$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: 4LTICQ3/xkZmioyfn+n/2i9vZsSdyJsLzxvAbLd2zks= Subject key identifier: E2:1D:CE:F1:50:A6:6D:0F:02:37:90:56:F6:E1:AB:FC:D1:D0:CD:03 Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 0317D0AA51409C33BA57D3627AE7BD7AA63E8488 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 0496 Signing time: Wed 23 Apr 2025 07:01:50 +0000 Manifest this update: Wed 23 Apr 2025 06:56:50 +0000 Manifest next update: Sat 26 Apr 2025 12:13:50 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: PcsTjbilJAIFNT9mxlLHZanVJhZY5VlbG7sDuFTcajU=) 2: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: KiHXA3kouLZg5fwlNXjOYNgz9xWPAyNa7B/vVD0aLjQ=) 3: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: Y829XAFE9eed0nOm5EtB2BBwNWI1JEh8T8LUzNvjd88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:17:d0:aa:51:40:9c:33:ba:57:d3:62:7a:e7:bd:7a:a6:3e:84:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Apr 23 06:56:50 2025 GMT Not After : Apr 26 12:13:50 2025 GMT Subject: CN=E21DCEF150A66D0F02379056F6E1ABFCD1D0CD03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:26:22:59:ef:7f:58:27:bd:5e:8d:45:97:cf: 9e:7c:94:f5:b1:b2:f5:05:95:85:70:e0:3e:0a:a7: 87:bf:e1:c5:2b:12:e5:38:94:1f:98:07:28:da:61: e7:de:d2:bc:53:b2:a2:b8:3f:4e:db:ec:76:55:05: 84:b3:11:da:51:de:f3:72:4a:12:63:a1:6d:b1:ee: 28:a1:84:c5:da:1b:1a:eb:2f:74:22:84:bd:b0:3b: 7d:ea:5c:cd:bd:58:e2:b1:dc:7e:4f:88:df:f4:81: 99:ab:4b:17:06:35:f9:b1:90:50:54:85:47:c0:64: 4a:30:ab:15:f6:68:ca:16:53:e8:c0:eb:03:62:38: f7:90:a8:eb:42:a9:50:b3:c9:3c:e3:4f:5c:50:f4: a4:15:fd:fb:1b:0e:32:5f:cc:d4:21:16:33:70:a4: 39:6c:e8:17:f8:f3:5c:32:b4:52:45:e2:b0:b6:c1: eb:a7:d3:34:55:c6:08:ec:f0:34:aa:fa:a8:ca:f5: d6:51:25:53:d4:84:cb:9c:c7:ef:d8:e5:f3:18:4d: 66:31:26:73:49:e3:de:f4:0b:11:05:ad:d8:78:04: a5:9c:f3:1c:a7:d2:e6:17:58:18:5c:b8:9c:61:69: a6:50:a0:71:8d:a9:fc:07:8e:c9:cd:d8:a4:4f:81: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:CE:F1:50:A6:6D:0F:02:37:90:56:F6:E1:AB:FC:D1:D0:CD:03 X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:bc:24:53:e5:87:2a:0a:a9:af:fb:4e:fa:07:90:71:f6:60: 59:b5:ea:bb:26:3f:d1:32:c3:2a:51:c9:42:b4:d7:cb:68:49: 12:66:8d:c1:69:b2:d7:bc:a3:47:13:0f:5d:53:30:a2:bc:bd: 83:ad:8f:eb:09:2c:7a:61:da:b6:84:f4:35:93:db:6b:d0:23: 09:52:bf:1d:21:c0:6c:58:67:7d:08:0c:53:28:07:8d:d5:28: 4e:68:08:fc:6f:b2:f8:e0:41:a5:c9:c8:1a:87:20:b9:97:3a: fa:98:c5:5a:43:7c:ba:7c:48:86:57:d8:75:84:61:de:db:b5: a0:05:ee:86:90:11:7e:0a:39:56:51:ac:96:da:01:46:ab:c3: 8b:50:f5:f4:b6:07:7d:20:28:92:e7:39:ec:b3:40:1c:12:a5: e0:a0:60:8f:2a:2e:0a:c7:a7:5b:7f:79:23:02:59:17:57:98: 3f:e1:d8:f5:c9:58:86:bb:9b:d3:93:a3:64:89:ef:56:ee:cb: ed:67:3e:63:34:a9:f8:63:d8:83:18:70:19:51:24:8b:80:83: 94:21:f4:16:63:17:3c:eb:18:4d:7b:55:15:b1:ff:b0:ca:2d: 06:ae:82:48:8c:ba:4e:91:57:47:01:e5:fe:3e:ee:66:94:61: 08:7b:51:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxfQqlFAnDO6V9Nieue9eqY+hIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTA0MjMwNjU2NTBaFw0yNTA0MjYxMjEzNTBaMDMxMTAvBgNV BAMTKEUyMURDRUYxNTBBNjZEMEYwMjM3OTA1NkY2RTFBQkZDRDFEMENEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJiJZ739YJ71ejUWXz558lPWx svUFlYVw4D4Kp4e/4cUrEuU4lB+YByjaYefe0rxTsqK4P07b7HZVBYSzEdpR3vNy ShJjoW2x7iihhMXaGxrrL3QihL2wO33qXM29WOKx3H5PiN/0gZmrSxcGNfmxkFBU hUfAZEowqxX2aMoWU+jA6wNiOPeQqOtCqVCzyTzjT1xQ9KQV/fsbDjJfzNQhFjNw pDls6Bf481wytFJF4rC2weun0zRVxgjs8DSq+qjK9dZRJVPUhMucx+/Y5fMYTWYx JnNJ4970CxEFrdh4BKWc8xyn0uYXWBhcuJxhaaZQoHGNqfwHjsnN2KRPgdZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4h3O8VCmbQ8CN5BW9uGr/NHQzQMwHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKS8JFPlhyoKqa/7TvoHkHH2YFm16rsmP9Ey wypRyUK018toSRJmjcFpste8o0cTD11TMKK8vYOtj+sJLHph2raE9DWT22vQIwlS vx0hwGxYZ30IDFMoB43VKE5oCPxvsvjgQaXJyBqHILmXOvqYxVpDfLp8SIZX2HWE Yd7btaAF7oaQEX4KOVZRrJbaAUarw4tQ9fS2B30gKJLnOeyzQBwSpeCgYI8qLgrH p1t/eSMCWRdXmD/h2PXJWIa7m9OTo2SJ71buy+1nPmM0qfhj2IMYcBlRJIuAg5Qh 9BZjFzzrGE17VRWx/7DKLQaugkiMuk6RV0cB5f4+7maUYQh7URU= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net