$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft File: 28351380A86044778274FC7CEC0F116CF3B3CA39.mft (raw, json) Hash identifier: c1REyt/r4Mckxk3UCHhuNXLbDFgjgZ+eT2h9gF3BTtA= Subject key identifier: 23:ED:25:EE:ED:43:2C:66:EA:13:CF:13:DA:07:FB:5E:A8:DB:FE:95 Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39 Certificate issuer: /CN=28351380A86044778274FC7CEC0F116CF3B3CA39 Certificate serial: 1596AE08C04D2C8421DFC6A58000EE3232174B2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft Manifest number: 04CA Signing time: Sat 26 Apr 2025 11:00:43 +0000 Manifest this update: Sat 26 Apr 2025 10:55:43 +0000 Manifest next update: Tue 29 Apr 2025 13:42:43 +0000 Files and hashes: 1: 28351380A86044778274FC7CEC0F116CF3B3CA39.crl (hash: FwtjmjaXPPigivu1Eu66GCv74ZJqvHBvOQhgG0aAyVU=) 2: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: neR217ApV7QIViRVCl6i2tqUQ8xAdpZVrB9KWhUY/mg=) 3: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: C8mpthKpYoXubM6q6uGalmKMPilhsW9s24BUFwWotXs=) 4: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: NUbYBP04DuPbGhyIytzZLet0AimjBEKWNuV7fszyTmU=) 5: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: rBGdSMT8TyCX1hza79EhNX5rZ23TWWthY7OuvHhtfMI=) 6: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: NJdokcXpJ5XaumKzAZ6NIMhaU1ktPDdYz9EjGIFdANE=) 7: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: ALHucxfZn6/DilYu8UfYHg2H5JY1f1TtwEgS6ThEO7s=) 8: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: o8WCNHqPgFVCcJIPMMNyY9wNR4s4bWFgWCE9Rc1XnKc=) 9: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: C+GCiZbyOWqTIP/iREeF81SfHqAfUnmzJ8NSghudrRI=) 10: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: c52sokWCxiHM47HXpwxIRcIDim32PalL1alwxXZgY9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:96:ae:08:c0:4d:2c:84:21:df:c6:a5:80:00:ee:32:32:17:4b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39 Validity Not Before: Apr 26 10:55:43 2025 GMT Not After : Apr 29 13:42:43 2025 GMT Subject: CN=23ED25EEED432C66EA13CF13DA07FB5EA8DBFE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d7:cc:a3:bc:95:80:bd:df:23:77:13:27:63: 78:6c:0e:46:e4:c5:0e:a5:3c:3f:0e:85:c5:cf:77: 40:24:6f:b0:28:2e:85:37:18:c2:9c:e7:50:4c:0a: 0d:1c:6f:98:c1:83:ce:d0:1d:60:21:24:d8:29:a0: 5c:39:bb:ca:e7:c1:ec:2e:11:ca:05:03:1a:77:9b: 96:4b:71:99:a4:32:09:2d:89:08:90:19:09:dc:b8: 6b:3c:27:30:5d:4b:57:4a:0a:e4:e3:20:61:82:f5: 14:c6:18:14:e8:86:a0:ba:f1:bd:06:ce:99:ba:36: f5:63:c0:30:55:d3:bd:89:19:40:76:41:c3:43:78: 8f:32:7a:69:9d:bc:33:21:be:5f:5f:60:6e:73:d6: 4b:28:fa:5b:1a:61:27:cb:2b:45:40:fb:5a:1d:11: 26:7b:8f:0a:df:76:47:d3:7a:13:88:6d:a5:4f:d5: a1:e2:76:c3:66:fa:21:3d:23:84:b1:37:5a:e2:bc: 1d:53:8b:d0:62:ac:a0:be:17:47:99:f2:29:2e:8f: 72:e2:e6:54:18:06:b5:8b:76:cd:69:03:ae:c4:56: 