$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: hyD5o6HgY7ThMJhNMos2KbmnXYt/5OF3DcBogrnJC24= Subject key identifier: 94:9C:B3:A0:1E:6A:79:90:71:A7:C1:C5:B1:F7:76:69:71:6E:9C:6B Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 1E1B4D1C6F8AAC61021C4B3962C5C065009BE98B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 0132 Signing time: Wed 23 Apr 2025 06:11:38 +0000 Manifest this update: Wed 23 Apr 2025 06:06:38 +0000 Manifest next update: Sat 26 Apr 2025 12:26:38 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 3: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: T15q0pKJJ0IVZtiUprQ9JqbgwzSSSG8vn04KBLeIv7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1b:4d:1c:6f:8a:ac:61:02:1c:4b:39:62:c5:c0:65:00:9b:e9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Apr 23 06:06:38 2025 GMT Not After : Apr 26 12:26:38 2025 GMT Subject: CN=949CB3A01E6A799071A7C1C5B1F77669716E9C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:36:dc:42:2f:43:d4:c2:72:49:16:95:55: 2c:29:9e:4d:51:62:0a:03:cc:8d:8a:52:e7:2b:8a: 98:47:e1:ed:6d:80:f2:bf:41:bf:c4:c5:e3:5e:a5: c3:00:68:f7:6e:2b:9a:49:b1:c5:3f:6d:a3:46:4c: 77:56:1e:11:dc:22:90:99:4d:7f:6c:ae:ba:9b:ad: 47:f5:59:30:b5:0a:ec:25:f6:e1:5d:a3:33:9e:16: 59:1a:b2:a8:55:d8:36:20:c7:c3:52:80:9d:3e:c1: 75:8c:4d:b8:9e:fd:01:35:4f:c5:b4:65:5c:11:3c: 0e:a1:45:62:9a:9d:72:fd:3d:b9:c3:1d:93:0f:4c: 02:19:0c:5b:fa:38:fb:ad:88:d5:6f:68:c4:43:39: 76:49:c4:53:88:7b:4d:a5:0a:cd:27:a5:ab:65:ec: 74:09:4d:4f:82:27:68:c5:12:49:99:be:ca:01:eb: 33:a6:e5:bc:27:65:10:e2:cc:71:ca:a6:f9:30:6a: c9:dc:92:40:30:7d:f2:f9:32:d0:66:bd:c9:94:53: b5:99:1a:f2:3e:8f:e8:70:db:6b:56:14:7b:37:1f: e2:bd:a8:13:1d:81:2d:b7:2e:ac:ed:24:75:90:f7: e9:16:3a:ba:1c:e8:4c:ec:f4:4b:d3:74:5c:e4:4e: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9C:B3:A0:1E:6A:79:90:71:A7:C1:C5:B1:F7:76:69:71:6E:9C:6B X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:dc:1e:6b:23:8c:94:72:0f:05:fc:be:9e:7c:fb:50:0c: 90:3f:5e:ca:9c:2e:8e:77:f0:13:c0:fd:c8:47:e8:63:47:0f: d3:7f:52:68:da:92:4f:61:d5:89:fb:9a:8d:21:63:f1:c1:33: 35:a6:25:51:06:6f:2b:0e:5f:52:15:4c:ba:d3:fc:46:88:86: 39:c8:7b:a1:55:f1:f9:92:cf:d7:0d:16:39:6b:eb:05:4f:06: 70:92:fe:ea:b7:b5:0c:cc:c0:92:25:41:03:84:db:5d:d6:6e: 72:d1:aa:4b:11:56:97:52:51:c5:b4:01:34:a3:de:62:57:dd: 04:48:7b:f2:06:f3:a7:66:15:81:dc:23:6f:17:34:5b:d8:3f: 69:2f:f2:32:78:cd:ac:60:b1:86:21:6a:3a:b3:1c:98:82:73: 91:f7:78:f9:a0:0f:5f:e8:96:c1:50:97:c2:23:fb:4e:61:80: ae:d1:64:fb:77:99:4f:79:32:70:d9:4a:47:09:bb:cc:5f:ec: d1:84:af:98:d2:c2:39:9a:84:9c:b2:6b:d9:0a:ff:9c:ff:2a: 11:bd:63:74:33:62:ec:eb:df:c4:11:55:87:5f:ea:90:66:f6: 53:c6:a3:35:fd:df:7a:b3:d9:e5:65:5a:36:9e:ad:8a:7b:72: 20:8a:0b:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhtNHG+KrGECHEs5YsXAZQCb6YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTA0MjMwNjA2MzhaFw0yNTA0MjYxMjI2MzhaMDMxMTAvBgNV BAMTKDk0OUNCM0EwMUU2QTc5OTA3MUE3QzFDNUIxRjc3NjY5NzE2RTlDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfDbcQi9D1MJySRaVVSwpnk1R YgoDzI2KUucriphH4e1tgPK/Qb/ExeNepcMAaPduK5pJscU/baNGTHdWHhHcIpCZ TX9srrqbrUf1WTC1Cuwl9uFdozOeFlkasqhV2DYgx8NSgJ0+wXWMTbie/QE1T8W0 ZVwRPA6hRWKanXL9PbnDHZMPTAIZDFv6OPutiNVvaMRDOXZJxFOIe02lCs0npatl 7HQJTU+CJ2jFEkmZvsoB6zOm5bwnZRDizHHKpvkwasnckkAwffL5MtBmvcmUU7WZ GvI+j+hw22tWFHs3H+K9qBMdgS23LqztJHWQ9+kWOroc6Ezs9EvTdFzkTraDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJyzoB5qeZBxp8HFsfd2aXFunGswHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrn3B5rI4yUcg8F/L6efPtQDJA/XsqcLo53 8BPA/chH6GNHD9N/Umjakk9h1Yn7mo0hY/HBMzWmJVEGbysOX1IVTLrT/EaIhjnI e6FV8fmSz9cNFjlr6wVPBnCS/uq3tQzMwJIlQQOE213WbnLRqksRVpdSUcW0ATSj 3mJX3QRIe/IG86dmFYHcI28XNFvYP2kv8jJ4zaxgsYYhajqzHJiCc5H3ePmgD1/o lsFQl8Ij+05hgK7RZPt3mU95MnDZSkcJu8xf7NGEr5jSwjmahJyya9kK/5z/KhG9 Y3QzYuzr38QRVYdf6pBm9lPGozX933qz2eVlWjaerYp7ciCKC2E= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net