$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: 3g29kB3s8lC2Gv3klns+eN+7QGSS/VM85i9Eaa8B+rc= Subject key identifier: AE:A5:59:03:3A:97:9C:58:B9:5C:06:DC:CF:95:13:37:BB:33:B5:55 Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 1D34C012B029EDF7FFD718550DFB98AA82ED44A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 1B Signing time: Thu 24 Apr 2025 15:50:53 +0000 Manifest this update: Thu 24 Apr 2025 15:45:53 +0000 Manifest next update: Mon 28 Apr 2025 00:53:53 +0000 Files and hashes: 1: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: r9nWQifP1uXBFMAzU0Y1bS9/0kX1tavfrJdbLogp4NU=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:34:c0:12:b0:29:ed:f7:ff:d7:18:55:0d:fb:98:aa:82:ed:44:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Apr 24 15:45:53 2025 GMT Not After : Apr 28 00:53:53 2025 GMT Subject: CN=AEA559033A979C58B95C06DCCF951337BB33B555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:db:56:09:87:94:c2:ad:12:4e:23:49:25:a3: 88:f2:c0:ba:d1:55:71:45:5a:82:ed:ed:35:df:60: d3:b5:6a:76:28:2f:59:9c:13:81:e4:4c:35:f9:ab: da:f5:f8:74:27:9c:87:60:c9:c3:80:c2:a7:0c:2f: 3b:58:a0:ac:cd:09:c4:2b:ee:50:8b:4d:4a:64:1a: 6b:ab:cc:0e:68:a6:4d:49:d0:2f:67:15:c2:de:7c: 01:b3:48:0e:aa:ad:b5:e1:f3:68:36:3a:60:c8:8a: 7c:a3:aa:84:ea:ad:44:b7:1d:38:15:33:bc:44:a7: d8:94:76:5b:bd:0f:7e:a4:f9:9b:70:ab:ae:f5:3f: 9c:ff:c4:b4:52:39:f4:11:5c:77:f2:53:4a:56:16: 2a:25:f2:4c:e9:56:bd:bf:38:c1:13:5d:f1:53:dc: 07:57:55:9a:3e:d6:58:67:8e:a6:1c:62:c1:fa:22: 33:f2:7d:f0:24:d1:88:e5:1b:1f:bd:4a:28:0c:c8: ef:fc:e5:a3:53:b8:c4:78:1b:94:2d:78:2f:e8:f9: 25:5b:59:d8:5d:e7:7a:8b:ff:cb:0c:08:fa:d3:ee: b9:b7:9a:ca:af:b7:05:f8:f6:a7:56:95:d5:1b:26: a3:02:da:7c:af:c4:d5:68:8d:ab:96:3b:31:3e:53: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A5:59:03:3A:97:9C:58:B9:5C:06:DC:CF:95:13:37:BB:33:B5:55 X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:95:51:81:89:ed:88:5f:1a:c6:bb:9f:1a:1c:ea:c5:da:88: cc:3d:84:2c:0c:fd:c6:13:52:e1:25:b4:33:0d:45:9e:b4:ca: d3:c1:ea:a3:c2:07:d3:e3:f9:75:e6:c7:0d:99:20:da:12:fc: 12:e4:b4:bd:86:47:b2:8f:41:a5:f4:33:ec:81:29:e0:70:86: d9:40:fe:c4:85:43:6e:fb:2f:ee:4c:a7:da:52:b5:8a:92:b0: b9:49:e4:49:de:25:8b:1b:68:8f:28:c6:66:59:c4:67:b2:e2: 84:18:f3:77:f0:70:ed:e4:00:60:31:79:71:e7:bf:40:8c:ff: 21:b2:f8:8c:5c:71:16:b1:04:fa:33:7f:98:5f:df:6a:7d:ab: 37:59:3c:16:88:97:c6:cd:2c:d5:19:0b:b1:46:b4:66:18:b2: ae:5f:eb:77:dd:a5:26:46:54:20:89:64:66:4c:e8:bc:ef:98: ad:72:7a:70:f5:6b:0b:d0:c1:11:dc:e3:73:0b:52:59:2d:b8: 33:97:0d:f3:42:d6:fd:7c:0d:7c:69:ed:b4:63:25:e0:cf:37: af:f5:c1:eb:e8:9e:8e:0e:0a:3f:78:c5:4f:26:42:a8:bb:f4: 17:4a:a2:36:71:db:44:72:d7:2a:b9:09:82:40:1e:13:52:4c: 39:45:86:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTTAErAp7ff/1xhVDfuYqoLtRKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTA0MjQxNTQ1NTNaFw0yNTA0MjgwMDUzNTNaMDMxMTAvBgNV BAMTKEFFQTU1OTAzM0E5NzlDNThCOTVDMDZEQ0NGOTUxMzM3QkIzM0I1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt21YJh5TCrRJOI0klo4jywLrR VXFFWoLt7TXfYNO1anYoL1mcE4HkTDX5q9r1+HQnnIdgycOAwqcMLztYoKzNCcQr 7lCLTUpkGmurzA5opk1J0C9nFcLefAGzSA6qrbXh82g2OmDIinyjqoTqrUS3HTgV M7xEp9iUdlu9D36k+Ztwq671P5z/xLRSOfQRXHfyU0pWFiol8kzpVr2/OMETXfFT 3AdXVZo+1lhnjqYcYsH6IjPyffAk0YjlGx+9SigMyO/85aNTuMR4G5QteC/o+SVb Wdhd53qL/8sMCPrT7rm3msqvtwX49qdWldUbJqMC2nyvxNVojauWOzE+U+7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrqVZAzqXnFi5XAbcz5UTN7sztVUwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaVUYGJ7YhfGsa7nxoc6sXaiMw9hCwM/cYT UuEltDMNRZ60ytPB6qPCB9Pj+XXmxw2ZINoS/BLktL2GR7KPQaX0M+yBKeBwhtlA /sSFQ277L+5Mp9pStYqSsLlJ5EneJYsbaI8oxmZZxGey4oQY83fwcO3kAGAxeXHn v0CM/yGy+IxccRaxBPozf5hf32p9qzdZPBaIl8bNLNUZC7FGtGYYsq5f63fdpSZG VCCJZGZM6LzvmK1yenD1awvQwRHc43MLUlktuDOXDfNC1v18DXxp7bRjJeDPN6/1 wevono4OCj94xU8mQqi79BdKojZx20Ry1yq5CYJAHhNSTDlFhtg= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net