$ rpki-client -vvf repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft File: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft (raw, json) Hash identifier: OeXFWHOJEquxnzjNHvlBbvYdhq1Lfo6cGuaja0Pbj3Y= Subject key identifier: 76:11:C7:7D:03:FA:66:EB:6C:DB:C7:DE:1F:FE:A9:13:E5:6F:FC:FA Authority key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 Certificate issuer: /CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Certificate serial: 1670E808091D2C3D501DF1F97E2BCAEE02743A1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft Manifest number: 04CB Signing time: Sun 27 Apr 2025 05:32:00 +0000 Manifest this update: Sun 27 Apr 2025 05:27:00 +0000 Manifest next update: Wed 30 Apr 2025 06:58:00 +0000 Files and hashes: 1: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: wEPYX74PJW0e23h+Erkt8/FRL+TupCEB/27FgHd4lV0=) 2: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: c8RxI909Anvx0BRzpA0Rb0YziahBzyNU99IlhCC5XuA=) 3: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: WP2a3mqmpHS88/eMPFKKdSw0yMT5X5wgEeVzGMtnjlw=) 4: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl (hash: 6Tp6E0oJEbn5u0bY+v5LRfNgnN0Su4ZA6L2DhPb02Tk=) 5: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: Duv7had9qz23magj0/7Gknmw1o3t5P/2ZxbNo+6irPU=) 6: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: A6MeiC5iYEUgfCxOlrP4tgy4Dgl5PsOFZcNkusDqHVo=) 7: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: Iun52nY6O3+qxGHYtLUd/o4wD4j6UUv+WuPemCxO82w=) 8: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: lTPGED6Euas+yMtjFiZeN4ZQaRI9ugutG6SYSfzJsJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:70:e8:08:09:1d:2c:3d:50:1d:f1:f9:7e:2b:ca:ee:02:74:3a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Validity Not Before: Apr 27 05:27:00 2025 GMT Not After : Apr 30 06:58:00 2025 GMT Subject: CN=7611C77D03FA66EB6CDBC7DE1FFEA913E56FFCFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:f1:6e:77:9d:8d:52:f4:bd:c3:71:41:07: ad:7b:f8:09:f5:a0:7d:63:4c:be:a4:f2:35:b9:69: 74:12:54:83:13:00:03:29:52:27:cd:21:15:bb:f6: 47:89:b3:88:4e:ac:89:75:b6:ac:d1:c8:12:bc:b1: 55:ab:b7:5e:a0:62:c4:a2:7a:2d:78:4e:f0:0e:d2: 67:4e:14:9a:0e:0a:5f:09:54:51:d2:e2:0f:03:42: 67:27:45:04:43:04:94:9b:06:11:5e:15:6b:86:56: 17:b5:bf:00:45:52:e4:57:50:95:df:57:68:52:8d: 76:9e:33:fc:fe:dd:db:44:69:7e:32:bd:29:1d:f0: e4:b5:96:f8:2a:c2:bf:5b:71:a7:7d:c6:6a:78:0e: cb:bc:03:39:a9:35:1e:85:f1:d4:ec:a9:36:cf:d0: 7c:9d:e2:bb:f3:04:43:15:7d:b4:8c:f5:c5:c5:da: c7:87:d0:5f:6e:91:4f:8e:57:e8:fb:02:8f:ea:42: 77:74:39:29:60:b2:ae:ef:16:5a:cb:fc:04:f7:3b: 0e:1c:92:78:44:df:f6:e3:ce:18:69:b3:2d:4f:f6: cd:c7:1e:46:b1:ac:49:ad:db:4e:ef:b3:d2:d3:34: