$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: HIxvgp1v9ETnvCs3YHV31gho1U3jOp01QxU0dXGCj2w= Subject key identifier: EE:2C:9F:50:32:42:7C:B7:D2:51:25:26:D3:E8:96:5F:20:06:50:C4 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 1A77BC87D9051633864679C8D429DE72F951D9D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 04C7 Signing time: Thu 24 Apr 2025 08:31:19 +0000 Manifest this update: Thu 24 Apr 2025 08:26:19 +0000 Manifest next update: Sun 27 Apr 2025 15:22:19 +0000 Files and hashes: 1: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: 92gKUFTX61p+4YripVCwd15S8Yb4BjWMvBxbbkAlu1M=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: Ixm7ifW1MV0NJkzYpRAOaXDcBc0UAsgPk2HmJSCGIc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:77:bc:87:d9:05:16:33:86:46:79:c8:d4:29:de:72:f9:51:d9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Apr 24 08:26:19 2025 GMT Not After : Apr 27 15:22:19 2025 GMT Subject: CN=EE2C9F5032427CB7D2512526D3E8965F200650C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:a5:fb:7d:18:78:c9:f6:37:90:14:c5:3b: b8:20:88:ce:c4:7a:ae:53:6f:de:11:a6:f7:5f:03: 3e:e9:49:b3:3b:c5:23:a5:09:88:1a:29:bd:6e:80: 2d:95:34:da:55:60:17:98:2a:02:f0:7a:17:da:7c: 11:99:06:52:bd:75:fb:66:35:e6:58:97:4c:46:5c: e6:43:12:5c:e2:62:70:4b:5c:72:7f:b0:24:f9:e5: af:b9:4a:6f:37:a6:ff:9a:03:99:15:6f:dc:7f:b9: 6a:48:cd:cb:48:12:34:1e:ab:48:18:52:05:1c:8d: b4:99:d3:74:1f:bc:00:86:74:ce:02:31:fa:89:6b: df:c2:0c:0d:da:95:72:10:66:89:d3:70:58:d2:22: c6:05:b7:41:c7:4e:00:3b:7b:69:8e:08:71:b0:ef: a4:0a:74:7c:2d:7a:36:32:b9:2d:fc:d0:3a:8c:6f: 18:32:47:5d:83:5a:f1:77:60:77:04:7c:4e:74:c8: a8:95:9c:3d:76:cc:d0:87:df:91:b9:96:d7:a9:63: 54:4f:28:df:0e:cb:88:4a:35:8c:59:97:5d:4e:78: 5a:91:68:2c:da:bb:d8:b2:b9:c9:06:e9:2f:10:6d: ab:cf:5e:7b:54:8a:cc:80:03:fc:ff:23:0d:09:f0: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:9F:50:32:42:7C:B7:D2:51:25:26:D3:E8:96:5F:20:06:50:C4 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2d:d3:40:52:32:72:65:e8:95:69:4a:ce:ce:c9:54:0e:ee: 24:67:86:0f:9f:6b:54:e2:66:1c:b4:9b:2a:df:43:97:d8:ba: 62:0c:c3:65:c6:45:16:3b:7c:85:b8:b1:ff:1a:64:4e:1a:e9: 31:06:0d:89:75:83:b8:9c:1c:ef:0d:86:a5:37:8d:aa:2c:01: 72:0e:4a:00:9a:04:04:90:56:3e:3a:60:c6:d9:a2:3f:91:f6: 91:36:e6:b6:f8:57:ee:56:f2:a7:22:f2:75:0f:48:56:d6:10: e1:04:08:3b:05:12:c5:28:2d:c9:53:49:13:3b:a6:1f:da:62: 44:93:35:09:df:a7:0f:12:8b:24:10:81:45:89:a1:76:c6:40: 5d:1c:d2:fc:a1:ae:93:ed:39:a0:de:5e:cd:16:d6:2d:60:39: ef:00:d2:bc:fb:16:ed:80:90:8b:bc:92:54:98:37:1d:5d:0e: 8a:9a:c0:a7:f4:17:93:6c:75:90:74:a8:68:ce:47:36:ba:da: c8:b3:8b:cf:95:cd:9b:9c:d8:9a:80:4e:64:9e:5d:19:d6:33: dc:4d:c0:af:8f:9a:3a:39:4f:5a:ad:c7:48:7c:a0:5b:54:1d: ec:fb:6c:87:0c:30:94:8f:4d:84:1a:90:ca:76:fb:9d:49:95: 77:64:60:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGne8h9kFFjOGRnnI1CnecvlR2dMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTA0MjQwODI2MTlaFw0yNTA0MjcxNTIyMTlaMDMxMTAvBgNV BAMTKEVFMkM5RjUwMzI0MjdDQjdEMjUxMjUyNkQzRTg5NjVGMjAwNjUwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisKX7fRh4yfY3kBTFO7ggiM7E eq5Tb94RpvdfAz7pSbM7xSOlCYgaKb1ugC2VNNpVYBeYKgLwehfafBGZBlK9dftm NeZYl0xGXOZDElziYnBLXHJ/sCT55a+5Sm83pv+aA5kVb9x/uWpIzctIEjQeq0gY UgUcjbSZ03QfvACGdM4CMfqJa9/CDA3alXIQZonTcFjSIsYFt0HHTgA7e2mOCHGw 76QKdHwtejYyuS380DqMbxgyR12DWvF3YHcEfE50yKiVnD12zNCH35G5ltepY1RP KN8Oy4hKNYxZl11OeFqRaCzau9iyuckG6S8QbavPXntUisyAA/z/Iw0J8F3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7iyfUDJCfLfSUSUm0+iWXyAGUMQwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0t00BSMnJl6JVpSs7OyVQO7iRnhg+fa1Ti Zhy0myrfQ5fYumIMw2XGRRY7fIW4sf8aZE4a6TEGDYl1g7icHO8NhqU3jaosAXIO SgCaBASQVj46YMbZoj+R9pE25rb4V+5W8qci8nUPSFbWEOEECDsFEsUoLclTSRM7 ph/aYkSTNQnfpw8SiyQQgUWJoXbGQF0c0vyhrpPtOaDeXs0W1i1gOe8A0rz7Fu2A kIu8klSYNx1dDoqawKf0F5NsdZB0qGjORza62sizi8+VzZuc2JqATmSeXRnWM9xN wK+Pmjo5T1qtx0h8oFtUHez7bIcMMJSPTYQakMp2+51JlXdkYAs= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net