$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: dGSa6semxL+9nXKzRhIeE6D4mDXrRwRVFmAzUkM8mNc= Subject key identifier: 4F:1C:90:A0:6C:8A:A2:4A:BE:2A:8B:08:1B:B9:04:E8:5E:89:3B:64 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 04DE60F7DD4B4E5912D343BD19FE46F6EBC1053E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 0522 Signing time: Fri 25 Apr 2025 12:31:16 +0000 Manifest this update: Fri 25 Apr 2025 12:26:16 +0000 Manifest next update: Mon 28 Apr 2025 22:36:16 +0000 Files and hashes: 1: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (hash: 9tWn1tUw0lnAE7QTSe9gFD7FXQ8Wg/JsMqpIZEwXrcQ=) 2: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: uR6D5Vottqw3UGMrbavLqGe0RHF7yIauRiSRYUAqjK4=) 3: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: wNLcF3BuY6c0NojLg3lLpODSZ2Uw1XTSxtF/U2Jzu0k=) 4: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: armCdMsgrh9HBVd3tCBMp8GfztvN8GGDpG5VkguYG4U=) 5: 3230332e38342e3133382e302f32342d3234203d3e20393834.roa (hash: OvL2f4eV/dIS/ISoFQJ5cS+0xjddfINmJd9dof7YWKE=) 6: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: m0Qe62ytaZMKNB4gQCVhBMudXZyhLsB3FcV65dwOjuM=) 7: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: 8l5eYrcFmWYoHIRslSOK/QjIOtGdM4ToITrA74vyIxo=) 8: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 27UeUaEQQTlGBzMMtig9mrxqvsFGGYiXFECx86HP9vw=) 9: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 10: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: KnuT4VJ8iLWdqrErOu2FeJ8mmwI6wwnIx48WuNVZS4g=) 11: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: 8V+Zya7yK3fEGLmUtkhLrEpRvGEZWoHeCqz3YLbVbVU=) 12: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: +ioxMWbzQIk8162X0SpHMt662sECkzs897/VKWy1MDU=) 13: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: IKrLXgzTRMNUHQiY7lPxbY4RYs8/kWiZvIMH5tUTx6c=) 14: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: tsk8yK4KqvJi7ogL1Fgl2IoF/vS9e+lT+cqgt4OR0O0=) 15: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: NYon6seWVPGfj3szG9Lc+42jdaypbm8ZjYwi9OVBxlE=) 16: 3230332e38342e3134332e302f32342d3234203d3e20313530393732.roa (hash: TQogc+bIoAadk+dL2Cz1Noxh233Lv82bNDTeGntUavQ=) 17: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: RTuZkJtHP4oO5BZBcfIYPQEhgHjC830z/8gqHwaq6eQ=) 18: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=) 19: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: gDE9/OhZHSWK8pSq7uGqk744ZfgEp48VY/AnfNVTHcA=) 20: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: gQ15SQ+7CTm0lbNi34nU2xnDYGkiDVy2zZGBrQmJGtQ=) 21: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: GoGa19lNKrAbt7T4vItYqkUzpmzuN/7X1lEptYsCA58=) 22: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: zQbQBWWEi5D5FTstthFEurL4sFplPWdltQCq5iDGgW0=) 23: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: 1w88ZaASU+IezmbFAGItPt0iVYfj3PFgWl7YKMyNTuU=) 24: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: mYxf6C6pLjXmVFDLfOQlsOJY104hPXXJrDn5WUaMTOY=) 25: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: BYrXc+PLZ/j21jMX4S/tR9RU/3h3VFerg2jw36ACe00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:de:60:f7:dd:4b:4e:59:12:d3:43:bd:19:fe:46:f6:eb:c1:05:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Apr 