$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: voGj8y07COHwbG6qjFTht9JM+YBZSacEtMjK3A3kGX0= Subject key identifier: F1:CF:4E:FA:8D:09:B1:DA:74:65:C8:53:87:03:E7:DE:CE:4B:AF:F9 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 098913A19992867A710120D408804C21CE978248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 01C3 Signing time: Sat 26 Apr 2025 07:00:51 +0000 Manifest this update: Sat 26 Apr 2025 06:55:51 +0000 Manifest next update: Tue 29 Apr 2025 10:52:51 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: mtf1xMtoJbLE8Jx2IVqXk1cBVj2Aj8ZoG4gK6+pogqs=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: Ks9CbpPOuZ3ZAQxfaIUn+KO874Zb2Z9b7zp5xorCcNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:89:13:a1:99:92:86:7a:71:01:20:d4:08:80:4c:21:ce:97:82:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Apr 26 06:55:51 2025 GMT Not After : Apr 29 10:52:51 2025 GMT Subject: CN=F1CF4EFA8D09B1DA7465C8538703E7DECE4BAFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:fd:42:20:6b:f4:39:24:17:7e:a9:d3:04: 2f:68:f3:66:41:a1:91:7b:3e:5d:bb:b0:14:32:9a: 76:54:80:a6:ea:9c:b9:fc:71:25:8c:a9:0b:1b:ba: a1:70:c6:5a:d6:8f:a5:8a:c2:1b:45:5c:35:78:01: 7e:1a:0a:3d:0a:1f:d2:f8:29:ca:76:98:b5:c6:48: cb:b2:ab:ef:f9:a6:48:b7:75:3f:b2:16:f7:c4:d1: c0:04:cd:4e:58:9a:dc:ff:70:86:ad:1a:4c:2d:2e: 77:6a:0e:a8:13:04:cf:99:fd:5e:9d:b8:f6:86:03: 1f:d8:8e:ff:31:e6:b1:b4:c3:76:4e:17:85:b9:70: 5e:41:16:ca:bd:69:57:18:48:8e:fa:5b:ce:87:61: 8b:27:04:a0:6f:16:ef:19:1b:98:ce:31:a4:38:c0: 1a:c5:89:63:62:91:98:70:78:10:c7:d6:51:77:82: b4:75:e8:97:63:78:5e:62:f7:2d:e5:32:4b:4f:1f: b2:88:d2:27:0a:bb:6e:67:ae:1f:56:d4:08:12:6a: 07:f7:25:eb:c1:52:37:6a:87:43:36:02:8c:bc:ef: e4:db:29:63:a9:da:06:c8:5a:72:28:56:f7:0d:30: 71:af:ea:3b:fe:e1:9c:ae:39:6a:43:ae:41:15:9d: 64:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CF:4E:FA:8D:09:B1:DA:74:65:C8:53:87:03:E7:DE:CE:4B:AF:F9 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1a:44:ef:9a:4f:34:2a:82:c7:9a:53:9e:ba:1e:03:cd:72: 36:05:ab:2f:19:27:c2:c8:e1:c7:51:38:16:74:21:d9:db:6d: 38:65:21:3e:90:a8:96:4f:16:5b:b6:ed:d2:6d:c5:1c:93:c2: a3:cd:65:50:db:f4:1a:95:14:8e:7c:7f:6f:53:ae:95:5a:58: 0d:0b:83:b6:7c:f9:64:c4:0a:2a:76:42:af:64:73:15:ce:fe: 72:79:45:76:cf:13:0e:fd:6a:87:1a:8e:c6:03:53:22:21:54: 37:ce:c1:00:57:35:c9:60:a2:4b:f9:cc:0d:2f:bd:bf:81:70: 84:06:52:1c:60:37:20:8f:5f:7d:d1:03:6e:7c:12:81:4a:a3: f3:66:7d:cf:54:73:12:c8:50:22:21:0c:7c:cd:ad:91:4e:41: 1f:0a:3b:03:22:5e:e7:e0:47:6b:a7:0e:31:4a:0d:96:f1:c0: 71:68:c0:50:e9:d5:31:49:89:95:e6:40:88:44:f9:96:42:69: 70:a5:6d:f5:23:95:6d:16:87:7e:1f:97:fb:c0:83:6e:a8:3d: 44:4c:03:0d:f9:cf:76:1c:b0:72:2a:10:3a:ce:c1:d6:18:04: 2b:fd:be:31:49:01:29:e6:19:20:35:c4:e0:8b:f6:e7:71:37: ca:59:09:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYkToZmShnpxASDUCIBMIc6XgkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTA0MjYwNjU1NTFaFw0yNTA0MjkxMDUyNTFaMDMxMTAvBgNV BAMTKEYxQ0Y0RUZBOEQwOUIxREE3NDY1Qzg1Mzg3MDNFN0RFQ0U0QkFGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtP1CIGv0OSQXfqnTBC9o82ZB oZF7Pl27sBQymnZUgKbqnLn8cSWMqQsbuqFwxlrWj6WKwhtFXDV4AX4aCj0KH9L4 Kcp2mLXGSMuyq+/5pki3dT+yFvfE0cAEzU5Ymtz/cIatGkwtLndqDqgTBM+Z/V6d uPaGAx/Yjv8x5rG0w3ZOF4W5cF5BFsq9aVcYSI76W86HYYsnBKBvFu8ZG5jOMaQ4 wBrFiWNikZhweBDH1lF3grR16JdjeF5i9y3lMktPH7KI0icKu25nrh9W1AgSagf3 JevBUjdqh0M2Aoy87+TbKWOp2gbIWnIoVvcNMHGv6jv+4ZyuOWpDrkEVnWRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8c9O+o0Jsdp0ZchThwPn3s5Lr/kwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8aRO+aTzQqgseaU566HgPNcjYFqy8ZJ8LI 4cdROBZ0IdnbbThlIT6QqJZPFlu27dJtxRyTwqPNZVDb9BqVFI58f29TrpVaWA0L g7Z8+WTECip2Qq9kcxXO/nJ5RXbPEw79aocajsYDUyIhVDfOwQBXNclgokv5zA0v vb+BcIQGUhxgNyCPX33RA258EoFKo/Nmfc9UcxLIUCIhDHzNrZFOQR8KOwMiXufg R2unDjFKDZbxwHFowFDp1TFJiZXmQIhE+ZZCaXClbfUjlW0Wh34fl/vAg26oPURM Aw35z3YcsHIqEDrOwdYYBCv9vjFJASnmGSA1xOCL9udxN8pZCfk= -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net