$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: ko4RnzriE0igJBOfzr4DfRn0nXwkV3Ik6yVaXUIdrvU= Subject key identifier: CA:DF:81:B7:1E:75:3B:7A:48:3F:D8:28:0B:16:20:15:0A:FA:B4:DA Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 2746CC0860D83D72BB7CD3DB744A9602AF3923A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 04C8 Signing time: Mon 28 Apr 2025 12:01:56 +0000 Manifest this update: Mon 28 Apr 2025 11:56:56 +0000 Manifest next update: Thu 01 May 2025 13:02:56 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: hLJJn2S5+JhUGblcfmNr2hxZF8gqjaXVnEFEQc7K6gU=) 2: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: Jn6LXQ8Unt0WUNB/chUFaLLhvNatldFYxe3tpWqkFRY=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: yDIVt2Oe51IhyNjITRNsqJhRBffQBwktI1JnUAMjM6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:46:cc:08:60:d8:3d:72:bb:7c:d3:db:74:4a:96:02:af:39:23:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Apr 28 11:56:56 2025 GMT Not After : May 1 13:02:56 2025 GMT Subject: CN=CADF81B71E753B7A483FD8280B1620150AFAB4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:95:4d:fd:20:24:98:03:e4:45:bd:67:4a: bd:0e:94:1c:4b:17:ce:15:c4:61:97:4b:d4:92:d0: e8:5a:de:9a:f2:fc:a8:40:b8:81:46:b5:fc:34:ce: 11:6d:24:37:0b:f6:b9:3a:f8:9c:e4:b0:be:c4:20: 93:f9:51:4a:ee:69:83:8f:a3:7c:ba:39:21:d7:a8: 13:f2:65:2e:4d:f7:8f:1b:55:a7:ce:e2:99:cd:aa: 1d:b5:1b:0d:51:3f:72:34:58:ef:eb:98:ed:02:f9: ce:f6:26:7b:bd:fa:5a:2e:79:b5:e8:42:13:0b:12: fd:84:de:d9:4a:dc:57:02:f7:ef:0d:40:c6:a0:49: cd:11:77:79:fa:d3:d2:f0:9a:43:6b:4e:72:02:a3: 57:4b:0f:67:44:91:90:27:d2:02:2a:ad:ab:90:14: ab:8b:97:6c:67:05:60:1a:d7:0d:58:23:e8:29:8d: 90:ae:7d:98:10:b3:0e:00:3a:84:27:af:32:ce:d0: 05:80:34:ec:17:74:0d:79:26:6c:6f:68:11:07:98: 64:9f:ca:a6:ce:c3:75:33:d0:dc:58:ec:48:52:3a: 03:d9:72:2a:70:c7:d6:8a:bb:63:34:78:6a:73:59: 33:cb:d0:1a:4f:d9:82:20:4e:86:5f:fe:f4:20:41: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DF:81:B7:1E:75:3B:7A:48:3F:D8:28:0B:16:20:15:0A:FA:B4:DA X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:93:32:47:9c:46:c8:50:c8:e1:da:ca:9b:a3:12:79:83:55: c0:65:14:a6:e6:ee:ee:0e:34:b8:60:d8:27:2e:4f:bd:18:e3: 45:a2:ed:88:8d:82:8e:06:32:44:24:e6:fe:2a:44:ee:e3:2e: 6f:56:02:13:34:db:26:e6:f2:5c:79:b7:d8:90:4b:79:57:6d: 06:bc:39:f5:16:07:19:13:29:9c:6a:b7:88:ac:5d:6e:a4:4f: 32:88:8b:be:1d:de:6c:67:df:c8:30:e2:d4:c7:3f:b3:b7:ce: 05:03:28:d0:a2:0f:85:a8:06:12:c4:b1:40:d6:a7:34:b3:1a: 07:b8:83:af:5e:13:f3:f7:b9:8a:33:be:f3:e6:da:2c:24:b9: da:87:74:28:e7:d7:ee:80:71:92:d3:d7:46:95:99:82:09:c1: 0c:81:3e:98:c1:84:de:15:04:b2:da:18:19:d5:0a:2f:b5:cc: dc:5c:53:df:54:99:94:a3:bb:54:f0:07:d7:07:e7:24:b9:a0: dc:52:3e:2f:a9:51:53:91:ed:bf:bf:29:b6:c8:de:33:df:25: 7b:31:64:4d:b1:e5:68:91:1f:b3:a0:1e:74:bc:45:4a:db:7d: 76:41:07:65:40:dc:dc:6a:a4:22:cc:e6:31:52:eb:68:80:55: a3:1d:8a:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0bMCGDYPXK7fNPbdEqWAq85I6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTA0MjgxMTU2NTZaFw0yNTA1MDExMzAyNTZaMDMxMTAvBgNV BAMTKENBREY4MUI3MUU3NTNCN0E0ODNGRDgyODBCMTYyMDE1MEFGQUI0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmA5VN/SAkmAPkRb1nSr0OlBxL F84VxGGXS9SS0Oha3pry/KhAuIFGtfw0zhFtJDcL9rk6+JzksL7EIJP5UUruaYOP o3y6OSHXqBPyZS5N948bVafO4pnNqh21Gw1RP3I0WO/rmO0C+c72Jnu9+louebXo QhMLEv2E3tlK3FcC9+8NQMagSc0Rd3n609LwmkNrTnICo1dLD2dEkZAn0gIqrauQ FKuLl2xnBWAa1w1YI+gpjZCufZgQsw4AOoQnrzLO0AWANOwXdA15JmxvaBEHmGSf yqbOw3Uz0NxY7EhSOgPZcipwx9aKu2M0eGpzWTPL0BpP2YIgToZf/vQgQVlxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyt+Btx51O3pIP9goCxYgFQr6tNowHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyTMkecRshQyOHaypujEnmDVcBlFKbm7u4O NLhg2CcuT70Y40Wi7YiNgo4GMkQk5v4qRO7jLm9WAhM02ybm8lx5t9iQS3lXbQa8 OfUWBxkTKZxqt4isXW6kTzKIi74d3mxn38gw4tTHP7O3zgUDKNCiD4WoBhLEsUDW pzSzGge4g69eE/P3uYozvvPm2iwkudqHdCjn1+6AcZLT10aVmYIJwQyBPpjBhN4V BLLaGBnVCi+1zNxcU99UmZSju1TwB9cH5yS5oNxSPi+pUVOR7b+/KbbI3jPfJXsx ZE2x5WiRH7OgHnS8RUrbfXZBB2VA3NxqpCLM5jFS62iAVaMdioE= -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:41 2025 by rpki-client on console.sobornost.net