34:31:40:29:7c:b7:dd:6f:b2:60:95:b6:56:3e:33: 13:86:4d:fe:0c:18:00:e9:1b:f3:90:eb:60:57:17: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:ED:25:EE:ED:43:2C:66:EA:13:CF:13:DA:07:FB:5E:A8:DB:FE:95 X509v3 Authority Key Identifier: keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:87:1c:c2:e1:8e:ac:76:ca:44:6b:f3:7e:44:1d:9e:4e:bc: f1:69:61:24:98:11:bb:55:39:cd:00:8e:34:95:52:3b:9d:59: 24:7a:a0:a0:ac:11:37:ef:3d:a3:3f:33:f8:fc:0d:9d:92:e8: ba:6d:d9:02:e1:17:4d:47:d8:3d:90:2a:99:b4:94:6a:81:ad: d9:a6:97:42:40:fd:6d:2b:92:d1:82:8b:10:2c:1a:5b:a6:9e: c6:6c:70:85:8f:cb:e1:d8:e4:db:ae:a2:c9:f1:8e:4a:ca:a2: 96:3d:4c:f7:d1:00:d1:6c:8f:f8:b4:dd:ed:fe:ec:b6:f1:ae: c9:27:4b:c6:13:42:a3:99:2b:07:a0:78:b9:4e:92:ea:c4:18: 10:68:0e:bf:a4:e2:b1:ad:0d:90:5e:d0:ed:7b:58:f6:bc:5b: 17:b2:f0:56:ed:bc:f0:89:08:6b:76:5a:c4:5c:88:ca:65:2c: 2e:c6:8a:d8:b7:9a:bd:99:7c:65:2e:89:b0:39:b1:00:98:2d: c7:ef:04:38:6c:19:5e:fd:cb:a2:06:55:1d:b5:d2:70:23:ba: 8d:96:b1:57:09:40:97:69:4a:75:ef:29:86:47:82:19:79:06: b7:6a:d6:46:c4:9b:e8:45:97:0f:b6:89:03:64:b4:ca:99:7e: b6:1e:4e:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZauCMBNLIQh38algADuMjIXSy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzNTEzODBBODYwNDQ3NzgyNzRGQzdDRUMwRjExNkNG M0IzQ0EzOTAeFw0yNTA0MjYxMDU1NDNaFw0yNTA0MjkxMzQyNDNaMDMxMTAvBgNV BAMTKDIzRUQyNUVFRUQ0MzJDNjZFQTEzQ0YxM0RBMDdGQjVFQThEQkZFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf18yjvJWAvd8jdxMnY3hsDkbk xQ6lPD8OhcXPd0Akb7AoLoU3GMKc51BMCg0cb5jBg87QHWAhJNgpoFw5u8rnwewu EcoFAxp3m5ZLcZmkMgktiQiQGQncuGs8JzBdS1dKCuTjIGGC9RTGGBTohqC68b0G zpm6NvVjwDBV072JGUB2QcNDeI8yemmdvDMhvl9fYG5z1kso+lsaYSfLK0VA+1od ESZ7jwrfdkfTehOIbaVP1aHidsNm+iE9I4SxN1rivB1Ti9BirKC+F0eZ8ikuj3Li 5lQYBrWLds1pA67EVjQxQCl8t91vsmCVtlY+MxOGTf4MGADpG/OQ62BXF00RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI+0l7u1DLGbqE88T2gf7Xqjb/pUwHwYDVR0j BBgwFoAUKDUTgKhgRHeCdPx87A8RbPOzyjkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjRhOTEwNS04ZDJhLTRiMzgtYTZhZS0wNWVhZDY5NzE5YTMvMC8yODM1MTM4MEE4 NjA0NDc3ODI3NEZDN0NFQzBGMTE2Q0YzQjNDQTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgzNTEzODBBODYwNDQ3NzgyNzRGQzdDRUMwRjExNkNGM0Iz Q0EzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2 YWUtMDVlYWQ2OTcxOWEzLzAvMjgzNTEzODBBODYwNDQ3NzgyNzRGQzdDRUMwRjEx NkNGM0IzQ0EzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuHHMLhjqx2ykRr835EHZ5OvPFpYSSYEbtV Oc0AjjSVUjudWSR6oKCsETfvPaM/M/j8DZ2S6Lpt2QLhF01H2D2QKpm0lGqBrdmm l0JA/W0rktGCixAsGlumnsZscIWPy+HY5NuuosnxjkrKopY9TPfRANFsj/i03e3+ 7LbxrsknS8YTQqOZKwegeLlOkurEGBBoDr+k4rGtDZBe0O17WPa8Wxey8FbtvPCJ CGt2WsRciMplLC7Giti3mr2ZfGUuibA5sQCYLcfvBDhsGV79y6IGVR210nAjuo2W sVcJQJdpSnXvKYZHghl5Brdq1kbEm+hFlw+2iQNktMqZfrYeTtc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net