cc:f8:ec:d6:12:77:11:6a:27:15:a7:2e:6c:69:24: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:11:C7:7D:03:FA:66:EB:6C:DB:C7:DE:1F:FE:A9:13:E5:6F:FC:FA X509v3 Authority Key Identifier: keyid:42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ef:c0:b5:b7:d8:d5:7e:40:6a:cf:37:19:c3:82:81:24:f3: 65:20:77:38:78:33:b8:34:5a:b4:e7:d1:9e:ec:dc:95:42:0a: d6:f2:91:0e:e8:6d:41:ba:35:eb:5e:fe:2f:d5:a4:db:84:65: c0:61:25:31:60:18:f2:bb:d4:6f:f8:91:c9:b7:0d:10:fa:bf: 77:c1:91:3e:6b:ff:7d:aa:e2:f1:4d:79:96:fb:13:ee:58:e4: b9:3b:91:93:e7:a0:05:c6:0d:9f:9f:d7:8e:1e:4d:7c:58:33: 51:d1:c5:ab:0b:04:63:5e:c0:cc:d5:65:b1:62:72:c8:e3:a1: 15:06:aa:2e:57:a9:aa:de:e7:89:3b:6f:80:87:3d:6a:12:d8: df:ea:97:30:f7:01:32:bc:46:bc:e2:c9:cd:08:e8:c1:84:51: 63:4a:bc:5b:c1:a0:11:32:59:ab:2a:76:bf:ca:37:fb:7c:98: 5f:30:e4:0c:99:9e:83:ec:62:d3:6c:70:17:c0:46:7d:ed:d2: 5f:80:cc:cc:1e:2c:b0:8a:50:00:bc:e7:1a:4f:8e:5c:b6:96: 35:4a:89:92:11:4f:c9:17:b2:a0:62:15:b4:c4:f1:14:c6:f8: 10:9a:4a:5e:81:19:18:4a:ec:69:81:88:0f:77:3a:d8:ac:5f: 05:ee:8c:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnDoCAkdLD1QHfH5fivK7gJ0OhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFF Q0M3RkU5NjAeFw0yNTA0MjcwNTI3MDBaFw0yNTA0MzAwNjU4MDBaMDMxMTAvBgNV BAMTKDc2MTFDNzdEMDNGQTY2RUI2Q0RCQzdERTFGRkVBOTEzRTU2RkZDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+PFud52NUvS9w3FBB617+An1 oH1jTL6k8jW5aXQSVIMTAAMpUifNIRW79keJs4hOrIl1tqzRyBK8sVWrt16gYsSi ei14TvAO0mdOFJoOCl8JVFHS4g8DQmcnRQRDBJSbBhFeFWuGVhe1vwBFUuRXUJXf V2hSjXaeM/z+3dtEaX4yvSkd8OS1lvgqwr9bcad9xmp4Dsu8AzmpNR6F8dTsqTbP 0Hyd4rvzBEMVfbSM9cXF2seH0F9ukU+OV+j7Ao/qQnd0OSlgsq7vFlrL/AT3Ow4c knhE3/bjzhhpsy1P9s3HHkaxrEmt207vs9LTNMz47NYSdxFqJxWnLmxpJLsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdhHHfQP6Zuts28feH/6pE+Vv/PowHwYDVR0j BBgwFoAUQoqkJA50Hyfjoh78KdRfCuzH/pYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDNlMmU2Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMC80MjhBQTQyNDBF NzQxRjI3RTNBMjFFRkMyOUQ0NUYwQUVDQzdGRTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVGMEFFQ0M3 RkU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvNDI4QUE0MjQwRTc0MUYyN0UzQTIxRUZDMjlENDVG MEFFQ0M3RkU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPvwLW32NV+QGrPNxnDgoEk82Ugdzh4M7g0 WrTn0Z7s3JVCCtbykQ7obUG6Nete/i/VpNuEZcBhJTFgGPK71G/4kcm3DRD6v3fB kT5r/32q4vFNeZb7E+5Y5Lk7kZPnoAXGDZ+f144eTXxYM1HRxasLBGNewMzVZbFi csjjoRUGqi5Xqare54k7b4CHPWoS2N/qlzD3ATK8Rrziyc0I6MGEUWNKvFvBoBEy Wasqdr/KN/t8mF8w5AyZnoPsYtNscBfARn3t0l+AzMweLLCKUAC85xpPjly2ljVK iZIRT8kXsqBiFbTE8RTG+BCaSl6BGRhK7GmBiA93OtisXwXujBI= -----END CERTIFICATE-----Generated at Sun Apr 27 08:06:53 2025 by rpki-client on console.sobornost.net