$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: KkVXQ5+KoeG4OOEe/oQHBuUDGQ/bVm1YRB7tXn08ewA= Subject key identifier: 1F:01:40:3A:E5:50:79:59:81:E7:B3:8D:E2:7C:EB:BD:08:DA:5E:D2 Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 7934CAA4814915FE8227C0CC8E7C72045FFE579C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: CB Signing time: Thu 24 Apr 2025 10:51:20 +0000 Manifest this update: Thu 24 Apr 2025 10:46:20 +0000 Manifest next update: Sun 27 Apr 2025 17:17:20 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: 9LNF0hiMfxUJ9KIXUSvVCIlHYhEweow9OesVd3XbB1k=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:34:ca:a4:81:49:15:fe:82:27:c0:cc:8e:7c:72:04:5f:fe:57:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Apr 24 10:46:20 2025 GMT Not After : Apr 27 17:17:20 2025 GMT Subject: CN=1F01403AE550795981E7B38DE27CEBBD08DA5ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:e1:4b:c4:09:68:46:1a:fa:75:71:1d:8c: 4b:a5:08:12:8d:86:fe:85:43:08:a5:c6:16:c3:df: ef:a4:0a:1a:85:cf:7f:30:79:ba:8e:26:1c:fa:ad: 44:45:5d:f2:bd:19:80:a6:60:4c:49:9f:66:f3:47: e9:cf:d3:05:85:fa:b9:63:32:79:d6:9d:4e:70:f2: 99:51:f0:00:5d:47:ab:ce:cb:83:bc:00:50:cb:97: c6:18:72:cd:1f:db:36:09:8b:ea:26:62:f0:9e:f2: 6c:ee:a0:c0:3f:c1:6e:d4:2a:f5:51:dc:7d:6f:15: 7b:e1:f1:d9:04:e5:67:3e:c2:49:d7:df:c5:1e:01: 35:07:50:3b:d2:4e:d2:f7:0d:5b:bd:dc:1b:36:b5: 1c:74:e3:9a:80:94:1e:31:2d:e3:73:6e:b5:d4:b8: 50:c9:a3:f3:4c:6c:7f:a7:ea:04:58:2a:5b:bc:43: 7c:03:3b:b5:0a:25:13:b0:16:89:d8:5c:0d:de:60: 38:30:6e:2b:63:e8:fd:1e:31:98:4a:f1:72:24:60: f4:d4:6d:fb:75:c5:c5:3b:0a:b4:b4:1b:5c:d8:e8: 5b:23:af:90:ac:0f:4a:df:ce:b8:79:10:3e:c3:b9: 62:62:e7:cf:11:8e:e4:1a:ea:47:53:78:20:75:0a: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:01:40:3A:E5:50:79:59:81:E7:B3:8D:E2:7C:EB:BD:08:DA:5E:D2 X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8d:7f:16:1f:5c:6d:48:2f:59:2c:86:49:f6:05:ab:02:f9: 98:1a:32:7c:f9:b5:b8:ad:bc:35:eb:7f:fc:79:56:97:a2:7a: ff:30:0d:d5:17:dc:ec:45:da:d1:c1:ac:3a:92:76:c7:4a:38: 7c:ab:b1:39:0f:3d:82:06:8d:e1:cd:4f:75:56:6c:74:9b:e0: 3d:08:95:08:f8:1d:59:75:60:6f:6f:ae:e5:c2:8b:75:5c:48: 94:4e:0a:c1:36:aa:d1:e2:f4:7d:3a:28:27:1b:56:56:39:42: 75:b2:58:54:54:f0:03:89:70:4f:da:d5:11:08:de:0c:e7:5b: 9f:4f:2e:42:13:97:0c:35:71:c0:40:14:35:ed:69:1c:5e:90: cb:12:03:87:d8:88:24:b4:4f:23:2d:0c:47:62:4c:c8:48:05: ab:cd:38:77:9d:27:aa:b6:8a:1d:4b:bd:4d:8f:1c:92:18:a2: 74:eb:56:31:2e:ba:3d:9c:60:b1:80:da:dd:e6:9a:b1:e0:10: d4:7a:92:14:55:0b:33:1d:27:69:44:ad:11:63:c2:c1:c0:89: ff:1b:67:29:b9:b2:cf:d1:49:99:f6:87:98:6e:e5:5f:da:ad: 53:3f:2e:40:a8:1b:4c:c2:e9:ca:e7:b2:15:00:e7:0a:eb:4e: e7:89:ab:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTTKpIFJFf6CJ8DMjnxyBF/+V5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTA0MjQxMDQ2MjBaFw0yNTA0MjcxNzE3MjBaMDMxMTAvBgNV BAMTKDFGMDE0MDNBRTU1MDc5NTk4MUU3QjM4REUyN0NFQkJEMDhEQTVFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3eFLxAloRhr6dXEdjEulCBKN hv6FQwilxhbD3++kChqFz38webqOJhz6rURFXfK9GYCmYExJn2bzR+nP0wWF+rlj MnnWnU5w8plR8ABdR6vOy4O8AFDLl8YYcs0f2zYJi+omYvCe8mzuoMA/wW7UKvVR 3H1vFXvh8dkE5Wc+wknX38UeATUHUDvSTtL3DVu93Bs2tRx045qAlB4xLeNzbrXU uFDJo/NMbH+n6gRYKlu8Q3wDO7UKJROwFonYXA3eYDgwbitj6P0eMZhK8XIkYPTU bft1xcU7CrS0G1zY6Fsjr5CsD0rfzrh5ED7DuWJi588RjuQa6kdTeCB1CliFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwFAOuVQeVmB57ON4nzrvQjaXtIwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuNfxYfXG1IL1kshkn2BasC+ZgaMnz5tbit vDXrf/x5Vpeiev8wDdUX3OxF2tHBrDqSdsdKOHyrsTkPPYIGjeHNT3VWbHSb4D0I lQj4HVl1YG9vruXCi3VcSJROCsE2qtHi9H06KCcbVlY5QnWyWFRU8AOJcE/a1REI 3gznW59PLkITlww1ccBAFDXtaRxekMsSA4fYiCS0TyMtDEdiTMhIBavNOHedJ6q2 ih1LvU2PHJIYonTrVjEuuj2cYLGA2t3mmrHgENR6khRVCzMdJ2lErRFjwsHAif8b Zym5ss/RSZn2h5hu5V/arVM/LkCoG0zC6crnshUA5wrrTueJqwc= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net