$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: PnfeRmdNxnu/rz2L300nE/zf6RQeawysdlnUMWn3av4= Subject key identifier: 0C:AD:88:BF:39:28:1B:B8:C8:8B:FE:23:B7:54:7F:BE:13:29:30:17 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 4874C5739E389A01B3C473CDF26ACAA7A058366E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 016E Signing time: Thu 24 Apr 2025 14:31:03 +0000 Manifest this update: Thu 24 Apr 2025 14:26:03 +0000 Manifest next update: Sun 27 Apr 2025 18:05:03 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: K21RUOyx1XKvT5uOjnzk0pihqV2z32BMWN/AczcOiZk=) 2: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) 3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:74:c5:73:9e:38:9a:01:b3:c4:73:cd:f2:6a:ca:a7:a0:58:36:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Apr 24 14:26:03 2025 GMT Not After : Apr 27 18:05:03 2025 GMT Subject: CN=0CAD88BF39281BB8C88BFE23B7547FBE13293017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:37:bf:e4:3b:dc:c9:c1:9c:5e:b6:95:52: 83:1d:11:af:64:94:e8:6e:7c:dc:a6:ac:02:3e:99: 0b:df:d3:1d:7e:96:2e:32:0f:7f:44:5d:36:d5:ca: 19:3e:fc:77:09:99:41:a1:d0:db:1d:cc:b6:37:75: a4:d6:fc:f7:2f:b3:3d:61:b0:82:ef:e7:0b:0a:43: db:ea:5c:17:71:68:a1:03:64:b4:2b:40:a7:7d:aa: 24:fc:37:85:5e:78:aa:66:7d:54:81:e0:57:c4:b9: 98:de:cc:f9:11:50:3a:5d:23:9c:52:bb:d5:c6:12: 1b:76:19:76:e1:dc:d8:90:c5:16:e3:6a:a7:bd:24: 4c:5b:ff:dc:ac:75:77:e4:dd:d0:a5:52:6f:3b:b1: f6:18:7b:5e:4d:82:0f:0c:bf:98:4f:40:4c:e1:1a: cf:2f:ca:f7:b2:5e:54:21:f7:1d:72:42:2d:d9:fe: 8b:56:21:79:00:ec:e4:4f:cc:22:8b:ef:6a:43:94: 53:37:55:09:41:3f:1d:69:8e:2a:a1:d0:85:1a:5c: 62:d0:47:4a:73:dc:45:bd:87:dc:cc:38:69:62:52: e8:cf:6a:9b:55:c9:7e:89:53:bc:7e:1d:41:40:2f: 3f:44:a3:bf:38:1b:c4:8f:c5:dc:15:23:cb:cf:82: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AD:88:BF:39:28:1B:B8:C8:8B:FE:23:B7:54:7F:BE:13:29:30:17 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a3:21:bf:42:04:79:07:cf:3a:43:2d:92:48:13:d2:97:ab: a3:c4:60:cb:8b:a3:1f:3b:08:01:18:99:c3:36:47:73:da:65: a6:c1:4f:0a:5f:46:44:a1:2d:68:48:82:c8:16:c5:9a:fe:d2: 0f:66:ae:50:f2:a5:bf:a5:6c:52:7f:68:3a:18:91:9c:32:15: 64:66:47:93:01:e6:91:ef:71:5a:b4:f4:82:3f:31:ba:c3:6e: 3d:f5:56:b8:ea:51:55:dd:a3:b4:e4:42:33:6b:b8:6b:50:eb: cb:af:d8:4d:76:88:a7:16:c8:2d:0a:40:ef:7c:37:89:b7:01: 30:f3:26:d1:81:41:ee:f8:a0:3d:1d:b0:cd:6a:2e:00:cc:72: de:e8:6a:a9:51:7d:78:63:ad:38:40:b6:bc:5e:70:b8:80:70: ef:09:a4:12:f1:3f:42:a7:9c:e6:da:aa:14:fa:c5:ae:b7:6e: 6f:53:e1:28:08:26:7b:b9:20:aa:61:20:60:1a:27:ae:7a:c9: d5:82:0a:77:16:7e:ab:18:7f:50:c6:a2:03:71:1c:7b:ec:2b: 76:c0:ba:87:3c:49:c3:d5:81:e3:99:88:3e:a7:22:1f:8b:34: 59:78:a6:d1:06:ff:f0:3b:42:70:59:cd:e2:b6:1b:00:37:0f: 0c:a7:94:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHTFc544mgGzxHPN8mrKp6BYNm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTA0MjQxNDI2MDNaFw0yNTA0MjcxODA1MDNaMDMxMTAvBgNV BAMTKDBDQUQ4OEJGMzkyODFCQjhDODhCRkUyM0I3NTQ3RkJFMTMyOTMwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPDe/5DvcycGcXraVUoMdEa9k lOhufNymrAI+mQvf0x1+li4yD39EXTbVyhk+/HcJmUGh0NsdzLY3daTW/Pcvsz1h sILv5wsKQ9vqXBdxaKEDZLQrQKd9qiT8N4VeeKpmfVSB4FfEuZjezPkRUDpdI5xS u9XGEht2GXbh3NiQxRbjaqe9JExb/9ysdXfk3dClUm87sfYYe15Ngg8Mv5hPQEzh Gs8vyveyXlQh9x1yQi3Z/otWIXkA7ORPzCKL72pDlFM3VQlBPx1pjiqh0IUaXGLQ R0pz3EW9h9zMOGliUujPaptVyX6JU7x+HUFALz9Eo784G8SPxdwVI8vPgnp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDK2IvzkoG7jIi/4jt1R/vhMpMBcwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKjIb9CBHkHzzpDLZJIE9KXq6PEYMuLox87 CAEYmcM2R3PaZabBTwpfRkShLWhIgsgWxZr+0g9mrlDypb+lbFJ/aDoYkZwyFWRm R5MB5pHvcVq09II/MbrDbj31VrjqUVXdo7TkQjNruGtQ68uv2E12iKcWyC0KQO98 N4m3ATDzJtGBQe74oD0dsM1qLgDMct7oaqlRfXhjrThAtrxecLiAcO8JpBLxP0Kn nObaqhT6xa63bm9T4SgIJnu5IKphIGAaJ656ydWCCncWfqsYf1DGogNxHHvsK3bA uoc8ScPVgeOZiD6nIh+LNFl4ptEG//A7QnBZzeK2GwA3DwynlP0= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net