$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft File: 2D18956397FA6055A44153CABF07303FD6E55E44.mft (raw, json) Hash identifier: lwXhhrvSOX6VoPEWNMN7HO1Bjxe4JGwLP2ZPy/IehiI= Subject key identifier: E1:39:54:B3:66:62:BE:8F:D0:34:C5:6F:D8:3C:7B:0F:09:D5:E0:2A Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44 Certificate serial: 406F15CC079E580D89CFF4D63637C04BE016DA57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft Manifest number: 04D3 Signing time: Tue 22 Apr 2025 23:42:00 +0000 Manifest this update: Tue 22 Apr 2025 23:37:00 +0000 Manifest next update: Sat 26 Apr 2025 09:24:00 +0000 Files and hashes: 1: 2D18956397FA6055A44153CABF07303FD6E55E44.crl (hash: 8wvwfAMXCsSk44vriU0ooh9i/AOKF0vH9bF8TXwzBsU=) 2: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: 9pt7JLtOWMCBsJXp8H1J28V9N/OUvx5VflNai/uQZgc=) 3: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: 1cZaLW2bYSVuCFR3p6/QnCg+KIF2tEt9ZDlyjUYN2tI=) 4: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: LMlg0YtMMAZTGP6EzKXImD6a6ZjUtLMQ+VabkB5A5lc=) 5: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: HyMWadhCrBlbrvw7eV4dA67xhQ9znG8zfhfFTeZs2rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 23:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6f:15:cc:07:9e:58:0d:89:cf:f4:d6:36:37:c0:4b:e0:16:da:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44 Validity Not Before: Apr 22 23:37:00 2025 GMT Not After : Apr 26 09:24:00 2025 GMT Subject: CN=E13954B36662BE8FD034C56FD83C7B0F09D5E02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:a4:d4:42:22:a4:dd:64:e9:90:f9:3c:cb: 81:75:9d:3a:cc:47:75:87:1e:a1:87:c8:e4:e0:24: 68:79:bf:5c:72:b7:26:c3:1b:24:30:ec:70:1e:9a: 05:a4:9e:af:54:34:fa:ad:86:96:2d:35:6c:cd:8b: 68:a2:82:ce:5e:82:ca:ea:c6:32:8a:b5:22:19:76: 71:5a:c6:f5:1c:38:a4:97:f5:26:f1:5f:e0:61:0c: 4a:24:32:55:45:ee:4b:b5:67:fb:fe:a7:fe:f1:75: 73:fe:4a:d2:cf:cb:d8:81:25:2e:c1:c7:ad:0d:7a: 8b:f7:9e:8c:c6:06:a2:8f:1d:44:5f:50:b4:2b:b8: 63:14:8b:92:55:a7:49:2d:41:06:e8:69:49:bd:b3: 46:43:f7:28:da:02:43:c0:83:36:45:20:ab:21:93: 68:a5:24:d0:40:09:4e:17:bf:54:0a:74:3b:75:d0: c6:70:6f:38:a8:05:b1:9d:0b:4b:c5:3d:70:ce:1f: 83:2b:bd:2b:08:0c:c3:3e:b0:2f:5f:9b:ff:56:7c: 94:61:68:ac:80:d9:82:1e:e5:f4:9b:bc:c4:c1:05: 6f:ca:81:b0:c7:d2:4c:f4:c0:c2:e1:18:22:fd:cf: 9d:87:df:0b:0f:af:bd:99:b5:63:d7:3b:b8:26:a2: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:39:54:B3:66:62:BE:8F:D0:34:C5:6F:D8:3C:7B:0F:09:D5:E0:2A X509v3 Authority Key Identifier: keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:72:77:bf:7a:fa:fa:84:82:54:6b:c5:86:16:60:09:66:d5: 0e:7a:b0:f0:27:94:9d:6c:f5:5b:7c:57:39:fe:e3:20:40:16: 59:b5:74:cd:de:af:32:ca:36:f2:d7:a3:63:87:db:d7:58:11: 82:d9:31:af:cc:b4:0c:d8:aa:45:e4:67:ce:4c:fa:31:fd:00: 73:2c:18:95:be:8d:c6:07:86:2e:8e:24:3c:af:97:da:cc:92: a4:2f:95:24:f2:e7:59:8d:b7:5e:97:d9:5e:41:b7:e1:4b:fc: bd:07:be:af:14:1a:4a:24:2b:4e:a0:40:46:96:62:92:60:84: 45:56:e6:81:0d:c3:24:87:5c:03:01:a5:29:94:c9:f5:5d:51: 09:fd:a6:b9:09:f4:5b:b5:5c:a4:8d:c5:cb:fb:1f:9e:d7:a5: 49:69:71:7b:c4:2c:29:d3:42:6f:8c:25:81:11:3a:f8:f9:e6: d2:9d:6f:4e:33:f4:85:19:80:7d:e0:72:c7:61:6e:d5:30:2e: 37:d8:d5:74:49:3f:1d:9f:5a:4e:b9:5b:db:65:46:9a:3d:2e: 51:1b:a7:02:ef:b5:43:86:96:4e:05:f0:ff:3b:7c:91:dd:9b: d2:f9:48:5d:24:d6:ac:0b:37:a8:4d:6c:49:41:e2:67:85:b1: 76:e8:9d:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQG8VzAeeWA2Jz/TWNjfAS+AW2lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE NkU1NUU0NDAeFw0yNTA0MjIyMzM3MDBaFw0yNTA0MjYwOTI0MDBaMDMxMTAvBgNV BAMTKEUxMzk1NEIzNjY2MkJFOEZEMDM0QzU2RkQ4M0M3QjBGMDlENUUwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjKTUQiKk3WTpkPk8y4F1nTrM R3WHHqGHyOTgJGh5v1xytybDGyQw7HAemgWknq9UNPqthpYtNWzNi2iigs5egsrq xjKKtSIZdnFaxvUcOKSX9SbxX+BhDEokMlVF7ku1Z/v+p/7xdXP+StLPy9iBJS7B x60Neov3nozGBqKPHURfULQruGMUi5JVp0ktQQboaUm9s0ZD9yjaAkPAgzZFIKsh k2ilJNBACU4Xv1QKdDt10MZwbzioBbGdC0vFPXDOH4MrvSsIDMM+sC9fm/9WfJRh aKyA2YIe5fSbvMTBBW/KgbDH0kz0wMLhGCL9z52H3wsPr72ZtWPXO7gmotZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4TlUs2Zivo/QNMVv2Dx7DwnV4CowHwYDVR0j BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3 RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1 NUU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMw M0ZENkU1NUU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVyd796+vqEglRrxYYWYAlm1Q56sPAnlJ1s 9Vt8Vzn+4yBAFlm1dM3erzLKNvLXo2OH29dYEYLZMa/MtAzYqkXkZ85M+jH9AHMs GJW+jcYHhi6OJDyvl9rMkqQvlSTy51mNt16X2V5Bt+FL/L0Hvq8UGkokK06gQEaW YpJghEVW5oENwySHXAMBpSmUyfVdUQn9prkJ9Fu1XKSNxcv7H57XpUlpcXvELCnT Qm+MJYEROvj55tKdb04z9IUZgH3gcsdhbtUwLjfY1XRJPx2fWk65W9tlRpo9LlEb pwLvtUOGlk4F8P87fJHdm9L5SF0k1qwLN6hNbElB4meFsXbonXk= -----END CERTIFICATE-----Generated at Wed Apr 23 04:06:28 2025 by rpki-client on console.sobornost.net