$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft File: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json) Hash identifier: hkLUzQRjw+mbZDnCDcdpdmJENlFmvj/8IydTlQIz31Q= Subject key identifier: B2:A6:D2:DC:5E:2F:BF:F3:03:94:17:21:DC:48:AA:91:CF:C4:31:B3 Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Certificate serial: 03D5EE98B86D8604490D80686B6533914E8AF3B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft Manifest number: 04E4 Signing time: Fri 25 Apr 2025 04:32:15 +0000 Manifest this update: Fri 25 Apr 2025 04:27:15 +0000 Manifest next update: Mon 28 Apr 2025 08:54:15 +0000 Files and hashes: 1: 3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (hash: OD3JiPGHDiL7kIqgNDTr6d3lXB+Vqj+hZ7qDs1qxRC4=) 2: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: E2PhZYIW23U+utUpZwqULcvTt6KlzYJl4T2mdMuJpvU=) 3: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: DY+I8fOVqUjezx/DmSAGLnloSubkgTLcYKo00TtWhVE=) 4: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: T6zBCDYCBei1sIwoPeFlZke8e/0x59ASpBVpgvqvRNg=) 5: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: 0uFyEk4kSz2+PTofQStkvWY/ZflHglwyBx+4DydiuOs=) 6: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: 4vp0Qpf0MLP4khTVs9MQwOQui0ZXjUZqWXi8G+NFZc8=) 7: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: T4+pJPmCfgNNh91fQe+cFh2S1JfH4wE9FS6aSJjDE44=) 8: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Ni8K6MxuczEixPJW7FrAgC5kkezA9a+/a/29Cb7hSuw=) 9: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: KEui28jkAuRJTN0mkYkxYTEji+lOQfzmWlvXF+Skvds=) 10: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: N2T7DBYjNznj0B0Gx8wABa3A4sF8W5Eo0nd66DsyVr4=) 11: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: gMz09JidDcRWBTwU6ryArFJQlq35y7FUrFAp/Wy4yQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d5:ee:98:b8:6d:86:04:49:0d:80:68:6b:65:33:91:4e:8a:f3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Validity Not Before: Apr 25 04:27:15 2025 GMT Not After : Apr 28 08:54:15 2025 GMT Subject: CN=B2A6D2DC5E2FBFF303941721DC48AA91CFC431B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:a5:1f:00:be:83:76:26:d4:3d:f4:6d:06: dc:e2:96:99:53:65:da:11:fa:fb:bc:92:6d:13:a7: 04:bc:a2:39:04:d8:26:73:d9:2a:3c:9d:f8:3d:97: 18:af:bc:43:6c:90:d3:59:c3:38:fc:a9:1a:c2:65: 6b:2e:04:c6:35:e5:a1:55:ea:61:b3:8e:a7:6e:0e: 24:03:52:09:29:40:e9:82:41:93:77:4d:7f:29:6f: 00:1f:8e:b1:0a:1c:55:f1:61:9e:b5:2c:aa:c5:a7: 39:ed:73:13:16:4b:cd:c2:12:73:f5:0e:0d:f0:f7: fc:ad:34:c4:a7:30:6a:7b:97:db:5c:d9:c6:74:81: e9:66:f4:64:4a:e2:60:a4:eb:a2:6b:e5:cb:0f:ef: 28:77:2b:86:80:6f:30:cf:eb:87:23:b6:58:7c:78: ba:ab:9f:1e:cf:fd:98:29:f8:56:8e:45:b8:3c:b4: 