$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft File: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json) Hash identifier: 3gvhwOQMhFqovBxYUMJFa780zV04ZNvztKeVHdg8jHY= Subject key identifier: 11:64:1C:E7:B2:C7:55:8B:5C:8D:C6:0C:9E:E4:1C:98:94:69:E7:87 Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Certificate serial: 746C14CD221393C6F8936356C0D5FC68DB40209D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft Manifest number: 04C9 Signing time: Mon 28 Apr 2025 11:42:17 +0000 Manifest this update: Mon 28 Apr 2025 11:37:17 +0000 Manifest next update: Thu 01 May 2025 21:56:17 +0000 Files and hashes: 1: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: JizWp6Pk1+85BYYFBa1PLvGKCbaXjyAY8dQpV19+1M0=) 2: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: FlL58DoPU3fhZmB25RnznETwRsG3qy3bVA/OCDGHw+8=) 3: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: u64yXBIs0ModkICN72Kb3+oe1Z5jkUzC+/YwOwxAsWs=) 4: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3BR+2r0/90FmZ7pFdR9xLYyxejfEcnOHDPsLPNVN5JY=) 5: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: e9IH2pZ9uAA1LvF3x0PsRWxNU3xU/oUXz6yWuTN6x2Y=) 6: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: y/bDPrK/vJcW1JxMX0uYyADWqFYEbR36UfmZG19GCSI=) 7: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: yG8djwmjU5wWL3w72DbpQnRcPYEEUhpkWqpJyWDMSjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6c:14:cd:22:13:93:c6:f8:93:63:56:c0:d5:fc:68:db:40:20:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Validity Not Before: Apr 28 11:37:17 2025 GMT Not After : May 1 21:56:17 2025 GMT Subject: CN=11641CE7B2C7558B5C8DC60C9EE41C989469E787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:1d:87:8b:a1:40:5d:4f:60:fc:5f:0d:e2: fc:e1:84:2e:4e:c7:e4:54:5e:85:07:93:3f:76:0e: 8a:a0:a8:c2:84:56:68:79:dd:13:2b:7b:89:a7:76: 2f:47:f6:74:69:8c:09:72:39:08:5c:21:f3:a7:4d: 5f:d7:57:9b:8d:dd:b6:1a:f1:07:22:e4:00:db:bd: 8c:d2:1a:2c:be:3f:6c:aa:07:d2:d2:5e:20:26:59: 40:70:0e:a6:76:63:b0:e7:c9:54:83:80:26:73:48: 3a:6a:75:09:f1:ea:0f:fc:25:63:19:2c:cb:fc:b0: e7:71:bd:20:45:a6:25:e9:10:54:87:da:99:9b:8f: 36:af:9c:21:3d:32:c1:9e:09:7c:77:7f:a8:4d:27: f2:63:20:1f:94:7b:ec:4a:21:0b:ae:9c:1c:0b:d2: 4e:c6:e7:8f:6b:09:2a:6f:90:33:28:ec:e7:73:eb: cf:fd:8c:9c:2e:0f:5f:0c:84:1e:85:04:6c:61:c2: a6:6c:4d:33:d4:22:64:6f:e5:c8:4e:58:fe:82:cf: 76:d4:7d:38:0f:29:ea:4a:43:b3:7a:ce:ef:c2:bd: 95:d0:6f:2b:74:8e:0b:46:eb:4b:4c:94:23:7e:5c: b9:e5:77:73:19:ae:f2:db:f1:13:15:08:67:30:39: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:64:1C:E7:B2:C7:55:8B:5C:8D:C6:0C:9E:E4:1C:98:94:69:E7:87 