$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: YxOruN5H3JU7IFX3cmWFTf+fzgeZIJ+NKecTfma99Fc= Subject key identifier: 57:27:29:1C:C2:1A:81:20:D7:27:E4:42:82:EC:50:09:30:80:DC:38 Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 277481469E4A2128C4C2823F9B8C0B8956941272 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 4D Signing time: Fri 25 Apr 2025 07:13:39 +0000 Manifest this update: Fri 25 Apr 2025 07:08:39 +0000 Manifest next update: Mon 28 Apr 2025 12:58:39 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: gAJmjotoGELVaWQFpfcL/L1i/zaC+Oaa3E4cVNhdWIc=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:74:81:46:9e:4a:21:28:c4:c2:82:3f:9b:8c:0b:89:56:94:12:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Apr 25 07:08:39 2025 GMT Not After : Apr 28 12:58:39 2025 GMT Subject: CN=5727291CC21A8120D727E44282EC50093080DC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:a1:27:d6:5d:52:36:03:d0:1b:4e:bb:61: d6:cb:20:93:72:7d:7d:5e:34:10:cf:d8:6c:88:35: 3f:f9:ce:7d:f0:64:ec:74:dc:8e:94:ab:16:67:81: 36:f5:77:17:00:b2:d8:5e:c0:cd:33:31:ea:c0:7f: 1c:eb:f6:cc:f2:1e:54:f6:cd:4a:d0:49:75:d6:dc: ae:a0:87:56:f9:a2:95:0e:29:12:4f:a2:e8:84:94: 6b:52:c4:10:c2:ff:f4:8f:da:5a:87:24:61:8a:f4: 4a:67:4f:0f:04:73:81:e9:d7:49:d5:44:41:2e:23: fc:28:57:82:83:7a:ff:5b:23:ad:a4:21:d1:58:b2: da:5d:00:ae:b0:90:79:f8:a0:ef:c4:d8:b5:a6:92: f8:ac:24:53:1e:f7:a1:35:77:bc:2f:13:d3:06:da: a6:a1:f3:bf:2d:82:1d:93:c8:28:fd:04:b3:c8:6f: 83:a2:24:83:13:9e:e2:b0:54:30:dc:18:63:45:8e: ad:24:42:5f:81:37:8d:48:5a:0f:21:ca:e1:54:c7: 3e:a1:4e:46:4f:9d:27:9d:15:83:8e:dc:ef:d6:7d: dc:48:1a:5f:7d:38:01:a2:ca:7b:c0:78:93:6d:bc: 6d:82:a2:46:bc:70:df:66:64:83:4c:ea:48:71:c6: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:27:29:1C:C2:1A:81:20:D7:27:E4:42:82:EC:50:09:30:80:DC:38 X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4d:7c:e3:1c:67:8e:4f:98:06:7d:72:18:89:b2:53:c7:7c: 77:49:f5:8e:41:15:76:80:28:d0:bb:c4:b2:f6:e1:99:1a:81: 8f:c2:6d:3b:d1:e1:96:13:60:d5:41:92:14:b3:18:9c:26:97: 3a:06:d5:11:c8:4a:d4:cb:e8:6b:e5:d2:59:84:ca:06:b7:fc: 84:25:a2:86:8f:d6:9c:4e:22:1d:b0:67:29:08:c0:64:79:af: b0:49:47:c2:74:de:f8:ba:67:bd:62:c8:35:10:0f:02:48:b0: f7:1a:f7:56:6b:95:33:f5:47:ab:f1:63:a3:09:2c:bd:cb:93: 8e:9e:f2:81:13:9a:d7:c8:26:aa:37:31:32:a5:eb:e6:50:a7: 7b:fa:ec:87:cc:13:07:ea:ce:76:59:66:d8:01:c0:c3:8c:a9: d4:c3:e1:69:65:d5:b5:a1:c3:50:9b:4c:8c:15:b8:bc:df:ea: d3:71:9c:fb:be:06:00:12:86:43:2d:87:e7:c1:46:88:a9:f8: 18:ef:c0:c6:b6:64:dc:23:66:f6:32:38:f5:c9:a4:5f:d4:9c: 6d:85:f4:0b:9e:4c:2f:f2:1e:35:83:1d:1b:73:d2:a2:4c:6d: 32:76:82:cb:e7:fa:57:70:ee:82:36:ef:a3:7d:eb:a5:5e:f0: f8:97:da:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3SBRp5KISjEwoI/m4wLiVaUEnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTA0MjUwNzA4MzlaFw0yNTA0MjgxMjU4MzlaMDMxMTAvBgNV BAMTKDU3MjcyOTFDQzIxQTgxMjBENzI3RTQ0MjgyRUM1MDA5MzA4MERDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9qEn1l1SNgPQG067YdbLIJNy fX1eNBDP2GyINT/5zn3wZOx03I6UqxZngTb1dxcAsthewM0zMerAfxzr9szyHlT2 zUrQSXXW3K6gh1b5opUOKRJPouiElGtSxBDC//SP2lqHJGGK9EpnTw8Ec4Hp10nV REEuI/woV4KDev9bI62kIdFYstpdAK6wkHn4oO/E2LWmkvisJFMe96E1d7wvE9MG 2qah878tgh2TyCj9BLPIb4OiJIMTnuKwVDDcGGNFjq0kQl+BN41IWg8hyuFUxz6h TkZPnSedFYOO3O/WfdxIGl99OAGiynvAeJNtvG2Coka8cN9mZINM6khxxrcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVycpHMIagSDXJ+RCguxQCTCA3DgwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlNfOMcZ45PmAZ9chiJslPHfHdJ9Y5BFXaA KNC7xLL24ZkagY/CbTvR4ZYTYNVBkhSzGJwmlzoG1RHIStTL6Gvl0lmEyga3/IQl ooaP1pxOIh2wZykIwGR5r7BJR8J03vi6Z71iyDUQDwJIsPca91ZrlTP1R6vxY6MJ LL3Lk46e8oETmtfIJqo3MTKl6+ZQp3v67IfMEwfqznZZZtgBwMOMqdTD4Wll1bWh w1CbTIwVuLzf6tNxnPu+BgAShkMth+fBRoip+BjvwMa2ZNwjZvYyOPXJpF/UnG2F 9AueTC/yHjWDHRtz0qJMbTJ2gsvn+ldw7oI276N966Ve8PiX2qU= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net