$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft File: 4C44F6F543BDBB858D3656D41A36660407672BDE.mft (raw, json) Hash identifier: 1l37ZcO18Gdt4NCQ1ALKuR6fkU59/0Ywh5w1SgrGfnA= Subject key identifier: 5A:B5:9B:CD:19:83:32:20:48:36:D0:7E:3B:D9:63:E1:3B:7E:66:78 Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 42BDA8327EA2CF12E1A7B488A3016553D904EA43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft Manifest number: 021A Signing time: Thu 24 Apr 2025 01:30:56 +0000 Manifest this update: Thu 24 Apr 2025 01:25:56 +0000 Manifest next update: Sun 27 Apr 2025 04:37:56 +0000 Files and hashes: 1: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: 8Rg4KVnY/32fl4fG4uMRblRtiju0uviBp14XLoqECcw=) 2: 4C44F6F543BDBB858D3656D41A36660407672BDE.crl (hash: QICqeOCYss/lwZfSI8yQCMJUyLlRpH4Qk4xU2/b801U=) 3: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: rlZNRe9QwPDxRgCp5O054ihVTvOafRmbaG0Hj+9kO5Q=) 4: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: /oNKkVvACpGRwEaHQtz+NrUuOBWsbNWp6QRHeV0MPMU=) 5: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: PxQIpqbQq2jLhpu3Xowhx5fys0b4IY/JPo7Tka0HdFo=) 6: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: 4O8b726/lpcYZIzCbq+BOqW7rrh6L+bwyN5I34NP9Oc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bd:a8:32:7e:a2:cf:12:e1:a7:b4:88:a3:01:65:53:d9:04:ea:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Apr 24 01:25:56 2025 GMT Not After : Apr 27 04:37:56 2025 GMT Subject: CN=5AB59BCD198332204836D07E3BD963E13B7E6678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:99:22:b0:c6:96:1a:b6:dd:5c:a0:40:9f: 60:35:aa:12:e8:b7:4f:5b:56:13:fa:09:b0:60:20: 4c:8d:f6:0c:fb:ac:b7:83:60:ee:d1:fd:d4:b3:1c: 90:50:a2:63:57:4a:11:1f:e4:e6:06:18:2d:a9:6d: 59:39:c6:5e:d7:a2:a6:48:b0:31:c2:4c:47:8a:b0: ef:4e:c7:f8:24:ce:00:aa:1a:8d:b3:cd:16:1e:ea: fc:37:a8:a3:23:22:c8:62:1d:48:b8:5a:76:64:f9: ed:0a:c5:01:54:a2:42:00:24:aa:9e:8f:96:c7:99: 2e:44:2a:99:fe:6c:3e:1d:9d:eb:a0:e8:db:2d:48: 40:01:8f:aa:b0:29:9d:82:c4:8d:e9:cc:e1:a1:e9: c1:be:66:59:44:08:2d:e9:ac:1a:b4:67:9a:4d:65: 5c:65:d7:db:3f:3b:af:c1:76:c7:de:66:cf:13:21: 50:e8:d1:eb:21:d6:6d:cb:ea:11:8e:13:bf:cc:fd: f5:c2:96:10:88:a5:fe:46:94:76:5d:cf:33:c6:cd: a5:42:6e:86:cf:4a:31:9c:89:de:69:a1:53:d7:5b: 1d:4c:66:12:5b:01:2a:b5:80:66:3c:17:28:31:b4: 82:02:ae:5e:0c:46:71:5b:f7:ef:b3:05:56:6a:b6: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B5:9B:CD:19:83:32:20:48:36:D0:7E:3B:D9:63:E1:3B:7E:66:78 X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:59:e3:b9:0b:72:50:ad:91:5e:b1:19:e1:d6:5c:2a:0a:18: 04:d2:8f:12:f0:dd:c4:10:77:13:76:af:d7:d3:fe:af:3d:55: 42:37:b2:b1:e0:09:c0:81:ba:3e:13:5a:41:b0:48:ba:a2:2b: 45:c3:0b:81:e8:f7:96:5f:fa:a7:93:fa:ef:7a:43:d7:e5:53: ec:fe:c0:77:7e:5f:2b:1e:1a:63:b1:62:ee:70:1a:79:3a:64: d0:a6:20:48:fb:dd:e1:5d:4b:a1:8c:31:59:db:a2:05:7b:53: 2f:bf:64:4b:29:2d:ba:3a:de:d3:bd:40:3d:e2:3f:25:64:3f: c4:2c:98:7f:33:e4:d3:e2:27:af:36:8c:2a:7e:d5:d6:e4:ee: b2:d6:a7:6c:ee:b8:81:93:83:da:61:71:6e:31:19:d7:cb:26: 9b:27:86:b2:d4:66:0c:0c:6a:d5:bf:42:65:41:bd:2e:2e:07: c9:34:b9:52:78:c7:04:55:12:39:ff:92:1a:66:43:19:56:97: 69:ee:0e:d6:c4:74:b8:a5:e6:77:6d:d5:d8:23:ab:ec:02:8e: 8b:58:f3:92:a0:2e:64:e8:1f:ee:50:f3:db:4e:8d:3e:bf:29: 5f:cd:17:73:2f:66:fe:34:89:de:4f:f9:97:ab:4e:c7:07:9f: c6:39:91:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQr2oMn6izxLhp7SIowFlU9kE6kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yNTA0MjQwMTI1NTZaFw0yNTA0MjcwNDM3NTZaMDMxMTAvBgNV BAMTKDVBQjU5QkNEMTk4MzMyMjA0ODM2RDA3RTNCRDk2M0UxM0I3RTY2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZZkisMaWGrbdXKBAn2A1qhLo t09bVhP6CbBgIEyN9gz7rLeDYO7R/dSzHJBQomNXShEf5OYGGC2pbVk5xl7XoqZI sDHCTEeKsO9Ox/gkzgCqGo2zzRYe6vw3qKMjIshiHUi4WnZk+e0KxQFUokIAJKqe j5bHmS5EKpn+bD4dneug6NstSEABj6qwKZ2CxI3pzOGh6cG+ZllECC3prBq0Z5pN ZVxl19s/O6/BdsfeZs8TIVDo0esh1m3L6hGOE7/M/fXClhCIpf5GlHZdzzPGzaVC bobPSjGcid5poVPXWx1MZhJbASq1gGY8FygxtIICrl4MRnFb9++zBVZqtjiVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWrWbzRmDMiBINtB+O9lj4Tt+ZngwHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVmMmM2NmMtMWY4Ny00ZDk4LWE0 NjctMzIxOGI2NDViM2FjLzAvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2 MDQwNzY3MkJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9Z47kLclCtkV6xGeHWXCoKGATSjxLw3cQQ dxN2r9fT/q89VUI3srHgCcCBuj4TWkGwSLqiK0XDC4Ho95Zf+qeT+u96Q9flU+z+ wHd+XyseGmOxYu5wGnk6ZNCmIEj73eFdS6GMMVnbogV7Uy+/ZEspLbo63tO9QD3i PyVkP8QsmH8z5NPiJ682jCp+1dbk7rLWp2zuuIGTg9phcW4xGdfLJpsnhrLUZgwM atW/QmVBvS4uB8k0uVJ4xwRVEjn/khpmQxlWl2nuDtbEdLil5ndt1dgjq+wCjotY 85KgLmToH+5Q89tOjT6/KV/NF3MvZv40id5P+ZerTscHn8Y5kfM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net