$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: 7ZOgGY3cHyacvWxAkHZR2ojWZun8VP+9BF8S/cmFRS8= Subject key identifier: 60:DD:1D:75:4F:FF:EF:13:61:22:5F:01:79:15:A6:A7:70:74:CE:8E Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 417F7BF6A58A10485AB2E5943FAD182686707C71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: 4F Signing time: Wed 23 Apr 2025 02:21:48 +0000 Manifest this update: Wed 23 Apr 2025 02:16:48 +0000 Manifest next update: Sat 26 Apr 2025 12:03:48 +0000 Files and hashes: 1: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: RILANZI/hpeTRR57LsFVOf8n8BJfaljtDlJ6S1B75ks=) 2: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: P8QCMdvNkcGuA4F0hmx15JmIaSEyGRAUfWjBJiusufQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7f:7b:f6:a5:8a:10:48:5a:b2:e5:94:3f:ad:18:26:86:70:7c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Apr 23 02:16:48 2025 GMT Not After : Apr 26 12:03:48 2025 GMT Subject: CN=60DD1D754FFFEF1361225F017915A6A77074CE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:0f:09:24:01:b0:ab:49:79:5f:34:d0:f2: ec:4b:86:9a:b8:94:21:e2:d0:9f:85:c0:60:e8:5d: 86:9c:a7:62:90:fb:75:92:5d:a8:e1:3e:3e:b6:1b: 6a:ea:62:15:47:ae:9e:25:2e:6c:c5:d1:97:35:a0: 4b:96:ed:6a:36:74:fa:78:2d:e7:7d:93:17:21:0b: 10:b8:7d:73:cb:68:bb:be:1f:18:25:a7:19:d3:82: 8f:55:04:92:7e:15:7d:ed:38:94:52:a8:11:e0:ce: 32:4f:75:b3:99:12:ff:d7:db:81:6f:ff:19:f0:97: c4:87:ca:63:c7:b7:7d:d7:63:90:ab:73:87:8f:49: c5:b9:83:65:06:bc:e0:92:71:53:be:18:22:ef:0a: e8:e2:fa:9e:40:fb:4a:86:d7:96:21:1b:f3:c1:8f: ef:50:0b:de:ae:bc:76:63:6f:a2:a1:3c:c1:f3:9c: 9d:b7:27:66:ea:de:6c:14:d3:bf:e2:b9:33:8b:84: ee:38:c5:64:97:90:c2:e2:8d:16:13:13:34:ab:65: f9:02:b3:9a:e5:9b:f2:5e:2a:3a:48:78:00:28:7b: 4c:15:56:84:78:60:30:59:9f:9e:fa:b0:e7:07:f4: b9:f0:e7:6e:33:75:97:3f:eb:ff:f5:67:6b:54:34: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DD:1D:75:4F:FF:EF:13:61:22:5F:01:79:15:A6:A7:70:74:CE:8E X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f0:57:42:df:39:21:a2:51:cb:00:9e:28:c8:ab:81:ed:fb: a0:44:91:21:fe:e0:96:64:a0:0d:f2:52:53:e6:a6:d7:9d:f8: 0b:8b:e4:2a:c7:eb:b9:5c:7a:f9:54:3f:a6:75:9e:1d:90:8b: 27:6d:bb:4e:6e:b4:46:4e:4e:00:34:45:62:96:a8:46:e2:d2: 51:b0:9c:31:47:56:52:5b:cc:dc:8a:3c:f0:b8:13:89:e2:3c: 01:d6:48:31:fa:17:23:85:85:9f:8a:db:64:5b:53:42:31:a0: 51:69:2a:c5:ca:ed:b6:07:58:e2:4f:53:f1:77:c2:9b:22:b3: ce:5a:6d:47:53:90:8a:0c:8d:ac:83:45:ba:c6:d5:a6:0b:54: 8a:bc:c1:1f:4f:bf:00:18:9d:2c:e9:25:67:3d:6e:da:26:93: 29:fd:1a:23:f5:3c:be:b4:9e:d9:13:4e:42:55:54:9c:a7:8e: fa:43:b7:85:8e:87:5d:50:1f:b0:d8:4a:50:66:df:b6:42:13: 6d:ed:46:d5:17:f9:7e:f6:24:7a:28:ad:5a:0e:eb:23:39:11: 96:84:01:4d:54:19:60:32:7e:4a:d7:aa:f3:94:f2:a7:72:43: f7:58:ee:36:ba:b7:c3:b6:df:0f:aa:d9:ba:b8:91:46:41:0e: 05:74:f5:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX979qWKEEhasuWUP60YJoZwfHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNTA0MjMwMjE2NDhaFw0yNTA0MjYxMjAzNDhaMDMxMTAvBgNV BAMTKDYwREQxRDc1NEZGRkVGMTM2MTIyNUYwMTc5MTVBNkE3NzA3NENFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0g8JJAGwq0l5XzTQ8uxLhpq4 lCHi0J+FwGDoXYacp2KQ+3WSXajhPj62G2rqYhVHrp4lLmzF0Zc1oEuW7Wo2dPp4 Led9kxchCxC4fXPLaLu+HxglpxnTgo9VBJJ+FX3tOJRSqBHgzjJPdbOZEv/X24Fv /xnwl8SHymPHt33XY5Crc4ePScW5g2UGvOCScVO+GCLvCuji+p5A+0qG15YhG/PB j+9QC96uvHZjb6KhPMHznJ23J2bq3mwU07/iuTOLhO44xWSXkMLijRYTEzSrZfkC s5rlm/JeKjpIeAAoe0wVVoR4YDBZn576sOcH9Lnw524zdZc/6//1Z2tUNJj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYN0ddU//7xNhIl8BeRWmp3B0zo4wHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnwV0LfOSGiUcsAnijIq4Ht+6BEkSH+4JZk oA3yUlPmpted+AuL5CrH67lcevlUP6Z1nh2Qiydtu05utEZOTgA0RWKWqEbi0lGw nDFHVlJbzNyKPPC4E4niPAHWSDH6FyOFhZ+K22RbU0IxoFFpKsXK7bYHWOJPU/F3 wpsis85abUdTkIoMjayDRbrG1aYLVIq8wR9PvwAYnSzpJWc9btomkyn9GiP1PL60 ntkTTkJVVJynjvpDt4WOh11QH7DYSlBm37ZCE23tRtUX+X72JHoorVoO6yM5EZaE AU1UGWAyfkrXqvOU8qdyQ/dY7ja6t8O23w+q2bq4kUZBDgV09R0= -----END CERTIFICATE-----Generated at Wed Apr 23 06:31:50 2025 by rpki-client on console.sobornost.net