25 12:26:16 2025 GMT Not After : Apr 28 22:36:16 2025 GMT Subject: CN=4F1C90A06C8AA24ABE2A8B081BB904E85E893B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:77:77:57:b1:01:ac:c8:e9:e9:f4:ee:32: 4e:bf:54:fb:9f:ed:1f:62:e9:42:c8:67:d6:00:f7: 89:fa:79:96:c2:88:3d:0c:58:63:da:f1:fb:f5:55: ac:d0:48:c9:09:76:7b:f3:c9:40:44:05:27:8d:11: 7e:9d:3b:f4:b0:ef:b9:84:aa:b8:4e:89:75:20:13: 08:60:48:5e:37:d7:50:ac:09:a6:73:5d:1f:1e:1d: a1:6f:7f:34:05:55:7d:61:34:6b:b3:4b:9f:c3:cb: be:67:45:2a:92:d4:1d:44:be:5d:22:30:b6:11:03: 4b:42:c2:8d:4d:fe:92:11:53:38:57:c9:4b:17:cd: 49:49:01:0a:64:eb:ca:bf:93:64:32:0d:d0:44:29: 89:a0:62:73:ec:15:3c:aa:9a:e0:fe:81:70:f9:5f: ec:f8:f9:f7:cc:ad:e8:38:08:b6:fc:8d:38:b7:fd: d8:32:81:2a:c3:65:54:57:cb:a3:2f:87:2d:dc:6a: e3:85:9e:56:78:7a:06:aa:3e:c0:b2:ce:80:86:af: 09:e7:09:e0:07:f3:61:73:ba:ec:1e:c0:9d:c2:01: 90:52:25:29:51:7a:32:5a:2a:d6:ff:19:09:6c:c7: 38:36:9e:9d:3b:c5:57:da:82:8f:da:23:c3:e7:b2: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1C:90:A0:6C:8A:A2:4A:BE:2A:8B:08:1B:B9:04:E8:5E:89:3B:64 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e8:30:0f:f5:60:53:d9:31:e6:70:17:48:96:13:d6:2a:e3: 61:07:11:5b:82:a6:f4:c8:48:15:2a:90:26:88:30:a0:71:bc: 57:39:11:5d:98:dc:18:12:60:ba:d7:9b:89:03:af:d1:52:8f: 3f:4a:91:1f:60:54:61:e0:b8:3e:c1:65:5e:bf:2e:38:aa:f9: d0:d1:32:13:9a:59:d8:e7:0c:97:55:84:9c:1c:67:47:3d:6e: 74:34:4c:13:9c:2f:12:28:ae:18:9b:64:9a:73:f4:ab:0e:91: 80:14:2a:ac:43:f9:f3:87:a4:ee:7e:66:69:38:24:4f:80:aa: 73:5b:43:b2:5a:88:b0:57:d1:d1:16:10:b2:23:f1:12:07:80: e5:0a:b9:3d:19:3f:1a:a0:b0:69:09:5b:1c:e0:b9:cb:03:cf: 43:c5:30:8c:39:95:8b:dd:4a:a0:ae:a0:80:1d:8d:78:37:98: c7:ad:19:86:9c:e6:f8:08:e8:3c:26:f6:9d:f7:da:99:3d:74: ba:a6:27:65:d3:33:44:60:1e:89:47:cd:9d:a6:0c:22:87:d0: df:2c:79:56:74:85:2f:6c:89:88:63:de:0d:0f:6d:b8:72:71: ca:29:51:7a:ae:9b:d2:e6:c9:32:f7:88:2e:cd:55:af:d3:04: ae:25:16:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBN5g991LTlkS00O9Gf5G9uvBBT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA0MjUxMjI2MTZaFw0yNTA0MjgyMjM2MTZaMDMxMTAvBgNV BAMTKDRGMUM5MEEwNkM4QUEyNEFCRTJBOEIwODFCQjkwNEU4NUU4OTNCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmHd3V7EBrMjp6fTuMk6/VPuf 7R9i6ULIZ9YA94n6eZbCiD0MWGPa8fv1VazQSMkJdnvzyUBEBSeNEX6dO/Sw77mE qrhOiXUgEwhgSF4311CsCaZzXR8eHaFvfzQFVX1hNGuzS5/Dy75nRSqS1B1Evl0i MLYRA0tCwo1N/pIRUzhXyUsXzUlJAQpk68q/k2QyDdBEKYmgYnPsFTyqmuD+gXD5 X+z4+ffMreg4CLb8jTi3/dgygSrDZVRXy6Mvhy3cauOFnlZ4egaqPsCyzoCGrwnn CeAH82FzuuwewJ3CAZBSJSlRejJaKtb/GQlsxzg2np07xVfago/aI8PnsnhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxyQoGyKokq+KosIG7kE6F6JO2QwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABToMA/1YFPZMeZwF0iWE9Yq42EHEVuCpvTI SBUqkCaIMKBxvFc5EV2Y3BgSYLrXm4kDr9FSjz9KkR9gVGHguD7BZV6/Ljiq+dDR MhOaWdjnDJdVhJwcZ0c9bnQ0TBOcLxIorhibZJpz9KsOkYAUKqxD+fOHpO5+Zmk4 JE+AqnNbQ7JaiLBX0dEWELIj8RIHgOUKuT0ZPxqgsGkJWxzgucsDz0PFMIw5lYvd SqCuoIAdjXg3mMetGYac5vgI6Dwm9p332pk9dLqmJ2XTM0RgHolHzZ2mDCKH0N8s eVZ0hS9siYhj3g0PbbhyccopUXqum9LmyTL3iC7NVa/TBK4lFho= -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net