$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft File: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft (raw, json) Hash identifier: rD8BqJgOqnpfgT3MIdDAUSiTuPDOHTf7W5j+imaePXg= Subject key identifier: D7:DB:F4:EA:25:BF:5C:65:96:63:CD:40:0F:14:F3:70:9B:7D:16:3B Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 6EC82AC0370D601F3114D9CA609355650429140F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft Manifest number: 02A7 Signing time: Thu 24 Apr 2025 19:20:50 +0000 Manifest this update: Thu 24 Apr 2025 19:15:50 +0000 Manifest next update: Mon 28 Apr 2025 06:14:50 +0000 Files and hashes: 1: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: YAl9IH945cB6nzFZ+Qtu95xtcvqOant2/UNUilOSLzk=) 2: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: ejo3/L+3kmLyjnvdSLMOsbUtjtQhrjGsr2lCCkclPu4=) 3: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: Sr5rxwxyX//B5EAQxEl5R5AYvEEW7vDFWvwM/NlIUq4=) 4: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl (hash: PE3zjVtCRHRDl0ADuStvQOwHxyfhUnbkHVR9YQ5BMGs=) 5: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: +t40M702VFWJpOgJRkFuplSndiJmUCoSc6okBYwiNSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c8:2a:c0:37:0d:60:1f:31:14:d9:ca:60:93:55:65:04:29:14:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Apr 24 19:15:50 2025 GMT Not After : Apr 28 06:14:50 2025 GMT Subject: CN=D7DBF4EA25BF5C659663CD400F14F3709B7D163B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:11:54:b6:3d:1a:b5:e9:4c:41:0a:dc:50:61: f8:0c:e8:5a:60:5f:5f:3c:52:38:07:f6:5f:a1:ed: 5c:dc:eb:70:e8:47:df:7e:29:62:b8:e9:db:21:b3: 0b:b3:9d:b3:36:a9:9f:bb:bd:60:2c:4c:4b:dc:81: 9e:93:1f:79:f3:4f:82:69:17:9b:96:3b:da:50:89: 70:e9:5e:eb:d8:1f:53:a8:7c:30:90:18:b6:9d:74: c4:29:40:3c:b1:f5:6e:c3:87:81:62:20:c9:86:44: 69:35:10:44:25:c4:a4:d2:f6:41:e3:a7:63:72:f6: 84:ab:ed:4b:e4:50:4d:36:7e:4a:f6:2a:3e:cf:5e: 41:87:f6:65:a5:86:e3:54:77:e3:42:fd:14:29:34: dc:4b:b0:3e:81:0e:e4:16:20:22:44:bf:47:f1:ba: 50:66:28:69:a3:8b:cb:44:79:b4:62:1c:a5:0b:7c: 1a:7a:86:1a:9b:17:41:57:48:29:5e:b0:c9:c4:1c: 4c:74:fa:7a:f9:e6:8f:3c:17:71:7f:7e:e7:10:97: ee:b4:15:6b:07:75:5c:74:4a:5a:13:37:90:a1:ff: f8:82:18:e5:ec:d1:bd:ed:b4:12:b2:b3:c9:34:0c: ae:1c:df:b6:ca:1a:84:8d:ed:57:2b:17:e6:b9:aa: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DB:F4:EA:25:BF:5C:65:96:63:CD:40:0F:14:F3:70:9B:7D:16:3B X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f9:b6:98:69:af:46:e9:b5:f4:10:f7:11:66:83:09:93:99: 8c:cd:c2:6a:a5:37:be:ba:07:e2:41:33:01:46:4f:62:4f:ef: dd:0d:17:f8:34:27:7e:6f:67:03:24:79:11:6c:42:f5:7e:9c: d7:23:71:74:6a:a1:06:21:af:5f:57:97:90:7a:71:24:85:cb: 03:27:2c:e5:6a:34:e6:0c:ef:00:34:29:dd:73:80:6e:d8:04: f2:36:24:ce:1e:78:3a:50:d4:57:f7:e6:4b:e2:7f:fe:c2:90: 94:38:98:81:55:86:c8:15:f1:d6:62:3d:e1:54:ac:de:f3:f5: c2:c9:b2:2d:d7:83:02:e9:aa:67:25:f5:c9:74:db:24:d1:96: 08:f4:83:c5:4d:12:06:7f:dc:d2:3d:15:0c:1a:39:7e:c3:4f: 7d:c4:f4:9d:99:82:31:87:8e:ad:bc:29:8e:89:a3:c4:73:e0: 55:38:bb:cc:35:60:d2:aa:13:a2:9c:c7:cc:07:0e:b9:e9:47: 0d:17:07:f4:dd:0d:23:17:31:85:f0:fa:c7:5b:62:08:40:f0: e7:92:84:93:a0:17:72:6a:1a:dc:be:da:df:09:e2:9a:e1:cf: 14:8a:f7:82:df:26:70:3f:1e:30:9e:e7:5f:14:bc:f9:13:8e: 65:36:b5:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsgqwDcNYB8xFNnKYJNVZQQpFA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNTA0MjQxOTE1NTBaFw0yNTA0MjgwNjE0NTBaMDMxMTAvBgNV BAMTKEQ3REJGNEVBMjVCRjVDNjU5NjYzQ0Q0MDBGMTRGMzcwOUI3RDE2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmEVS2PRq16UxBCtxQYfgM6Fpg X188UjgH9l+h7Vzc63DoR99+KWK46dshswuznbM2qZ+7vWAsTEvcgZ6TH3nzT4Jp F5uWO9pQiXDpXuvYH1OofDCQGLaddMQpQDyx9W7Dh4FiIMmGRGk1EEQlxKTS9kHj p2Ny9oSr7UvkUE02fkr2Kj7PXkGH9mWlhuNUd+NC/RQpNNxLsD6BDuQWICJEv0fx ulBmKGmji8tEebRiHKULfBp6hhqbF0FXSClesMnEHEx0+nr55o88F3F/fucQl+60 FWsHdVx0SloTN5Ch//iCGOXs0b3ttBKys8k0DK4c37bKGoSN7VcrF+a5qlPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU19v06iW/XGWWY81ADxTzcJt9FjswHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMz Mzc2RjNGRTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD5tphpr0bptfQQ9xFmgwmTmYzNwmqlN766 B+JBMwFGT2JP790NF/g0J35vZwMkeRFsQvV+nNcjcXRqoQYhr19Xl5B6cSSFywMn LOVqNOYM7wA0Kd1zgG7YBPI2JM4eeDpQ1Ff35kvif/7CkJQ4mIFVhsgV8dZiPeFU rN7z9cLJsi3XgwLpqmcl9cl02yTRlgj0g8VNEgZ/3NI9FQwaOX7DT33E9J2ZgjGH jq28KY6Jo8Rz4FU4u8w1YNKqE6Kcx8wHDrnpRw0XB/TdDSMXMYXw+sdbYghA8OeS hJOgF3JqGty+2t8J4prhzxSK94LfJnA/HjCe518UvPkTjmU2tZE= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net