$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: QtKlFffXTNAOLwy6dRTq01O/FY7Oe1C9C1HrW1jsI+0= Subject key identifier: 38:D5:5D:05:F7:C4:FE:B9:AF:3D:7C:D2:2F:CA:77:D5:C6:5F:A1:B3 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 20749C188EE6123CBCD5124C55F5A54AAFA67C8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 015D Signing time: Wed 23 Apr 2025 10:01:06 +0000 Manifest this update: Wed 23 Apr 2025 09:56:06 +0000 Manifest next update: Sat 26 Apr 2025 13:19:06 +0000 Files and hashes: 1: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) 2: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: w4tqcfeI2pBuKwBQUGOteeIbVzoKjV+j6rGM01oO86A=) 3: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:74:9c:18:8e:e6:12:3c:bc:d5:12:4c:55:f5:a5:4a:af:a6:7c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Apr 23 09:56:06 2025 GMT Not After : Apr 26 13:19:06 2025 GMT Subject: CN=38D55D05F7C4FEB9AF3D7CD22FCA77D5C65FA1B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:97:5e:db:7c:a1:a1:58:f1:34:a6:b9:31: 0a:e5:9f:a9:3a:ff:d8:f0:78:5e:47:68:e8:f6:06: e1:85:a8:42:f5:a3:9c:9c:fc:eb:9a:33:9d:3d:72: 23:49:b2:c3:78:d2:ee:e5:fe:dc:eb:8f:02:e9:d1: be:6d:a9:32:47:71:a1:ee:a3:3f:72:73:11:dd:63: 61:46:ed:ac:d1:cc:1b:88:3d:ac:5f:90:60:3e:61: ce:e0:29:c1:33:65:1b:8d:8f:78:0b:38:63:54:f6: c9:9c:5d:48:86:57:26:14:d1:dc:ed:b1:38:3e:5e: 52:8c:f9:4f:37:cb:8d:b2:6d:66:cb:fd:47:3e:08: ba:13:d5:56:70:78:b3:2a:7a:1e:66:1d:e4:c0:19: e4:37:aa:07:eb:83:ba:ec:ca:fa:ab:96:d6:cf:38: 8a:d1:a0:d2:3d:5d:e0:0e:d5:c7:93:88:af:65:74: 05:a9:23:77:ac:73:de:5f:46:e0:75:c3:03:a6:bb: 6e:03:9d:16:3b:ed:e5:ad:2a:99:cd:31:8a:62:64: 9a:34:dc:fd:58:98:5c:75:0e:3d:ee:d8:64:e6:3c: ec:1d:7a:91:eb:e8:31:6f:ed:a8:bb:73:82:07:e5: a5:ca:06:3f:d6:8c:8a:c9:38:c8:0e:79:67:c8:18: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D5:5D:05:F7:C4:FE:B9:AF:3D:7C:D2:2F:CA:77:D5:C6:5F:A1:B3 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:24:66:be:56:1f:a3:6f:73:51:1f:f6:5f:ac:23:e9:6b:ad: 63:a6:1b:58:44:4d:3b:68:4c:69:b8:e1:f9:6c:6f:79:79:98: 92:1f:12:55:be:72:54:ca:a2:e6:a6:43:31:fb:89:2a:e2:86: 62:33:69:57:2f:92:ef:82:03:36:03:f0:0e:9b:78:e2:d3:42: c3:79:01:32:db:67:4f:cf:a1:7d:28:68:54:28:bb:6b:ee:4f: 8e:b5:e0:d7:73:7f:a9:7b:2f:e2:8a:af:10:e4:66:92:71:8f: c7:57:05:87:cc:15:eb:25:86:bd:26:3f:fa:89:f7:74:72:f4: 0b:41:ec:78:94:81:49:34:e0:1e:04:f9:86:be:f5:68:55:5a: 61:6b:5b:a2:18:1e:5e:4d:af:70:92:ea:4c:cd:0c:4c:bb:e9: 1b:55:a5:56:2f:f5:07:63:04:2f:3d:f2:c1:06:9c:a2:e9:ba: d8:4e:2d:1e:b9:2f:83:89:9e:8d:9c:b2:ed:b8:ee:53:87:fa: d2:9e:76:84:77:3b:04:06:d8:07:c9:bf:c5:4c:bd:75:d6:69: 0a:e3:54:7d:47:32:70:cc:c1:6c:dc:29:96:7a:5d:91:dc:e4: 9d:3b:06:6e:12:8a:25:64:77:a0:c5:5b:a6:ad:18:5b:ab:05: 49:24:c2:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHScGI7mEjy81RJMVfWlSq+mfIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTA0MjMwOTU2MDZaFw0yNTA0MjYxMzE5MDZaMDMxMTAvBgNV BAMTKDM4RDU1RDA1RjdDNEZFQjlBRjNEN0NEMjJGQ0E3N0Q1QzY1RkExQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwZde23yhoVjxNKa5MQrln6k6 /9jweF5HaOj2BuGFqEL1o5yc/OuaM509ciNJssN40u7l/tzrjwLp0b5tqTJHcaHu oz9ycxHdY2FG7azRzBuIPaxfkGA+Yc7gKcEzZRuNj3gLOGNU9smcXUiGVyYU0dzt sTg+XlKM+U83y42ybWbL/Uc+CLoT1VZweLMqeh5mHeTAGeQ3qgfrg7rsyvqrltbP OIrRoNI9XeAO1ceTiK9ldAWpI3esc95fRuB1wwOmu24DnRY77eWtKpnNMYpiZJo0 3P1YmFx1Dj3u2GTmPOwdepHr6DFv7ai7c4IH5aXKBj/WjIrJOMgOeWfIGCYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUONVdBffE/rmvPXzSL8p31cZfobMwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMkZr5WH6Nvc1Ef9l+sI+lrrWOmG1hETTto TGm44flsb3l5mJIfElW+clTKouamQzH7iSrihmIzaVcvku+CAzYD8A6beOLTQsN5 ATLbZ0/PoX0oaFQou2vuT4614Ndzf6l7L+KKrxDkZpJxj8dXBYfMFeslhr0mP/qJ 93Ry9AtB7HiUgUk04B4E+Ya+9WhVWmFrW6IYHl5Nr3CS6kzNDEy76RtVpVYv9Qdj BC898sEGnKLputhOLR65L4OJno2csu247lOH+tKedoR3OwQG2AfJv8VMvXXWaQrj VH1HMnDMwWzcKZZ6XZHc5J07Bm4SiiVkd6DFW6atGFurBUkkwqQ= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net