:a4:91:68:83:34:a0:07:f5:51:b3:34:bb: 6f:48:d0:cc:0d:4e:52:01:6a:6a:11:d8:11:a5:6c:a9:1d:1d: b6:7f:23:e6:64:a9:1d:a0:84:c5:bd:8c:8f:7d:8e:a9:1e:a4: fc:45:1a:69:40:56:d5:b2:8a:23:ba:a8:92:06:53:a3:c8:66: c9:4e:96:53:1e:23:6d:a1:af:29:67:ae:d4:67:2e:29:39:eb: 50:8a:7c:9d:c6:e6:9a:1e:57:2c:25:8c:cb:61:8d:9e:04:ac: ef:fc:f2:20:09:c4:cd:23:35:51:85:36:91:60:fc:4d:12:30: ec:dc:0b:96:4f:c8:4b:5f:69:e5:67:eb:0b:9b:89:8c:03:a0: 4a:aa:d6:7c:60:2a:26:5a:62:bf:cd:ae:2e:9a:b9:1c:ba:9b: af:05:62:5a:1c:db:42:3f:f4:10:89:d0:c0:ae:d5:30:a4:f3: 80:1b:e4:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ75hnCxYC6cNX0W6LXIMikSYj/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTA0MjQwMzI3MTFaFw0yNTA0MjcwNDUxMTFaMDMxMTAvBgNV BAMTKDIxRjY2NDI2MDY3OUMxNEUzMkFFM0JCOEFGRUFBMTYxQkJDOEM2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vmFF7w0rdYWJ9g3l4bxNravm NkEKpo4fd2PueGiZ+gBBaY1EZBAdSfjSupstZTd2zy6mbbdr0joZhuptV6VJSIPs bgAZf9dOfECHAbO6X55XFxgd1Z2RLbErd6L93d6bF//kfzwYMS1f9rsYUBAGNCs+ aBsx566v19Rk0CUPq3dsjOXo3ER1DL9OX2XwcWfXJsUyrn4MhlDCwlyKxjezUFDN CKpxQMPuaviitHfB2z+dr5RKT966YScTlIo+kYN3MIT1oG5wV4Qc8F1B8t7W7J2S 9wd3RkglQ4Mhe8bCMJYx7hVsoZP7+SIkbOHdn3VsKJkCiewU/KCAHIGl5v+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfZkJgZ5wU4yrju4r+qhYbvIxp0wHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiJ3RPNuh5hobLRpVP09U6ttJYlqTSIwgLs wser8MTkoSJU+rpNYyNSxr6B49GsSU9QXCgTlz/kKuP5b2HQJjE5HvWLEDsvdnGS gsJyjaSRaIM0oAf1UbM0u29I0MwNTlIBamoR2BGlbKkdHbZ/I+ZkqR2ghMW9jI99 jqkepPxFGmlAVtWyiiO6qJIGU6PIZslOllMeI22hrylnrtRnLik561CKfJ3G5poe VywljMthjZ4ErO/88iAJxM0jNVGFNpFg/E0SMOzcC5ZPyEtfaeVn6wubiYwDoEqq 1nxgKiZaYr/Nri6auRy6m68FYloc20I/9BCJ0MCu1TCk84Ab5Ak= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net