$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: 3VmwXC7jW4pNv/PM+220TctM277rro76D2fwBl4kX3s= Subject key identifier: B7:2F:6B:12:67:81:99:6F:C4:A9:D4:72:C0:C2:1F:5C:8B:9A:6E:6B Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 49CF8A2130B282F1D3F56E8876781EE818E44000 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 02D6 Signing time: Sat 26 Apr 2025 11:01:57 +0000 Manifest this update: Sat 26 Apr 2025 10:56:57 +0000 Manifest next update: Tue 29 Apr 2025 20:33:57 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: c+qWW3yTYO7EFBMpSZFoH4nlHSIWQNCItdARHkQq/ow=) 2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: CSWgjUvsmFAUoxn+c8cQjQuQW7eYcbWtJrqUbfz/Tn4=) 3: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: IMm6CCSm6745f06rpuxAhuRN6fVIJUbPiGSK0gcfms4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cf:8a:21:30:b2:82:f1:d3:f5:6e:88:76:78:1e:e8:18:e4:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Apr 26 10:56:57 2025 GMT Not After : Apr 29 20:33:57 2025 GMT Subject: CN=B72F6B126781996FC4A9D472C0C21F5C8B9A6E6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:29:f7:03:d4:ce:be:1e:7b:4f:3f:13:ee: 36:d4:fd:ab:66:83:ce:55:f4:c6:f9:02:f1:8b:e1: 2c:0d:0d:f9:e1:f5:c3:49:bb:a8:48:ec:b6:51:a9: 64:7c:6e:a7:c7:2a:45:99:88:4b:e8:23:73:2a:94: 4b:00:14:45:9f:c5:ad:6c:86:52:0f:d0:7e:df:7e: 81:b8:28:f8:61:62:7d:1d:38:fe:28:7d:65:66:fc: 8c:80:fe:58:80:5a:b1:f0:e6:ae:e8:83:1c:a3:0d: aa:5c:da:9a:60:6c:77:d5:f7:d7:9a:30:9f:d2:d8: c2:8a:f5:33:63:c1:1c:ce:45:9e:4e:5b:87:8c:7d: ac:88:cf:9d:4d:a7:94:1d:5a:d2:d4:af:ad:dc:ea: 78:70:6f:65:4d:9c:2b:56:2e:d1:f2:9e:b0:c5:02: 7c:7d:2a:4e:85:64:e1:ca:9d:7c:7f:7d:6b:b7:6c: 48:b3:39:81:b8:95:f1:a4:9a:fa:d8:e3:a6:5f:ad: 2d:6e:4d:14:fc:73:ba:cb:10:70:f5:37:00:44:7d: 7e:34:8e:32:f4:ca:ea:e6:fb:8d:27:08:7a:21:30: 53:66:6f:50:18:cf:d6:3e:e3:6e:e7:79:30:31:bc: 7f:f6:d0:f6:c8:53:48:50:f0:be:c9:eb:f8:e2:22: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2F:6B:12:67:81:99:6F:C4:A9:D4:72:C0:C2:1F:5C:8B:9A:6E:6B X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:aa:ed:73:da:73:10:44:06:da:ca:09:0c:30:1f:8f:2d:62: 8c:13:d6:c9:f8:aa:f5:19:4f:a8:ab:f2:1f:72:54:31:e1:38: 64:f1:cf:55:20:4b:d2:69:d6:1f:6e:e7:54:e1:21:48:2f:69: 9e:59:61:b4:0a:55:95:f8:0d:a9:f8:1f:92:18:68:3b:5a:79: f9:ee:17:4a:ed:15:b5:93:22:0f:9f:31:e6:35:76:8e:f5:85: a5:c4:ac:2f:fc:5d:63:f0:db:08:60:a2:3f:a7:a2:57:b4:4e: 11:d0:5f:3c:1e:ad:95:fe:b1:b3:31:d9:c0:7c:b0:36:51:63: fa:22:1c:2e:92:25:cc:f9:8d:56:f6:a0:09:c3:91:63:3a:53: 11:5e:f1:0a:ea:6e:f5:6f:b4:8b:82:ba:fb:a4:a8:26:0e:74: 97:b8:19:41:57:6b:4e:fa:85:5f:e6:ac:05:92:f9:5c:44:a5: ac:0f:86:b4:f4:0b:3e:2f:dd:aa:f7:a1:8d:2f:36:f1:ef:74: 8c:12:a4:24:9f:43:b1:36:0c:0c:d6:9e:81:b7:9c:87:6a:85: 88:5e:c7:aa:d6:e0:24:48:f4:20:e8:ce:dd:a6:88:1f:9b:01: 24:b5:ea:b5:fe:32:2e:e8:50:54:07:29:d6:61:7b:8f:ba:d6: 22:ea:3e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSc+KITCygvHT9W6Idnge6BjkQAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTA0MjYxMDU2NTdaFw0yNTA0MjkyMDMzNTdaMDMxMTAvBgNV BAMTKEI3MkY2QjEyNjc4MTk5NkZDNEE5RDQ3MkMwQzIxRjVDOEI5QTZFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEin3A9TOvh57Tz8T7jbU/atm g85V9Mb5AvGL4SwNDfnh9cNJu6hI7LZRqWR8bqfHKkWZiEvoI3MqlEsAFEWfxa1s hlIP0H7ffoG4KPhhYn0dOP4ofWVm/IyA/liAWrHw5q7ogxyjDapc2ppgbHfV99ea MJ/S2MKK9TNjwRzORZ5OW4eMfayIz51Np5QdWtLUr63c6nhwb2VNnCtWLtHynrDF Anx9Kk6FZOHKnXx/fWu3bEizOYG4lfGkmvrY46ZfrS1uTRT8c7rLEHD1NwBEfX40 jjL0yurm+40nCHohMFNmb1AYz9Y+427neTAxvH/20PbIU0hQ8L7J6/jiImpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUty9rEmeBmW/EqdRywMIfXIuabmswHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGq7XPacxBEBtrKCQwwH48tYowT1sn4qvUZ T6ir8h9yVDHhOGTxz1UgS9Jp1h9u51ThIUgvaZ5ZYbQKVZX4Dan4H5IYaDtaefnu F0rtFbWTIg+fMeY1do71haXErC/8XWPw2whgoj+nole0ThHQXzwerZX+sbMx2cB8 sDZRY/oiHC6SJcz5jVb2oAnDkWM6UxFe8QrqbvVvtIuCuvukqCYOdJe4GUFXa076 hV/mrAWS+VxEpawPhrT0Cz4v3ar3oY0vNvHvdIwSpCSfQ7E2DAzWnoG3nIdqhYhe x6rW4CRI9CDozt2miB+bASS16rX+Mi7oUFQHKdZhe4+61iLqPuI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:04 2025 by rpki-client on console.sobornost.net