$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: O11UvOeK8fpVlvUKB0RrWXpNnxlyp+gtL8UMtOkPmr4= Subject key identifier: DD:AD:49:3B:B9:F5:24:95:8A:27:05:61:90:7B:5D:49:E9:D1:2A:A5 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 33BAF95976DB0256820FBBEAAA883F0F4A0E0B64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 0225 Signing time: Sat 26 Apr 2025 07:01:37 +0000 Manifest this update: Sat 26 Apr 2025 06:56:37 +0000 Manifest next update: Tue 29 Apr 2025 09:30:37 +0000 Files and hashes: 1: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: D72Dl/IRfBePIvZrgkcjVgT26TncD5Tpp40B7HoejBA=) 2: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=) 3: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ba:f9:59:76:db:02:56:82:0f:bb:ea:aa:88:3f:0f:4a:0e:0b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Apr 26 06:56:37 2025 GMT Not After : Apr 29 09:30:37 2025 GMT Subject: CN=DDAD493BB9F524958A270561907B5D49E9D12AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:fa:21:d8:72:77:69:e7:a8:cf:bc:45:a0: 9e:d5:56:ab:b9:17:79:27:47:11:76:fc:e2:d1:88: cf:15:54:a2:a9:e5:40:5b:f2:30:62:e3:6b:de:36: b6:de:d8:57:2d:52:04:cb:61:dd:21:a9:d3:32:91: 1f:19:4f:12:4a:9c:9e:e1:89:93:12:19:5e:44:51: f7:23:d2:13:6d:70:e1:32:15:4c:75:ed:bf:f6:d4: 85:82:8f:bf:7b:61:2c:2e:2f:97:67:f0:32:c1:18: ea:e2:66:85:99:10:c6:3c:9f:3b:95:5d:b1:8b:61: 31:ec:64:3f:11:90:61:07:45:50:52:0d:bd:b3:a6: 01:0c:ef:f3:f8:01:da:5a:3f:d6:eb:eb:89:a9:21: 9b:f0:b9:68:89:63:df:89:50:7b:e9:a2:32:c5:ff: 8b:95:1c:b6:1c:ac:23:92:85:cc:8f:64:0a:a8:da: 50:0d:af:64:37:dc:3d:14:d8:a9:43:62:07:3d:69: 64:78:73:52:74:ae:90:39:c4:fc:f7:02:9c:47:1d: c3:5f:fc:31:fc:29:e9:39:84:88:2c:e0:5b:a8:a5: 78:7b:38:19:10:07:8f:1c:29:1d:34:c3:ce:6d:ff: d2:f8:6a:7c:cc:31:f2:9c:8c:a4:38:62:d6:f6:7b: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AD:49:3B:B9:F5:24:95:8A:27:05:61:90:7B:5D:49:E9:D1:2A:A5 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:22:39:5a:1d:13:36:52:78:f8:4b:13:49:8a:10:a5:59:0a: 7b:ad:9e:c8:87:34:3e:d4:44:10:f7:f4:2c:e0:0c:c2:84:b5: f5:2e:c2:c8:12:52:fe:54:bc:64:5b:70:1f:65:52:1d:ea:43: 7a:ee:e0:bb:ee:88:18:90:db:c0:1f:c2:7d:24:db:3d:92:6e: 79:5a:53:73:0a:c4:6e:6f:7f:3f:9f:7d:fd:b2:b5:41:5d:6c: bc:b1:fe:75:6c:19:7a:a4:33:81:a1:36:7c:9c:68:22:ee:9b: 73:0b:49:56:51:68:75:69:c0:44:bb:f4:59:8b:ef:70:8d:eb: ee:00:f2:34:3f:a8:fa:ba:fe:85:e8:61:e1:b6:22:57:8f:31: 2d:6f:34:79:ce:22:d3:5a:11:76:b0:fc:b7:39:d1:df:52:e1: 13:6c:b7:5b:8f:be:f0:34:83:ef:8a:11:75:da:3f:37:28:87: 93:5b:0c:e3:ca:88:2c:8e:17:4a:3c:1c:d6:cc:a0:d7:73:90: 86:5a:8c:e0:11:03:35:5b:70:ad:78:97:a4:6e:d3:f6:1b:94: 76:24:90:36:5b:51:4a:5f:c6:a4:dd:5e:23:b4:3a:2e:e5:fb: 20:17:f8:70:78:5d:74:92:4d:d4:8a:e3:78:b5:03:59:e2:ee: ef:57:ab:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7r5WXbbAlaCD7vqqog/D0oOC2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTA0MjYwNjU2MzdaFw0yNTA0MjkwOTMwMzdaMDMxMTAvBgNV BAMTKEREQUQ0OTNCQjlGNTI0OTU4QTI3MDU2MTkwN0I1RDQ5RTlEMTJBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5M/oh2HJ3aeeoz7xFoJ7VVqu5 F3knRxF2/OLRiM8VVKKp5UBb8jBi42veNrbe2FctUgTLYd0hqdMykR8ZTxJKnJ7h iZMSGV5EUfcj0hNtcOEyFUx17b/21IWCj797YSwuL5dn8DLBGOriZoWZEMY8nzuV XbGLYTHsZD8RkGEHRVBSDb2zpgEM7/P4AdpaP9br64mpIZvwuWiJY9+JUHvpojLF /4uVHLYcrCOShcyPZAqo2lANr2Q33D0U2KlDYgc9aWR4c1J0rpA5xPz3ApxHHcNf /DH8Kek5hIgs4FuopXh7OBkQB48cKR00w85t/9L4anzMMfKcjKQ4Ytb2e+EFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3a1JO7n1JJWKJwVhkHtdSenRKqUwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIiOVodEzZSePhLE0mKEKVZCnutnsiHND7U RBD39CzgDMKEtfUuwsgSUv5UvGRbcB9lUh3qQ3ru4LvuiBiQ28Afwn0k2z2Sbnla U3MKxG5vfz+fff2ytUFdbLyx/nVsGXqkM4GhNnycaCLum3MLSVZRaHVpwES79FmL 73CN6+4A8jQ/qPq6/oXoYeG2IlePMS1vNHnOItNaEXaw/Lc50d9S4RNst1uPvvA0 g++KEXXaPzcoh5NbDOPKiCyOF0o8HNbMoNdzkIZajOARAzVbcK14l6Ru0/YblHYk kDZbUUpfxqTdXiO0Oi7l+yAX+HB4XXSSTdSK43i1A1ni7u9Xqy0= -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net