$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: gNjP2hPiUC0L8tZR6ywU0qYrsOFfgI4QowKq4y9YSpc= Subject key identifier: F6:59:21:32:B7:12:04:DD:EA:17:E8:49:C3:AB:1B:E4:EF:04:C4:E7 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 3140E1882826BF62E3B0FE054A595F9FAC428F63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 0294 Signing time: Fri 25 Apr 2025 06:52:19 +0000 Manifest this update: Fri 25 Apr 2025 06:47:19 +0000 Manifest next update: Mon 28 Apr 2025 13:06:19 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: mIROvhV/B52jTv+b7xbtzNIsRy0qMHCKGHbEvF+jS6o=) 2: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: isW6XP6KlLa0xtCl4vMETtHNO4LkL5xjjX/88zB4Avk=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: 8X7MnhcrGXRrLaiC6p6nb/f9+Sxh0EM3kk42oSlJDeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 13:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:40:e1:88:28:26:bf:62:e3:b0:fe:05:4a:59:5f:9f:ac:42:8f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Apr 25 06:47:19 2025 GMT Not After : Apr 28 13:06:19 2025 GMT Subject: CN=F6592132B71204DDEA17E849C3AB1BE4EF04C4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:f0:e6:ae:f4:28:19:ff:fc:c7:9f:6b:1f: e9:81:cf:7b:34:4a:3d:13:8e:10:0b:61:0c:0c:34: 63:32:9f:dc:9e:69:23:45:e7:57:3a:c6:6a:cd:c1: e0:66:54:41:64:e0:f8:28:ca:66:07:67:9c:4f:4d: ca:b1:b5:08:88:82:18:df:c5:d9:64:48:a9:38:d8: ff:d6:2d:e7:16:3c:97:4c:08:c5:13:b0:44:2a:bb: d6:38:a1:19:f5:2d:98:a8:de:6c:cb:a9:96:d8:08: e9:6c:4d:29:73:de:e5:ba:64:d6:fa:fe:b4:72:39: 7c:df:79:32:e9:5d:b2:5f:37:22:84:c9:51:8b:da: 6d:52:e9:57:b0:ec:74:7a:ce:ba:7d:12:94:9b:0a: 4c:1c:83:bc:98:f8:94:19:8b:c9:a2:bb:1a:a5:0d: fd:bb:8a:30:d6:a2:5a:57:5c:73:05:ba:54:b8:c1: 06:2f:38:2f:e6:71:8d:3a:86:9e:73:91:65:e9:13: bb:a9:c5:48:fe:0d:60:5e:dc:20:07:36:a2:12:77: 29:d3:e6:0f:bc:93:ba:de:bb:2c:d3:ea:26:c8:a9: 05:e2:47:71:8d:8a:72:9d:6b:b0:f0:cf:67:0b:5c: 22:b5:f4:e5:9a:51:ca:78:b1:5a:32:9c:e6:f4:9d: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:59:21:32:B7:12:04:DD:EA:17:E8:49:C3:AB:1B:E4:EF:04:C4:E7 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ec:57:8e:77:e1:b8:55:d5:2f:ab:92:15:c8:50:0b:d2:63: 46:aa:1c:0c:a1:92:56:19:90:82:62:96:d0:f2:37:ab:cc:b8: 3d:19:fa:61:c6:01:ca:e0:35:ae:e6:d6:b6:75:c2:f9:42:d1: 10:19:35:7b:1c:03:ba:da:c5:d7:fd:7b:a4:bd:c2:93:16:15: 23:c1:86:76:62:ec:0a:26:f5:fa:23:a0:12:5c:20:ca:b0:8d: b0:4b:56:04:5c:a3:5a:6b:b8:9c:ad:44:3a:ec:5a:d6:ad:83: 8d:4c:e3:1c:09:33:7a:59:1a:69:7c:f2:e5:1f:cd:28:d6:bd: 0b:f0:12:9c:98:f5:69:d8:8e:44:6c:e8:79:1e:b6:b0:e7:a1: 87:f2:51:21:76:c1:e3:41:7a:ce:69:a4:f1:81:fe:fe:31:27: c6:93:1e:e1:63:58:1f:fd:ac:01:62:8e:7e:1e:ee:5a:00:f6: 02:91:ac:c7:63:28:3c:46:90:71:d9:3f:76:36:25:b8:c0:ca: 4b:0f:91:4a:00:88:03:80:92:8b:6f:3a:86:b9:fc:1a:4b:33: c3:b3:db:68:3d:2b:02:74:b9:78:f6:dc:c0:6e:32:e6:c5:ae: ce:15:31:5a:ca:b5:9a:37:40:22:49:8a:a3:fc:f4:c4:6f:08: 50:f3:82:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUDhiCgmv2LjsP4FSllfn6xCj2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTA0MjUwNjQ3MTlaFw0yNTA0MjgxMzA2MTlaMDMxMTAvBgNV BAMTKEY2NTkyMTMyQjcxMjA0RERFQTE3RTg0OUMzQUIxQkU0RUYwNEM0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+vDmrvQoGf/8x59rH+mBz3s0 Sj0TjhALYQwMNGMyn9yeaSNF51c6xmrNweBmVEFk4PgoymYHZ5xPTcqxtQiIghjf xdlkSKk42P/WLecWPJdMCMUTsEQqu9Y4oRn1LZio3mzLqZbYCOlsTSlz3uW6ZNb6 /rRyOXzfeTLpXbJfNyKEyVGL2m1S6Vew7HR6zrp9EpSbCkwcg7yY+JQZi8miuxql Df27ijDWolpXXHMFulS4wQYvOC/mcY06hp5zkWXpE7upxUj+DWBe3CAHNqISdynT 5g+8k7reuyzT6ibIqQXiR3GNinKda7Dwz2cLXCK19OWaUcp4sVoynOb0nX1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9lkhMrcSBN3qF+hJw6sb5O8ExOcwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfsV4534bhV1S+rkhXIUAvSY0aqHAyhklYZ kIJiltDyN6vMuD0Z+mHGAcrgNa7m1rZ1wvlC0RAZNXscA7raxdf9e6S9wpMWFSPB hnZi7Aom9fojoBJcIMqwjbBLVgRco1pruJytRDrsWtatg41M4xwJM3pZGml88uUf zSjWvQvwEpyY9WnYjkRs6HketrDnoYfyUSF2weNBes5ppPGB/v4xJ8aTHuFjWB/9 rAFijn4e7loA9gKRrMdjKDxGkHHZP3Y2JbjAyksPkUoAiAOAkotvOoa5/BpLM8Oz 22g9KwJ0uXj23MBuMubFrs4VMVrKtZo3QCJJiqP89MRvCFDzguI= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net