53:d0:e4:65:b4:ad:c8:f7:72:13:cd:b1:57:3f:b9: 29:d6:88:74:65:97:9e:cc:90:75:d0:aa:32:cd:b5: 4f:10:a5:3b:f7:58:7d:50:08:56:0c:3b:af:3e:92: 18:c2:50:49:a9:85:2c:ac:bf:34:3a:61:9b:21:6e: 0d:20:ea:6e:b1:9d:c4:ee:a2:03:28:55:90:30:33: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A6:D2:DC:5E:2F:BF:F3:03:94:17:21:DC:48:AA:91:CF:C4:31:B3 X509v3 Authority Key Identifier: keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:33:18:70:54:91:b6:9f:f2:04:87:9c:99:68:c2:fd:22:38: 8f:6c:f2:db:f5:f5:82:2e:19:90:64:09:e7:1a:c3:7e:25:5b: 18:71:7c:a1:2c:cb:37:b8:7c:bb:c1:6d:96:b3:de:9a:6a:fb: 8d:25:bd:7a:08:e2:53:7e:64:8a:15:4a:7d:bc:c8:b1:13:ef: 2c:62:11:dd:52:28:62:32:a1:71:66:8f:bc:b0:9b:bd:7a:47: 15:16:85:ed:66:22:30:18:5e:87:39:39:42:3b:8c:4b:87:07: bd:66:79:45:78:81:86:f3:b2:7e:f4:ee:6b:df:17:a8:b4:c0: 37:ff:00:5d:69:77:e1:1b:4a:92:2b:63:86:fb:8b:c9:00:02: e2:50:dd:57:25:c4:ac:e0:8f:6e:04:93:4d:64:26:6b:f9:92: 6d:58:1d:1e:13:8d:82:83:65:bd:f1:13:df:d6:29:a8:41:c9: d2:0b:31:8d:cc:31:36:73:0e:9b:44:54:43:7a:5f:5e:3f:3e: 48:66:a4:0e:19:4e:b5:38:27:e2:89:7b:39:a1:08:f8:fe:06: f2:0c:5d:c4:04:c0:ad:a8:d7:bc:33:25:d2:b6:46:27:0e:a0: d2:52:1f:8c:4e:b9:d7:92:d6:be:29:c1:6d:0e:52:df:88:c1: 59:f8:f7:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9XumLhthgRJDYBoa2UzkU6K87gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE MTFEMzNBNjAeFw0yNTA0MjUwNDI3MTVaFw0yNTA0MjgwODU0MTVaMDMxMTAvBgNV BAMTKEIyQTZEMkRDNUUyRkJGRjMwMzk0MTcyMURDNDhBQTkxQ0ZDNDMxQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC206UfAL6DdibUPfRtBtzilplT ZdoR+vu8km0TpwS8ojkE2CZz2So8nfg9lxivvENskNNZwzj8qRrCZWsuBMY15aFV 6mGzjqduDiQDUgkpQOmCQZN3TX8pbwAfjrEKHFXxYZ61LKrFpzntcxMWS83CEnP1 Dg3w9/ytNMSnMGp7l9tc2cZ0gelm9GRK4mCk66Jr5csP7yh3K4aAbzDP64cjtlh8 eLqrnx7P/Zgp+FaORbg8tFPQ5GW0rcj3chPNsVc/uSnWiHRll57MkHXQqjLNtU8Q pTv3WH1QCFYMO68+khjCUEmphSysvzQ6YZshbg0g6m6xncTuogMoVZAwM/EPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqbS3F4vv/MDlBch3Eiqkc/EMbMwHwYDVR0j BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE MzNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2 NjUtOGQ0NzRmZDE0YWVhLzAvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFE NjVEMTFEMzNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEszGHBUkbaf8gSHnJlowv0iOI9s8tv19YIu GZBkCecaw34lWxhxfKEsyze4fLvBbZaz3ppq+40lvXoI4lN+ZIoVSn28yLET7yxi Ed1SKGIyoXFmj7ywm716RxUWhe1mIjAYXoc5OUI7jEuHB71meUV4gYbzsn707mvf F6i0wDf/AF1pd+EbSpIrY4b7i8kAAuJQ3VclxKzgj24Ek01kJmv5km1YHR4TjYKD Zb3xE9/WKahBydILMY3MMTZzDptEVEN6X14/PkhmpA4ZTrU4J+KJezmhCPj+BvIM XcQEwK2o17wzJdK2RicOoNJSH4xOudeS1r4pwW0OUt+IwVn493g= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net