$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: pBRidib59CyDWLQ2sQxN5xZN+6w9YNJybLTk6XaHCVc= Subject key identifier: 00:43:9F:9C:C0:1A:C4:BF:FA:A2:C8:03:15:77:E0:35:9F:05:B8:1E Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 19D956D7835563DEE286A31AF8935E06476CFC91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 04CA Signing time: Thu 24 Apr 2025 20:41:40 +0000 Manifest this update: Thu 24 Apr 2025 20:36:40 +0000 Manifest next update: Sun 27 Apr 2025 22:33:40 +0000 Files and hashes: 1: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: KbszhduYQIrnDZTe+l2/4wHbcW+0A4j+CJHjbrOZWDI=) 2: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: tpDStVFIFqB4DRm6j6XW2vqPZ0uybsz5vrF6Xuyk+08=) 3: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: +oYNPM9XPTjB8WXsTb8/lUpE+Kz3tREoeu2yBnbQrzk=) 4: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: 5gR9+ixbVg1LP1uDXjaATazbJrEAK+uCvp7GyKYBWRI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d9:56:d7:83:55:63:de:e2:86:a3:1a:f8:93:5e:06:47:6c:fc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Apr 24 20:36:40 2025 GMT Not After : Apr 27 22:33:40 2025 GMT Subject: CN=00439F9CC01AC4BFFAA2C8031577E0359F05B81E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:58:07:fb:b5:43:77:fd:0f:e3:2f:0c:0e: 6c:47:f9:95:18:e3:9a:fa:44:46:06:fb:33:87:6e: 10:14:eb:92:47:a0:27:a4:a4:db:ef:c0:cc:ee:e3: a8:a7:73:d4:73:a6:6b:74:c6:69:ea:39:8e:9f:d3: 1f:de:fb:92:38:b3:70:76:1f:0d:32:8e:f2:c2:b1: 48:f4:9a:aa:c7:29:0a:94:73:25:8f:f7:f3:c5:ae: b2:63:38:96:63:c7:fe:9c:2b:a7:63:3c:22:36:cc: 31:d0:2d:2d:a8:6f:af:7f:e1:d0:00:12:56:67:5f: 39:91:a2:26:84:52:41:ad:bf:3b:57:d2:c4:3e:3c: d2:4c:72:f4:86:89:0f:55:56:1b:51:23:3b:1f:4f: 54:94:6c:2a:11:56:fa:b3:cc:18:f5:68:35:70:04: ef:45:9e:ee:13:ab:f9:91:a7:0f:89:cb:39:44:5c: 5d:e0:f8:d4:79:25:0b:d1:69:cb:f6:b4:ac:93:7d: 7a:d8:5f:02:b8:55:7b:01:06:89:81:ba:57:44:fc: 36:e1:30:9f:f0:03:08:c1:bb:be:b1:62:2f:6d:85: 18:8a:95:14:3d:bd:d1:6e:12:e2:38:d1:d7:c4:40: 1e:4d:c5:9c:53:80:05:13:94:c4:67:3b:00:05:31: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:43:9F:9C:C0:1A:C4:BF:FA:A2:C8:03:15:77:E0:35:9F:05:B8:1E X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:52:f1:82:59:10:6d:fc:47:fa:35:f4:a9:75:71:90:52:f3: ac:e7:48:4d:7a:6c:69:34:5b:e6:10:e3:d8:0d:f2:5b:2c:c3: 3e:4a:86:c0:f3:3b:0d:8b:d6:1a:58:36:34:1b:25:2e:45:55: 79:67:f4:62:85:af:12:e0:91:b7:c5:d4:4b:5f:83:e3:40:14: ab:cd:db:60:71:2f:54:a9:20:a0:16:5b:16:8f:40:97:8a:4c: 2b:df:c1:64:ac:c1:63:12:31:23:94:43:46:7e:91:28:f0:b0: 4c:ec:04:45:ba:0c:03:6a:d7:f2:cc:82:87:06:20:fe:2e:2e: d8:13:91:67:b8:e7:9e:12:66:cf:f0:45:e8:10:2a:8d:1b:45: c8:99:57:c5:b9:39:04:35:86:4a:0e:86:34:d0:a9:cb:97:da: e3:f9:86:2c:ba:89:5f:74:17:c6:50:f0:53:75:58:62:34:21: 52:fe:36:5c:83:4a:8b:36:c6:2e:a3:43:6b:6d:2f:6a:f7:16: 86:36:6b:a3:9e:ff:8d:85:0d:b8:56:34:79:b0:ec:d9:f3:a7: 59:17:41:bf:f3:d7:0f:d2:25:e8:69:b5:f2:bb:ec:ec:62:d5: ec:9a:60:d8:7f:6a:fd:60:52:7b:27:b9:05:5f:2e:7c:68:95: 4e:21:7e:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdlW14NVY97ihqMa+JNeBkds/JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTA0MjQyMDM2NDBaFw0yNTA0MjcyMjMzNDBaMDMxMTAvBgNV BAMTKDAwNDM5RjlDQzAxQUM0QkZGQUEyQzgwMzE1NzdFMDM1OUYwNUI4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwj1gH+7VDd/0P4y8MDmxH+ZUY 45r6REYG+zOHbhAU65JHoCekpNvvwMzu46inc9Rzpmt0xmnqOY6f0x/e+5I4s3B2 Hw0yjvLCsUj0mqrHKQqUcyWP9/PFrrJjOJZjx/6cK6djPCI2zDHQLS2ob69/4dAA ElZnXzmRoiaEUkGtvztX0sQ+PNJMcvSGiQ9VVhtRIzsfT1SUbCoRVvqzzBj1aDVw BO9Fnu4Tq/mRpw+JyzlEXF3g+NR5JQvRacv2tKyTfXrYXwK4VXsBBomBuldE/Dbh MJ/wAwjBu76xYi9thRiKlRQ9vdFuEuI40dfEQB5NxZxTgAUTlMRnOwAFMXCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAEOfnMAaxL/6osgDFXfgNZ8FuB4wHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhS8YJZEG38R/o19Kl1cZBS86znSE16bGk0 W+YQ49gN8lsswz5KhsDzOw2L1hpYNjQbJS5FVXln9GKFrxLgkbfF1Etfg+NAFKvN 22BxL1SpIKAWWxaPQJeKTCvfwWSswWMSMSOUQ0Z+kSjwsEzsBEW6DANq1/LMgocG IP4uLtgTkWe4554SZs/wRegQKo0bRciZV8W5OQQ1hkoOhjTQqcuX2uP5hiy6iV90 F8ZQ8FN1WGI0IVL+NlyDSos2xi6jQ2ttL2r3FoY2a6Oe/42FDbhWNHmw7Nnzp1kX Qb/z1w/SJehptfK77Oxi1eyaYNh/av1gUnsnuQVfLnxolU4hfqE= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net