$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: quXUfUe4JvZS3I7U+F9JKzGugnJoyt5CoXLPFVOwutA= Subject key identifier: D9:52:1D:75:A3:34:26:64:ED:5B:97:96:A1:D1:F6:8E:F1:A4:0E:92 Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 52BC6ECA9C8599363F36C210108A530564339EE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 01B8 Signing time: Fri 25 Apr 2025 15:21:19 +0000 Manifest this update: Fri 25 Apr 2025 15:16:19 +0000 Manifest next update: Mon 28 Apr 2025 23:17:19 +0000 Files and hashes: 1: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: 6gMRYCDTA91uCrSpOJHQwzXcDUzZZQ/fPopmQLU54uQ=) 2: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: GK6TjIFHP3OKYpdF9mQ2NlZ0xI3zyr1c1AWcP5mkKcw=) 3: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: ueCy/oZgE2EDq74zPEawc0dHRIUWhcFP2+zf5WfxtLk=) 4: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: jkr10nu1KheD3rFITjZKu8+8qzjxbIrM8OjPSducB+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 23:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bc:6e:ca:9c:85:99:36:3f:36:c2:10:10:8a:53:05:64:33:9e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Apr 25 15:16:19 2025 GMT Not After : Apr 28 23:17:19 2025 GMT Subject: CN=D9521D75A3342664ED5B9796A1D1F68EF1A40E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:a2:57:90:cd:65:8a:98:65:a1:28:da:68: 58:9f:9f:67:25:4f:90:a4:42:47:85:0f:46:b9:ec: 7c:a5:ce:db:e1:d3:c7:48:ff:2c:20:9e:32:61:71: b2:82:c6:2f:a2:ba:9c:ff:63:32:17:88:2d:62:46: 8f:d6:6c:b8:ab:fe:72:28:55:e4:e5:38:81:79:57: 6e:8f:08:b4:48:4b:f9:97:59:5e:12:21:46:3c:86: 38:a3:c1:0a:01:70:76:71:13:e2:c3:07:61:10:b2: 35:5f:5c:8e:2f:51:96:e9:39:d0:21:d8:e0:8f:f5: a9:b3:cb:dd:51:3c:95:ed:8b:67:55:d0:2f:67:65: 37:09:85:ee:e3:78:b6:a8:97:96:f1:15:d7:ba:66: 76:1e:a6:b0:37:33:04:8d:5c:ef:0d:8f:57:18:58: 7e:ef:15:a4:b7:22:42:c0:7d:fa:27:e7:fd:a3:3d: 70:e1:10:1d:c5:40:8c:08:9c:1b:e8:d5:54:eb:36: 99:39:66:18:2e:70:27:ce:8c:5a:96:ea:ff:7e:1b: ef:d9:30:0b:23:d3:04:4e:d5:23:80:5a:37:ce:00: 75:f4:2d:6b:69:8b:7c:81:7d:de:98:14:9e:e6:5d: e4:aa:03:bc:35:9c:ad:25:3c:78:72:59:39:f8:ee: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:52:1D:75:A3:34:26:64:ED:5B:97:96:A1:D1:F6:8E:F1:A4:0E:92 X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:35:c4:19:33:51:65:d7:c7:ad:b6:16:9a:e5:57:b3:3f:39: 77:5d:61:55:ac:2c:04:7b:b1:a5:da:03:02:95:36:ba:aa:b6: 0f:d8:d4:c7:81:9b:f5:80:32:85:e8:af:1d:cb:f9:48:45:0f: 53:9b:e2:e4:e5:0d:06:d8:b4:6d:af:8c:67:d2:ea:ea:f4:27: ff:d7:32:3d:08:4f:6a:91:b7:e8:ea:1a:f8:50:0f:ef:7a:67: 01:2c:a8:c3:08:03:6e:94:4e:69:d4:60:26:9a:49:20:1f:c4: 13:e4:44:c4:8b:5f:39:1c:fe:7d:4a:30:89:1f:0e:a0:2b:b8: f6:f6:cb:a9:62:e1:23:cf:9b:06:88:cb:ca:70:53:c5:27:94: fa:6e:a0:5f:48:f1:d5:e9:96:23:18:dc:10:9d:c1:86:85:98: 91:94:97:f5:2d:be:53:80:ae:7c:80:5c:b3:c7:a9:58:d9:af: 18:18:56:5c:0c:73:1a:87:ad:f7:fe:ea:12:39:f0:76:75:c8: ea:4a:09:9c:e0:f7:fe:88:3c:8b:31:90:f4:40:63:16:d1:1d: 69:ca:55:b5:7b:c3:6d:59:15:0d:0d:ae:52:82:23:1b:c2:84: 81:3d:6a:96:69:2f:25:92:26:65:fc:2e:6c:b7:ce:28:89:f7: 80:ac:22:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrxuypyFmTY/NsIQEIpTBWQznuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTA0MjUxNTE2MTlaFw0yNTA0MjgyMzE3MTlaMDMxMTAvBgNV BAMTKEQ5NTIxRDc1QTMzNDI2NjRFRDVCOTc5NkExRDFGNjhFRjFBNDBFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp86JXkM1liphloSjaaFifn2cl T5CkQkeFD0a57Hylztvh08dI/ywgnjJhcbKCxi+iupz/YzIXiC1iRo/WbLir/nIo VeTlOIF5V26PCLRIS/mXWV4SIUY8hjijwQoBcHZxE+LDB2EQsjVfXI4vUZbpOdAh 2OCP9amzy91RPJXti2dV0C9nZTcJhe7jeLaol5bxFde6ZnYeprA3MwSNXO8Nj1cY WH7vFaS3IkLAffon5/2jPXDhEB3FQIwInBvo1VTrNpk5ZhgucCfOjFqW6v9+G+/Z MAsj0wRO1SOAWjfOAHX0LWtpi3yBfd6YFJ7mXeSqA7w1nK0lPHhyWTn47iZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VIddaM0JmTtW5eWodH2jvGkDpIwHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk1xBkzUWXXx622FprlV7M/OXddYVWsLAR7 saXaAwKVNrqqtg/Y1MeBm/WAMoXorx3L+UhFD1Ob4uTlDQbYtG2vjGfS6ur0J//X Mj0IT2qRt+jqGvhQD+96ZwEsqMMIA26UTmnUYCaaSSAfxBPkRMSLXzkc/n1KMIkf DqAruPb2y6li4SPPmwaIy8pwU8UnlPpuoF9I8dXpliMY3BCdwYaFmJGUl/UtvlOA rnyAXLPHqVjZrxgYVlwMcxqHrff+6hI58HZ1yOpKCZzg9/6IPIsxkPRAYxbRHWnK VbV7w21ZFQ0NrlKCIxvChIE9apZpLyWSJmX8Lmy3ziiJ94CsIoU= -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net