$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: +qbgOOJhBJudPWr6DJ1I8HanI3Tp1sx09hZOIB/WMik= Subject key identifier: 05:F2:78:6E:A2:7B:EC:11:8C:8E:49:E1:22:A1:00:81:53:E1:F2:74 Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 3D9F302E81407FD2002E2EAC5F6AB4666DEB8F92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 02EA Signing time: Fri 25 Apr 2025 03:10:49 +0000 Manifest this update: Fri 25 Apr 2025 03:05:49 +0000 Manifest next update: Mon 28 Apr 2025 05:47:49 +0000 Files and hashes: 1: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pokBZpL5hJ0olRQ6JHoy2AMfLYfeAfsOoOkW3DB0M7g=) 2: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: ROwlnpqCyaXK8jtPlJ5Ky0HyxksYlACHiUQekhnZN0w=) 3: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: ZhD6Tun/D1mALATXfxDr8X9TH6U/V7UE8dkQCqouYtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9f:30:2e:81:40:7f:d2:00:2e:2e:ac:5f:6a:b4:66:6d:eb:8f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Apr 25 03:05:49 2025 GMT Not After : Apr 28 05:47:49 2025 GMT Subject: CN=05F2786EA27BEC118C8E49E122A1008153E1F274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4f:28:37:36:24:c9:82:43:99:75:22:76:40: a2:51:af:98:29:ec:a4:3d:e3:72:2e:6c:32:49:a5: dc:93:33:65:b0:22:af:86:b6:d8:6c:95:4f:6c:76: bc:fa:97:92:6d:77:19:9a:9e:e6:9e:d4:e7:3a:3b: 94:1d:1f:0a:3a:fc:0d:f5:a8:d2:c2:30:56:14:5f: d0:4f:36:75:2c:3e:4a:80:18:0f:72:14:6f:9a:f6: 92:f2:ca:4c:0a:ec:44:2e:fe:a4:7f:10:a4:f4:05: c1:02:92:15:f1:90:7b:05:64:a9:e9:34:2c:b1:40: cb:ec:83:ed:a2:db:a8:ce:66:c2:8e:94:00:00:7d: cc:7c:e2:69:95:ff:b9:fd:a2:d8:cd:e9:88:97:00: db:f5:45:45:12:8b:b8:2a:bc:73:32:23:f4:06:49: d5:a7:22:19:80:15:6a:0d:c2:a2:7e:06:73:10:d2: 8e:b7:93:a9:f8:b5:d4:6b:a8:18:52:15:f3:2e:8a: c4:c7:24:78:0b:c0:a8:fb:66:57:db:3d:c9:59:85: 11:4f:73:fe:77:6d:ee:95:66:4d:85:a8:64:62:b9: 72:7e:1b:ab:4d:f4:c0:a3:11:5a:37:96:b1:8d:77: 4e:83:de:5b:18:f2:dc:ee:61:18:2d:05:41:8e:61: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F2:78:6E:A2:7B:EC:11:8C:8E:49:E1:22:A1:00:81:53:E1:F2:74 X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2f:cb:16:56:45:80:9d:54:c6:88:e8:47:ca:1e:93:e5:3c: 1b:e5:5b:a6:a3:1a:6f:97:7a:1a:99:62:60:cd:da:bf:01:8e: a3:ba:c6:41:64:50:79:81:63:60:48:90:69:cb:61:05:1d:98: 65:e6:e0:ed:f1:03:55:45:e1:8a:cb:06:44:27:80:ca:b4:2c: 37:e2:5e:97:b9:7a:de:aa:7b:75:e0:30:4e:9e:43:98:e6:f3: 9d:17:01:3f:11:bb:fa:8a:98:d7:93:9d:e0:1d:9f:72:c9:52: 24:98:14:a3:2a:37:20:57:56:9e:9e:28:27:34:49:a3:3f:d9: 4e:86:f2:79:b1:fe:6f:5b:b5:c5:36:e4:e7:df:cd:9a:41:f0: 90:ed:6b:42:b5:b4:bc:c6:f2:16:c4:b3:8b:45:f7:ab:7e:76: 68:35:2e:9c:a2:b1:c6:6c:42:e2:32:d9:73:29:ad:c1:12:7c: 3f:8b:c7:e0:85:ec:24:bc:33:36:d8:48:98:2c:92:d8:4c:4f: 86:7c:d6:a9:ca:00:57:18:a2:9c:f6:c7:a3:12:25:75:d3:5a: 91:f2:d4:a9:eb:c2:16:19:9d:4e:5a:d8:f4:2b:af:71:60:03: 79:f8:e8:e0:27:1d:2a:57:08:8b:8e:78:10:7a:a0:ac:cd:a7: eb:a5:55:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZ8wLoFAf9IALi6sX2q0Zm3rj5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNTA0MjUwMzA1NDlaFw0yNTA0MjgwNTQ3NDlaMDMxMTAvBgNV BAMTKDA1RjI3ODZFQTI3QkVDMTE4QzhFNDlFMTIyQTEwMDgxNTNFMUYyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTyg3NiTJgkOZdSJ2QKJRr5gp 7KQ943IubDJJpdyTM2WwIq+GtthslU9sdrz6l5Jtdxmanuae1Oc6O5QdHwo6/A31 qNLCMFYUX9BPNnUsPkqAGA9yFG+a9pLyykwK7EQu/qR/EKT0BcECkhXxkHsFZKnp NCyxQMvsg+2i26jOZsKOlAAAfcx84mmV/7n9otjN6YiXANv1RUUSi7gqvHMyI/QG SdWnIhmAFWoNwqJ+BnMQ0o63k6n4tdRrqBhSFfMuisTHJHgLwKj7ZlfbPclZhRFP c/53be6VZk2FqGRiuXJ+G6tN9MCjEVo3lrGNd06D3lsY8tzuYRgtBUGOYV/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBfJ4bqJ77BGMjknhIqEAgVPh8nQwHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQvyxZWRYCdVMaI6EfKHpPlPBvlW6ajGm+X ehqZYmDN2r8BjqO6xkFkUHmBY2BIkGnLYQUdmGXm4O3xA1VF4YrLBkQngMq0LDfi Xpe5et6qe3XgME6eQ5jm850XAT8Ru/qKmNeTneAdn3LJUiSYFKMqNyBXVp6eKCc0 SaM/2U6G8nmx/m9btcU25OffzZpB8JDta0K1tLzG8hbEs4tF96t+dmg1LpyiscZs QuIy2XMprcESfD+Lx+CF7CS8MzbYSJgskthMT4Z81qnKAFcYopz2x6MSJXXTWpHy 1KnrwhYZnU5a2PQrr3FgA3n46OAnHSpXCIuOeBB6oKzNp+ulVcw= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net