$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: jYrTBVbnh0unPQF8jqxGZNFTYkic8NFTLsaKpbPwEMc= Subject key identifier: E6:E6:0B:8C:6E:86:20:2E:EB:6B:77:FB:89:B2:80:1A:5B:78:71:7D Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 10AD43D13CFEBB3FDDD572B0681E50C3B25CAC99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 0250 Signing time: Thu 24 Apr 2025 23:12:18 +0000 Manifest this update: Thu 24 Apr 2025 23:07:18 +0000 Manifest next update: Mon 28 Apr 2025 09:28:18 +0000 Files and hashes: 1: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: dqkRuGkCIt9QOUsyi8rTp/z3U+ZUrvC0oRajtG04QBQ=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) 3: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: EHpkXO9DIEEAgXBIJocHodBL0BqkqLd3WB3OiaqtgBI=) 4: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: duUY2vblLuCVb9NYVOXQ73Q4z7Ly22cZAH5UV1P/g0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ad:43:d1:3c:fe:bb:3f:dd:d5:72:b0:68:1e:50:c3:b2:5c:ac:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Apr 24 23:07:18 2025 GMT Not After : Apr 28 09:28:18 2025 GMT Subject: CN=E6E60B8C6E86202EEB6B77FB89B2801A5B78717D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:e8:73:02:33:b6:6a:a3:de:c4:00:4d:5c: ea:2a:0f:70:e4:e6:d3:50:d5:14:8d:3a:e7:c2:02: 62:46:e7:ce:6e:f4:87:b0:f3:d5:bf:c0:e5:33:02: e2:67:e9:00:16:8b:82:12:91:59:6a:e7:c7:57:1d: bf:ee:c2:cf:68:05:0c:97:1c:44:81:dc:b7:89:99: ad:9f:c5:ff:ca:af:15:08:7a:9f:d3:d0:4d:a9:24: 4f:3a:5a:ab:22:82:22:34:62:70:3f:6b:24:bc:4e: b9:7e:50:7f:f3:6b:bf:26:04:7b:08:0e:88:56:c1: 2a:3d:62:ea:76:7a:35:33:ef:9a:ff:1b:49:09:9c: 54:e5:d5:33:71:79:aa:ea:a8:4b:2a:67:ba:96:b1: a6:24:a4:32:1f:21:38:20:ed:4c:fb:05:cd:3f:7b: ae:9c:83:84:5c:e1:6d:36:c0:c1:77:f2:6c:ab:5b: 4a:e3:95:65:f6:5d:af:ee:bc:05:8c:4b:f7:ac:97: e7:89:89:49:5e:d9:88:c5:66:cd:cd:ed:cf:a2:f8: 9a:d3:9a:d4:43:5a:57:6d:61:18:0d:72:1a:64:31: cf:54:94:1f:22:b3:40:68:96:67:51:6e:3d:68:f2: 2b:6a:80:0a:d4:cf:87:d9:89:46:4f:a0:aa:ed:a5: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E6:0B:8C:6E:86:20:2E:EB:6B:77:FB:89:B2:80:1A:5B:78:71:7D X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2a:0d:c5:42:3a:02:6e:de:8c:da:57:69:8c:c9:ab:0b:15: 85:1a:6d:ea:f1:26:21:93:80:c1:8f:d5:cc:3f:b8:9c:b0:97: d3:d3:b4:84:fb:bf:04:2a:90:6e:00:37:9d:70:51:9b:1a:90: 04:83:cd:89:c7:71:71:4f:fb:f7:cd:bf:a1:f3:94:86:77:2e: 2b:f7:39:5f:1b:90:9b:1b:bc:42:32:3d:e6:c8:04:b1:1c:95: 0e:48:e0:e2:96:5a:e1:fe:96:fa:a8:dc:f3:93:31:2a:57:48: c8:84:03:f1:dc:cb:0b:16:74:77:24:7b:5e:32:4e:bc:63:d7: 5b:93:44:7d:d1:3d:27:c6:78:b9:4c:e1:a6:a3:1d:f3:c2:5a: 95:4d:46:24:b2:bd:6b:f5:39:e1:e7:88:69:74:92:25:1f:a3: 3c:68:78:22:97:f5:ba:5f:29:20:ea:b3:cd:19:ab:41:ca:c2: a2:d8:24:57:cd:51:d0:75:e7:a5:77:c3:79:76:41:79:ef:56: 4d:89:50:d4:57:8f:0a:d7:6f:d8:69:66:a9:9f:f6:1b:7d:a1: b9:c7:c7:5e:32:78:7d:da:6c:cb:7d:4e:17:d1:9e:7e:07:c2: b4:17:46:08:63:5a:d5:c7:6d:91:77:28:65:de:25:8f:5b:d2: 82:18:b6:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEK1D0Tz+uz/d1XKwaB5Qw7JcrJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTA0MjQyMzA3MThaFw0yNTA0MjgwOTI4MThaMDMxMTAvBgNV BAMTKEU2RTYwQjhDNkU4NjIwMkVFQjZCNzdGQjg5QjI4MDFBNUI3ODcxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSm+hzAjO2aqPexABNXOoqD3Dk 5tNQ1RSNOufCAmJG585u9Iew89W/wOUzAuJn6QAWi4ISkVlq58dXHb/uws9oBQyX HESB3LeJma2fxf/KrxUIep/T0E2pJE86WqsigiI0YnA/ayS8Trl+UH/za78mBHsI DohWwSo9Yup2ejUz75r/G0kJnFTl1TNxearqqEsqZ7qWsaYkpDIfITgg7Uz7Bc0/ e66cg4Rc4W02wMF38myrW0rjlWX2Xa/uvAWMS/esl+eJiUle2YjFZs3N7c+i+JrT mtRDWldtYRgNchpkMc9UlB8is0BolmdRbj1o8itqgArUz4fZiUZPoKrtpY7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uYLjG6GIC7ra3f7ibKAGlt4cX0wHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0qDcVCOgJu3ozaV2mMyasLFYUaberxJiGT gMGP1cw/uJywl9PTtIT7vwQqkG4AN51wUZsakASDzYnHcXFP+/fNv6HzlIZ3Liv3 OV8bkJsbvEIyPebIBLEclQ5I4OKWWuH+lvqo3POTMSpXSMiEA/HcywsWdHcke14y Trxj11uTRH3RPSfGeLlM4aajHfPCWpVNRiSyvWv1OeHniGl0kiUfozxoeCKX9bpf KSDqs80Zq0HKwqLYJFfNUdB156V3w3l2QXnvVk2JUNRXjwrXb9hpZqmf9ht9obnH x14yeH3abMt9ThfRnn4HwrQXRghjWtXHbZF3KGXeJY9b0oIYtqg= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net