$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: 8wuuvPrtJfwPJtUh0+kxX2sQX9rPjI4l3MmxFQ6kmhA= Subject key identifier: FF:AB:0F:D5:17:E1:F4:CB:5A:05:AC:91:F2:D7:BE:F8:AB:CB:12:05 Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 061811848B164B7E60B39C0845ABFF7616F26AAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: ED Signing time: Fri 25 Apr 2025 10:20:42 +0000 Manifest this update: Fri 25 Apr 2025 10:15:42 +0000 Manifest next update: Mon 28 Apr 2025 17:04:42 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: 8rRzKbXxM7JbqlliFf/wDyC7Rc9CVk2AoWCVylO5lhs=) 2: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 0vbyY37xfecmYZZ06+vwEcy+Hnbk4rhg/muBGmLCtEA=) 3: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: GdFQ16ys5THdsOt0JvI+f1x6ys8/DZCpLZHhWmZPVdg=) 4: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: xqcDgCmW203uF7Uk1d5rkcXVckegMCtGJg+IHxeNnk0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:18:11:84:8b:16:4b:7e:60:b3:9c:08:45:ab:ff:76:16:f2:6a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Apr 25 10:15:42 2025 GMT Not After : Apr 28 17:04:42 2025 GMT Subject: CN=FFAB0FD517E1F4CB5A05AC91F2D7BEF8ABCB1205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:eb:df:c8:6d:36:3a:e5:29:0d:19:a6:9e: ab:2e:c3:38:c9:9c:53:20:28:99:92:32:83:5f:54: 90:60:44:4c:fc:55:7e:31:fc:01:4c:7e:8c:57:52: 7f:0e:52:ca:6d:46:ac:ee:da:78:da:b0:c7:96:0d: 0e:46:6b:6a:ba:5e:01:ef:ea:e3:a5:89:22:2d:70: 16:3d:52:4b:8d:49:d8:dd:58:3e:67:65:f8:ec:80: 3e:f7:34:c2:03:88:44:94:80:98:ae:af:20:d8:92: 23:52:3e:40:5d:ce:99:ef:32:ad:3a:fa:55:1e:10: 3f:c3:72:04:02:40:94:87:16:35:d2:fe:bc:35:9b: eb:6e:cd:27:50:1e:d1:72:e4:80:b0:bc:1c:85:9f: 19:f6:c0:56:77:ee:fc:92:27:b9:63:de:c4:4f:5c: b2:d8:68:de:51:55:1c:69:eb:6a:cf:be:d8:bc:cc: 7a:13:d8:c1:eb:96:86:2b:a0:65:83:12:fe:ec:38: f5:c4:a0:3e:85:33:af:b7:ef:3e:ce:12:3f:4b:b3: 22:0c:c1:03:0d:c2:3e:c9:e8:04:17:32:fd:44:03: 22:4b:3e:0d:79:f1:7e:a7:7d:d0:1e:6e:58:6d:ea: 84:71:a6:8e:c7:19:9d:9b:0d:17:69:8d:50:73:36: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AB:0F:D5:17:E1:F4:CB:5A:05:AC:91:F2:D7:BE:F8:AB:CB:12:05 X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:cb:e0:2c:47:b9:a4:a4:45:1d:2f:cc:c9:79:2d:f2:4d:f5: 46:62:a2:0d:ab:43:ff:2b:36:09:9b:31:6b:89:11:ea:e2:3b: 00:04:dc:97:1d:4f:21:4a:62:35:06:e6:b0:58:f4:9d:6e:96: 95:3e:ef:ac:3e:d0:e3:e7:6e:2f:41:a9:46:f0:6d:c1:f0:0b: dc:22:f4:3d:dd:ef:f8:90:89:7a:95:4f:14:b6:62:66:f6:1f: fc:4f:26:f9:4d:a7:6c:42:5c:4e:cf:62:d4:fc:bb:dd:a1:da: 21:b5:58:b6:29:d3:ce:21:e3:68:79:13:14:35:28:f2:2e:a3: c9:c8:36:34:e6:49:31:55:24:cb:09:1b:a2:d8:f3:13:ef:34: df:90:88:d5:c3:6c:93:04:01:1f:01:87:0b:19:3c:07:00:e0: 2c:76:6e:a2:c3:11:ae:b9:6c:c3:23:39:61:68:91:a8:16:77: c2:c3:f6:a8:42:c4:98:1d:06:ff:88:9c:29:d1:16:ff:e5:86: cd:5b:52:f6:44:7e:93:b2:32:71:89:17:bd:8c:c3:4b:4c:9a: c2:73:bc:cc:d3:2f:dc:fe:89:8e:94:69:00:dd:15:90:90:14: 78:c8:95:7e:cc:46:d3:b9:3a:a8:80:83:10:dc:a9:68:7c:00: d2:a8:40:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBhgRhIsWS35gs5wIRav/dhbyaqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTA0MjUxMDE1NDJaFw0yNTA0MjgxNzA0NDJaMDMxMTAvBgNV BAMTKEZGQUIwRkQ1MTdFMUY0Q0I1QTA1QUM5MUYyRDdCRUY4QUJDQjEyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLOvfyG02OuUpDRmmnqsuwzjJ nFMgKJmSMoNfVJBgREz8VX4x/AFMfoxXUn8OUsptRqzu2njasMeWDQ5Ga2q6XgHv 6uOliSItcBY9UkuNSdjdWD5nZfjsgD73NMIDiESUgJiuryDYkiNSPkBdzpnvMq06 +lUeED/DcgQCQJSHFjXS/rw1m+tuzSdQHtFy5ICwvByFnxn2wFZ37vySJ7lj3sRP XLLYaN5RVRxp62rPvti8zHoT2MHrloYroGWDEv7sOPXEoD6FM6+37z7OEj9LsyIM wQMNwj7J6AQXMv1EAyJLPg158X6nfdAeblht6oRxpo7HGZ2bDRdpjVBzNrNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/6sP1Rfh9MtaBayR8te++KvLEgUwHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnL4CxHuaSkRR0vzMl5LfJN9UZiog2rQ/8r NgmbMWuJEeriOwAE3JcdTyFKYjUG5rBY9J1ulpU+76w+0OPnbi9BqUbwbcHwC9wi 9D3d7/iQiXqVTxS2Ymb2H/xPJvlNp2xCXE7PYtT8u92h2iG1WLYp084h42h5ExQ1 KPIuo8nINjTmSTFVJMsJG6LY8xPvNN+QiNXDbJMEAR8BhwsZPAcA4Cx2bqLDEa65 bMMjOWFokagWd8LD9qhCxJgdBv+InCnRFv/lhs1bUvZEfpOyMnGJF72Mw0tMmsJz vMzTL9z+iY6UaQDdFZCQFHjIlX7MRtO5OqiAgxDcqWh8ANKoQLA= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net