$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft File: 28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft (raw, json) Hash identifier: 4Pqlo3hjidE4/4ERAosx1JKXCLFlHxiKsPAduFWO+Kg= Subject key identifier: C1:CF:85:6B:4A:FA:2C:CD:E2:36:1F:26:9A:E0:59:72:04:65:FC:B2 Authority key identifier: 28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC Certificate issuer: /CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC Certificate serial: 2DA26A684A3D0652F1C541DC5097F57B678BE575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft Manifest number: 3F Signing time: Fri 25 Apr 2025 00:31:59 +0000 Manifest this update: Fri 25 Apr 2025 00:26:59 +0000 Manifest next update: Mon 28 Apr 2025 05:34:59 +0000 Files and hashes: 1: 28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl (hash: LsixWvecHbDvK6GSGTpEX+62Q9474zOQFU7hV09VX94=) 2: 3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa (hash: sz4VmdCTe+rtqXvjcCCv+oeArdLugQ/bUPNEnmt0I5U=) 3: 323430363a373534303a3a2f33322d3332203d3e20313431303637.roa (hash: bv6pC6gX0eRc1LFkXxFUMTO8NK/3ORK3VMfpVTQQLkE=) 4: 3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa (hash: sCyLtPxP1W6eDrRKM5zzBxs1T1DM9NmEIRenFAs3CLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a2:6a:68:4a:3d:06:52:f1:c5:41:dc:50:97:f5:7b:67:8b:e5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC Validity Not Before: Apr 25 00:26:59 2025 GMT Not After : Apr 28 05:34:59 2025 GMT Subject: CN=C1CF856B4AFA2CCDE2361F269AE059720465FCB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:51:26:8e:37:33:5f:49:27:80:ef:c5:64: 2f:ee:45:71:4c:50:f5:b5:81:0a:d6:a0:71:ce:82: 57:fa:49:d6:f5:82:04:e7:5a:0e:7a:e9:e8:ba:36: 4b:bb:33:b0:f2:2e:a5:10:89:d4:2d:7b:43:be:63: 96:cb:7b:75:1a:88:db:c3:f7:04:25:8a:db:96:c1: 8a:6c:86:ec:90:c4:d8:c8:66:fa:30:64:2c:9e:0a: da:81:a4:9b:bc:bb:8c:96:1f:9c:bf:b3:55:be:a5: a5:22:3a:d6:dc:aa:06:34:ca:9a:bc:c4:bf:05:07: b4:03:35:f4:38:1b:5b:de:15:81:22:cf:46:86:09: 24:34:b0:11:29:da:78:ab:2f:7a:e1:2b:d5:18:09: f7:4e:31:c9:28:8d:03:f9:e4:26:6e:a5:a5:32:a0: 4c:a6:af:a6:57:93:a5:d0:be:5e:58:ab:45:41:c5: 97:41:77:f7:09:33:9f:42:1d:b7:31:9b:39:c9:fe: 8d:c1:17:91:d9:c6:4e:32:45:c9:59:c2:e9:b8:72: 6c:13:38:d1:ab:b3:f0:06:a6:62:04:39:46:72:ef: 8c:15:26:ed:e5:b9:00:47:ce:fb:14:54:e3:e8:e7: e5:0f:89:b1:09:72:bd:41:74:36:d0:c0:ec:bb:ad: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CF:85:6B:4A:FA:2C:CD:E2:36:1F:26:9A:E0:59:72:04:65:FC:B2 X509v3 Authority Key Identifier: