$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: pZ3jMDjwqg0D0JIfBMzLXqiSn0IOxj86+tGAFK8fBCs= Subject key identifier: 24:57:CE:97:C2:7F:25:6D:CF:9A:CF:54:D3:22:64:5E:F6:1D:A9:82 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 0DDA7B3DCC80B47C69FA9240606F9D01FD6F742A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 0306 Signing time: Thu 24 Apr 2025 06:50:57 +0000 Manifest this update: Thu 24 Apr 2025 06:45:57 +0000 Manifest next update: Sun 27 Apr 2025 12:05:57 +0000 Files and hashes: 1: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: Fob1/hoaxI1PmxjmOmJBrnjoUBlYNNau0pJudnAPUXY=) 2: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=) 3: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: vos4wfbgWit9CPIZhtiH7kwDHAjtl0eqL3m94EaJcso=) 4: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=) 5: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: Gb4dk6cIFWpDm7yOXj9wMvU+xey+IEOR2MYqhzLU7AE=) 6: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: N+Ot/inKVcA4yr7n4GNYrMxfbDoZyZlvEVliFyH2+mQ=) 7: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: 07yh7hfVKVGF6Yffm3aMOKeO+ClRWm+M1+obA5h32mQ=) 8: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: ueDcGs+ieVWuaQhGuGrEsgDWyfGy4M23QWx5zXvjLBo=) 9: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: MargjL84nTzHz8ChojHD7+4RMOnc9Fhif/pdgboFtAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:da:7b:3d:cc:80:b4:7c:69:fa:92:40:60:6f:9d:01:fd:6f:74:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Apr 24 06:45:57 2025 GMT Not After : Apr 27 12:05:57 2025 GMT Subject: CN=2457CE97C27F256DCF9ACF54D322645EF61DA982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:b4:b8:ff:63:88:91:9e:d5:a6:24:04:55: ce:2f:6c:f7:47:f3:34:39:6f:36:4b:f9:34:d6:75: 44:51:87:df:16:f3:68:59:59:03:dd:9e:ab:70:a1: 7b:b0:cf:24:74:ef:a5:61:79:2b:d0:d5:ad:e7:f1: f7:ee:75:c8:7e:c9:23:b0:d0:45:ce:34:8f:31:32: ef:b6:b2:69:0b:2e:a4:d1:48:d8:a5:7f:e4:4e:d0: ef:df:9b:b3:44:e9:06:c7:1c:b3:46:8e:76:17:4e: 37:14:79:41:0b:08:f9:aa:fc:64:64:e0:c5:8a:2c: a8:80:c8:f3:83:37:5a:7e:ff:cb:26:cd:9b:e5:66: 81:0f:c0:e9:a6:95:4c:85:2a:1f:1e:3b:5c:82:cb: 43:c4:24:11:f3:90:e6:89:f6:93:00:3d:56:b0:04: 8a:ab:6a:95:6d:84:84:46:85:e7:1c:8d:cc:23:82: 4a:75:35:ae:b7:09:6d:93:d9:e1:29:02:14:65:f7: 21:71:90:f8:d3:17:98:5e:05:97:6f:f5:54:3b:b9: a6:6a:fc:52:d3:68:04:07:34:7c:e1:22:a9:aa:0c: 0c:7e:ee:2b:e8:d1:80:42:1d:7b:98:f4:39:ec:39: 8e:fb:b0:a7:30:19:84:29:95:fb:5c:fb:fc:f2:bd: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:57:CE:97:C2:7F:25:6D:CF:9A:CF:54:D3:22:64:5E:F6:1D:A9:82 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ea:a2:26:9b:55:a6:e4:7e:ae:51:f6:6f:53:07:13:41:97: 3b:a5:ba:3d:6a:ae:24:1a:21:1c:33:f8:28:4c:b5:b8:2a:a2: ef:cb:44:ae:67:e8:e0:d4:4d:eb:e3:ca:1a:84:6f:31:7e:f9: 22:2c:73:2b:7d:c8:de:f4:f7:17:30:e4:94:d6:95:2a:40:ca: 91:e6:91:17:2e:ac:d0:62:51:dd:23:8e:bb:86:23:1b:2d:f0: 89:e4:17:2b:01:57:c1:da:b8:31:98:2f:88:7c:ac:6b:f5:7f: b1:47:a7:c6:ad:9c:c6:99:1e:fd:90:2c:ab:44:2a:ef:3b:7a: db:3f:49:38:d7:4f:2f:2a:26:f4:49:8a:de:3e:c2:62:57:af: 28:e9:df:67:6d:a3:d3:a0:6d:20:c4:b0:87:44:f0:82:bb:2a: a4:f4:04:93:4c:13:ae:08:41:3d:3c:09:7f:d5:67:9b:e7:04: 06:68:36:71:f6:c6:d7:9d:06:82:73:29:bc:2f:76:bd:0e:22: bd:e6:c1:bb:d8:3d:18:c0:ff:c5:52:65:7e:84:38:f1:1d:9c: 8f:3d:45:67:4b:2d:03:7c:98:6d:ba:ad:ab:c7:90:71:5d:5f: 1d:5f:a1:6e:21:fe:1f:66:df:5e:65:e0:29:59:1f:cb:8e:d6: bb:97:b8:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdp7PcyAtHxp+pJAYG+dAf1vdCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTA0MjQwNjQ1NTdaFw0yNTA0MjcxMjA1NTdaMDMxMTAvBgNV BAMTKDI0NTdDRTk3QzI3RjI1NkRDRjlBQ0Y1NEQzMjI2NDVFRjYxREE5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vrS4/2OIkZ7VpiQEVc4vbPdH 8zQ5bzZL+TTWdURRh98W82hZWQPdnqtwoXuwzyR076VheSvQ1a3n8ffudch+ySOw 0EXONI8xMu+2smkLLqTRSNilf+RO0O/fm7NE6QbHHLNGjnYXTjcUeUELCPmq/GRk 4MWKLKiAyPODN1p+/8smzZvlZoEPwOmmlUyFKh8eO1yCy0PEJBHzkOaJ9pMAPVaw BIqrapVthIRGheccjcwjgkp1Na63CW2T2eEpAhRl9yFxkPjTF5heBZdv9VQ7uaZq /FLTaAQHNHzhIqmqDAx+7ivo0YBCHXuY9DnsOY77sKcwGYQplftc+/zyvYVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFfOl8J/JW3Pms9U0yJkXvYdqYIwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzqoiabVabkfq5R9m9TBxNBlzuluj1qriQa IRwz+ChMtbgqou/LRK5n6ODUTevjyhqEbzF++SIscyt9yN709xcw5JTWlSpAypHm kRcurNBiUd0jjruGIxst8InkFysBV8HauDGYL4h8rGv1f7FHp8atnMaZHv2QLKtE Ku87ets/STjXTy8qJvRJit4+wmJXryjp32dto9OgbSDEsIdE8IK7KqT0BJNME64I QT08CX/VZ5vnBAZoNnH2xtedBoJzKbwvdr0OIr3mwbvYPRjA/8VSZX6EOPEdnI89 RWdLLQN8mG26ravHkHFdXx1foW4h/h9m315l4ClZH8uO1ruXuOI= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net