$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: 2Ivx7/K+r7XIxC6MtMydcaY0LD5VX6Gj0DfIgkF0h8M= Subject key identifier: 24:4C:04:E8:4B:D1:FD:26:2D:8B:B3:B9:32:BE:49:9C:9D:DC:29:2F Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 3316A8BCE7E52E748837882140B14CB5B36AADE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 04CA Signing time: Thu 24 Apr 2025 14:21:04 +0000 Manifest this update: Thu 24 Apr 2025 14:16:04 +0000 Manifest next update: Sun 27 Apr 2025 19:58:04 +0000 Files and hashes: 1: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: DZfoJX4jqinBOr4/W4HxRqX5k94H0c1p3p3iR4vvS1s=) 2: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: JrTA8afK2n1L33dQO9//qwiVueSvsY8BHaaEpxhw9/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:16:a8:bc:e7:e5:2e:74:88:37:88:21:40:b1:4c:b5:b3:6a:ad:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Apr 24 14:16:04 2025 GMT Not After : Apr 27 19:58:04 2025 GMT Subject: CN=244C04E84BD1FD262D8BB3B932BE499C9DDC292F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:9a:1a:5b:2d:30:7d:c4:a5:9e:37:cf:b6: d6:b6:7b:2f:cd:3d:7a:10:95:4d:98:b1:36:26:4f: 31:2c:b5:e3:3d:78:f3:3e:60:66:18:a5:a5:ae:eb: d1:d3:ca:44:11:25:b8:03:d7:26:4d:fe:c5:aa:04: 31:0a:0c:98:c3:f2:ac:5a:7e:15:bd:79:e7:e5:f7: 7e:4b:b5:83:b5:d9:e2:c3:a1:ce:ad:50:f0:18:6c: 2b:c4:c3:2f:87:d1:e8:4c:c1:1f:43:fe:d2:d6:c2: 5c:c6:ee:5f:b3:6d:7a:fc:e2:a8:76:b8:3a:e7:17: 99:77:83:a2:23:82:e1:2f:aa:5f:bc:98:91:a4:a1: 56:45:2a:8c:3c:a4:69:eb:6d:43:bb:40:7e:76:ed: f9:4f:8c:37:51:66:a6:c1:64:a8:11:cb:66:ec:f2: bc:37:41:c4:aa:ec:34:71:1a:1a:5b:64:fe:c2:99: 19:77:c6:05:16:6a:d8:65:25:b0:b1:7a:04:dd:31: 79:f8:0d:73:20:6a:4d:68:b0:0d:ef:67:3b:86:cf: 59:55:b2:1c:71:cb:8b:22:6b:9b:be:93:b6:d3:cf: 58:59:00:f5:81:98:45:1a:4d:94:45:16:f5:c5:58: 7a:e8:20:eb:2e:5a:0c:35:e1:0e:48:7d:e2:e4:3e: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:04:E8:4B:D1:FD:26:2D:8B:B3:B9:32:BE:49:9C:9D:DC:29:2F X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ec:1c:41:c8:bf:75:4a:4f:0a:81:fd:73:01:b5:33:7a:05: 01:28:e7:de:04:a6:07:de:4a:ea:1e:33:d9:54:55:10:ee:90: 7c:00:b5:24:4e:5a:bc:a5:0f:1d:2f:86:95:0a:67:08:fc:e5: 29:41:50:b4:21:9d:dd:81:53:98:16:0f:df:45:81:47:c0:a5: 2f:3f:34:dc:7d:58:c7:65:81:33:d3:78:4f:57:b6:4d:d1:ee: 72:20:54:5d:ef:63:6f:5d:50:c4:d4:ec:1b:04:6e:e1:4b:24: ab:08:1b:ec:db:03:6b:e0:40:2f:a4:10:66:f9:52:48:4a:9f: a0:fd:4b:be:c1:11:f8:6c:7f:bf:31:d7:92:d0:03:f9:24:f1: 62:87:1a:a0:c7:a6:d7:18:22:2b:d2:ed:be:ec:db:69:09:11: 12:e0:67:ca:a5:f0:a1:ce:37:33:0a:e5:d5:11:64:e1:76:40: aa:49:7b:69:6e:e2:f2:ef:ca:63:7c:1d:41:85:1c:74:dd:f2: 30:7e:87:ab:50:f6:8a:77:ca:0f:d0:8b:5b:12:54:52:6f:bc: 62:7c:1f:a6:35:5e:cd:c7:50:a6:02:0b:8b:9a:65:d9:86:78: de:60:79:08:3d:52:d0:20:bc:79:4c:a3:47:93:c6:1c:0f:67: 80:8d:ac:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxaovOflLnSIN4ghQLFMtbNqrecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNTA0MjQxNDE2MDRaFw0yNTA0MjcxOTU4MDRaMDMxMTAvBgNV BAMTKDI0NEMwNEU4NEJEMUZEMjYyRDhCQjNCOTMyQkU0OTlDOUREQzI5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC135oaWy0wfcSlnjfPtta2ey/N PXoQlU2YsTYmTzEsteM9ePM+YGYYpaWu69HTykQRJbgD1yZN/sWqBDEKDJjD8qxa fhW9eefl935LtYO12eLDoc6tUPAYbCvEwy+H0ehMwR9D/tLWwlzG7l+zbXr84qh2 uDrnF5l3g6IjguEvql+8mJGkoVZFKow8pGnrbUO7QH527flPjDdRZqbBZKgRy2bs 8rw3QcSq7DRxGhpbZP7CmRl3xgUWathlJbCxegTdMXn4DXMgak1osA3vZzuGz1lV shxxy4sia5u+k7bTz1hZAPWBmEUaTZRFFvXFWHroIOsuWgw14Q5IfeLkPqpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJEwE6EvR/SYti7O5Mr5JnJ3cKS8wHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3sHEHIv3VKTwqB/XMBtTN6BQEo594Epgfe SuoeM9lUVRDukHwAtSROWrylDx0vhpUKZwj85SlBULQhnd2BU5gWD99FgUfApS8/ NNx9WMdlgTPTeE9Xtk3R7nIgVF3vY29dUMTU7BsEbuFLJKsIG+zbA2vgQC+kEGb5 UkhKn6D9S77BEfhsf78x15LQA/kk8WKHGqDHptcYIivS7b7s22kJERLgZ8ql8KHO NzMK5dURZOF2QKpJe2lu4vLvymN8HUGFHHTd8jB+h6tQ9op3yg/Qi1sSVFJvvGJ8 H6Y1Xs3HUKYCC4uaZdmGeN5geQg9UtAgvHlMo0eTxhwPZ4CNrJ4= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net