$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: ennARqzTcqZc0WlsQjCVutgP6J7te/rlFN6Heduui54= Subject key identifier: A9:E4:10:1C:B3:13:04:A7:AF:6F:4C:E1:10:AA:18:01:25:35:3A:0E Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 71CBC89D664C1D10C596FE7D442D1B74B082BB25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 02D1 Signing time: Wed 23 Apr 2025 03:31:44 +0000 Manifest this update: Wed 23 Apr 2025 03:26:44 +0000 Manifest next update: Sat 26 Apr 2025 14:54:44 +0000 Files and hashes: 1: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: EJNiZ5CP4NViKAT2AQrbTMiN3p2wBvG9Nimx2GtcP7I=) 2: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: 2mf3MWd4Yf3DGipvibKgwCGflKjCe75JI3gRy14xu5A=) 3: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: 0iCYxPC31pPSAvbDWlSbOf4wUHd4K3IjBuNWnJfYJIE=) 4: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: jUYBKOMlc3aB4hhjPdf+KB50GeZEtBEfXAQS0CTXYSg=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: lcK4yqx1wapun4O8ibyvZIDR3r6Yt8ucZYD7UkMp1ts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cb:c8:9d:66:4c:1d:10:c5:96:fe:7d:44:2d:1b:74:b0:82:bb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Apr 23 03:26:44 2025 GMT Not After : Apr 26 14:54:44 2025 GMT Subject: CN=A9E4101CB31304A7AF6F4CE110AA180125353A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7a:31:71:41:54:fb:a1:a6:11:37:a9:02:fb: 41:af:6a:ca:ab:6f:f9:42:54:33:09:cc:53:17:fe: 79:21:47:34:58:ad:71:c4:58:65:0f:fd:0d:f1:ad: 2b:af:32:7f:42:96:7d:15:20:a1:08:87:20:1c:af: 79:f8:bc:24:ff:2c:8e:81:21:4f:f4:24:1c:ac:21: ac:c3:70:e6:5a:fe:49:f0:cd:3e:c0:03:4f:f0:b4: 61:a3:0d:51:b1:41:55:d1:cc:94:44:6c:be:3f:35: ed:ab:09:db:80:fc:2f:4d:22:3b:0d:87:5b:39:0f: 9c:a0:d5:41:e7:6e:b5:51:f8:bd:cf:dd:4d:1d:02: 14:f9:2c:52:c3:a0:f3:03:b4:56:72:69:5a:d0:39: 14:bb:67:d1:8f:98:dd:ef:e2:67:a5:f3:03:02:c7: 95:74:13:2f:71:88:2d:30:59:69:dd:c3:4c:2b:d8: 92:e9:ac:a2:ea:9b:4c:52:a8:48:dd:8a:95:0a:0b: 0c:46:94:cb:4f:38:ff:49:7b:cb:15:cb:19:ff:ee: e0:74:44:31:f4:ee:0e:cb:84:98:27:f3:5a:e7:c0: e6:04:f1:bf:a2:d9:b5:ff:5f:d4:e5:99:b5:df:1a: 9d:38:51:2e:1e:b6:76:84:33:5c:e4:e6:ae:3b:b2: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:10:1C:B3:13:04:A7:AF:6F:4C:E1:10:AA:18:01:25:35:3A:0E X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0c:cd:04:81:1e:36:b3:6f:6e:be:c3:12:91:fc:e4:71:2f: d1:76:d3:ad:73:6d:cf:7e:f0:18:b9:74:ba:00:ad:36:0b:33: 25:98:1b:8a:38:a2:56:9c:3f:dd:5a:54:ce:4c:00:41:56:c5: d7:87:60:34:9e:e5:b2:01:67:62:1c:e2:1f:bb:49:2e:15:8e: 3f:54:8d:18:4b:a3:27:ae:f7:eb:4f:f6:e5:15:78:1d:57:8d: 0a:41:42:74:9a:62:15:8d:c2:b0:92:c8:2f:8f:74:74:03:b9: 3d:f6:a0:c4:0d:3c:c2:1a:3e:8a:32:97:9b:4d:83:dd:83:da: b5:3e:91:4a:a7:ba:77:fc:d4:00:47:ba:0a:78:a4:9c:81:7e: 3d:c5:a5:54:d1:d8:8c:1d:2a:c3:dc:0c:30:60:7a:98:fa:aa: 63:b5:9c:0f:6a:73:f8:45:2a:b5:24:c1:44:49:d5:7e:ed:12: a2:1a:60:c7:46:72:85:95:07:e6:88:27:60:3c:dd:73:30:22: 6b:85:a6:7d:b9:66:31:c2:04:79:65:09:f3:5a:d8:ac:90:9a: bf:f3:fb:6e:77:1e:ac:04:55:02:a1:06:36:e2:da:6a:82:d8: 98:e6:b3:80:04:cd:75:2e:e5:d6:e6:9a:ed:cc:89:78:f7:45: 37:f9:23:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccvInWZMHRDFlv59RC0bdLCCuyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTA0MjMwMzI2NDRaFw0yNTA0MjYxNDU0NDRaMDMxMTAvBgNV BAMTKEE5RTQxMDFDQjMxMzA0QTdBRjZGNENFMTEwQUExODAxMjUzNTNBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnejFxQVT7oaYRN6kC+0Gvasqr b/lCVDMJzFMX/nkhRzRYrXHEWGUP/Q3xrSuvMn9Cln0VIKEIhyAcr3n4vCT/LI6B IU/0JBysIazDcOZa/knwzT7AA0/wtGGjDVGxQVXRzJREbL4/Ne2rCduA/C9NIjsN h1s5D5yg1UHnbrVR+L3P3U0dAhT5LFLDoPMDtFZyaVrQORS7Z9GPmN3v4mel8wMC x5V0Ey9xiC0wWWndw0wr2JLprKLqm0xSqEjdipUKCwxGlMtPOP9Je8sVyxn/7uB0 RDH07g7LhJgn81rnwOYE8b+i2bX/X9TlmbXfGp04US4etnaEM1zk5q47svfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeQQHLMTBKevb0zhEKoYASU1Og4wHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUMzQSBHjazb26+wxKR/ORxL9F2061zbc9+ 8Bi5dLoArTYLMyWYG4o4olacP91aVM5MAEFWxdeHYDSe5bIBZ2Ic4h+7SS4Vjj9U jRhLoyeu9+tP9uUVeB1XjQpBQnSaYhWNwrCSyC+PdHQDuT32oMQNPMIaPooyl5tN g92D2rU+kUqnunf81ABHugp4pJyBfj3FpVTR2IwdKsPcDDBgepj6qmO1nA9qc/hF KrUkwURJ1X7tEqIaYMdGcoWVB+aIJ2A83XMwImuFpn25ZjHCBHllCfNa2KyQmr/z +253HqwEVQKhBjbi2mqC2Jjms4AEzXUu5dbmmu3MiXj3RTf5Iyw= -----END CERTIFICATE-----Generated at Wed Apr 23 06:32:01 2025 by rpki-client on console.sobornost.net