$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft File: 115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json) Hash identifier: JzZpcEKG+wQApYJX3g3nTQyt9oeWfEvTBq0qnZKC0j8= Subject key identifier: BC:B8:62:9A:E1:AD:46:80:14:C8:11:18:C9:A5:D4:7F:79:A4:C6:49 Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 49AF8CF015E00332D162B1581BA2A818654144F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft Manifest number: 017B Signing time: Thu 24 Apr 2025 05:02:22 +0000 Manifest this update: Thu 24 Apr 2025 04:57:22 +0000 Manifest next update: Sun 27 Apr 2025 16:02:22 +0000 Files and hashes: 1: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=) 2: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: Owoc57S0Y+5CHUbh+9gayaf05ecIdO86CaiUN4mubRo=) 3: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=) 4: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: Jn9654uE1MAkhxHMr7LmE5+YeOZ6sz4Pa6nAFO5Kq+Q=) 5: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: MPl5ELQ+jnWnL8LJsxoYECXhQIy/2gQtSqxW1SRND58=) 6: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=) 7: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: +z4cRvyNT4QtWwPTkT8yZCGmj9VTYSFEsOdsS2JDhX8=) 8: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: 8uNanM9zz65ga2RoA4D0oi2HgE75rc8JJUEWGV4Ynnk=) 9: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: llEU2EoC4/P/Bq9eXIEBhI1EBaSW22CJd9vi9OJC4Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:af:8c:f0:15:e0:03:32:d1:62:b1:58:1b:a2:a8:18:65:41:44:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Apr 24 04:57:22 2025 GMT Not After : Apr 27 16:02:22 2025 GMT Subject: CN=BCB8629AE1AD468014C81118C9A5D47F79A4C649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:cb:85:79:80:2e:4f:39:58:63:49:ea:f8: 51:8b:17:c8:0b:b7:4b:16:69:98:b5:6f:ae:db:14: d7:2d:11:55:f9:af:c1:56:4b:32:b2:0e:75:eb:f9: d1:fd:51:cf:a2:03:bb:9f:28:46:3e:37:4f:26:55: 54:97:cc:a3:52:cd:bb:cc:09:12:04:c7:7d:72:3f: 76:e9:a0:3f:18:1f:92:0d:7d:61:f7:f9:7c:e4:13: 89:e7:bf:75:2a:a4:bd:0f:92:d5:04:d6:ff:ad:45: 4f:d4:0f:89:d4:48:c2:b8:d7:86:86:91:24:f2:d4: 78:54:0e:42:fa:20:4f:76:5d:06:c5:5f:5f:6a:fa: f1:65:7f:65:54:5d:75:82:35:80:b8:2b:1a:dd:df: 30:f3:1b:12:38:9e:a9:e9:19:4d:85:40:ff:1a:90: d2:25:e0:30:3f:48:d8:46:03:31:f4:8f:35:10:62: bf:48:28:35:b3:f5:eb:a0:bc:08:31:cc:b8:83:87: ca:9a:d0:d2:31:7f:9f:6a:27:19:2a:e3:46:0f:d5: ec:e5:2b:05:39:e8:16:03:bb:41:27:3f:53:87:52: 3d:80:a5:8c:0f:27:5c:1e:2e:77:83:9c:f4:96:7c: 2c:c2:61:57:8a:7e:2e:4d:8b:3b:c7:d8:a4:1d:40: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:62:9A:E1:AD:46:80:14:C8:11:18:C9:A5:D4:7F:79:A4:C6:49 X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:dd:fc:95:d6:b1:dd:20:8e:f1:ff:7b:94:e9:92:40:e6:35: cf:ed:ce:08:05:65:87:9a:1e:ae:b2:76:c1:2a:b0:a1:1e:cd: 9f:bc:23:51:62:41:b8:37:0e:09:14:36:e9:84:20:02:79:3d: bb:60:3a:b8:33:44:3d:bf:2c:4a:24:64:3d:b1:d0:65:a9:4b: 66:1f:38:c6:92:1f:fb:69:ca:8d:2f:95:07:8e:e3:95:7b:8e: 47:46:bd:6d:36:b2:0d:81:ff:8a:a5:d9:5f:24:5d:32:dc:03: de:45:38:27:26:40:43:72:bf:07:66:03:bb:40:83:d2:1d:e9: 7c:2d:b8:0a:68:f7:c5:da:fd:8c:6f:db:22:cd:d2:89:db:aa: 11:99:15:84:bf:60:1f:37:bb:52:05:24:e0:14:ea:93:82:38: ae:ac:a7:ca:67:c9:53:aa:71:c6:6b:6d:af:25:c2:fc:1f:f2: 83:b0:85:ab:bb:ba:79:ff:6e:6e:4d:83:a6:09:2d:0f:23:2b: ae:71:5d:c5:7b:9c:09:bc:49:b1:dc:81:df:1b:e4:c5:84:f7: d5:1b:60:4b:79:24:b1:46:d9:38:d7:0c:30:11:27:1f:5c:5a: 05:45:e6:d7:e9:95:1d:14:6b:30:aa:9b:e0:00:6c:89:83:29: 0d:c3:57:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSa+M8BXgAzLRYrFYG6KoGGVBRPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNTA0MjQwNDU3MjJaFw0yNTA0MjcxNjAyMjJaMDMxMTAvBgNV BAMTKEJDQjg2MjlBRTFBRDQ2ODAxNEM4MTExOEM5QTVENDdGNzlBNEM2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj9MuFeYAuTzlYY0nq+FGLF8gL t0sWaZi1b67bFNctEVX5r8FWSzKyDnXr+dH9Uc+iA7ufKEY+N08mVVSXzKNSzbvM CRIEx31yP3bpoD8YH5INfWH3+XzkE4nnv3UqpL0PktUE1v+tRU/UD4nUSMK414aG kSTy1HhUDkL6IE92XQbFX19q+vFlf2VUXXWCNYC4Kxrd3zDzGxI4nqnpGU2FQP8a kNIl4DA/SNhGAzH0jzUQYr9IKDWz9eugvAgxzLiDh8qa0NIxf59qJxkq40YP1ezl KwU56BYDu0EnP1OHUj2ApYwPJ1weLneDnPSWfCzCYVeKfi5NizvH2KQdQEMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvLhimuGtRoAUyBEYyaXUf3mkxkkwHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELd/JXWsd0gjvH/e5TpkkDmNc/tzggFZYea Hq6ydsEqsKEezZ+8I1FiQbg3DgkUNumEIAJ5PbtgOrgzRD2/LEokZD2x0GWpS2Yf OMaSH/tpyo0vlQeO45V7jkdGvW02sg2B/4ql2V8kXTLcA95FOCcmQENyvwdmA7tA g9Id6XwtuApo98Xa/Yxv2yLN0onbqhGZFYS/YB83u1IFJOAU6pOCOK6sp8pnyVOq ccZrba8lwvwf8oOwhau7unn/bm5Ng6YJLQ8jK65xXcV7nAm8SbHcgd8b5MWE99Ub YEt5JLFG2TjXDDARJx9cWgVF5tfplR0UazCqm+AAbImDKQ3DV2Y= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net