$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft File: 28612772543E43335B080C32808B7FDC277E71E4.mft (raw, json) Hash identifier: N6fRwDv1JJWmBbem0n4p37EsGTU/4dSAskmz2Ha3uEs= Subject key identifier: C3:BB:FE:F9:1F:A1:92:D6:59:9D:51:AB:09:51:9A:19:6C:C9:85:16 Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 059ABD7817D75C88C7239604327E54ACC096CB05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft Manifest number: 0101 Signing time: Wed 23 Apr 2025 17:01:04 +0000 Manifest this update: Wed 23 Apr 2025 16:56:04 +0000 Manifest next update: Sun 27 Apr 2025 00:43:04 +0000 Files and hashes: 1: 28612772543E43335B080C32808B7FDC277E71E4.crl (hash: XEUlZm0ktYXBZwK6aJ+O8z7p5L91bZm7AzQQia4w83I=) 2: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: rnpAKtCbX8txVuD150fh3r3wLM+En4ZSoI9OjRhxuAQ=) 3: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: z4BeSk+gRKk6M4z7F7+D4+oTS8E9IbV3rV7rrPGM6js=) 4: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: eZG8iudQFcgRUtHuXJAuzY7ooTKLq0KNHMVdg0w4Klc=) 5: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: nA9l/qEipVfIEIe1umepDag8NvfqeSfq9JSpO2D/fuI=) 6: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: c3RjMW+CIXpYsyzS75W7NviafJ4jFuqxYaUgJgR1RjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 00:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9a:bd:78:17:d7:5c:88:c7:23:96:04:32:7e:54:ac:c0:96:cb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Apr 23 16:56:04 2025 GMT Not After : Apr 27 00:43:04 2025 GMT Subject: CN=C3BBFEF91FA192D6599D51AB09519A196CC98516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:fc:d6:f2:15:e6:e1:2e:6d:5a:df:07:f7: 03:3a:e5:f5:14:fa:4c:b4:b8:69:0f:cb:48:0e:d7: 68:06:94:c0:6f:2a:9c:3d:28:c5:75:af:d9:e3:08: 85:ce:02:0b:54:dc:01:af:85:16:bc:15:ca:1e:4e: 33:e9:22:65:e4:59:f9:ef:f9:e6:55:b2:7d:31:3d: 37:c5:93:ea:f7:d4:ff:53:51:3e:77:33:e8:24:1a: 9a:d8:8d:99:3d:e4:a2:e8:7b:6c:6f:66:b3:ab:fb: 81:96:3e:5c:a8:8b:32:93:f7:08:a4:93:13:0d:37: c0:03:54:ab:a0:0e:51:2d:98:5f:2c:36:23:8a:1c: 14:e0:4c:87:2f:8c:e4:75:30:e5:bf:ef:8b:2b:47: be:92:d3:b8:ac:51:c5:8a:f4:de:25:5f:e0:3d:53: 74:f6:33:4d:1c:c8:1e:19:a3:14:ab:ef:81:8d:be: b8:55:02:06:f1:e8:4a:3a:7e:81:9d:21:b7:74:8b: 2b:7a:cc:de:a2:a5:ff:7e:3b:f3:ac:a4:fa:39:9b: 5d:79:36:c6:ed:b3:9c:66:d9:86:5b:e5:42:df:9a: 42:1f:06:6f:ce:c5:50:1d:1c:19:12:19:b7:45:c1: c7:d0:51:8a:f8:45:71:12:e6:48:50:16:5d:a2:b3: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BB:FE:F9:1F:A1:92:D6:59:9D:51:AB:09:51:9A:19:6C:C9:85:16 X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:07:c6:6e:2a:76:2d:9b:25:98:23:1a:c9:eb:55:90:f4:ad: 78:df:7d:4f:b4:02:c7:46:bd:0d:ed:11:26:58:eb:96:10:f2: cc:61:00:e9:52:74:da:63:ac:61:17:a6:3c:11:c2:e6:a4:2a: 07:25:ee:99:f8:a9:a8:db:39:f1:3c:06:29:59:00:eb:60:96: 4a:9a:93:b8:ae:ec:a5:1d:31:6e:59:51:b7:b2:c2:74:58:7f: 9f:e9:77:5a:fd:fd:bf:c3:f2:fe:ed:11:6c:79:ed:de:cd:43: b4:9a:49:13:76:d9:c2:f9:69:02:34:59:4e:3c:80:5f:96:88: a0:e2:f2:db:a1:f9:b1:c6:94:a4:6f:93:f0:40:08:f3:1f:1c: 48:51:fa:e5:a7:eb:b9:a7:39:41:09:a4:38:58:0e:80:5e:02: 63:cc:ed:fb:04:39:a1:53:2b:c4:a8:63:a2:2a:ea:95:75:1b: 25:d9:ee:42:1f:ea:52:36:f6:dd:d7:6f:e2:6e:3c:71:33:42: d6:b1:be:a8:de:f7:c9:ad:d1:40:1c:e9:ce:18:f9:ca:46:df: cb:71:6f:64:bb:fe:90:8a:94:fb:b5:0f:ff:f5:fb:05:05:94: 63:60:4e:a7:01:74:8d:ef:b9:34:23:10:2e:71:2b:79:1a:b3: d4:f5:f2:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZq9eBfXXIjHI5YEMn5UrMCWywUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTA0MjMxNjU2MDRaFw0yNTA0MjcwMDQzMDRaMDMxMTAvBgNV BAMTKEMzQkJGRUY5MUZBMTkyRDY1OTlENTFBQjA5NTE5QTE5NkNDOTg1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wPzW8hXm4S5tWt8H9wM65fUU +ky0uGkPy0gO12gGlMBvKpw9KMV1r9njCIXOAgtU3AGvhRa8FcoeTjPpImXkWfnv +eZVsn0xPTfFk+r31P9TUT53M+gkGprYjZk95KLoe2xvZrOr+4GWPlyoizKT9wik kxMNN8ADVKugDlEtmF8sNiOKHBTgTIcvjOR1MOW/74srR76S07isUcWK9N4lX+A9 U3T2M00cyB4ZoxSr74GNvrhVAgbx6Eo6foGdIbd0iyt6zN6ipf9+O/OspPo5m115 Nsbts5xm2YZb5ULfmkIfBm/OxVAdHBkSGbdFwcfQUYr4RXES5khQFl2is1wXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7v++R+hktZZnVGrCVGaGWzJhRYwHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdG REMyNzdFNzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwHxm4qdi2bJZgjGsnrVZD0rXjffU+0AsdG vQ3tESZY65YQ8sxhAOlSdNpjrGEXpjwRwuakKgcl7pn4qajbOfE8BilZAOtglkqa k7iu7KUdMW5ZUbeywnRYf5/pd1r9/b/D8v7tEWx57d7NQ7SaSRN22cL5aQI0WU48 gF+WiKDi8tuh+bHGlKRvk/BACPMfHEhR+uWn67mnOUEJpDhYDoBeAmPM7fsEOaFT K8SoY6Iq6pV1GyXZ7kIf6lI29t3Xb+JuPHEzQtaxvqje98mt0UAc6c4Y+cpG38tx b2S7/pCKlPu1D//1+wUFlGNgTqcBdI3vuTQjEC5xK3kas9T18n4= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:41 2025 by rpki-client on console.sobornost.net