$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: a61jhom5oEH59OSkEkHtge4soHb0cUTSrI3etDWeCUM= Subject key identifier: F9:05:8C:10:9D:10:AD:97:8B:CD:89:E4:91:9A:C5:96:EA:83:4B:68 Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 4A8269E155C01C84AF98ED1A5AD02C07B9BC0D0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 014A Signing time: Thu 24 Apr 2025 09:01:13 +0000 Manifest this update: Thu 24 Apr 2025 08:56:13 +0000 Manifest next update: Sun 27 Apr 2025 18:34:13 +0000 Files and hashes: 1: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: MKuGnpZ60DSK/b5WEF/hr8uWY44ucZ99U8eaS+KudvM=) 2: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) 3: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) 4: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) 5: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) 6: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: sw3nE3Cw0X2WEPX8kfmgbGcVFuL3GTPziAAec+G9nno=) 7: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 8: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:82:69:e1:55:c0:1c:84:af:98:ed:1a:5a:d0:2c:07:b9:bc:0d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Apr 24 08:56:13 2025 GMT Not After : Apr 27 18:34:13 2025 GMT Subject: CN=F9058C109D10AD978BCD89E4919AC596EA834B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ec:67:38:f7:2f:75:9c:80:e1:00:3c:98:c3: 06:74:25:ba:ea:ac:52:c4:5b:d8:40:1e:3b:34:66: 6c:69:e9:b5:3f:70:90:73:f7:f7:50:73:fd:1e:9c: bb:7d:7c:d5:00:76:53:f2:60:77:95:a4:84:9a:ac: d5:8a:80:af:6c:0c:d1:9c:5d:04:06:db:0f:2d:d5: 44:68:df:db:86:66:48:02:15:a9:df:c3:37:76:92: d4:a3:07:59:35:72:79:6d:e1:86:7c:b0:27:69:11: bf:7c:6b:ce:e8:16:5d:80:4d:db:ce:48:15:db:36: 7e:b6:b3:f4:ab:28:5b:6a:0e:3e:ae:09:77:99:9a: 59:56:f9:f4:13:1f:27:3b:08:6c:05:92:9e:3a:52: fc:d1:74:04:f1:64:d6:98:2d:ca:48:6b:85:88:56: a9:46:c9:c3:1d:65:61:91:09:51:81:41:6e:67:50: e6:5e:93:3b:75:63:2d:41:99:50:2b:af:b7:e1:89: b7:3c:ad:96:08:dc:27:69:50:c8:84:ab:1b:90:13: 0a:fd:0f:2a:6f:77:3b:ea:6f:61:19:00:fb:29:41: 43:ec:03:6f:57:d7:9e:d3:94:74:55:83:09:c1:b3: bd:c5:60:d6:b8:93:00:6a:36:0c:4d:39:08:3c:18: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:05:8C:10:9D:10:AD:97:8B:CD:89:E4:91:9A:C5:96:EA:83:4B:68 X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:48:e6:04:ec:c1:a3:d3:ff:0d:17:4a:f6:7b:32:4c:15:de: 40:88:91:c8:ec:00:1a:0a:23:76:2c:14:3e:af:45:77:1a:6a: ce:6a:d4:49:75:0b:eb:f3:20:e0:8d:ad:54:8f:78:06:9a:7c: ff:b8:2f:61:d8:d3:82:22:56:ed:6b:7c:e5:3e:66:96:c3:3d: 52:45:a0:97:1b:1a:63:00:7c:2b:8c:47:03:40:4f:c4:4a:6b: 43:68:a3:43:fe:55:e4:8f:e5:18:ac:f7:f7:f0:83:7c:a8:01: 58:87:99:f7:2b:df:b1:13:c8:9b:f9:c9:7a:87:79:b2:4d:f4: f4:e2:0f:6d:2d:09:eb:fa:77:c9:6c:5b:71:66:42:e2:55:33: 83:4a:e3:3b:55:19:a5:fc:40:ab:e9:b9:a4:0c:08:6b:05:db: a1:44:7f:9b:03:d4:47:89:08:3c:bf:45:5f:e8:33:04:00:3b: 9a:13:c6:3b:98:e0:86:96:38:7b:d3:27:a6:25:1e:59:85:5f: 3d:7c:75:e4:ff:0b:92:2b:28:2d:f3:05:94:98:90:f8:4b:54: cc:c1:2a:47:8a:1f:d6:5b:95:b6:38:82:ec:ee:48:16:62:e6: 9b:33:b9:6f:55:84:eb:95:f2:56:72:9f:a7:42:3b:e0:37:d1: 51:26:84:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoJp4VXAHISvmO0aWtAsB7m8DQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA0MjQwODU2MTNaFw0yNTA0MjcxODM0MTNaMDMxMTAvBgNV BAMTKEY5MDU4QzEwOUQxMEFEOTc4QkNEODlFNDkxOUFDNTk2RUE4MzRCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm7Gc49y91nIDhADyYwwZ0Jbrq rFLEW9hAHjs0Zmxp6bU/cJBz9/dQc/0enLt9fNUAdlPyYHeVpISarNWKgK9sDNGc XQQG2w8t1URo39uGZkgCFanfwzd2ktSjB1k1cnlt4YZ8sCdpEb98a87oFl2ATdvO SBXbNn62s/SrKFtqDj6uCXeZmllW+fQTHyc7CGwFkp46UvzRdATxZNaYLcpIa4WI VqlGycMdZWGRCVGBQW5nUOZekzt1Yy1BmVArr7fhibc8rZYI3CdpUMiEqxuQEwr9 Dypvdzvqb2EZAPspQUPsA29X157TlHRVgwnBs73FYNa4kwBqNgxNOQg8GACHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+QWMEJ0QrZeLzYnkkZrFluqDS2gwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZI5gTswaPT/w0XSvZ7MkwV3kCIkcjsABoK I3YsFD6vRXcaas5q1El1C+vzIOCNrVSPeAaafP+4L2HY04IiVu1rfOU+ZpbDPVJF oJcbGmMAfCuMRwNAT8RKa0Noo0P+VeSP5Ris9/fwg3yoAViHmfcr37ETyJv5yXqH ebJN9PTiD20tCev6d8lsW3FmQuJVM4NK4ztVGaX8QKvpuaQMCGsF26FEf5sD1EeJ CDy/RV/oMwQAO5oTxjuY4IaWOHvTJ6YlHlmFXz18deT/C5IrKC3zBZSYkPhLVMzB KkeKH9ZblbY4guzuSBZi5pszuW9VhOuV8lZyn6dCO+A30VEmhGE= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net