$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: Nj7jwdPLbP9/u4EJ1mfVb+y6EDgvjFWnda19MymBqgk= Subject key identifier: CF:36:E3:FF:B1:32:0B:11:A9:41:CB:B3:DE:EC:46:2D:6E:9C:E5:7F Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 4D8D80A796A9042D4112147A9CAFA440AC45AE85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: F8 Signing time: Thu 24 Apr 2025 10:02:06 +0000 Manifest this update: Thu 24 Apr 2025 09:57:06 +0000 Manifest next update: Sun 27 Apr 2025 16:00:06 +0000 Files and hashes: 1: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: 6ZA0qIMjJzYn05VeJpLvvaecYTFsad8kvCHalpj2I3s=) 2: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: OdSsxC/IcH64+HH1xsnqnpx/lq2eSJJ+N7LMBhOTgSQ=) 3: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 16:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8d:80:a7:96:a9:04:2d:41:12:14:7a:9c:af:a4:40:ac:45:ae:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Apr 24 09:57:06 2025 GMT Not After : Apr 27 16:00:06 2025 GMT Subject: CN=CF36E3FFB1320B11A941CBB3DEEC462D6E9CE57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:33:9d:97:93:89:86:92:34:98:72:c3:16: b2:1e:2e:a5:bb:ba:37:c6:1d:4b:02:fb:1a:10:70: e9:eb:40:1e:05:25:d2:a4:52:88:b8:a4:b8:95:43: 4b:b0:91:04:73:e2:bf:ca:a3:e6:be:8c:4b:47:7d: 35:83:ad:e8:e1:a6:3d:00:4b:d0:ff:22:2c:c7:d1: ab:70:f9:52:41:40:ac:4f:3e:b5:c9:4d:fd:4b:38: 1d:f4:fa:8c:93:5e:e2:15:57:a7:aa:26:e8:cb:8e: 77:03:e1:59:5f:64:f9:04:b4:0b:e3:32:6b:c7:11: 38:3e:ef:b7:88:18:ba:ca:73:2e:30:c0:6d:e7:cf: 07:8b:03:a9:62:28:00:c1:66:d4:dc:ba:61:e2:ce: 91:58:5b:c6:b5:9c:c2:85:6a:7e:54:ad:06:d3:f3: f8:e1:d0:c2:05:82:98:86:01:00:04:72:e9:ad:45: 74:cd:ad:53:05:d5:b2:5d:11:c4:1c:a5:49:d5:76: 67:a6:31:94:ef:3b:df:74:63:fd:8f:35:93:f7:d8: 43:10:c4:d5:72:5b:3a:b3:19:02:17:bb:9c:0d:ac: a6:c8:c2:1a:2c:1e:98:37:09:d4:2f:a1:3e:1d:07: 4a:90:0d:74:94:1d:c9:0f:17:3a:c1:1f:9b:06:67: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:36:E3:FF:B1:32:0B:11:A9:41:CB:B3:DE:EC:46:2D:6E:9C:E5:7F X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:72:2b:9d:7b:e9:08:82:12:50:4f:bf:77:a8:7c:4c:c2:f5: 8f:e3:07:c7:83:81:75:b8:80:21:ca:59:19:f9:02:ce:ee:30: 8d:4d:f7:ae:18:bc:9d:68:e1:4c:58:2d:9c:8b:e7:7c:0b:87: 99:b2:2e:e1:1c:9a:d7:eb:30:c0:4c:33:21:27:2e:40:24:31: b3:9e:fc:88:ff:e3:6b:0f:93:34:3a:6b:71:16:5a:3a:65:d4: 50:53:97:3e:34:d9:a7:34:69:05:e6:c3:b9:1d:92:a5:4b:23: 4d:cf:a1:09:9b:d5:0d:16:a2:78:a6:b5:b8:47:22:a1:f2:bc: 60:d3:2e:dd:d8:b0:69:74:bb:6a:36:5d:6e:a9:9e:4b:22:70: 0c:7d:ae:d7:27:02:b6:a2:9b:36:15:b5:09:f8:e0:c0:a2:cb: 87:c2:c0:95:cd:ce:6c:bb:90:d0:ee:0e:63:10:95:e6:a8:b4: a6:b1:22:df:8c:95:ee:27:ee:19:e6:6e:35:27:c8:1f:f5:dd: 7a:93:64:06:47:c3:bc:37:9a:29:15:e5:be:78:8b:0c:17:e0: 87:7c:53:c9:25:7e:9b:af:a1:33:39:27:68:56:a7:18:10:e6: 12:3a:cc:9f:73:80:b9:26:27:db:d2:4d:bc:e0:ff:6a:75:8d: cd:8f:0e:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTY2Ap5apBC1BEhR6nK+kQKxFroUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNTA0MjQwOTU3MDZaFw0yNTA0MjcxNjAwMDZaMDMxMTAvBgNV BAMTKENGMzZFM0ZGQjEzMjBCMTFBOTQxQ0JCM0RFRUM0NjJENkU5Q0U1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBTOdl5OJhpI0mHLDFrIeLqW7 ujfGHUsC+xoQcOnrQB4FJdKkUoi4pLiVQ0uwkQRz4r/Ko+a+jEtHfTWDrejhpj0A S9D/IizH0atw+VJBQKxPPrXJTf1LOB30+oyTXuIVV6eqJujLjncD4VlfZPkEtAvj MmvHETg+77eIGLrKcy4wwG3nzweLA6liKADBZtTcumHizpFYW8a1nMKFan5UrQbT 8/jh0MIFgpiGAQAEcumtRXTNrVMF1bJdEcQcpUnVdmemMZTvO990Y/2PNZP32EMQ xNVyWzqzGQIXu5wNrKbIwhosHpg3CdQvoT4dB0qQDXSUHckPFzrBH5sGZ8wLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzzbj/7EyCxGpQcuz3uxGLW6c5X8wHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZyK5176QiCElBPv3eofEzC9Y/jB8eDgXW4 gCHKWRn5As7uMI1N964YvJ1o4UxYLZyL53wLh5myLuEcmtfrMMBMMyEnLkAkMbOe /Ij/42sPkzQ6a3EWWjpl1FBTlz402ac0aQXmw7kdkqVLI03PoQmb1Q0WonimtbhH IqHyvGDTLt3YsGl0u2o2XW6pnksicAx9rtcnAraimzYVtQn44MCiy4fCwJXNzmy7 kNDuDmMQleaotKaxIt+Mle4n7hnmbjUnyB/13XqTZAZHw7w3mikV5b54iwwX4Id8 U8klfpuvoTM5J2hWpxgQ5hI6zJ9zgLkmJ9vSTbzg/2p1jc2PDrM= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net