$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: sqFMYycBSXt1zOADzdkTtM6nRaH+xELPU07AV7z3otg= Subject key identifier: 22:2D:1D:7E:A1:0A:91:09:7E:E8:BB:E8:32:9D:66:48:5B:9B:04:D5 Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 59180CEF018C16EEA8167138E183A62F4A8EEAE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 04D0 Signing time: Thu 24 Apr 2025 03:43:01 +0000 Manifest this update: Thu 24 Apr 2025 03:38:01 +0000 Manifest next update: Sun 27 Apr 2025 12:50:01 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: Xz6SlFll/6iO1NEW4d3L0Zbxfk3HKgTbGTZOaZmaxK0=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: g0NzI/9sWpDlVYBcNrXppGO/npYo2aWu9U57kI8Yuww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:18:0c:ef:01:8c:16:ee:a8:16:71:38:e1:83:a6:2f:4a:8e:ea:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Apr 24 03:38:01 2025 GMT Not After : Apr 27 12:50:01 2025 GMT Subject: CN=222D1D7EA10A91097EE8BBE8329D66485B9B04D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:e3:82:34:82:9d:d8:9b:0f:44:cf:56:54: 26:45:49:09:10:8c:13:e3:da:f7:54:6a:41:e5:ea: 9f:11:b5:85:cc:b1:16:1f:9e:4d:cc:18:d3:3e:81: 12:5a:43:98:2e:99:4c:e0:92:0f:51:d4:47:d5:b4: f4:52:b7:1c:79:91:55:af:dc:9a:a4:9c:93:46:a3: a1:9d:26:72:00:c3:3c:b5:d0:63:5e:2f:96:4f:ea: cf:e7:9d:aa:cf:88:02:4f:97:a0:bd:1e:e0:a6:6b: b9:86:31:aa:12:ff:c1:93:f8:85:d6:21:38:96:c9: b6:04:08:4b:f5:54:03:f2:a2:48:f4:bc:f8:d5:21: 5e:66:01:fd:fc:bc:ca:fc:fc:04:59:9d:0b:2a:ab: f9:e8:f1:e1:7e:78:43:f7:a7:54:81:4b:3a:3e:23: a1:e7:f7:05:5e:f8:56:62:57:01:61:f5:3a:37:48: b0:89:ff:37:79:e3:17:bd:08:26:34:c1:f9:fa:e0: df:da:66:fd:82:58:32:07:bf:86:39:f6:79:0d:24: eb:c9:72:9c:9c:d1:c2:d5:c0:31:64:1d:4e:8a:10: a8:46:50:b9:e3:04:e3:dd:9d:c4:98:f5:20:1e:f6: 1e:d7:5b:a5:16:f1:6a:c9:3b:2c:76:b5:31:80:43: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2D:1D:7E:A1:0A:91:09:7E:E8:BB:E8:32:9D:66:48:5B:9B:04:D5 X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:06:24:d4:09:50:ca:46:35:44:dc:a8:35:23:f4:fc:2f:73: 43:fc:79:c6:ca:8c:6e:5e:6f:73:03:a5:67:0f:43:6c:6b:6b: 2d:31:57:f2:b9:6a:93:6a:50:6f:2b:1c:93:e4:bd:f3:de:00: c4:ee:9c:83:78:9d:78:46:4a:ae:a7:01:44:e0:ae:dd:34:2e: 54:30:23:45:c2:6d:7c:1d:d4:61:48:93:87:5a:eb:09:c0:b2: c8:03:47:74:13:e4:61:d2:74:57:36:c5:dd:11:f3:db:43:d3: 4f:18:3a:9b:f2:ab:41:94:d2:da:1f:d6:df:6f:64:93:f3:4f: 92:33:cd:85:cc:6c:14:4b:96:2a:0e:20:12:28:10:d4:a4:0f: ba:5e:16:2a:68:a1:19:c7:ce:15:7e:0c:46:b7:a8:b8:85:68: 45:86:60:ca:47:15:10:59:ca:2e:82:77:ea:10:1e:2b:04:78: 1b:c3:d0:e6:cb:f5:47:ff:3b:35:52:c3:0e:8d:bd:79:a7:d7: c5:2e:47:97:5c:0f:3c:2b:10:0c:0b:83:e4:cb:92:05:a2:1a: a2:6a:20:d9:fa:b8:4c:03:83:aa:1e:66:0d:3d:86:98:e2:3b: 4f:9e:77:4a:86:b8:a1:2b:71:a7:95:1a:ce:24:5d:2d:88:86: 54:2b:a1:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRgM7wGMFu6oFnE44YOmL0qO6ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTA0MjQwMzM4MDFaFw0yNTA0MjcxMjUwMDFaMDMxMTAvBgNV BAMTKDIyMkQxRDdFQTEwQTkxMDk3RUU4QkJFODMyOUQ2NjQ4NUI5QjA0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ieOCNIKd2JsPRM9WVCZFSQkQ jBPj2vdUakHl6p8RtYXMsRYfnk3MGNM+gRJaQ5gumUzgkg9R1EfVtPRStxx5kVWv 3JqknJNGo6GdJnIAwzy10GNeL5ZP6s/nnarPiAJPl6C9HuCma7mGMaoS/8GT+IXW ITiWybYECEv1VAPyokj0vPjVIV5mAf38vMr8/ARZnQsqq/no8eF+eEP3p1SBSzo+ I6Hn9wVe+FZiVwFh9To3SLCJ/zd54xe9CCY0wfn64N/aZv2CWDIHv4Y59nkNJOvJ cpyc0cLVwDFkHU6KEKhGULnjBOPdncSY9SAe9h7XW6UW8WrJOyx2tTGAQySHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIi0dfqEKkQl+6LvoMp1mSFubBNUwHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIGJNQJUMpGNUTcqDUj9Pwvc0P8ecbKjG5e b3MDpWcPQ2xray0xV/K5apNqUG8rHJPkvfPeAMTunIN4nXhGSq6nAUTgrt00LlQw I0XCbXwd1GFIk4da6wnAssgDR3QT5GHSdFc2xd0R89tD008YOpvyq0GU0tof1t9v ZJPzT5IzzYXMbBRLlioOIBIoENSkD7peFipooRnHzhV+DEa3qLiFaEWGYMpHFRBZ yi6Cd+oQHisEeBvD0ObL9Uf/OzVSww6NvXmn18UuR5dcDzwrEAwLg+TLkgWiGqJq INn6uEwDg6oeZg09hpjiO0+ed0qGuKErcaeVGs4kXS2IhlQroc8= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net