$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: vGA6gCuFXkNBAaQWyFOI+Om76oO9RJgC3Xc7+MGZG2M= Subject key identifier: 43:48:4B:CE:8D:21:FB:E4:54:FD:19:B1:19:4E:A6:12:E2:9F:DE:55 Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 5FF8368C228A19743B69EFB549D1D571DBC9D369 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 02C5 Signing time: Wed 23 Apr 2025 17:30:47 +0000 Manifest this update: Wed 23 Apr 2025 17:25:47 +0000 Manifest next update: Sun 27 Apr 2025 05:11:47 +0000 Files and hashes: 1: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 8WaehvbTOcF3pzR4s59v/gds3hIUxmrMCC7s3FSug0w=) 2: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: hDB00TLneDpVkLNbe7aAfk3b6UUvF3I8dBjAf/SLFFI=) 3: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: XbIXaBlgITySOhG/uspxxWnRxeiDl4kKWER/oYyIcJ4=) 4: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: LzUu28CpC6kDCJFruLH+2BtkdTH3sqUu5ZK0d+XHEFg=) 5: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: xGtojE5xQ38ofrHeox7psZGSkp6l9QQja9HVSx7iji8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f8:36:8c:22:8a:19:74:3b:69:ef:b5:49:d1:d5:71:db:c9:d3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Apr 23 17:25:47 2025 GMT Not After : Apr 27 05:11:47 2025 GMT Subject: CN=43484BCE8D21FBE454FD19B1194EA612E29FDE55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:26:af:e2:61:e0:c3:47:90:dc:86:c4:80: ed:7f:28:14:92:ae:2d:1f:51:6e:b6:63:83:e4:ca: 5c:98:b4:3b:e4:ac:6f:b9:c4:ad:7a:54:c5:9b:7e: 72:6d:ec:f9:73:b4:dd:f7:e5:13:26:21:5e:6b:2f: 00:eb:fa:bf:ca:1a:53:a2:bb:92:88:56:bf:76:a8: 76:8b:2a:ad:a9:1a:72:07:29:4a:12:22:58:fd:49: 80:c2:9f:32:9d:cb:53:30:ab:8c:43:e9:a2:2a:f1: 19:0f:f0:ae:c9:98:dd:84:41:7e:2e:6a:f9:61:95: 28:77:01:d2:0a:8d:28:1b:9d:ed:83:9f:cf:11:89: 18:13:98:64:1d:92:b7:a6:46:c8:f6:93:fe:3a:60: a8:44:3e:00:70:72:f0:5e:17:40:12:7b:0a:9d:4e: 56:0d:f6:29:6e:12:8b:be:d5:1a:48:42:00:da:af: 9b:89:c2:c3:91:b3:67:80:e7:69:bf:09:43:c7:ce: 92:7e:45:b0:0a:32:93:7c:1c:c0:b1:17:3d:0e:78: 67:16:78:d8:67:1c:3a:48:9d:a7:8f:d0:74:22:57: 59:5f:9b:ad:c9:5d:03:7c:c1:b0:9b:52:38:15:2d: 59:c4:48:67:15:5f:15:57:d4:4d:50:07:c5:60:5e: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:4B:CE:8D:21:FB:E4:54:FD:19:B1:19:4E:A6:12:E2:9F:DE:55 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9c:be:d9:bd:69:2b:f2:e3:10:47:fd:8c:ad:bf:ea:e4:fc: 22:b6:01:0e:55:c9:15:da:24:6c:c2:fc:11:c3:9a:96:1b:58: e0:ad:5d:6a:72:b3:95:2c:45:18:19:92:7a:39:c9:b6:0d:7e: f3:68:b3:3b:db:d3:04:88:6c:2c:15:1f:5c:b5:fb:41:64:28: a1:c6:80:a7:42:65:ad:0d:e4:45:95:43:4a:25:8e:1c:e1:8c: d7:92:3b:11:9d:d8:48:fc:18:69:a2:cc:0c:55:23:35:34:f7: 4d:ab:2e:3c:de:3a:d4:b8:e2:71:f9:8f:4c:8b:99:da:c7:2f: 0e:50:41:1f:b6:a0:ca:fb:b3:89:bf:8d:17:a3:59:69:89:f5: 7d:42:37:12:f1:cb:81:8a:9a:43:c8:ca:28:76:15:04:85:70: a7:1a:71:58:35:5e:24:47:ea:92:4a:40:33:33:d1:db:cd:86: 5c:c7:c7:39:71:07:62:3f:5d:b4:ce:4b:23:93:ca:df:e5:e2: dc:3b:c6:a8:b1:a4:b6:8c:5d:4b:a1:97:46:af:f3:9d:87:c6: 9d:e1:3f:8e:89:6e:b3:16:6d:cc:64:8e:49:1a:7a:ca:65:54: 0f:c6:dd:a7:f7:7b:46:3f:3e:cb:76:c6:af:65:2e:cf:fc:e9: 22:4c:16:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/g2jCKKGXQ7ae+1SdHVcdvJ02kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTA0MjMxNzI1NDdaFw0yNTA0MjcwNTExNDdaMDMxMTAvBgNV BAMTKDQzNDg0QkNFOEQyMUZCRTQ1NEZEMTlCMTE5NEVBNjEyRTI5RkRFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDegyav4mHgw0eQ3IbEgO1/KBSS ri0fUW62Y4PkylyYtDvkrG+5xK16VMWbfnJt7PlztN335RMmIV5rLwDr+r/KGlOi u5KIVr92qHaLKq2pGnIHKUoSIlj9SYDCnzKdy1Mwq4xD6aIq8RkP8K7JmN2EQX4u avlhlSh3AdIKjSgbne2Dn88RiRgTmGQdkremRsj2k/46YKhEPgBwcvBeF0ASewqd TlYN9iluEou+1RpIQgDar5uJwsORs2eA52m/CUPHzpJ+RbAKMpN8HMCxFz0OeGcW eNhnHDpInaeP0HQiV1lfm63JXQN8wbCbUjgVLVnESGcVXxVX1E1QB8VgXu/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0hLzo0h++RU/RmxGU6mEuKf3lUwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOcvtm9aSvy4xBH/Yytv+rk/CK2AQ5VyRXa JGzC/BHDmpYbWOCtXWpys5UsRRgZkno5ybYNfvNoszvb0wSIbCwVH1y1+0FkKKHG gKdCZa0N5EWVQ0oljhzhjNeSOxGd2Ej8GGmizAxVIzU0902rLjzeOtS44nH5j0yL mdrHLw5QQR+2oMr7s4m/jRejWWmJ9X1CNxLxy4GKmkPIyih2FQSFcKcacVg1XiRH 6pJKQDMz0dvNhlzHxzlxB2I/XbTOSyOTyt/l4tw7xqixpLaMXUuhl0av852Hxp3h P46JbrMWbcxkjkkaesplVA/G3af3e0Y/Pst2xq9lLs/86SJMFv4= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:54 2025 by rpki-client on console.sobornost.net