$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: ONgiUhgDkBjIzGcMJHe/hK9Sq3bYjqIcZDYOOCRnEDg= Subject key identifier: C8:CB:02:FB:3D:22:52:42:45:29:1C:AD:26:7E:F6:E5:E9:74:77:8C Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 15946719BEF57C6E2BAB88B7D028ECC6FFEA7C70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 049B Signing time: Wed 23 Apr 2025 11:41:58 +0000 Manifest this update: Wed 23 Apr 2025 11:36:58 +0000 Manifest next update: Sat 26 Apr 2025 20:28:58 +0000 Files and hashes: 1: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: BuvczQEbe/bdskV+ebbMfwgi2QgHhXaT52MUJAQ4Uu4=) 2: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: KC/48KyBK866tyRqnFAk104o6NtYIjI9BYH4NY1WGf4=) 3: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nGOhkS+SCCrJt9wmjNL7Gorc9U1h3Xuifw+uaNxyRl4=) 4: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: IyTH+iDrZwcYpQjVq5OAN4r5uvDjzNsSK7r7mWOE79s=) 5: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: h7IiV0kh9O/RK06uMG1rhN5D8mRuZrUlThAbqSxDils=) 6: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: b3QtB4OgqdRWfaRrhbvsm6gH1TsKPXL5Yz9+wyHqUXg=) 7: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: mAylxMr8+d8mR8LWIKVq/3AjBIk2gwxyYbF7kLOA17c=) 8: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: iD89xMi5Px1MC3980i3v34zQai/FrxUG4X8XI1+tIvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:94:67:19:be:f5:7c:6e:2b:ab:88:b7:d0:28:ec:c6:ff:ea:7c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Apr 23 11:36:58 2025 GMT Not After : Apr 26 20:28:58 2025 GMT Subject: CN=C8CB02FB3D22524245291CAD267EF6E5E974778C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:2e:41:1d:d6:df:7c:b7:b6:23:a1:d0:1f: 99:b9:a9:cb:9d:f3:e5:4d:c2:f3:61:bc:58:a4:8d: 31:b3:03:c6:ad:94:02:6f:ac:6e:17:6c:62:4d:d6: e4:f2:53:d0:66:e7:fa:a8:54:88:e1:09:a8:51:d2: 7b:24:f3:e6:18:7d:21:b2:eb:c1:d8:67:53:a5:0c: 8c:be:43:7c:c1:81:ee:9e:26:bb:2c:88:65:3d:52: 33:88:27:0c:7e:bb:55:9f:a3:17:d1:5b:f4:b4:fc: 24:6f:75:62:2d:56:01:7e:20:e0:9f:93:fa:21:a7: fa:f9:d3:0b:73:bf:bf:f4:fe:ce:8b:d0:90:b4:5b: 72:a9:eb:66:d5:41:d0:9e:af:65:4c:5f:16:09:5b: 93:65:a4:a8:46:7c:27:e6:19:2b:42:56:09:08:9a: 90:f8:e8:4d:4e:a0:49:9c:bb:c7:5b:a6:cb:55:99: ba:c5:60:47:cb:0b:c0:8f:05:07:a5:8c:94:5d:40: b2:1c:d5:bf:29:be:36:f5:9c:09:fc:21:9f:b0:f2: ff:de:98:dc:1a:57:46:84:75:ae:2a:6f:30:dc:d8: 98:95:55:e1:73:0b:9e:7a:b9:7e:6f:34:5a:b8:e7: 5f:7f:67:67:21:c3:2a:99:f4:45:31:81:e0:fe:9a: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CB:02:FB:3D:22:52:42:45:29:1C:AD:26:7E:F6:E5:E9:74:77:8C X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8a:3c:ba:16:8b:02:de:e3:3c:c8:5c:09:13:88:8c:6c:69: 63:f7:67:6a:c3:a4:f2:24:4c:ca:b6:e1:f7:6e:7f:33:b3:6a: b9:9f:6c:66:e0:85:6c:0d:32:ea:d1:5d:bb:c7:f8:e2:94:0b: 21:7d:54:fe:4c:ab:8a:8f:62:1a:45:54:60:cd:17:95:c3:e1: ff:58:4c:82:4c:dd:d4:e2:65:d6:97:61:b7:1e:14:3c:ba:9d: 47:e6:80:ea:73:13:20:87:12:76:d2:40:da:bb:16:48:cc:95: 71:73:d6:21:4f:68:d2:0e:bd:d1:43:53:a1:97:0f:5f:f5:43: 4d:34:0b:67:d6:14:19:f2:1e:87:83:90:68:97:98:a4:f3:0b: 18:ed:6a:96:4f:1f:93:d9:ea:f8:35:f6:3a:3c:cd:d6:38:91: 06:dd:a3:4d:80:c3:5a:dd:58:21:46:bc:e8:b7:6e:96:32:69: 1c:0b:dd:a0:e3:2e:7b:5d:66:2b:2b:29:5c:c0:52:6b:64:21: 1e:66:97:74:49:ce:6e:5d:36:3e:eb:ad:07:e9:61:05:d0:d6: 6a:68:9d:2a:a8:2b:e7:ef:2d:20:16:e3:f6:df:11:8c:c5:ac: 2b:75:21:67:82:c7:e6:d6:cb:05:a2:b3:4f:d5:a2:2e:5f:9d: 95:93:b7:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZRnGb71fG4rq4i30Cjsxv/qfHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNTA0MjMxMTM2NThaFw0yNTA0MjYyMDI4NThaMDMxMTAvBgNV BAMTKEM4Q0IwMkZCM0QyMjUyNDI0NTI5MUNBRDI2N0VGNkU1RTk3NDc3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81y5BHdbffLe2I6HQH5m5qcud 8+VNwvNhvFikjTGzA8atlAJvrG4XbGJN1uTyU9Bm5/qoVIjhCahR0nsk8+YYfSGy 68HYZ1OlDIy+Q3zBge6eJrssiGU9UjOIJwx+u1WfoxfRW/S0/CRvdWItVgF+IOCf k/ohp/r50wtzv7/0/s6L0JC0W3Kp62bVQdCer2VMXxYJW5NlpKhGfCfmGStCVgkI mpD46E1OoEmcu8dbpstVmbrFYEfLC8CPBQeljJRdQLIc1b8pvjb1nAn8IZ+w8v/e mNwaV0aEda4qbzDc2JiVVeFzC556uX5vNFq4519/Z2chwyqZ9EUxgeD+mk5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMsC+z0iUkJFKRytJn725el0d4wwHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWKPLoWiwLe4zzIXAkTiIxsaWP3Z2rDpPIk TMq24fdufzOzarmfbGbghWwNMurRXbvH+OKUCyF9VP5Mq4qPYhpFVGDNF5XD4f9Y TIJM3dTiZdaXYbceFDy6nUfmgOpzEyCHEnbSQNq7FkjMlXFz1iFPaNIOvdFDU6GX D1/1Q000C2fWFBnyHoeDkGiXmKTzCxjtapZPH5PZ6vg19jo8zdY4kQbdo02Aw1rd WCFGvOi3bpYyaRwL3aDjLntdZisrKVzAUmtkIR5ml3RJzm5dNj7rrQfpYQXQ1mpo nSqoK+fvLSAW4/bfEYzFrCt1IWeCx+bWywWis0/Voi5fnZWTt5s= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:44 2025 by rpki-client on console.sobornost.net