$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: Xyn8AWSWugGcFLPjsnuJJzYU8dBFKlr9KLHA6Sv9RaA= Subject key identifier: D8:61:75:27:A6:EF:95:2B:6C:9D:F5:4B:E2:A5:46:A4:56:71:7F:B2 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 7A2244DCAA24FEB721144B12835B26A7687A5369 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: 51 Signing time: Thu 24 Apr 2025 15:20:36 +0000 Manifest this update: Thu 24 Apr 2025 15:15:36 +0000 Manifest next update: Sun 27 Apr 2025 19:27:36 +0000 Files and hashes: 1: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: gLZ6kn+BkTnmDaGdnjkWuIyBVRESe3ydnIZmjgDfwxA=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: Mh2qAtV9OXmT8dkxySa/tVQuTPHOj1MMmtUTif0IndI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:22:44:dc:aa:24:fe:b7:21:14:4b:12:83:5b:26:a7:68:7a:53:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Apr 24 15:15:36 2025 GMT Not After : Apr 27 19:27:36 2025 GMT Subject: CN=D8617527A6EF952B6C9DF54BE2A546A456717FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ac:71:4d:ef:ad:4c:b0:61:1f:6d:cc:77:6f: cb:17:7c:08:fa:52:be:cf:c2:80:24:06:55:8f:a5: 43:86:02:b3:40:d2:76:12:c5:4e:77:37:6d:24:f9: 1f:96:62:ca:e5:1a:23:9f:d1:4e:92:b6:c9:9b:f9: c0:fa:e3:ce:56:fb:64:48:2d:16:4d:2d:71:2b:1f: 1b:be:5a:01:47:e4:17:3f:1c:b2:e8:21:d2:39:43: e5:c6:5f:c1:3c:a3:cf:59:ca:f9:c1:77:b6:b7:93: 38:22:56:f2:5f:18:71:fd:4d:2f:33:32:3d:96:32: 04:fa:62:56:bc:e5:79:16:c4:36:79:fe:ed:af:be: 65:17:33:c4:94:5a:df:03:cf:53:9e:28:8a:da:69: 0c:7f:c8:1d:60:77:be:74:a4:1f:67:57:fa:0d:95: 45:4c:cc:dc:80:bc:b6:d4:45:96:cb:8a:27:44:96: 76:4c:a3:b7:a4:81:b9:9b:ff:9f:06:30:86:34:ad: 4e:f0:74:1b:bc:e7:33:e5:ca:82:42:c0:7f:86:cd: 8b:51:de:6f:7c:bb:6f:94:dc:a3:f1:83:06:4b:08: 33:65:52:b9:21:fe:fd:c4:40:ab:c7:ec:4a:7a:7f: 58:70:ed:51:08:0c:4a:4b:4a:f6:02:bb:e6:20:1f: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:61:75:27:A6:EF:95:2B:6C:9D:F5:4B:E2:A5:46:A4:56:71:7F:B2 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:69:5c:2c:5f:ca:5a:8a:2a:8b:14:f2:dc:bf:ad:8a:7c:2b: c4:2e:69:24:24:e0:16:41:4b:97:e6:04:b4:ac:89:a0:0b:a4: ed:0b:a5:bb:cb:cb:15:e4:2c:dd:81:cb:73:8f:8d:d1:4c:a0: a1:33:5a:82:ea:3c:ba:83:db:ae:e4:3f:1b:fd:ef:bb:03:21: 52:7f:45:07:ad:80:a4:e9:9b:39:75:e1:3b:93:c0:56:f5:66: 16:e6:48:7a:42:aa:cf:de:ef:8d:62:0e:4d:70:c2:5f:df:79: 7b:17:6f:a4:05:5a:be:8d:37:40:0c:90:0c:f8:08:aa:3d:30: fc:c1:62:3f:c8:41:c6:e0:74:20:7e:43:be:36:1d:ea:1e:92: 60:b6:f1:84:ac:f0:a1:6b:60:ef:e2:2d:4d:47:53:fc:3c:31: e7:38:cd:b6:ae:b6:50:e7:1d:eb:00:02:a9:92:60:3b:6f:f2: 9d:07:d6:ea:10:4c:41:7a:46:66:7f:a6:ff:c7:a2:3a:6c:f6: 53:6e:cb:d2:7f:83:92:b3:b7:ab:61:e6:e1:00:bc:09:19:08: 05:42:3e:16:f4:a3:0c:df:a8:e7:dc:01:82:d1:6d:db:48:5a: a8:fb:ae:ea:bc:b1:05:1f:66:49:de:a6:15:c8:18:12:ba:f8: af:57:25:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiJE3Kok/rchFEsSg1smp2h6U2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNTA0MjQxNTE1MzZaFw0yNTA0MjcxOTI3MzZaMDMxMTAvBgNV BAMTKEQ4NjE3NTI3QTZFRjk1MkI2QzlERjU0QkUyQTU0NkE0NTY3MTdGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrHFN761MsGEfbcx3b8sXfAj6 Ur7PwoAkBlWPpUOGArNA0nYSxU53N20k+R+WYsrlGiOf0U6Stsmb+cD6485W+2RI LRZNLXErHxu+WgFH5Bc/HLLoIdI5Q+XGX8E8o89ZyvnBd7a3kzgiVvJfGHH9TS8z Mj2WMgT6Yla85XkWxDZ5/u2vvmUXM8SUWt8Dz1OeKIraaQx/yB1gd750pB9nV/oN lUVMzNyAvLbURZbLiidElnZMo7ekgbmb/58GMIY0rU7wdBu85zPlyoJCwH+GzYtR 3m98u2+U3KPxgwZLCDNlUrkh/v3EQKvH7Ep6f1hw7VEIDEpLSvYCu+YgH9uPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GF1J6bvlStsnfVL4qVGpFZxf7IwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9pXCxfylqKKosU8ty/rYp8K8QuaSQk4BZB S5fmBLSsiaALpO0LpbvLyxXkLN2By3OPjdFMoKEzWoLqPLqD267kPxv977sDIVJ/ RQetgKTpmzl14TuTwFb1ZhbmSHpCqs/e741iDk1wwl/feXsXb6QFWr6NN0AMkAz4 CKo9MPzBYj/IQcbgdCB+Q742HeoekmC28YSs8KFrYO/iLU1HU/w8Mec4zbautlDn HesAAqmSYDtv8p0H1uoQTEF6RmZ/pv/Hojps9lNuy9J/g5Kzt6th5uEAvAkZCAVC Phb0owzfqOfcAYLRbdtIWqj7ruq8sQUfZknephXIGBK6+K9XJdQ= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net