$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: mUYsXD3Mh9RhoPkRsw6cBuaDqsMtQ+zuzPfMcL4Vl6w= Subject key identifier: AA:84:7D:40:1E:64:D1:BA:D8:27:B9:86:51:F3:61:DD:69:FE:67:48 Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 36C66467B41C95491A8201868B11EFC907DE6896 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: DF Signing time: Fri 25 Apr 2025 00:20:04 +0000 Manifest this update: Fri 25 Apr 2025 00:15:04 +0000 Manifest next update: Mon 28 Apr 2025 07:44:04 +0000 Files and hashes: 1: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: 7j/scl++UmrSPxftBzATIRd4cGlC15KKXRwlouOgLxY=) 2: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=) 3: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=) 4: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c6:64:67:b4:1c:95:49:1a:82:01:86:8b:11:ef:c9:07:de:68:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Apr 25 00:15:04 2025 GMT Not After : Apr 28 07:44:04 2025 GMT Subject: CN=AA847D401E64D1BAD827B98651F361DD69FE6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:5c:24:09:73:07:b9:ae:cd:33:66:8e:64: 55:ee:8f:ea:84:1c:7b:57:8b:93:8a:ba:68:d5:84: b4:d1:17:0f:d5:ad:12:cf:61:5c:71:7c:b5:ab:96: 22:e8:09:c6:bc:be:ed:2f:7a:23:17:17:e8:54:67: 72:c6:5a:24:36:99:76:53:7d:03:b9:a4:31:27:4f: 15:47:fb:0e:6e:d2:2a:c9:42:1d:65:02:a2:ed:a9: c1:d2:7e:1c:ec:f3:fd:63:f1:73:8b:22:24:49:6e: 90:ad:53:15:58:88:09:ff:e6:0e:03:24:e2:85:a3: a9:62:5d:21:c0:5e:a8:c5:4f:1a:06:99:47:22:98: 04:67:66:06:53:12:2d:df:0a:ba:4d:fb:b7:a4:43: a0:0f:b6:84:97:18:e1:18:7a:28:04:da:af:80:85: fd:18:f3:4c:26:5e:30:cb:35:9e:d8:7b:f9:b8:57: 47:3a:f8:68:90:f0:79:28:4f:00:a7:cd:18:62:5b: 3f:cb:89:4f:65:c2:3f:44:14:02:7f:53:33:05:3d: 97:1f:20:c9:4a:fc:53:1e:45:46:46:2f:4e:59:05: 9e:38:db:65:bb:00:1b:1f:31:86:95:aa:bb:85:6c: 24:11:50:26:4e:72:02:01:45:66:ba:07:5c:a9:14: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:84:7D:40:1E:64:D1:BA:D8:27:B9:86:51:F3:61:DD:69:FE:67:48 X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:82:e3:2a:67:f8:2f:43:9f:0a:84:6b:39:e8:dc:84:86:f9: 6a:bf:44:2d:0a:a1:3d:10:69:5c:8c:15:f7:a8:60:25:94:e5: 45:ac:01:d7:64:09:3c:33:27:f9:fc:a4:6f:56:85:8f:7f:08: 99:54:1a:e2:ef:19:2e:a7:ad:7e:bd:fd:b6:3c:ba:b1:97:03: 0a:fa:52:ff:02:89:7c:08:0d:28:02:2b:f6:fe:55:6a:ab:69: 44:65:01:25:59:63:91:36:c7:d6:82:1f:fd:ce:25:c9:ab:93: 07:d0:b6:ca:c4:c6:56:3d:cd:82:8f:2c:6f:bc:95:19:72:51: 2f:f4:23:dc:6c:38:20:21:f2:75:8e:d6:fe:b3:66:c2:1f:fa: f0:83:05:a4:0c:be:93:99:8c:d2:1c:f8:ae:85:26:18:2f:72: db:03:42:8f:e1:56:5f:1a:b5:c8:13:62:42:6a:f1:61:0a:5a: 2c:50:04:fa:94:b6:63:00:80:9d:8d:40:1c:f4:94:5b:58:a5: 88:57:7a:a8:a9:40:3c:56:74:8f:e0:73:18:8c:1a:15:69:40: 16:d9:6d:97:81:8f:75:cc:69:fb:db:60:e5:f5:58:d6:90:1d: b2:05:0e:0e:a0:b8:67:f7:d5:c5:66:c3:9a:ed:a6:82:c1:a6: 7f:51:59:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsZkZ7QclUkaggGGixHvyQfeaJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTA0MjUwMDE1MDRaFw0yNTA0MjgwNzQ0MDRaMDMxMTAvBgNV BAMTKEFBODQ3RDQwMUU2NEQxQkFEODI3Qjk4NjUxRjM2MURENjlGRTY3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEFwkCXMHua7NM2aOZFXuj+qE HHtXi5OKumjVhLTRFw/VrRLPYVxxfLWrliLoCca8vu0veiMXF+hUZ3LGWiQ2mXZT fQO5pDEnTxVH+w5u0irJQh1lAqLtqcHSfhzs8/1j8XOLIiRJbpCtUxVYiAn/5g4D JOKFo6liXSHAXqjFTxoGmUcimARnZgZTEi3fCrpN+7ekQ6APtoSXGOEYeigE2q+A hf0Y80wmXjDLNZ7Ye/m4V0c6+GiQ8HkoTwCnzRhiWz/LiU9lwj9EFAJ/UzMFPZcf IMlK/FMeRUZGL05ZBZ4422W7ABsfMYaVqruFbCQRUCZOcgIBRWa6B1ypFKT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqoR9QB5k0brYJ7mGUfNh3Wn+Z0gwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCC4ypn+C9DnwqEazno3ISG+Wq/RC0KoT0Q aVyMFfeoYCWU5UWsAddkCTwzJ/n8pG9WhY9/CJlUGuLvGS6nrX69/bY8urGXAwr6 Uv8CiXwIDSgCK/b+VWqraURlASVZY5E2x9aCH/3OJcmrkwfQtsrExlY9zYKPLG+8 lRlyUS/0I9xsOCAh8nWO1v6zZsIf+vCDBaQMvpOZjNIc+K6FJhgvctsDQo/hVl8a tcgTYkJq8WEKWixQBPqUtmMAgJ2NQBz0lFtYpYhXeqipQDxWdI/gcxiMGhVpQBbZ bZeBj3XMafvbYOX1WNaQHbIFDg6guGf31cVmw5rtpoLBpn9RWUA= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net