$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: OH+61R8g1/d+XmK8YWeY83lTRfIRpys6bI+dbq+kjT4= Subject key identifier: 44:82:AB:52:47:D6:CD:00:E3:F4:C6:6F:B8:66:83:80:07:3A:EB:F5 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 2239296B1C4EB917952E5F95302AC1925AF23737 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 01CD Signing time: Wed 23 Apr 2025 09:20:51 +0000 Manifest this update: Wed 23 Apr 2025 09:15:51 +0000 Manifest next update: Sat 26 Apr 2025 15:03:51 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=) 3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) 4: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: ZjQe56vRWGt9XgahZlcnc7GdtPCabkBJnbF0LUMFGiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:39:29:6b:1c:4e:b9:17:95:2e:5f:95:30:2a:c1:92:5a:f2:37:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Apr 23 09:15:51 2025 GMT Not After : Apr 26 15:03:51 2025 GMT Subject: CN=4482AB5247D6CD00E3F4C66FB8668380073AEBF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:c0:14:ac:1c:5c:f9:96:17:1b:59:93:3f: e6:55:62:80:04:fd:9c:61:f0:c1:b6:55:3b:89:c1: 69:bb:ff:47:40:ad:25:d2:41:30:43:ca:69:f6:3a: 1d:b6:77:9a:a0:21:20:82:fe:75:b2:b4:82:f1:e8: a0:8b:ba:b9:66:b5:99:b9:b4:3e:21:f1:dd:67:83: 31:19:fe:3a:ab:c5:c9:3b:c9:58:64:ba:f5:d4:a2: df:f5:a0:d5:10:c1:c9:60:e9:4b:99:77:f3:18:a7: f1:f1:62:90:96:6c:e6:f3:bc:ef:07:1a:87:78:63: 62:95:5a:0f:1b:29:83:96:02:1b:73:73:31:50:c8: 74:8a:8e:6c:a7:88:9f:da:64:47:99:b0:41:83:97: 82:ce:53:27:6b:ff:76:f1:f6:ce:49:e3:d8:7e:80: eb:7b:e0:09:ce:b2:a6:23:92:e3:34:d8:06:25:81: 42:17:59:40:1a:44:53:7f:15:2e:a9:e2:90:75:0a: 98:ea:1c:28:c1:35:ca:b5:4e:02:4c:f6:42:2f:e7: bd:f1:6f:b3:56:bc:cc:55:2d:74:31:dc:56:a2:c8: 47:06:d7:09:df:87:04:c1:db:ce:7a:36:9e:3f:ed: 45:8e:75:c9:75:fd:0e:a9:88:20:02:4e:18:72:b5: 7f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:82:AB:52:47:D6:CD:00:E3:F4:C6:6F:B8:66:83:80:07:3A:EB:F5 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ea:e9:55:bb:72:94:13:f9:03:63:71:73:c6:a4:70:02:ad: 29:ec:24:c9:f9:6c:e8:80:fb:4f:91:c9:ae:54:c9:51:21:4b: 4c:43:4a:82:bc:56:77:59:97:92:11:f1:72:85:0a:e7:06:d2: c3:b7:bb:e9:22:45:8e:b2:c1:0e:d6:2c:b4:79:a3:ed:5e:8d: c1:d8:28:f1:b6:b1:6f:0e:8c:1f:d5:ad:78:1d:b9:b3:3c:f5: 69:28:25:58:6d:6a:b8:87:89:63:62:07:1f:da:8c:fa:ea:26: f4:e6:30:1e:2e:cc:a4:41:8f:9c:35:16:14:13:63:13:c2:b7: be:74:0f:40:2d:82:95:44:85:b0:9f:2d:9b:fc:6f:76:99:0b: fd:c2:da:00:b1:11:75:bb:5e:5f:29:ce:94:58:6f:4f:dc:e7: d1:fd:3a:6d:6e:95:cd:c2:25:7e:f9:52:2b:e7:0b:91:e6:f9: 34:08:f8:a5:55:65:6c:99:0b:93:54:7d:e8:ec:15:38:16:aa: a3:56:d8:49:fe:9a:7d:7e:ee:3d:5f:86:b5:71:d6:a9:a8:04: bb:e8:ad:45:87:38:81:dc:50:65:73:e4:52:85:8b:d9:03:67: e7:4f:3c:4b:3d:6f:45:3d:6b:63:2e:ef:23:f2:87:31:52:46: d8:0b:ea:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjkpaxxOuReVLl+VMCrBklryNzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA0MjMwOTE1NTFaFw0yNTA0MjYxNTAzNTFaMDMxMTAvBgNV BAMTKDQ0ODJBQjUyNDdENkNEMDBFM0Y0QzY2RkI4NjY4MzgwMDczQUVCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeMAUrBxc+ZYXG1mTP+ZVYoAE /Zxh8MG2VTuJwWm7/0dArSXSQTBDymn2Oh22d5qgISCC/nWytILx6KCLurlmtZm5 tD4h8d1ngzEZ/jqrxck7yVhkuvXUot/1oNUQwclg6UuZd/MYp/HxYpCWbObzvO8H God4Y2KVWg8bKYOWAhtzczFQyHSKjmyniJ/aZEeZsEGDl4LOUydr/3bx9s5J49h+ gOt74AnOsqYjkuM02AYlgUIXWUAaRFN/FS6p4pB1CpjqHCjBNcq1TgJM9kIv573x b7NWvMxVLXQx3FaiyEcG1wnfhwTB2856Np4/7UWOdcl1/Q6piCACThhytX+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURIKrUkfWzQDj9MZvuGaDgAc66/UwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjq6VW7cpQT+QNjcXPGpHACrSnsJMn5bOiA +0+Rya5UyVEhS0xDSoK8VndZl5IR8XKFCucG0sO3u+kiRY6ywQ7WLLR5o+1ejcHY KPG2sW8OjB/VrXgdubM89WkoJVhtariHiWNiBx/ajPrqJvTmMB4uzKRBj5w1FhQT YxPCt750D0AtgpVEhbCfLZv8b3aZC/3C2gCxEXW7Xl8pzpRYb0/c59H9Om1ulc3C JX75UivnC5Hm+TQI+KVVZWyZC5NUfejsFTgWqqNW2En+mn1+7j1fhrVx1qmoBLvo rUWHOIHcUGVz5FKFi9kDZ+dPPEs9b0U9a2Mu7yPyhzFSRtgL6h4= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:23 2025 by rpki-client on console.sobornost.net