$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: k+WOy5avS/ezKOjVBOajCfK2YSuB4QicBtPw2CltBfE= Subject key identifier: 4F:38:ED:E2:22:AC:21:EF:53:DC:DF:08:D0:28:58:10:00:ED:97:0D Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 45CDED4AAB278F10198F7D8DCF8CE2D5539A4FCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 01B5 Signing time: Fri 25 Apr 2025 06:31:53 +0000 Manifest this update: Fri 25 Apr 2025 06:26:53 +0000 Manifest next update: Mon 28 Apr 2025 06:57:53 +0000 Files and hashes: 1: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: Wv+QnNzv2vF+fwb99cICI1HQ/0dBOsfImXlG7HI6i3o=) 2: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: zLfKDuc3jNTwhPewKCkQdrraOM+o8tM8JoTok2PPCpE=) 3: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: /BAWrcQPac6z7r0Aw+CQfRooZAASQixIkDdl1c+PelY=) 4: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: k7X14J+QdS7MEz6uDJt6u3xkxSH91jVPDLJqXdryTNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cd:ed:4a:ab:27:8f:10:19:8f:7d:8d:cf:8c:e2:d5:53:9a:4f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Apr 25 06:26:53 2025 GMT Not After : Apr 28 06:57:53 2025 GMT Subject: CN=4F38EDE222AC21EF53DCDF08D028581000ED970D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:de:9a:16:5e:5c:38:2f:b4:14:2b:48:5c: 16:91:69:ca:cc:ef:31:8a:49:5e:4d:44:d0:07:28: 81:44:ae:6b:0c:c4:17:e7:98:59:46:04:b3:93:e3: bc:a3:af:49:d6:08:25:51:ee:30:7d:e4:4d:9c:83: 12:bc:3e:46:ef:3a:fe:8e:db:b6:62:1a:d2:f3:bd: c5:4e:45:75:f7:2e:92:06:cb:dd:3a:64:af:a9:c0: 37:f4:bc:c8:ed:5f:5f:7b:32:20:02:1b:2f:eb:af: d5:2a:65:e9:76:6b:e8:5a:01:97:7c:64:ec:45:69: 7f:c4:a0:06:da:ac:35:5e:dc:3e:24:e5:ad:f9:59: 08:93:aa:8e:fe:cb:9e:c4:73:6f:ee:a4:94:e9:f8: c0:f1:ee:ab:1c:0a:d8:0b:f4:21:a9:a2:11:11:f0: ab:38:fe:19:64:5a:10:b0:46:7d:36:07:cc:34:16: aa:41:59:2b:5f:87:57:6d:11:1d:c6:24:d4:70:7c: e8:12:70:e6:3a:c2:17:69:05:ad:bb:22:17:cb:3d: 02:ce:86:4b:53:7d:fb:7f:5c:24:f2:9c:d9:9f:92: 3f:a0:d7:69:84:71:1a:98:b6:b1:df:28:0d:8c:85: 79:b9:a7:04:f9:1f:6c:de:67:90:30:ac:ac:9f:5a: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:38:ED:E2:22:AC:21:EF:53:DC:DF:08:D0:28:58:10:00:ED:97:0D X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:23:63:0a:2c:cc:a4:57:6c:d3:0e:42:9f:1d:a9:b0:96:27: 5d:12:6e:25:6e:ba:be:99:dc:f1:64:d7:96:71:1e:05:7a:b0: d3:43:ca:a4:73:13:fb:eb:ed:31:9d:e4:a4:01:54:45:b1:8e: bb:e0:c6:7e:eb:e2:d4:65:72:fe:15:25:5a:b9:10:89:10:d5: ad:d3:bc:c6:bf:66:76:68:ed:de:4d:3e:36:6a:47:f9:a7:78: 29:e2:83:d1:57:38:0c:b0:62:15:8e:7f:9a:53:00:65:d6:0a: fd:8a:d6:6b:39:76:9c:81:7d:db:df:86:36:1c:ad:f7:fd:be: d1:cd:3b:b4:4b:ed:e9:51:21:5b:12:d8:bc:d4:d9:48:6c:95: 28:2e:16:1f:06:ef:e9:19:6d:79:9f:9b:7e:b6:f5:59:d1:28: d2:2f:6d:ac:08:5f:6f:c3:28:1e:7d:78:18:fc:89:b2:45:08: 08:30:a1:c1:2d:60:a7:3c:cc:ee:5e:f7:78:b8:55:02:54:18: 7e:da:70:8b:a2:39:3b:71:8a:5a:1d:f3:0c:4e:23:44:4f:0b: dc:82:4d:f8:38:f0:5e:a0:23:9b:29:6a:16:d7:61:ad:75:4c: cb:64:16:a6:67:3a:2a:87:34:8e:5c:2d:8c:86:b0:e6:24:3a: 12:af:16:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURc3tSqsnjxAZj32Nz4zi1VOaT8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNTA0MjUwNjI2NTNaFw0yNTA0MjgwNjU3NTNaMDMxMTAvBgNV BAMTKDRGMzhFREUyMjJBQzIxRUY1M0RDREYwOEQwMjg1ODEwMDBFRDk3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0d6aFl5cOC+0FCtIXBaRacrM 7zGKSV5NRNAHKIFErmsMxBfnmFlGBLOT47yjr0nWCCVR7jB95E2cgxK8PkbvOv6O 27ZiGtLzvcVORXX3LpIGy906ZK+pwDf0vMjtX197MiACGy/rr9UqZel2a+haAZd8 ZOxFaX/EoAbarDVe3D4k5a35WQiTqo7+y57Ec2/upJTp+MDx7qscCtgL9CGpohER 8Ks4/hlkWhCwRn02B8w0FqpBWStfh1dtER3GJNRwfOgScOY6whdpBa27IhfLPQLO hktTfft/XCTynNmfkj+g12mEcRqYtrHfKA2MhXm5pwT5H2zeZ5AwrKyfWrG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTzjt4iKsIe9T3N8I0ChYEADtlw0wHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4jYwoszKRXbNMOQp8dqbCWJ10SbiVuur6Z 3PFk15ZxHgV6sNNDyqRzE/vr7TGd5KQBVEWxjrvgxn7r4tRlcv4VJVq5EIkQ1a3T vMa/ZnZo7d5NPjZqR/mneCnig9FXOAywYhWOf5pTAGXWCv2K1ms5dpyBfdvfhjYc rff9vtHNO7RL7elRIVsS2LzU2UhslSguFh8G7+kZbXmfm3629VnRKNIvbawIX2/D KB59eBj8ibJFCAgwocEtYKc8zO5e93i4VQJUGH7acIuiOTtxilod8wxOI0RPC9yC Tfg48F6gI5spahbXYa11TMtkFqZnOiqHNI5cLYyGsOYkOhKvFjM= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net