$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: /Hd22GUw91I6SJfkL0BQdIoYYM2RwuZ+KbIoorZxhH8= Subject key identifier: EF:1D:9C:D7:AC:2C:12:15:56:8E:B3:8D:D3:ED:54:16:8C:E4:EA:2A Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 429144F2B84E66A77B56AE39FF41B3AEF25D0F71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 03B8 Signing time: Thu 24 Apr 2025 23:11:24 +0000 Manifest this update: Thu 24 Apr 2025 23:06:24 +0000 Manifest next update: Mon 28 Apr 2025 09:48:24 +0000 Files and hashes: 1: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) 2: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 3: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) 4: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: w9mFcIrNngxSvvuPOLofpZzwUPO8GelsoIjqX5UGvG8=) 5: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: x5hTeEOvLFOBqbVUlwe0w1rSl/ywnzu7BfrWIVUS2g4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:91:44:f2:b8:4e:66:a7:7b:56:ae:39:ff:41:b3:ae:f2:5d:0f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Apr 24 23:06:24 2025 GMT Not After : Apr 28 09:48:24 2025 GMT Subject: CN=EF1D9CD7AC2C1215568EB38DD3ED54168CE4EA2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:c4:7e:fe:55:77:c6:15:28:95:74:6c:26: cd:52:12:e9:39:f9:a7:36:ca:7e:37:e4:e3:42:8d: ae:ac:5d:9f:eb:21:4a:f5:22:4f:6b:e0:e4:a9:0d: f1:ab:39:6c:91:5b:4c:24:8c:fd:a2:83:8a:e7:cd: 02:52:78:ea:bc:ce:2d:df:c1:95:4a:d0:22:2c:38: 0e:e7:78:16:21:6b:00:f1:40:ab:36:da:67:f2:0f: 8f:06:a5:f8:a0:ea:1c:54:62:33:dc:67:82:c6:ff: 25:e1:5b:77:98:98:1d:16:a0:b3:ae:a0:fa:dd:a1: 13:be:30:47:19:84:c9:f1:51:6c:71:c3:34:61:4a: 65:1c:29:ca:3e:f9:e1:e8:1c:f0:4b:f1:be:ca:9e: 46:7e:4f:62:2c:a8:2d:5f:58:9d:92:62:5e:d7:7c: 27:e4:cf:3c:0b:26:79:79:33:39:6c:64:11:12:d3: 9f:e0:f9:ba:60:38:2a:2c:5a:92:2c:26:39:c7:b1: f8:ff:58:23:bd:89:18:ea:7d:0a:92:11:64:a0:98: 26:96:77:33:3b:f7:9e:c4:16:25:08:22:9f:d3:97: aa:37:cf:e2:cc:9c:3c:a3:4b:1e:60:23:14:53:e1: 5e:75:c3:65:4c:19:8c:cd:8e:28:70:b0:78:01:8c: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:9C:D7:AC:2C:12:15:56:8E:B3:8D:D3:ED:54:16:8C:E4:EA:2A X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:61:5b:79:03:d5:e8:43:01:ad:52:de:6d:e6:51:01:16:30: e2:89:fa:a8:eb:0f:c3:5e:20:a6:da:cf:e4:cb:b3:68:0e:68: eb:b5:0c:3d:99:17:45:9d:1d:dd:5b:71:97:e3:ae:4e:99:c2: f7:90:51:05:27:33:d7:db:3c:b8:74:bc:7e:87:f6:11:d0:f8: 37:45:8d:27:40:67:17:d0:9f:d0:43:2b:d2:80:d3:28:6f:cf: 47:20:f5:62:15:a7:c3:84:73:bb:aa:13:6f:8a:aa:b7:07:5d: 38:e8:42:ed:30:9a:34:11:db:1a:32:a7:79:6c:f7:b0:99:1f: 13:08:ed:94:b7:ef:d3:14:a7:db:84:24:e0:6b:69:36:40:cc: 5f:7d:44:56:bc:f8:ec:4c:4c:f2:20:85:42:29:af:19:41:6c: 85:d6:94:04:49:b5:52:2c:00:10:b8:6a:3b:f5:a4:a1:a1:26: a9:d1:30:a4:8a:98:da:f4:de:7c:e0:8b:97:f2:49:4a:4d:35: f3:5b:e2:39:39:ed:b8:38:8b:ff:e1:31:c4:48:53:ca:a3:5f: fa:5d:cf:75:46:c7:50:9f:34:a6:d4:6d:7e:85:8a:57:dc:ab: 62:38:ff:e0:5c:2e:c9:ad:64:24:62:1b:a7:ec:6c:4b:60:17: d0:8e:60:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQpFE8rhOZqd7Vq45/0GzrvJdD3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTA0MjQyMzA2MjRaFw0yNTA0MjgwOTQ4MjRaMDMxMTAvBgNV BAMTKEVGMUQ5Q0Q3QUMyQzEyMTU1NjhFQjM4REQzRUQ1NDE2OENFNEVBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07sR+/lV3xhUolXRsJs1SEuk5 +ac2yn435ONCja6sXZ/rIUr1Ik9r4OSpDfGrOWyRW0wkjP2ig4rnzQJSeOq8zi3f wZVK0CIsOA7neBYhawDxQKs22mfyD48Gpfig6hxUYjPcZ4LG/yXhW3eYmB0WoLOu oPrdoRO+MEcZhMnxUWxxwzRhSmUcKco++eHoHPBL8b7KnkZ+T2IsqC1fWJ2SYl7X fCfkzzwLJnl5MzlsZBES05/g+bpgOCosWpIsJjnHsfj/WCO9iRjqfQqSEWSgmCaW dzM7957EFiUIIp/Tl6o3z+LMnDyjSx5gIxRT4V51w2VMGYzNjihwsHgBjK61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7x2c16wsEhVWjrON0+1UFozk6iowHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5hW3kD1ehDAa1S3m3mUQEWMOKJ+qjrD8Ne IKbaz+TLs2gOaOu1DD2ZF0WdHd1bcZfjrk6ZwveQUQUnM9fbPLh0vH6H9hHQ+DdF jSdAZxfQn9BDK9KA0yhvz0cg9WIVp8OEc7uqE2+KqrcHXTjoQu0wmjQR2xoyp3ls 97CZHxMI7ZS379MUp9uEJOBraTZAzF99RFa8+OxMTPIghUIprxlBbIXWlARJtVIs ABC4ajv1pKGhJqnRMKSKmNr03nzgi5fySUpNNfNb4jk57bg4i//hMcRIU8qjX/pd z3VGx1CfNKbUbX6Filfcq2I4/+BcLsmtZCRiG6fsbEtgF9COYCI= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net