$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: orktenl0orIubhttKVADJIxOXjwZIF/e5MNh8RncNDY= Subject key identifier: D0:42:8A:3C:51:8C:7C:F4:8C:85:B2:01:1A:DA:4D:8C:77:1A:48:29 Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 67F51109BD23B606987CC6A12C7806B657743C0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 04D0 Signing time: Fri 25 Apr 2025 03:31:53 +0000 Manifest this update: Fri 25 Apr 2025 03:26:53 +0000 Manifest next update: Mon 28 Apr 2025 10:21:53 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: 0fpof/Xi9yHslCngFyOxsm3BGmq7hOc9WgdHP1lT/Wk=) 2: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: fIAZJQRdc8KtDMugJm1HvAiImbOSq132x0qDhsfcvRU=) 3: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: NCFMTB+6CHYXkcepHvjhz7TzV8Mxuk6TBlwx3WylIcU=) 4: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: ZFLmF3SV54nBd37brHNUEmTE7UzVIeho8dE/LMRbzfI=) 5: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: XC4DJTC5TXfJiRmf88bzdSttttfS17ZVr5eZVV+CORQ=) 6: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: UstTiYAWRY3Cy+bDYUqZ/arOiMdslwlVWqwEWaGFovA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f5:11:09:bd:23:b6:06:98:7c:c6:a1:2c:78:06:b6:57:74:3c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Apr 25 03:26:53 2025 GMT Not After : Apr 28 10:21:53 2025 GMT Subject: CN=D0428A3C518C7CF48C85B2011ADA4D8C771A4829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:83:60:33:b9:23:7d:75:34:f6:04:a1:c2: b2:e1:1e:fb:64:c4:c9:32:e1:3d:23:aa:36:51:f8: 0d:35:ab:c0:3d:db:75:77:be:b8:56:35:0d:fd:5b: a4:93:a3:22:0c:f3:69:fc:19:36:2d:95:4e:a9:c3: cb:b8:e1:6a:cc:d4:e6:7e:a7:b7:de:81:c5:a1:7e: fa:4b:d4:76:28:d8:74:62:a2:8a:7a:c3:68:9b:af: fa:80:68:be:8b:f3:6d:0e:49:86:ae:d0:70:dd:3f: 63:fe:75:ec:d3:ae:e4:06:d5:90:41:a9:c3:26:84: f8:93:94:4a:6d:0f:4e:0e:91:25:3b:55:17:74:8a: 84:ac:f9:85:0a:23:a8:ea:d9:d9:8e:d7:20:59:3a: 7e:c0:e8:f0:bf:58:75:d3:8a:1f:19:58:5b:cd:0f: f4:b6:b5:e8:96:87:74:79:17:42:32:c2:22:fc:60: 05:0b:ff:66:97:02:a2:d8:ff:9d:90:4d:0b:2c:92: 97:fb:5b:bb:09:28:91:3f:1e:e2:01:81:d8:88:18: 18:37:d8:84:ad:44:30:28:af:5c:b5:56:ec:a1:50: 3b:f4:f6:9e:6c:a3:fa:9a:04:50:7d:d8:6d:64:17: 7e:8d:e2:3d:b8:c4:e9:0c:f6:3d:24:b2:e6:5c:56: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:42:8A:3C:51:8C:7C:F4:8C:85:B2:01:1A:DA:4D:8C:77:1A:48:29 X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d1:05:e3:d0:da:e5:4c:aa:6a:db:00:5a:ed:9e:42:20:16: c7:0e:42:96:13:10:a8:0e:52:65:d9:69:7d:7d:80:6b:77:36: d5:00:87:97:fa:9d:88:ea:78:6b:c1:f1:87:5f:24:9a:8c:99: db:ad:75:f9:4f:b3:56:2e:9d:88:c9:de:75:ed:ad:34:80:da: 97:2f:49:f6:c3:70:aa:28:dd:13:f2:91:ee:bb:40:be:65:3a: ff:8b:2d:17:09:3f:25:63:52:54:93:ca:ca:d7:c1:1b:e4:2b: 21:9a:b1:8e:df:01:e0:a6:54:55:e5:64:4b:3f:c5:e7:12:5e: ec:21:a6:cd:91:f1:f4:b5:e8:a5:41:56:82:5d:af:26:9b:72: b5:6c:4e:15:1f:7f:45:8e:46:75:29:d8:20:f6:fb:58:4e:7c: f8:09:b8:cc:0d:b1:7d:a6:62:9e:e4:8b:ef:3e:7a:88:cd:38: ab:b0:7a:5c:fe:46:ca:8e:69:bf:e4:9a:eb:ba:97:a7:47:0d: e4:8e:8b:2a:71:db:76:e2:24:31:fe:bd:ef:14:43:24:35:d2: c0:89:0e:f8:02:ee:58:2e:2b:a7:b3:15:9a:40:f5:25:e0:4d: 04:97:05:75:6c:e5:a3:ce:72:ba:14:a1:f3:db:a4:93:33:3e: 9b:1f:15:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/URCb0jtgaYfMahLHgGtld0PAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTA0MjUwMzI2NTNaFw0yNTA0MjgxMDIxNTNaMDMxMTAvBgNV BAMTKEQwNDI4QTNDNTE4QzdDRjQ4Qzg1QjIwMTFBREE0RDhDNzcxQTQ4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaYNgM7kjfXU09gShwrLhHvtk xMky4T0jqjZR+A01q8A923V3vrhWNQ39W6SToyIM82n8GTYtlU6pw8u44WrM1OZ+ p7fegcWhfvpL1HYo2HRioop6w2ibr/qAaL6L820OSYau0HDdP2P+dezTruQG1ZBB qcMmhPiTlEptD04OkSU7VRd0ioSs+YUKI6jq2dmO1yBZOn7A6PC/WHXTih8ZWFvN D/S2teiWh3R5F0IywiL8YAUL/2aXAqLY/52QTQsskpf7W7sJKJE/HuIBgdiIGBg3 2IStRDAor1y1VuyhUDv09p5so/qaBFB92G1kF36N4j24xOkM9j0ksuZcVmfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0EKKPFGMfPSMhbIBGtpNjHcaSCkwHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfRBePQ2uVMqmrbAFrtnkIgFscOQpYTEKgO UmXZaX19gGt3NtUAh5f6nYjqeGvB8YdfJJqMmdutdflPs1YunYjJ3nXtrTSA2pcv SfbDcKoo3RPyke67QL5lOv+LLRcJPyVjUlSTysrXwRvkKyGasY7fAeCmVFXlZEs/ xecSXuwhps2R8fS16KVBVoJdryabcrVsThUff0WORnUp2CD2+1hOfPgJuMwNsX2m Yp7ki+8+eojNOKuwelz+RsqOab/kmuu6l6dHDeSOiypx23biJDH+ve8UQyQ10sCJ DvgC7lguK6ezFZpA9SXgTQSXBXVs5aPOcroUofPbpJMzPpsfFU0= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net