$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: HPZhsvHyfiQh9FBVh/Le/OUQ9Ue2qgRBbEKXmvPATcc= Subject key identifier: C2:50:44:39:DB:D2:9C:B0:63:42:6B:03:8A:B5:C5:E2:78:41:EF:70 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 1E0549EB02E55A604936454E644DA491580C037F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: 50 Signing time: Thu 24 Apr 2025 10:51:23 +0000 Manifest this update: Thu 24 Apr 2025 10:46:23 +0000 Manifest next update: Sun 27 Apr 2025 15:01:23 +0000 Files and hashes: 1: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: A/YLJtvRcqB6Plx6jk8rQpzOROGcUNFxCljRJLeuo6A=) 2: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: BSqOBaWfJQqz33lACDAWl5BBUo8xhKyti0YdsIQS7aQ=) 3: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: 6WbVS+v7HN+Kets1foBaT2kDE0v8xmm7+65g6YMRGEk=) 4: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: reynj2rdnK/jisos3BLgNO3WmPAN7XuUU4JIx1owC9M=) 5: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: YpIBjqK/gGPSCbvsDHOwTz44pQAN0MQfXErjudoCzGo=) 6: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: Wy3XFvvxWlmSMqptgoEgqs9HlG+jenjszHddJNByUP8=) 7: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: LliQsaEGmOxiFYn7eU4CgTQQMhXBR9mQg+Ga47dX8vc=) 8: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: eYux8MlazvFG7evneWwa6f79HrtIQhEs6bQRxE8BgeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:05:49:eb:02:e5:5a:60:49:36:45:4e:64:4d:a4:91:58:0c:03:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Apr 24 10:46:23 2025 GMT Not After : Apr 27 15:01:23 2025 GMT Subject: CN=C2504439DBD29CB063426B038AB5C5E27841EF70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:23:d4:b6:70:33:8d:d9:d7:3a:5a:70:c1: 31:d6:29:10:db:e0:35:e4:9f:71:40:24:3f:97:3a: dc:3a:24:bb:f3:08:3e:2d:de:a5:cc:61:36:d4:a0: 04:a4:71:0f:e5:67:a7:4c:95:33:d9:e8:1b:87:2b: 35:40:a0:a6:87:ae:22:90:02:95:03:f3:be:7a:26: b2:9d:aa:87:37:16:87:84:97:ad:d7:26:00:1f:0f: f1:01:46:69:c4:ba:d2:21:79:eb:88:88:36:9c:94: a5:2a:01:bf:7c:31:13:54:f4:e0:28:e5:77:3d:9c: f2:96:35:41:c4:26:5f:3f:bb:26:81:74:1d:dc:e3: 4f:e7:75:b4:c8:db:89:ba:dd:1e:10:d6:ac:81:fd: 74:30:32:5a:48:a8:bf:df:83:97:55:38:14:f3:91: 56:cf:b7:a9:05:65:c1:b8:a1:ed:71:19:25:31:fb: 81:01:04:06:52:0b:00:d2:dd:f6:fd:b8:92:48:e4: 12:53:8d:3e:bf:8a:00:73:1f:07:4d:dd:bd:18:9d: 07:b0:7c:c7:79:be:3c:db:4a:e6:68:c2:4a:2e:69: c8:e7:ff:ff:be:39:eb:48:28:05:b4:6f:9b:a9:81: e7:a8:e1:13:a8:3c:80:b1:ca:a2:43:b2:b2:d3:ab: 25:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:50:44:39:DB:D2:9C:B0:63:42:6B:03:8A:B5:C5:E2:78:41:EF:70 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:97:35:62:12:ab:80:e1:d4:8c:fc:32:61:b9:fb:09:4c:e3: 68:6e:23:ed:21:60:70:2b:98:51:5b:22:7b:4f:2b:25:31:93: a7:36:6c:43:c9:d7:8f:e9:2c:6c:2c:1a:94:39:69:c5:d6:bb: 70:10:9c:e7:18:d5:6a:47:6a:93:ac:1d:05:7a:6d:46:f1:b2: 31:9a:72:a2:c1:ea:ad:c5:3a:ba:da:81:21:1a:c6:8a:09:46: d4:7f:b0:4d:2d:d1:ec:c9:5a:05:3e:23:40:42:e7:b6:e2:39: 51:20:64:10:b8:e5:04:4b:cf:23:bb:b3:67:af:c1:81:02:ef: 60:e6:c0:a1:7f:2c:c4:f3:58:4a:f6:34:5c:7a:0f:8c:f3:4e: ec:c0:97:42:ec:53:84:91:67:66:51:ed:d5:e0:29:20:42:c4: 86:3b:5b:15:55:94:5a:d4:5f:1e:fc:ee:88:12:16:8f:2f:05: 68:28:f8:fa:86:ca:60:8b:96:88:ba:3c:2e:f6:5e:de:7e:71: da:3d:ed:8d:90:c3:b4:72:01:1a:89:09:fd:2a:c3:01:3a:3e: 0d:39:30:f5:4e:26:bb:61:61:71:f8:30:4e:53:15:73:da:f9: ca:19:22:70:75:15:d5:d8:7f:93:8b:51:7b:b7:67:e1:82:ff: d0:f3:98:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgVJ6wLlWmBJNkVOZE2kkVgMA38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTA0MjQxMDQ2MjNaFw0yNTA0MjcxNTAxMjNaMDMxMTAvBgNV BAMTKEMyNTA0NDM5REJEMjlDQjA2MzQyNkIwMzhBQjVDNUUyNzg0MUVGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxCPUtnAzjdnXOlpwwTHWKRDb 4DXkn3FAJD+XOtw6JLvzCD4t3qXMYTbUoASkcQ/lZ6dMlTPZ6BuHKzVAoKaHriKQ ApUD8756JrKdqoc3FoeEl63XJgAfD/EBRmnEutIheeuIiDaclKUqAb98MRNU9OAo 5Xc9nPKWNUHEJl8/uyaBdB3c40/ndbTI24m63R4Q1qyB/XQwMlpIqL/fg5dVOBTz kVbPt6kFZcG4oe1xGSUx+4EBBAZSCwDS3fb9uJJI5BJTjT6/igBzHwdN3b0YnQew fMd5vjzbSuZowkouacjn//++OetIKAW0b5upgeeo4ROoPICxyqJDsrLTqyVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlBEOdvSnLBjQmsDirXF4nhB73AwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuXNWISq4Dh1Iz8MmG5+wlM42huI+0hYHAr mFFbIntPKyUxk6c2bEPJ14/pLGwsGpQ5acXWu3AQnOcY1WpHapOsHQV6bUbxsjGa cqLB6q3FOrragSEaxooJRtR/sE0t0ezJWgU+I0BC57biOVEgZBC45QRLzyO7s2ev wYEC72DmwKF/LMTzWEr2NFx6D4zzTuzAl0LsU4SRZ2ZR7dXgKSBCxIY7WxVVlFrU Xx787ogSFo8vBWgo+PqGymCLloi6PC72Xt5+cdo97Y2Qw7RyARqJCf0qwwE6Pg05 MPVOJrthYXH4ME5TFXPa+coZInB1FdXYf5OLUXu3Z+GC/9DzmCw= -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net