$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: ZV7SufRiIJTbiZeUXTmh9YNA918rO/cyx1tGdsz4ztQ= Subject key identifier: 17:F8:68:B2:77:56:73:0A:03:FF:FB:D5:74:B1:9A:89:F9:6A:BB:3E Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 04C7204B3512626B8133B87EA76AB553CC1C4D3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: 5C Signing time: Thu 24 Apr 2025 21:40:36 +0000 Manifest this update: Thu 24 Apr 2025 21:35:36 +0000 Manifest next update: Mon 28 Apr 2025 03:46:36 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=) 2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: ibzEg0LWTj3ARVHVXTfdLMCrnxvOglkSl/9lMV3aU8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c7:20:4b:35:12:62:6b:81:33:b8:7e:a7:6a:b5:53:cc:1c:4d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Apr 24 21:35:36 2025 GMT Not After : Apr 28 03:46:36 2025 GMT Subject: CN=17F868B27756730A03FFFBD574B19A89F96ABB3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:89:4b:4c:26:2f:67:61:c8:f8:cd:2c:b4: 1e:26:ef:e9:c6:dc:3b:1e:7c:1b:d0:36:10:60:6b: fa:5e:b5:07:88:cd:4b:4d:1f:c2:e7:52:44:92:4c: b7:d9:54:b4:5d:8c:90:b9:9c:22:2b:93:9e:3b:2e: 85:5c:6a:4c:d9:15:5b:a4:5b:13:6c:62:74:b4:4f: a0:1c:5b:dc:0a:b9:a1:4a:d6:0f:c8:35:6e:c3:19: 76:b4:e3:8c:a8:c4:0e:3a:6c:04:7d:04:84:d5:a3: 63:df:0f:6a:37:98:6f:cf:92:2e:01:02:e4:c6:f3: 00:83:d4:ab:2d:40:98:34:ef:0f:54:89:05:64:15: 1f:82:84:df:c5:7e:46:04:4a:d2:ec:a8:c5:fe:38: b7:33:f0:a8:eb:90:6e:cf:55:22:59:68:6e:31:a2: 8b:d6:6b:40:a2:2a:6e:60:f0:8e:96:4c:eb:83:00: c1:6b:51:a0:f4:ff:2c:3b:f9:a1:a3:e4:b9:8f:5b: 96:64:e4:5e:e6:09:1d:17:42:12:46:89:24:db:fd: e0:c7:9f:17:b2:eb:07:36:42:87:fd:9e:6b:b2:d4: e0:d9:3c:ae:ee:ce:7d:f0:4a:11:3a:2f:52:62:6c: cc:5b:58:bf:f8:a9:60:78:26:75:32:79:18:73:c7: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F8:68:B2:77:56:73:0A:03:FF:FB:D5:74:B1:9A:89:F9:6A:BB:3E X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9e:5b:d3:7a:da:c4:0f:57:d3:cd:3e:6a:cf:9c:0c:79:d1: 8d:cf:66:ea:bd:4c:c9:41:1e:91:3e:12:4f:a6:73:42:5d:5b: a8:65:b7:6c:49:cb:17:63:76:ac:33:54:8e:67:fb:d6:46:9d: b6:17:17:2a:42:6b:fe:59:62:c4:c2:e9:86:49:ff:73:a2:4e: f2:81:03:d9:a7:74:47:bf:aa:77:26:65:c5:7c:b3:a8:13:99: 62:3c:29:91:ef:bd:4e:fd:2b:e5:bd:63:0f:5a:79:35:b4:b7: 6c:4d:6a:93:13:02:4b:a8:de:cd:cf:0f:6b:ba:fa:54:ed:67: 6d:b7:df:b0:06:18:4d:12:ce:77:f4:aa:5b:b0:6f:ad:c0:fe: 22:7c:38:ed:da:cb:b2:2c:8b:a1:31:90:59:71:ca:93:e0:01: e3:94:f0:11:6f:b3:97:9e:81:7b:b0:29:46:0a:df:58:aa:73: c5:91:36:0a:d1:c7:75:ff:05:1e:18:af:0b:bd:c8:7d:c8:59: d4:5a:b0:7a:7f:ab:4e:dc:b5:d4:67:87:ef:39:49:b0:c0:ba: a6:a1:ba:a6:af:e9:4a:fc:be:ea:fb:c0:7f:51:9c:82:02:df: 71:25:a5:cb:b5:7a:c1:a0:db:d4:63:a3:14:b2:5b:f8:78:52: f1:a0:dc:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMcgSzUSYmuBM7h+p2q1U8wcTTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTA0MjQyMTM1MzZaFw0yNTA0MjgwMzQ2MzZaMDMxMTAvBgNV BAMTKDE3Rjg2OEIyNzc1NjczMEEwM0ZGRkJENTc0QjE5QTg5Rjk2QUJCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTIlLTCYvZ2HI+M0stB4m7+nG 3DsefBvQNhBga/petQeIzUtNH8LnUkSSTLfZVLRdjJC5nCIrk547LoVcakzZFVuk WxNsYnS0T6AcW9wKuaFK1g/INW7DGXa044yoxA46bAR9BITVo2PfD2o3mG/Pki4B AuTG8wCD1KstQJg07w9UiQVkFR+ChN/FfkYEStLsqMX+OLcz8KjrkG7PVSJZaG4x oovWa0CiKm5g8I6WTOuDAMFrUaD0/yw7+aGj5LmPW5Zk5F7mCR0XQhJGiSTb/eDH nxey6wc2Qof9nmuy1ODZPK7uzn3wShE6L1JibMxbWL/4qWB4JnUyeRhzx+CbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/hosndWcwoD//vVdLGaiflquz4wHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaeW9N62sQPV9PNPmrPnAx50Y3PZuq9TMlB HpE+Ek+mc0JdW6hlt2xJyxdjdqwzVI5n+9ZGnbYXFypCa/5ZYsTC6YZJ/3OiTvKB A9mndEe/qncmZcV8s6gTmWI8KZHvvU79K+W9Yw9aeTW0t2xNapMTAkuo3s3PD2u6 +lTtZ22337AGGE0Sznf0qluwb63A/iJ8OO3ay7Isi6ExkFlxypPgAeOU8BFvs5ee gXuwKUYK31iqc8WRNgrRx3X/BR4Yrwu9yH3IWdRasHp/q07ctdRnh+85SbDAuqah uqav6Ur8vur7wH9RnIIC33Elpcu1esGg29RjoxSyW/h4UvGg3Js= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net