$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: EVxFUIPuvCaGVVikIKUbZV5ljZXCOhnHK+9+DuVoMOY= Subject key identifier: D7:81:98:E0:CD:8A:63:41:F1:30:08:48:1A:FA:1C:EE:95:98:4B:67 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 03315B56B0A84CCBF578C358685E00861DB10567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: EC Signing time: Fri 25 Apr 2025 22:10:52 +0000 Manifest this update: Fri 25 Apr 2025 22:05:52 +0000 Manifest next update: Tue 29 Apr 2025 07:44:52 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: cbrl6dBckxe27KqOtUNV9s29bXGi1zCIe4QmB1+JlkA=) 2: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: +AkE8lBocYkzQtUK7rxyogDErEqAx6OPKcVzXziAtKI=) 3: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: 0Y+q4D/9kc3lyDnd5o7N2zdgFclAZYvo3HqLnRqLx2Y=) 4: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 07:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:31:5b:56:b0:a8:4c:cb:f5:78:c3:58:68:5e:00:86:1d:b1:05:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Apr 25 22:05:52 2025 GMT Not After : Apr 29 07:44:52 2025 GMT Subject: CN=D78198E0CD8A6341F13008481AFA1CEE95984B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b3:67:d4:90:33:09:83:01:b1:18:03:59:86: 47:07:06:af:88:4d:55:2f:f2:1c:9a:12:9a:5c:bb: 27:11:cc:4b:db:5d:5b:60:b6:54:43:3b:5a:5d:a9: ea:4f:b6:1e:bd:9d:78:bd:d4:3a:2c:c1:f4:bd:74: 2f:bd:d2:42:29:d1:c1:a9:c5:b7:57:52:f0:b5:77: 68:69:58:9f:07:53:aa:9d:24:c4:f8:c9:98:cb:aa: 3a:1d:27:15:03:9c:10:01:9e:69:06:f7:1e:10:3c: b0:5e:54:65:1d:7d:f4:1f:44:2d:0b:e4:c7:5a:6e: 86:13:fc:d5:4b:b3:0e:f4:16:67:87:38:80:aa:1f: 55:c1:62:4b:79:f3:31:57:6a:8d:b0:ef:32:06:98: 8e:e0:4f:7f:8e:cb:10:3e:74:ca:87:1a:66:51:ef: 49:4c:0a:c5:dc:9b:e8:85:2c:f2:7a:2f:d8:5d:11: e3:a0:ed:e7:44:9f:52:0c:5b:e0:11:76:34:ea:27: d3:1f:fb:25:24:75:45:53:a2:89:72:03:03:28:df: df:83:ec:96:fc:f3:9e:b8:da:0c:11:1a:3a:65:c5: 6b:34:22:b4:fb:5e:82:ce:d3:4d:f4:e1:c4:31:c0: 07:a5:37:62:e5:22:72:2d:ac:2a:85:ec:0f:68:ee: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:98:E0:CD:8A:63:41:F1:30:08:48:1A:FA:1C:EE:95:98:4B:67 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:80:8e:cf:2a:d9:83:bd:42:10:45:db:88:bc:f8:03:10:12: 53:02:06:cc:f9:cb:8d:4d:7a:01:f6:f2:dc:75:a8:1e:14:66: 1b:39:8f:88:a1:0b:84:c7:09:92:29:5f:2a:ad:93:25:e7:1d: 95:4e:1e:a5:aa:00:21:75:ff:16:96:1a:15:e7:cf:30:3a:1a: 0d:ac:fd:39:55:68:c6:63:47:e9:b7:ff:1b:74:bd:3d:d3:a4: dc:58:65:55:90:14:84:4d:00:ca:17:f7:a4:4e:52:dd:89:70: 58:91:5f:fd:1f:04:2c:89:73:c2:1b:12:e7:89:7a:b4:dd:0d: 83:1c:4d:4f:62:f2:08:ff:81:3f:0c:b0:ab:6f:63:9b:d3:02: dd:20:85:27:f2:85:24:76:12:a9:01:08:a7:7b:dd:bf:3e:ff: ba:83:31:52:12:cc:2b:19:16:02:80:8d:b2:3f:ae:31:9d:00: e0:47:cf:20:2e:84:ed:7d:b1:fe:19:16:00:e0:c8:66:b2:c3: 46:47:92:41:87:50:96:c9:31:ff:da:8e:58:cc:13:e9:22:a9: d9:f8:3c:04:b1:b2:33:a7:5a:91:7c:4e:b7:34:bf:9f:2b:bb: c7:ab:73:c9:89:68:44:89:aa:6f:8d:5f:2f:b1:dd:4e:08:5c: ff:5f:31:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzFbVrCoTMv1eMNYaF4Ahh2xBWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNTA0MjUyMjA1NTJaFw0yNTA0MjkwNzQ0NTJaMDMxMTAvBgNV BAMTKEQ3ODE5OEUwQ0Q4QTYzNDFGMTMwMDg0ODFBRkExQ0VFOTU5ODRCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0s2fUkDMJgwGxGANZhkcHBq+I TVUv8hyaEppcuycRzEvbXVtgtlRDO1pdqepPth69nXi91DoswfS9dC+90kIp0cGp xbdXUvC1d2hpWJ8HU6qdJMT4yZjLqjodJxUDnBABnmkG9x4QPLBeVGUdffQfRC0L 5MdaboYT/NVLsw70FmeHOICqH1XBYkt58zFXao2w7zIGmI7gT3+OyxA+dMqHGmZR 70lMCsXcm+iFLPJ6L9hdEeOg7edEn1IMW+ARdjTqJ9Mf+yUkdUVToolyAwMo39+D 7Jb885642gwRGjplxWs0IrT7XoLO00304cQxwAelN2LlInItrCqF7A9o7qmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU14GY4M2KY0HxMAhIGvoc7pWYS2cwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeAjs8q2YO9QhBF24i8+AMQElMCBsz5y41N egH28tx1qB4UZhs5j4ihC4THCZIpXyqtkyXnHZVOHqWqACF1/xaWGhXnzzA6Gg2s /TlVaMZjR+m3/xt0vT3TpNxYZVWQFIRNAMoX96ROUt2JcFiRX/0fBCyJc8IbEueJ erTdDYMcTU9i8gj/gT8MsKtvY5vTAt0ghSfyhSR2EqkBCKd73b8+/7qDMVISzCsZ FgKAjbI/rjGdAOBHzyAuhO19sf4ZFgDgyGayw0ZHkkGHUJbJMf/ajljME+kiqdn4 PASxsjOnWpF8Trc0v58ru8erc8mJaESJqm+NXy+x3U4IXP9fMXQ= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:32 2025 by rpki-client on console.sobornost.net