$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json) Hash identifier: tqmtmf1GXkxwJp12E6aDrAfOoKAfcQMMrOcTiCH90HE= Subject key identifier: D1:D4:C5:5B:DA:FF:9B:36:AB:9F:CD:C0:CD:AD:CF:09:5D:7E:AC:96 Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Certificate serial: 4EC3A563BB298D8E9913FA22EA610EE2FAB408B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft Manifest number: 0132 Signing time: Thu 24 Apr 2025 15:31:17 +0000 Manifest this update: Thu 24 Apr 2025 15:26:17 +0000 Manifest next update: Sun 27 Apr 2025 18:11:17 +0000 Files and hashes: 1: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: NceE1Gl9KqhiR2YQFfS5n58/EXQ01C8EDe6Rkx8w4+4=) 2: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: YVFxjyh9JwGOTUYvhKqPgehL2iwip/UIqtCfx2Ej+po=) 3: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: QlX3LeWXW01kUKQTlpKY9X160zZbKB1LA4F5u2Eiojo=) 4: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: IOF8Aa+azAMrpTVS8lNo1NTbVDh+zNfezDblBYjowZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c3:a5:63:bb:29:8d:8e:99:13:fa:22:ea:61:0e:e2:fa:b4:08:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Validity Not Before: Apr 24 15:26:17 2025 GMT Not After : Apr 27 18:11:17 2025 GMT Subject: CN=D1D4C55BDAFF9B36AB9FCDC0CDADCF095D7EAC96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:f9:85:1f:7d:2c:fa:23:00:4e:e2:f4:cb: f9:62:7d:55:66:97:d9:ae:25:d8:6f:b9:89:d2:9a: 40:8a:60:5e:5a:11:0c:d7:08:d5:5f:c4:e9:07:e1: b8:c3:3c:d5:ae:d2:a1:f4:5e:03:4a:b9:4f:3b:d8: 1d:82:d7:f0:77:d7:c5:26:2d:e6:ea:8b:45:2a:9b: d6:6b:ed:60:b6:40:e4:70:88:1e:aa:b4:24:6b:6b: ff:b8:23:e9:23:d5:0a:c7:d7:a1:09:89:49:9e:0a: fb:65:11:e7:3b:a3:ad:99:a0:8c:62:36:81:03:8b: f5:ca:e9:c7:71:fa:ae:b5:f7:ea:00:d6:f8:b8:05: c0:4b:e1:3d:d6:d9:9c:b3:3d:95:b0:42:1d:bf:b4: 79:2b:6e:22:ed:da:53:63:1e:43:77:58:d2:d8:75: 9d:47:ab:67:6a:f1:6e:b6:4f:67:bb:f6:59:ba:25: 32:95:bf:d3:45:86:0e:a8:20:c8:6f:27:fc:52:bb: b6:10:ac:66:c3:7f:be:44:7e:1e:95:6e:5d:47:07: c0:a5:19:e7:9d:13:67:23:89:65:bc:95:eb:13:4c: 19:b8:bd:d1:c3:69:34:d4:19:b1:4d:c2:a9:e5:9f: 54:32:bf:0a:ba:c3:ef:a4:50:eb:a3:be:df:64:aa: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D4:C5:5B:DA:FF:9B:36:AB:9F:CD:C0:CD:AD:CF:09:5D:7E:AC:96 X509v3 Authority Key Identifier: keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:59:07:65:5d:8e:d0:3f:61:5d:d9:9b:ac:64:66:cf:97:1c: 9c:ac:7d:e9:7c:e2:37:cb:34:00:ce:2d:3e:43:7f:a5:3c:10: a4:ab:8e:d8:68:6c:40:7f:11:7e:0a:27:68:c3:de:31:c8:3c: 83:b9:84:2d:73:85:67:d7:1d:eb:72:04:81:a6:88:19:1a:cd: be:b8:6c:22:9f:92:2a:ef:c7:d6:b1:48:dd:f8:f5:b1:b0:bf: 79:a7:1b:9f:b1:fa:1c:98:be:fe:23:74:d4:c6:a3:c9:29:91: d2:f5:1a:69:a2:24:5d:61:41:15:4b:8c:42:b3:f7:ba:c1:c8: 16:6c:14:e8:39:e6:45:43:11:79:55:b6:b7:5c:04:1f:c8:6c: 9f:72:4f:84:cf:fe:50:80:9f:de:21:e4:38:1a:2b:c5:28:0e: ba:6d:ae:40:44:23:8c:5f:c3:af:06:0f:47:11:93:b4:b0:b5: 7f:d2:2b:38:8c:77:c7:ac:2a:27:d1:df:c0:ae:af:ee:ce:53: dc:63:ea:68:ef:3b:d4:57:bb:ec:ae:e5:77:04:38:9f:53:12: 1b:86:68:a7:66:d5:4f:07:a4:9c:0d:8d:29:d2:95:a3:60:03: 00:16:b9:65:b3:9a:9c:60:cf:9e:a0:ec:54:4d:7f:3c:b1:8f: 00:d4:b8:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsOlY7spjY6ZE/oi6mEO4vq0CLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3 MkUwRjJDMzAeFw0yNTA0MjQxNTI2MTdaFw0yNTA0MjcxODExMTdaMDMxMTAvBgNV BAMTKEQxRDRDNTVCREFGRjlCMzZBQjlGQ0RDMENEQURDRjA5NUQ3RUFDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCPmFH30s+iMATuL0y/lifVVm l9muJdhvuYnSmkCKYF5aEQzXCNVfxOkH4bjDPNWu0qH0XgNKuU872B2C1/B318Um Lebqi0Uqm9Zr7WC2QORwiB6qtCRra/+4I+kj1QrH16EJiUmeCvtlEec7o62ZoIxi NoEDi/XK6cdx+q619+oA1vi4BcBL4T3W2ZyzPZWwQh2/tHkrbiLt2lNjHkN3WNLY dZ1Hq2dq8W62T2e79lm6JTKVv9NFhg6oIMhvJ/xSu7YQrGbDf75Efh6Vbl1HB8Cl GeedE2cjiWW8lesTTBm4vdHDaTTUGbFNwqnln1Qyvwq6w++kUOujvt9kqiUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0dTFW9r/mzarn83Aza3PCV1+rJYwHwYDVR0j BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1 RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw RjJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy ODYtYzVmM2EwN2JiYmUzLzAvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdF MkU3MkUwRjJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdZB2VdjtA/YV3Zm6xkZs+XHJysfel84jfL NADOLT5Df6U8EKSrjthobEB/EX4KJ2jD3jHIPIO5hC1zhWfXHetyBIGmiBkazb64 bCKfkirvx9axSN349bGwv3mnG5+x+hyYvv4jdNTGo8kpkdL1GmmiJF1hQRVLjEKz 97rByBZsFOg55kVDEXlVtrdcBB/IbJ9yT4TP/lCAn94h5DgaK8UoDrptrkBEI4xf w68GD0cRk7SwtX/SKziMd8esKifR38Cur+7OU9xj6mjvO9RXu+yu5XcEOJ9TEhuG aKdm1U8HpJwNjSnSlaNgAwAWuWWzmpxgz56g7FRNfzyxjwDUuEk= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net