$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: fhg5HMvWB4zwNaxnZQThbBVRb+teEmefEmZLJ4jkQ6o= Subject key identifier: C3:02:5E:30:E3:B8:A6:D1:18:4D:61:4A:CD:22:7A:2E:08:83:22:B4 Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 313D4F232D47C725556A99A66223BEABF795431B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 0181 Signing time: Fri 25 Apr 2025 12:51:24 +0000 Manifest this update: Fri 25 Apr 2025 12:46:24 +0000 Manifest next update: Mon 28 Apr 2025 13:45:24 +0000 Files and hashes: 1: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: iOcccdQpkl2eLxl0LKt/e7W2F4Q9POflHzcnPXjdyFg=) 2: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 7mgUNnKF1k9aQc8kIoMQeXk2Q+5QMh9pXTXHjbvLNw4=) 3: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: RRBT5J+TsCcQXacSIlShoQxzw8T1QYB6B7LkvIUaucM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 13:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3d:4f:23:2d:47:c7:25:55:6a:99:a6:62:23:be:ab:f7:95:43:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Apr 25 12:46:24 2025 GMT Not After : Apr 28 13:45:24 2025 GMT Subject: CN=C3025E30E3B8A6D1184D614ACD227A2E088322B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:7e:99:2a:20:cf:f7:19:95:e7:1a:94:0e: ce:6b:18:c2:02:68:c8:90:51:df:4f:6b:22:27:56: 8d:bd:ec:e6:c1:9a:9a:a3:e0:58:4c:14:a9:15:11: 18:64:0a:e3:3c:ac:f5:f7:29:4c:6e:f7:2b:aa:6d: 5a:7c:50:d4:b3:da:93:a9:3c:5e:15:a7:f8:25:98: 01:b9:17:42:4d:c9:9f:1e:b5:ad:bf:b5:f3:23:6c: c4:2c:b7:83:a6:89:87:53:7e:93:fc:08:fe:8f:a4: 4b:12:18:58:f8:7e:0c:0c:7d:48:e8:b3:61:b2:4c: 3c:68:b5:36:45:06:8f:d4:c9:7d:4b:81:49:95:c1: e5:57:d5:bc:f9:dc:b0:56:d7:90:22:6e:d4:7a:44: cf:74:15:90:da:37:30:38:6e:56:12:e9:0b:ba:00: 31:17:0a:16:05:0c:07:f3:ba:62:34:f1:09:64:45: 77:7a:95:48:5e:16:96:10:10:95:dc:66:be:25:de: ee:0d:ca:ab:5c:86:a6:4c:72:9f:64:31:ad:23:da: f8:3a:ff:b2:c4:bb:ab:15:3d:bb:37:36:71:d4:45: ff:4f:f9:81:a8:89:fe:04:b1:30:38:7f:85:10:fd: 04:32:3e:a7:b6:91:fb:19:63:a7:46:a1:d2:4b:b0: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:02:5E:30:E3:B8:A6:D1:18:4D:61:4A:CD:22:7A:2E:08:83:22:B4 X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4b:73:fb:91:58:36:73:c4:33:3b:73:f7:a7:1b:5c:24:a2: b1:4e:7b:7b:98:86:8b:5e:de:4b:7f:31:80:bf:f5:8d:be:ee: 4a:ca:e5:5b:e1:c9:39:eb:80:93:7d:ee:46:96:be:89:7d:f6: d8:0b:2b:59:5d:68:ba:cb:ed:11:e3:c4:15:5e:49:4a:f9:d7: 9e:4a:22:28:ae:b5:e2:79:54:2a:18:28:3e:4a:47:f9:1d:70: 06:5b:20:48:89:48:a0:1d:18:6f:e9:35:ea:b2:86:c9:40:fc: 2c:80:78:d6:ef:ca:ef:6a:77:55:af:fa:56:3b:c6:3e:04:bb: 11:b1:03:db:66:4f:d5:f2:1e:4f:b5:36:d4:cb:a0:0d:39:98: c0:48:91:ed:d3:e3:35:3b:62:20:9b:27:76:6f:2d:29:64:c1: b7:8b:7e:56:87:1f:d6:d3:57:54:5a:74:c6:05:e5:47:3a:93: 5c:1d:1e:f1:86:0d:aa:3b:e7:52:f7:ec:da:44:45:43:4c:e9: 7b:c0:66:33:45:b1:d9:b6:f9:0f:3a:3d:97:fe:72:82:2e:1f: 5a:3d:a1:41:cb:82:0c:d1:db:f3:ab:7a:1b:65:1b:66:78:45: 7e:ce:76:5a:aa:71:bf:03:98:20:e5:f6:15:63:fe:74:24:0b: d0:e3:0b:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMT1PIy1HxyVVapmmYiO+q/eVQxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNTA0MjUxMjQ2MjRaFw0yNTA0MjgxMzQ1MjRaMDMxMTAvBgNV BAMTKEMzMDI1RTMwRTNCOEE2RDExODRENjE0QUNEMjI3QTJFMDg4MzIyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVf36ZKiDP9xmV5xqUDs5rGMIC aMiQUd9PayInVo297ObBmpqj4FhMFKkVERhkCuM8rPX3KUxu9yuqbVp8UNSz2pOp PF4Vp/glmAG5F0JNyZ8eta2/tfMjbMQst4OmiYdTfpP8CP6PpEsSGFj4fgwMfUjo s2GyTDxotTZFBo/UyX1LgUmVweVX1bz53LBW15AibtR6RM90FZDaNzA4blYS6Qu6 ADEXChYFDAfzumI08QlkRXd6lUheFpYQEJXcZr4l3u4NyqtchqZMcp9kMa0j2vg6 /7LEu6sVPbs3NnHURf9P+YGoif4EsTA4f4UQ/QQyPqe2kfsZY6dGodJLsDLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwwJeMOO4ptEYTWFKzSJ6LgiDIrQwHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItLc/uRWDZzxDM7c/enG1wkorFOe3uYhote 3kt/MYC/9Y2+7krK5VvhyTnrgJN97kaWvol99tgLK1ldaLrL7RHjxBVeSUr5155K IiiuteJ5VCoYKD5KR/kdcAZbIEiJSKAdGG/pNeqyhslA/CyAeNbvyu9qd1Wv+lY7 xj4EuxGxA9tmT9XyHk+1NtTLoA05mMBIke3T4zU7YiCbJ3ZvLSlkwbeLflaHH9bT V1RadMYF5Uc6k1wdHvGGDao751L37NpERUNM6XvAZjNFsdm2+Q86PZf+coIuH1o9 oUHLggzR2/OrehtlG2Z4RX7Odlqqcb8DmCDl9hVj/nQkC9DjC/A= -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net