$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: Kgra6vq6468RYXWUk1hje9KbFBgiGnbxndgXddPJ6XM= Subject key identifier: 30:17:F8:A4:2F:E1:07:52:8B:7F:1F:BE:AC:1A:BC:F5:3F:78:A9:63 Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 4EB190AA1E809F6F91B32E78023BF9B318C46183 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 01A0 Signing time: Wed 23 Apr 2025 07:51:48 +0000 Manifest this update: Wed 23 Apr 2025 07:46:48 +0000 Manifest next update: Sat 26 Apr 2025 15:31:48 +0000 Files and hashes: 1: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: VfbFV1EA1gaOtP/5ZqTU2QYp7vslNv15aWqXMq4atE4=) 2: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: zlcqvXi587wSr/o8I+yN+EXScv0fIyPxOx7WTfCRPMY=) 3: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: BVmIMDJVUtj9I7W/AuR4BzIyxzfVxkHrxZNfZSGN+Zs=) 4: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: NBBnufRmfAThhqRXGPzYNoxmY2YbRxjo1w9qKSYkkeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b1:90:aa:1e:80:9f:6f:91:b3:2e:78:02:3b:f9:b3:18:c4:61:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Apr 23 07:46:48 2025 GMT Not After : Apr 26 15:31:48 2025 GMT Subject: CN=3017F8A42FE107528B7F1FBEAC1ABCF53F78A963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:b0:c8:aa:83:a4:f9:9d:ef:e0:be:2b:3d: 4c:55:d6:98:6e:31:87:ac:30:9a:23:ca:6c:2c:4e: 3c:5a:bc:8c:d8:33:94:51:5f:b5:d5:c6:e5:03:17: b6:b8:1a:8a:a1:43:37:1e:25:2b:7f:7e:3a:73:60: f1:d2:88:59:13:1b:fb:34:f8:bd:19:79:55:b8:be: c1:4c:f9:57:b6:56:96:22:bb:e5:f4:ae:01:49:20: d2:52:65:3b:e9:8c:7f:77:f3:71:cc:11:3a:72:86: d2:6e:eb:5d:e7:e4:86:a3:e9:66:15:82:71:76:96: e3:88:12:a5:a9:1b:f6:1d:76:8c:5c:73:a1:9d:8d: 9c:f2:54:b0:5a:6e:47:ae:a7:1c:33:e1:7b:00:30: d6:12:84:dc:fa:34:4e:00:1a:d9:30:76:e0:be:d2: 61:a5:9b:bf:eb:15:90:aa:5d:f6:1e:36:9c:c6:43: d2:e8:ae:7f:e1:bc:2b:b9:37:27:e6:39:2e:5e:55: 86:61:4f:4a:e3:19:3a:4a:d1:27:eb:8e:4c:0b:87: 0b:45:c4:01:81:a2:f9:08:8b:92:7d:e1:f1:63:62: 46:93:5f:cd:86:34:e6:71:80:d0:0f:ae:c5:74:ce: 44:3b:5c:2a:49:5b:f3:a0:cc:8c:de:c7:45:45:b5: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:17:F8:A4:2F:E1:07:52:8B:7F:1F:BE:AC:1A:BC:F5:3F:78:A9:63 X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:30:5b:91:97:ca:70:29:b5:ac:ce:cf:ef:11:ce:25:03:77: 2b:07:5c:a2:fd:58:9b:73:fb:0c:f2:06:a7:3e:23:74:d0:88: a7:57:47:da:21:0e:39:54:46:6c:18:b5:f7:d6:e8:9a:0d:07: 1b:43:8d:a9:32:86:c3:9f:6e:b5:c1:a6:9d:11:fa:58:7a:72: fa:69:00:46:66:a0:fe:58:cf:ed:e0:59:8a:22:de:0d:1f:95: 23:3d:d5:1c:22:be:a3:e3:1c:fa:d0:35:0b:c3:01:b2:ad:8e: c1:5e:25:5d:1f:34:43:66:f6:9f:0c:de:03:0a:c8:ee:cb:cf: 81:a9:2b:65:68:24:87:06:31:6a:45:c4:2d:a4:73:76:3f:bc: 3b:9e:0d:53:ee:b1:83:17:7c:be:d1:68:16:7b:a3:49:42:0b: ad:fe:c6:e2:71:4b:a6:38:be:d7:7b:21:5a:da:8a:b0:30:af: c0:a8:23:1f:c9:e9:ce:c4:f1:b1:cf:d3:48:38:ac:a3:0e:73: 46:1f:86:65:31:3b:cf:0b:9d:e2:57:58:8d:29:7e:68:5a:9d: 2c:76:b3:94:94:90:5a:ea:22:3e:83:45:de:3c:6f:9d:18:0d: 85:6a:b1:f6:e6:79:39:61:2c:ba:38:79:30:15:7d:27:42:f9: e7:ac:64:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrGQqh6An2+Rsy54Ajv5sxjEYYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNTA0MjMwNzQ2NDhaFw0yNTA0MjYxNTMxNDhaMDMxMTAvBgNV BAMTKDMwMTdGOEE0MkZFMTA3NTI4QjdGMUZCRUFDMUFCQ0Y1M0Y3OEE5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6LDIqoOk+Z3v4L4rPUxV1phu MYesMJojymwsTjxavIzYM5RRX7XVxuUDF7a4GoqhQzceJSt/fjpzYPHSiFkTG/s0 +L0ZeVW4vsFM+Ve2VpYiu+X0rgFJINJSZTvpjH9383HMETpyhtJu613n5Iaj6WYV gnF2luOIEqWpG/Yddoxcc6GdjZzyVLBabkeupxwz4XsAMNYShNz6NE4AGtkwduC+ 0mGlm7/rFZCqXfYeNpzGQ9Lorn/hvCu5NyfmOS5eVYZhT0rjGTpK0SfrjkwLhwtF xAGBovkIi5J94fFjYkaTX82GNOZxgNAPrsV0zkQ7XCpJW/OgzIzex0VFtZNJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMBf4pC/hB1KLfx++rBq89T94qWMwHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHswW5GXynAptazOz+8RziUDdysHXKL9WJtz +wzyBqc+I3TQiKdXR9ohDjlURmwYtffW6JoNBxtDjakyhsOfbrXBpp0R+lh6cvpp AEZmoP5Yz+3gWYoi3g0flSM91RwivqPjHPrQNQvDAbKtjsFeJV0fNENm9p8M3gMK yO7Lz4GpK2VoJIcGMWpFxC2kc3Y/vDueDVPusYMXfL7RaBZ7o0lCC63+xuJxS6Y4 vtd7IVrairAwr8CoIx/J6c7E8bHP00g4rKMOc0YfhmUxO88LneJXWI0pfmhanSx2 s5SUkFrqIj6DRd48b50YDYVqsfbmeTlhLLo4eTAVfSdC+eesZOE= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:12 2025 by rpki-client on console.sobornost.net