$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: +ty9ulkjb0w+g+QqtpgvAMaF2IAKETI4F027EdrmH40= Subject key identifier: 39:1E:08:AE:4A:F6:E5:AD:92:55:F9:60:9D:91:09:EC:0B:DE:B1:81 Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 0AA232CBAFAD7BAFCE75DE4FA53B293688CE48C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 0184 Signing time: Sat 26 Apr 2025 08:01:00 +0000 Manifest this update: Sat 26 Apr 2025 07:56:00 +0000 Manifest next update: Tue 29 Apr 2025 12:43:00 +0000 Files and hashes: 1: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: C3Y5TVjlMMx3bj7loYa7CuUDY/TXp19dghaSZKbxk0g=) 2: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: vRq65LfzwGz4j+oEbqBPQ82wtT1KDumkC2L75cgO4WQ=) 3: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: SDDT76sB5fD/qwKD2c7jZ56T2/zb4XIJfGohnMvEips=) 4: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: ELOVGOV4aMgAw2NXr1Yt9FandK/W4N9YeGhyDr9R6Ns=) 5: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: FKopsjmhu2ZpwkHZKTS2a2cSATg1lZ109SObjsmNTcI=) 6: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: LQahwQ72kro/LJH779tBFmRDGBJ/aQ/cw7AFn3KwUxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a2:32:cb:af:ad:7b:af:ce:75:de:4f:a5:3b:29:36:88:ce:48:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Apr 26 07:56:00 2025 GMT Not After : Apr 29 12:43:00 2025 GMT Subject: CN=391E08AE4AF6E5AD9255F9609D9109EC0BDEB181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:9a:a2:fc:a2:c8:f3:55:70:26:4e:29:1a: f0:89:db:eb:1f:50:42:de:4d:51:12:5c:11:c6:9b: 90:42:39:87:32:d1:25:f4:6a:2e:71:07:23:92:86: 4f:9e:3a:9b:be:c1:e0:56:33:2c:74:d0:d9:b4:18: 31:0d:22:36:3a:8f:03:43:ee:c3:6b:ca:af:28:1a: 1f:55:03:75:35:58:97:3d:34:4b:f0:06:b5:4f:0b: 6b:f3:2c:83:d6:4a:72:18:d1:48:35:87:04:e7:d2: a3:2d:a5:8d:6e:06:ff:24:58:95:cb:dd:f0:f4:f0: db:2e:1b:bb:4b:ea:63:69:e1:08:9d:3f:73:a2:8e: 9d:87:0d:30:c2:fc:45:0f:ed:cc:2b:0f:cb:9c:fb: 7a:35:21:a1:7b:d0:1d:e4:04:51:df:9e:69:ba:2a: 67:38:2a:a0:2b:1e:04:95:78:e4:0c:f3:23:4e:db: 3d:cb:9e:a6:db:77:68:be:2c:c5:f0:60:72:28:5b: 8a:94:5e:1e:c3:ac:b7:3d:5b:48:45:91:5a:60:93: fd:b5:34:79:fb:0e:34:a3:d5:43:43:b8:67:36:eb: b3:31:c8:a9:82:2a:75:64:29:92:b5:c3:10:48:8e: f9:a7:94:a8:77:9c:c8:2c:d2:bf:69:2b:53:75:a9: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1E:08:AE:4A:F6:E5:AD:92:55:F9:60:9D:91:09:EC:0B:DE:B1:81 X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d5:d3:a4:1f:73:8e:b6:66:32:9f:54:dc:61:b5:07:da:b0: 01:2e:c9:8e:02:84:28:1a:fe:b8:98:38:97:94:da:51:3e:7b: 5b:d4:8b:28:0f:d0:27:4c:db:62:69:5b:dc:ee:0d:f4:32:e8: 46:83:12:91:ba:17:2b:50:75:5c:a7:91:4d:ea:c0:d6:09:55: 66:d7:12:8b:aa:52:ad:c1:25:ab:ca:86:e2:f8:72:fe:0c:fd: f7:d7:6b:58:25:65:70:11:14:f3:d8:68:94:b8:5e:16:1c:15: 2e:2c:69:ba:f6:57:85:17:a9:02:41:13:65:0a:69:84:26:93: 4b:3e:1f:a1:93:a8:ab:34:bd:b1:6e:67:f1:cb:50:55:58:ba: 81:d5:46:ee:14:02:4c:4d:ae:78:38:34:aa:0b:d2:e4:b8:14: b3:45:df:ec:93:7a:4b:aa:79:74:ff:38:cb:96:1d:37:a6:1b: d1:31:36:e1:38:6c:be:a5:28:54:8d:a0:a8:28:3e:c4:ba:05: 80:f9:1b:bf:c2:fc:c5:f4:90:57:ee:9b:a2:ab:58:df:8e:c9: 96:fd:83:fa:0f:71:2b:c4:05:cc:ff:2a:1a:9e:33:a8:b1:37: c2:e2:6c:e8:a6:45:68:3e:53:6a:d7:58:b3:84:ad:1f:e6:a6: 1d:4b:a7:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqIyy6+te6/Odd5PpTspNojOSMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTA0MjYwNzU2MDBaFw0yNTA0MjkxMjQzMDBaMDMxMTAvBgNV BAMTKDM5MUUwOEFFNEFGNkU1QUQ5MjU1Rjk2MDlEOTEwOUVDMEJERUIxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+Zqi/KLI81VwJk4pGvCJ2+sf UELeTVESXBHGm5BCOYcy0SX0ai5xByOShk+eOpu+weBWMyx00Nm0GDENIjY6jwND 7sNryq8oGh9VA3U1WJc9NEvwBrVPC2vzLIPWSnIY0Ug1hwTn0qMtpY1uBv8kWJXL 3fD08NsuG7tL6mNp4QidP3Oijp2HDTDC/EUP7cwrD8uc+3o1IaF70B3kBFHfnmm6 Kmc4KqArHgSVeOQM8yNO2z3Lnqbbd2i+LMXwYHIoW4qUXh7DrLc9W0hFkVpgk/21 NHn7DjSj1UNDuGc267MxyKmCKnVkKZK1wxBIjvmnlKh3nMgs0r9pK1N1qW+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOR4Irkr25a2SVflgnZEJ7AvesYEwHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDV06Qfc462ZjKfVNxhtQfasAEuyY4ChCga /riYOJeU2lE+e1vUiygP0CdM22JpW9zuDfQy6EaDEpG6FytQdVynkU3qwNYJVWbX EouqUq3BJavKhuL4cv4M/ffXa1glZXARFPPYaJS4XhYcFS4sabr2V4UXqQJBE2UK aYQmk0s+H6GTqKs0vbFuZ/HLUFVYuoHVRu4UAkxNrng4NKoL0uS4FLNF3+yTekuq eXT/OMuWHTemG9ExNuE4bL6lKFSNoKgoPsS6BYD5G7/C/MX0kFfum6KrWN+OyZb9 g/oPcSvEBcz/KhqeM6ixN8LibOimRWg+U2rXWLOErR/mph1Lp18= -----END CERTIFICATE-----Generated at Sat Apr 26 11:16:30 2025 by rpki-client on console.sobornost.net