keyid:28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5f:75:59:c2:cf:72:98:6d:35:8d:ed:04:75:6e:9d:78:1c: 5b:2b:7e:1b:d2:da:0c:b7:0e:89:e4:86:b1:cd:9f:51:50:f0: b6:9c:c8:69:b7:f2:bc:3e:9d:f0:f2:78:92:07:01:46:34:10: eb:4c:3a:28:08:b0:1f:f2:45:0c:38:71:cd:ab:8c:fd:c1:d5: 9a:ed:dc:2f:3d:a9:d6:79:5b:c7:82:d0:22:0b:0c:ae:ff:e4: ff:fa:ac:42:f4:a9:5b:d4:0e:0a:54:5b:7e:e2:99:d8:a6:41: 70:f3:48:ab:63:36:c4:03:a4:f3:b5:2b:5d:d3:25:2f:1b:0c: 40:0d:f5:e7:f6:8c:42:ec:38:47:c8:e9:c6:91:a1:d3:50:1d: 85:1c:ad:30:e5:cd:48:0b:90:a5:0d:23:3d:bc:68:b0:35:ee: 44:80:25:86:a1:3d:f6:08:43:d6:5c:67:37:6d:a3:ee:7d:4f: 5c:b6:0d:16:4a:a7:48:62:00:ff:ef:b2:c4:b5:8c:3b:38:02: 07:2c:3f:f9:73:3d:40:b8:ea:c7:0f:cc:ea:ff:16:af:c8:50: d5:2c:52:ef:5a:3a:96:cb:41:03:78:30:c4:c6:db:fb:27:26: d8:09:85:e4:17:fe:ec:c7:7e:34:19:7e:de:8f:96:59:00:3e: 38:97:d2:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaJqaEo9BlLxxUHcUJf1e2eL5XUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZD NTdFOUJFQzAeFw0yNTA0MjUwMDI2NTlaFw0yNTA0MjgwNTM0NTlaMDMxMTAvBgNV BAMTKEMxQ0Y4NTZCNEFGQTJDQ0RFMjM2MUYyNjlBRTA1OTcyMDQ2NUZDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKVEmjjczX0kngO/FZC/uRXFM UPW1gQrWoHHOglf6Sdb1ggTnWg566ei6Nku7M7DyLqUQidQte0O+Y5bLe3UaiNvD 9wQlituWwYpshuyQxNjIZvowZCyeCtqBpJu8u4yWH5y/s1W+paUiOtbcqgY0ypq8 xL8FB7QDNfQ4G1veFYEiz0aGCSQ0sBEp2nirL3rhK9UYCfdOMckojQP55CZupaUy oEymr6ZXk6XQvl5Yq0VBxZdBd/cJM59CHbcxmznJ/o3BF5HZxk4yRclZwum4cmwT ONGrs/AGpmIEOUZy74wVJu3luQBHzvsUVOPo5+UPibEJcr1BdDbQwOy7revbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwc+Fa0r6LM3iNh8mmuBZcgRl/LIwHwYDVR0j BBgwFoAUKLMFxmM2xDOrYBum8LNS5sV+m+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZlOWI1MS1iZDg3LTQ5MDUtOWJmNC1hODQ4YTQ0ZTViYTUvMC8yOEIzMDVDNjYz MzZDNDMzQUI2MDFCQTZGMEIzNTJFNkM1N0U5QkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZDNTdF OUJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2ZTliNTEtYmQ4Ny00OTA1LTli ZjQtYTg0OGE0NGU1YmE1LzAvMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUy RTZDNTdFOUJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9fdVnCz3KYbTWN7QR1bp14HFsrfhvS2gy3 DonkhrHNn1FQ8LacyGm38rw+nfDyeJIHAUY0EOtMOigIsB/yRQw4cc2rjP3B1Zrt 3C89qdZ5W8eC0CILDK7/5P/6rEL0qVvUDgpUW37imdimQXDzSKtjNsQDpPO1K13T JS8bDEAN9ef2jELsOEfI6caRodNQHYUcrTDlzUgLkKUNIz28aLA17kSAJYahPfYI Q9ZcZzdto+59T1y2DRZKp0hiAP/vssS1jDs4AgcsP/lzPUC46scPzOr/Fq/IUNUs Uu9aOpbLQQN4MMTG2/snJtgJheQX/uzHfjQZft6PllkAPjiX0r4= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net