X509v3 Authority Key Identifier: keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b5:ae:49:55:3f:22:16:1b:9a:23:d5:17:ce:cb:e4:c4:81: 04:46:e8:8e:32:bd:d0:2f:3d:d2:3d:31:66:68:91:d7:37:0d: fe:be:2c:4c:c7:70:48:8d:80:99:f1:b6:bc:64:dd:72:41:79: 10:b8:80:b9:10:db:7f:f9:db:94:f9:2b:ae:27:76:a3:7c:d1: 5e:be:a2:97:7b:c5:d3:c2:1d:e6:f2:e8:75:9e:53:78:f1:a4: bf:23:e9:3f:49:c3:c1:1c:d6:e8:1b:d9:fa:e2:b9:98:74:da: da:16:f8:1c:3e:82:a7:33:b5:06:98:7e:54:d5:ca:e7:65:d6: 2a:66:7d:82:a6:ef:f9:f5:83:64:1d:9d:3b:96:c1:3f:67:bb: 4b:44:c2:60:98:01:b4:87:d6:3d:4c:7d:d8:07:0d:a4:f1:09: d1:10:06:bd:bd:fa:84:99:c6:3e:df:94:a6:13:19:1e:67:87: bc:84:d8:9c:94:df:68:cf:3a:67:f6:d3:15:22:28:ba:e4:3d: ec:0e:51:d6:4e:c2:70:13:99:f8:59:a5:11:14:b6:49:20:74: 32:98:47:a8:3c:fe:fa:78:df:d5:02:70:c6:41:e9:a1:63:58: 6c:df:23:4c:a2:22:f9:93:14:75:fd:e8:75:a7:dc:a4:f1:6c: 7b:1c:17:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGwUzSITk8b4k2NWwNX8aNtAIJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0 MzdDQThFOTAeFw0yNTA0MjgxMTM3MTdaFw0yNTA1MDEyMTU2MTdaMDMxMTAvBgNV BAMTKDExNjQxQ0U3QjJDNzU1OEI1QzhEQzYwQzlFRTQxQzk4OTQ2OUU3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14x2Hi6FAXU9g/F8N4vzhhC5O x+RUXoUHkz92DoqgqMKEVmh53RMre4mndi9H9nRpjAlyOQhcIfOnTV/XV5uN3bYa 8Qci5ADbvYzSGiy+P2yqB9LSXiAmWUBwDqZ2Y7DnyVSDgCZzSDpqdQnx6g/8JWMZ LMv8sOdxvSBFpiXpEFSH2pmbjzavnCE9MsGeCXx3f6hNJ/JjIB+Ue+xKIQuunBwL 0k7G549rCSpvkDMo7Odz68/9jJwuD18MhB6FBGxhwqZsTTPUImRv5chOWP6Cz3bU fTgPKepKQ7N6zu/CvZXQbyt0jgtG60tMlCN+XLnld3MZrvLb8RMVCGcwOdc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWQc57LHVYtcjcYMnuQcmJRp54cwHwYDVR0j BBgwFoAUgYgjtQ+NY+nZU8S3UvBNsEN8qOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGM3NzNjOC1mYjU2LTQ0OWYtODY0OS0xMTJkNmUxNjg2YjMvMC84MTg4MjNCNTBG OEQ2M0U5RDk1M0M0Qjc1MkYwNERCMDQzN0NBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0MzdD QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDRE QjA0MzdDQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe1rklVPyIWG5oj1RfOy+TEgQRG6I4yvdAv PdI9MWZokdc3Df6+LEzHcEiNgJnxtrxk3XJBeRC4gLkQ23/525T5K64ndqN80V6+ opd7xdPCHeby6HWeU3jxpL8j6T9Jw8Ec1ugb2friuZh02toW+Bw+gqcztQaYflTV yudl1ipmfYKm7/n1g2QdnTuWwT9nu0tEwmCYAbSH1j1MfdgHDaTxCdEQBr29+oSZ xj7flKYTGR5nh7yE2JyU32jPOmf20xUiKLrkPewOUdZOwnATmfhZpREUtkkgdDKY R6g8/vp439UCcMZB6aFjWGzfI0yiIvmTFHX96HWn3KTxbHscF+Y= -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:41 2025 by rpki-client on console.sobornost.net