$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: +Oh2xc2p4ylBCleiB8C9C7a2eTVcGAuW5Ek0chMkI+c= Subject key identifier: 4D:2D:2D:45:F4:52:A5:1D:1A:59:3D:6B:94:18:D8:79:6E:CB:C0:47 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 7CB2D3DF85A9E441B2B255F0B28919C98487E97C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 022F Signing time: Sun 27 Apr 2025 05:51:05 +0000 Manifest this update: Sun 27 Apr 2025 05:46:05 +0000 Manifest next update: Wed 30 Apr 2025 12:51:05 +0000 Files and hashes: 1: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: JddBvr2E4qhvXzTnvB8cueVnBYtFb2jGcnwSz88frMs=) 2: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PDdq8e3i59EuZ/OY6T2ikv6WPALtg9Yb+GzE/u464Cg=) 3: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: SmwBLVdkEy1YxgQiLfDoNWMkCK9NdXfyMwUF3K8rFjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b2:d3:df:85:a9:e4:41:b2:b2:55:f0:b2:89:19:c9:84:87:e9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Apr 27 05:46:05 2025 GMT Not After : Apr 30 12:51:05 2025 GMT Subject: CN=4D2D2D45F452A51D1A593D6B9418D8796ECBC047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:1d:57:8d:e2:36:57:6f:ed:7c:a6:76:5a: 3c:0b:1c:da:64:3c:af:60:ff:56:ae:fa:bc:bf:88: e3:de:51:1a:d0:51:84:73:51:8d:40:20:cc:d8:6e: a2:0e:08:82:35:dd:3d:47:5c:8c:44:10:79:fc:4f: 8c:dd:f9:01:ce:74:a3:cb:fc:21:89:ab:42:5c:24: 2e:73:5a:cb:5f:82:da:76:70:4f:3c:47:ed:9c:ac: fe:e0:87:d1:25:11:62:b7:19:82:0c:c5:35:3b:14: a7:1f:05:7d:c2:f8:26:75:86:61:1f:c3:96:17:b3: 88:2f:4d:c6:4f:06:db:f1:3a:bf:d3:aa:d8:f9:79: 54:65:6b:e3:83:1c:ad:5f:dd:26:1a:de:9a:09:f7: 9a:56:13:0b:ca:3b:ff:c5:77:51:c6:6f:83:cc:93: 72:c1:e8:db:ff:7f:0f:d4:c3:28:d0:e7:58:fc:d9: 03:0f:ea:e7:28:cc:23:6e:ce:b4:52:0a:f7:a4:50: 47:34:75:f8:d2:65:f1:87:c6:e0:e9:bb:04:32:a2: 5e:82:7b:1f:ff:d3:15:65:e4:07:b7:62:53:a7:a7: 73:ee:98:fd:0a:f9:ae:2e:bd:5e:9e:c5:a0:7c:b5: 42:14:54:7d:78:b3:53:76:7c:3e:80:71:2b:44:15: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2D:2D:45:F4:52:A5:1D:1A:59:3D:6B:94:18:D8:79:6E:CB:C0:47 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4a:e5:41:98:18:9b:b7:41:86:4c:75:2d:d3:e4:ef:b8:e4: 32:38:8f:cc:6b:00:fa:1a:fb:12:8c:97:24:c8:63:dc:2c:0f: dc:ff:47:c3:aa:ef:bf:fd:bf:38:b4:a7:3a:f3:1f:ed:f3:27: 27:15:e9:d3:64:e6:4c:57:59:d7:a2:bc:98:f6:08:85:45:77: 95:69:47:ec:a4:47:b4:33:55:7f:64:62:47:9b:6e:75:f7:f9: 44:f0:21:9f:70:68:20:93:a9:5a:9b:3a:e7:59:92:58:f3:39: 79:6c:cb:63:d2:7f:dc:f1:a3:ff:79:cb:6d:c7:a3:a2:fc:90: 21:b6:35:58:f9:c0:66:c0:c3:c8:7e:88:7e:9a:50:3b:41:c6: 5d:b8:ae:fb:f1:7f:b9:8e:e0:e8:f9:e9:b5:f6:5a:ca:5b:c2: 61:07:3f:46:9f:22:83:a9:86:3e:00:2f:28:2f:83:31:11:f5: 8a:84:91:08:bc:1b:4b:0c:21:6e:0f:24:e6:01:59:35:08:5f: 23:cf:26:9a:59:ac:7f:82:1f:00:83:86:34:e4:7f:87:a4:55: fd:80:a8:f3:32:0c:71:bd:f2:f0:ab:c6:49:4a:3d:6b:6c:d7: 82:ba:03:ce:b3:09:d2:d0:52:1a:92:c0:43:49:03:3a:67:31: fc:f0:a7:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLLT34Wp5EGyslXwsokZyYSH6XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTA0MjcwNTQ2MDVaFw0yNTA0MzAxMjUxMDVaMDMxMTAvBgNV BAMTKDREMkQyRDQ1RjQ1MkE1MUQxQTU5M0Q2Qjk0MThEODc5NkVDQkMwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZR1XjeI2V2/tfKZ2WjwLHNpk PK9g/1au+ry/iOPeURrQUYRzUY1AIMzYbqIOCII13T1HXIxEEHn8T4zd+QHOdKPL /CGJq0JcJC5zWstfgtp2cE88R+2crP7gh9ElEWK3GYIMxTU7FKcfBX3C+CZ1hmEf w5YXs4gvTcZPBtvxOr/Tqtj5eVRla+ODHK1f3SYa3poJ95pWEwvKO//Fd1HGb4PM k3LB6Nv/fw/UwyjQ51j82QMP6ucozCNuzrRSCvekUEc0dfjSZfGHxuDpuwQyol6C ex//0xVl5Ae3YlOnp3PumP0K+a4uvV6exaB8tUIUVH14s1N2fD6AcStEFWc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTS0tRfRSpR0aWT1rlBjYeW7LwEcwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBK5UGYGJu3QYZMdS3T5O+45DI4j8xrAPoa +xKMlyTIY9wsD9z/R8Oq77/9vzi0pzrzH+3zJycV6dNk5kxXWdeivJj2CIVFd5Vp R+ykR7QzVX9kYkebbnX3+UTwIZ9waCCTqVqbOudZkljzOXlsy2PSf9zxo/95y23H o6L8kCG2NVj5wGbAw8h+iH6aUDtBxl24rvvxf7mO4Oj56bX2WspbwmEHP0afIoOp hj4ALygvgzER9YqEkQi8G0sMIW4PJOYBWTUIXyPPJppZrH+CHwCDhjTkf4ekVf2A qPMyDHG98vCrxklKPWts14K6A86zCdLQUhqSwENJAzpnMfzwpxo= -----END CERTIFICATE-----Generated at Sun Apr 27 08:06:53 2025 by rpki-client on console.sobornost.net