$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: wZuqnT4V8NADPiymg6bvhzqX81Tmor0eo2RZnZ93+XA= Subject key identifier: 00:3C:6B:1F:C8:F6:7F:BF:DC:99:86:81:5E:A9:C0:55:D9:B6:A5:7F Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 1C401CE0C904CA85114F88654A06239ECDFC1DB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 0347 Signing time: Fri 25 Apr 2025 09:21:08 +0000 Manifest this update: Fri 25 Apr 2025 09:16:08 +0000 Manifest next update: Mon 28 Apr 2025 19:02:08 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: +OfyUKd9ah3XpdJZgBKLIUwPhedhMt0DHdPOmM0Y/1k=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: 8VSR5UyoEdU3LHAuIdzRBd0fCApgFOQrlZhznOO9bIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:40:1c:e0:c9:04:ca:85:11:4f:88:65:4a:06:23:9e:cd:fc:1d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Apr 25 09:16:08 2025 GMT Not After : Apr 28 19:02:08 2025 GMT Subject: CN=003C6B1FC8F67FBFDC9986815EA9C055D9B6A57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:f1:f8:a7:c0:be:1f:0a:be:6e:a4:97:68: cf:42:2a:c4:c1:46:e6:4d:e4:ce:64:90:65:3f:01: a4:dc:19:da:96:36:4f:61:85:47:c0:81:81:0b:e4: 82:d2:8b:21:3f:6c:65:4c:93:c3:9d:7a:99:ad:ad: 52:d9:e4:98:f1:91:33:ef:b1:c9:cc:10:99:15:3e: 7f:f3:1d:35:a5:b8:ab:93:55:5f:1e:f1:49:02:c1: 28:1c:5d:a2:93:e5:15:7b:e6:17:8d:77:62:07:32: b2:bb:4e:dc:a7:ab:b7:fd:cb:e3:d9:61:ab:2e:7c: d0:1a:b8:cb:24:a5:13:48:d1:da:e6:96:db:93:5b: e3:1d:64:4e:fd:79:f5:3a:79:d2:5b:cb:c6:6e:af: ee:b4:46:96:08:cb:54:e0:ed:55:41:25:ac:15:23: 17:dd:ee:d7:f4:06:b1:46:26:ff:23:3c:b4:10:c6: 82:df:5a:2d:30:5f:30:f4:27:c9:18:ab:1d:3b:f1: fc:4c:23:8c:10:2b:b6:ae:ff:83:cb:d0:0b:c0:dc: b3:e4:3c:66:7e:b8:9a:65:c0:02:1f:41:e7:e9:5d: f9:c3:4f:2f:64:a1:47:96:c9:72:bc:27:da:8e:4f: 46:b4:6d:99:e9:31:7c:1d:29:45:67:2d:79:54:14: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3C:6B:1F:C8:F6:7F:BF:DC:99:86:81:5E:A9:C0:55:D9:B6:A5:7F X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e3:e1:cb:1f:73:81:2e:33:fe:8a:31:47:cb:e8:71:29:1b: 10:8c:1c:52:bb:31:5a:f3:96:6a:39:94:04:1f:ad:96:f1:20: c8:27:29:47:24:7e:3d:be:ee:65:6e:5f:a2:f6:2e:08:ca:99: 56:5a:27:5b:41:2b:5e:74:44:d5:b6:66:5a:13:a7:11:ba:97: b7:ff:5c:b7:f5:fe:12:1e:e3:95:68:c6:fb:97:aa:38:a1:af: 75:89:f5:18:fd:07:29:bb:c0:f5:35:c2:80:80:dc:bf:c9:b5: d5:5b:5f:71:fa:9a:1c:90:8f:28:b7:a8:68:42:c9:91:df:d6: 53:b8:d1:07:ae:a0:02:43:61:f8:8c:79:37:47:76:b0:f8:ad: 2c:ed:b0:62:47:11:7a:64:fe:29:f9:d2:bc:52:40:ca:fc:62: 76:91:a2:88:ff:e8:7b:62:06:07:44:da:15:42:b0:84:f9:fd: 4a:67:85:5b:02:2d:58:6a:ee:0c:f4:4b:ac:c1:2b:d0:6a:c7: 6d:fa:9c:4d:d8:0f:d0:a4:a6:fc:00:2c:2f:1a:10:dc:b0:8e: 32:62:bd:80:bc:b5:2c:af:12:31:76:2c:22:a7:46:ba:a1:e5: 0f:ff:8f:14:eb:0e:15:d4:d9:df:b7:e3:19:46:60:c0:48:61: a5:03:81:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEAc4MkEyoURT4hlSgYjns38HbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTA0MjUwOTE2MDhaFw0yNTA0MjgxOTAyMDhaMDMxMTAvBgNV BAMTKDAwM0M2QjFGQzhGNjdGQkZEQzk5ODY4MTVFQTlDMDU1RDlCNkE1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4vH4p8C+Hwq+bqSXaM9CKsTB RuZN5M5kkGU/AaTcGdqWNk9hhUfAgYEL5ILSiyE/bGVMk8OdepmtrVLZ5JjxkTPv scnMEJkVPn/zHTWluKuTVV8e8UkCwSgcXaKT5RV75heNd2IHMrK7Ttynq7f9y+PZ YasufNAauMskpRNI0drmltuTW+MdZE79efU6edJby8Zur+60RpYIy1Tg7VVBJawV Ixfd7tf0BrFGJv8jPLQQxoLfWi0wXzD0J8kYqx078fxMI4wQK7au/4PL0AvA3LPk PGZ+uJplwAIfQefpXfnDTy9koUeWyXK8J9qOT0a0bZnpMXwdKUVnLXlUFOMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADxrH8j2f7/cmYaBXqnAVdm2pX8wHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHj4csfc4EuM/6KMUfL6HEpGxCMHFK7MVrz lmo5lAQfrZbxIMgnKUckfj2+7mVuX6L2LgjKmVZaJ1tBK150RNW2ZloTpxG6l7f/ XLf1/hIe45VoxvuXqjihr3WJ9Rj9Bym7wPU1woCA3L/JtdVbX3H6mhyQjyi3qGhC yZHf1lO40QeuoAJDYfiMeTdHdrD4rSztsGJHEXpk/in50rxSQMr8YnaRooj/6Hti BgdE2hVCsIT5/UpnhVsCLVhq7gz0S6zBK9Bqx236nE3YD9CkpvwALC8aENywjjJi vYC8tSyvEjF2LCKnRrqh5Q//jxTrDhXU2d+34xlGYMBIYaUDgWg= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net