$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: cW+oS8HfY9cvKXOhTmE6b6rfeuSADNupo9hX7PBFBJM= Subject key identifier: E4:9D:57:62:9B:A8:FC:85:6E:08:DF:81:CD:E2:63:A2:42:4F:78:5F Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 2B690658C61201D586DAB6CD764546439B7EFA36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: 98 Signing time: Thu 24 Apr 2025 06:51:07 +0000 Manifest this update: Thu 24 Apr 2025 06:46:07 +0000 Manifest next update: Sun 27 Apr 2025 15:30:07 +0000 Files and hashes: 1: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: VcHPLPqRZ80SXH1OaqHSSJlM/WIkIz4dAlfXG0bHXrQ=) 2: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: nvbZjZ+huqXbS/JKyuHhEMF7xo3c9QbThk8AtkhBVWw=) 3: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: RX5AFQf1N0hrSKSfhIOWzMoZVZ8ufQKdXMlbaXBrIJc=) 4: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: r8fLesmFkRnmjh3JTXGMPG85JJ/2mDQiedE9E440qUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 11:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:69:06:58:c6:12:01:d5:86:da:b6:cd:76:45:46:43:9b:7e:fa:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Apr 24 06:46:07 2025 GMT Not After : Apr 27 15:30:07 2025 GMT Subject: CN=E49D57629BA8FC856E08DF81CDE263A2424F785F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:0c:fd:9c:87:8c:85:08:20:e3:b7:73:c1: 4e:42:6f:3b:a3:b8:81:d1:4b:24:81:0e:a8:31:13: 2f:d5:20:54:99:70:2e:36:0e:63:b0:49:b9:c1:e8: f1:70:6b:bb:b8:db:2d:b1:84:36:77:5f:71:e8:21: 0e:5c:bb:cc:40:cc:01:f3:39:b7:40:7c:ad:3e:4f: c6:98:c0:be:f0:24:45:9a:68:f2:6b:43:cd:6b:ec: 57:ec:20:7a:fe:4f:4d:5f:f2:aa:cf:be:96:ac:7c: 33:c3:4f:82:60:b5:29:fc:cd:b6:98:34:89:83:6b: 83:9d:de:54:7b:29:9f:c7:9c:3e:07:3b:cf:26:3e: ef:b8:65:5b:a3:2a:42:ea:1d:5a:b7:ef:d8:08:5f: 41:ea:3c:99:d1:44:bb:13:7f:36:15:5d:5c:7b:0e: df:8d:88:5c:39:6f:fe:b1:5f:23:c5:8f:2a:6b:54: 39:8e:4b:29:92:f5:6a:f4:5c:e7:cc:ab:aa:c5:84: 91:9a:6d:1e:92:de:ea:5c:75:58:35:6a:68:27:85: 30:0e:86:2c:77:91:6f:e6:59:a9:90:ca:cb:bd:3b: 29:43:d4:60:c0:b9:ed:09:33:9a:d4:64:f9:41:dc: 37:dd:d8:7a:d3:2d:59:4b:e2:ea:da:2e:f1:52:28: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9D:57:62:9B:A8:FC:85:6E:08:DF:81:CD:E2:63:A2:42:4F:78:5F X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:67:c5:12:e9:a4:4b:8d:29:d5:44:be:48:29:09:30:2e:68: d4:50:8b:b3:86:82:87:f0:34:95:36:64:a7:31:7d:57:08:2e: 2b:a2:8e:1f:ac:3c:e2:70:61:4e:cb:d9:fd:9e:4b:86:69:9e: 8a:70:d9:a3:d0:8c:fe:6b:c1:19:77:32:1a:64:b5:22:b0:b6: 76:91:0b:f7:b7:04:91:5d:f7:f9:e1:c9:6d:03:ba:46:5a:22: fb:cd:11:d3:61:50:d1:80:e8:02:56:d4:1f:b6:38:b0:38:d4: fc:1d:54:6d:55:99:fc:5f:b1:cc:c1:82:eb:22:64:3a:a6:6c: a8:96:e1:53:cd:b6:44:6c:c8:72:f5:1f:d1:53:b3:23:ae:53: be:20:f9:1d:3e:24:4a:cd:ea:b0:26:4a:53:75:53:a4:c0:eb: d4:d5:e0:52:9a:a8:0c:86:cf:5f:40:6e:a0:9d:02:21:6f:38: bc:00:fc:1f:43:f4:f5:48:a9:8f:8c:a0:91:16:61:6e:68:9e: e8:53:0f:49:08:b2:aa:0d:57:66:0e:5b:25:85:da:50:5a:5c: 55:d3:70:96:e6:9f:4c:78:5b:a7:1d:fb:b5:54:0e:c7:c9:d2: 18:16:08:93:e2:79:ed:75:47:0c:4e:aa:bb:91:03:00:7a:60: 5a:b6:2b:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2kGWMYSAdWG2rbNdkVGQ5t++jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNTA0MjQwNjQ2MDdaFw0yNTA0MjcxNTMwMDdaMDMxMTAvBgNV BAMTKEU0OUQ1NzYyOUJBOEZDODU2RTA4REY4MUNERTI2M0EyNDI0Rjc4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjAz9nIeMhQgg47dzwU5Cbzuj uIHRSySBDqgxEy/VIFSZcC42DmOwSbnB6PFwa7u42y2xhDZ3X3HoIQ5cu8xAzAHz ObdAfK0+T8aYwL7wJEWaaPJrQ81r7FfsIHr+T01f8qrPvpasfDPDT4JgtSn8zbaY NImDa4Od3lR7KZ/HnD4HO88mPu+4ZVujKkLqHVq379gIX0HqPJnRRLsTfzYVXVx7 Dt+NiFw5b/6xXyPFjyprVDmOSymS9Wr0XOfMq6rFhJGabR6S3upcdVg1amgnhTAO hix3kW/mWamQysu9OylD1GDAue0JM5rUZPlB3Dfd2HrTLVlL4uraLvFSKOIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5J1XYpuo/IVuCN+BzeJjokJPeF8wHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFnxRLppEuNKdVEvkgpCTAuaNRQi7OGgofw NJU2ZKcxfVcILiuijh+sPOJwYU7L2f2eS4Zpnopw2aPQjP5rwRl3MhpktSKwtnaR C/e3BJFd9/nhyW0DukZaIvvNEdNhUNGA6AJW1B+2OLA41PwdVG1VmfxfsczBgusi ZDqmbKiW4VPNtkRsyHL1H9FTsyOuU74g+R0+JErN6rAmSlN1U6TA69TV4FKaqAyG z19AbqCdAiFvOLwA/B9D9PVIqY+MoJEWYW5onuhTD0kIsqoNV2YOWyWF2lBaXFXT cJbmn0x4W6cd+7VUDsfJ0hgWCJPiee11RwxOqruRAwB6YFq2K48= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net